Skip to content

Commit 97db756

Browse files
Mikadowsangristan
authored andcommitted
fix: protect benchmark creation route & link benchmark to user
1 parent 22c1bea commit 97db756

File tree

2 files changed

+9
-4
lines changed

2 files changed

+9
-4
lines changed
Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,9 @@
1-
import { Body, Controller, Post } from '@nestjs/common';
1+
import { Body, Controller, Post, Request, UseGuards } from '@nestjs/common';
22
import { CreateBenchmarkDto } from 'src/benchmarks/dto/create-benchmark.dto';
33
import { BenchmarkService } from 'src/benchmarks/benchmark.service';
44
import { Benchmark } from './benchmark.entity';
5+
import { JwtAuthGuard } from '../auth/jwt-auth.guard';
6+
import { ValidatedJWTReq } from '../auth/dto/validated-jwt-req';
57

68

79
@Controller('benchmarks')
@@ -10,12 +12,14 @@ export class BenchmarkController {
1012
}
1113

1214
@Post()
15+
@UseGuards(JwtAuthGuard)
1316
async createBenchmark(
17+
@Request() req: ValidatedJWTReq,
1418
@Body()
1519
benchmark: CreateBenchmarkDto
1620
) : Promise<Benchmark>{
1721
console.log(benchmark);
18-
return this.benchmarkService.create(benchmark);
22+
return this.benchmarkService.create(benchmark, req.user);
1923
}
2024

2125
}

src/benchmarks/benchmark.service.ts

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,14 @@
11
import { Injectable } from '@nestjs/common';
22
import { CreateBenchmarkDto } from './dto/create-benchmark.dto';
33
import { Benchmark } from './benchmark.entity';
4+
import { User } from '../users/user.entity';
45

56
@Injectable()
67
export class BenchmarkService {
78

8-
async create(benchmarkData: CreateBenchmarkDto): Promise<Benchmark> {
9+
async create(benchmarkData: CreateBenchmarkDto, user: User): Promise<Benchmark> {
910
const benchmark = new Benchmark(benchmarkData);
10-
// TODO : Link benchmark to user
11+
benchmark.creator = user;
1112
return benchmark.save();
1213
}
1314
}

0 commit comments

Comments
 (0)