2026-04-14-8 auth and commercial

apps/api/dist/common/guards/api-key.guard.js

@@ -11,25 +11,35 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ApiKeyGuard = void 0;
 const common_1 = require("@nestjs/common");
-const config_1 = require("@nestjs/config");
+const auth_service_1 = require("../../auth/auth.service");
 let ApiKeyGuard = class ApiKeyGuard {
-    configService;
-    constructor(configService) {
-        this.configService = configService;
+    authService;
+    constructor(authService) {
+        this.authService = authService;
     }
-    canActivate(context) {
+    async canActivate(context) {
         const request = context.switchToHttp().getRequest();
-        const apiKeyHeader = request.headers['x-api-key'];
-        const validApiKey = this.configService.get('API_KEY');
-        if (validApiKey && apiKeyHeader !== validApiKey) {
-            throw new common_1.UnauthorizedException('Invalid or missing API Key');
+        const apiKeyHeader = request.headers['x-api-key'] || request.query['api_key'];
+        if (!apiKeyHeader) {
+            throw new common_1.UnauthorizedException('API Key (x-api-key) is missing');
+        }
+        const origin = request.headers['origin'];
+        const referer = request.headers['referer'];
+        try {
+            const { tenant, apiKey, rateLimit } = await this.authService.validateApiKey(apiKeyHeader, origin, referer);
+            request['tenant'] = tenant;
+            request['apiKey'] = apiKey;
+            request['rateLimit'] = rateLimit;
+            return true;
+        }
+        catch (error) {
+            throw new common_1.UnauthorizedException(error.message || 'Invalid API Key');
         }
-        return true;
     }
 };
 exports.ApiKeyGuard = ApiKeyGuard;
 exports.ApiKeyGuard = ApiKeyGuard = __decorate([
     (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [config_1.ConfigService])
+    __metadata("design:paramtypes", [auth_service_1.AuthService])
 ], ApiKeyGuard);
 //# sourceMappingURL=api-key.guard.js.map