Guard 不在 NestJs 中执行护照策略

Question

我正在使用 nestjs，但在使用守卫对请求进行身份验证时遇到问题。

Gist (full code)

import { PassportStrategy } from '@nestjs/passport';
import { Injectable, UnauthorizedException, HttpStatus, Logger } from '@nestjs/common';
import { Strategy } from 'passport-localapikey-update';
import { size } from 'lodash';

import { AuthService } from './auth.service';

@Injectable()
export class ApiKeyStrategy extends PassportStrategy(Strategy, 'localapikey') {
    constructor(private readonly authService: AuthService) {
        super();
    }

    async validate(token: string) {
        Logger.log('HERE!!!!!!!!!!!!!!', 'ApiKeyStrategy');  // Not printed
        const data = await this.authService.authenticateClient(token);
        if (!size(data)) {
            throw new UnauthorizedException('Unauthorized');
        }
        return data;
    }
}

@UseGuards(AuthGuard('localapikey')) 不执行并抛出 401 错误。

不打印任何日志。

Answer 1

您必须在护照策略的super 构造函数中传递验证函数。

constructor(private readonly authService: AuthService) {
  super((token, done) => done(null, this.validate(token)));
}

---

您也可以将选项对象作为第一个参数传递：

constructor(private readonly authService: AuthService) {
  super({apiKeyField: 'myapikeyfield'}, (token, done) => done(null, this.validate(token)));
}

---

顺便说一句：我建议使用Logger 的实例而不是静态访问它，请参阅this thread。