fix npm run build

dist/modules/auth/guards/oidc.guard.js

@@ -0,0 +1,48 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var OidcGuard_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OidcGuard = void 0;
+const common_1 = require("@nestjs/common");
+const oidc_service_1 = require("../oidc.service");
+const authentication_service_1 = require("../authentication.service");
+let OidcGuard = OidcGuard_1 = class OidcGuard {
+    oidc;
+    authn;
+    logger = new common_1.Logger(OidcGuard_1.name);
+    constructor(oidc, authn) {
+        this.oidc = oidc;
+        this.authn = authn;
+    }
+    async canActivate(context) {
+        const req = context.switchToHttp().getRequest();
+        const auth = req.headers['authorization'] || req.headers['Authorization'];
+        if (!auth || typeof auth !== 'string' || !auth.startsWith('Bearer '))
+            throw new common_1.UnauthorizedException('Missing bearer token');
+        const token = auth.substring(7).trim();
+        try {
+            const ctx = await this.authn.authenticate(token);
+            // attach context to request under a structured key
+            req.raylabContext = ctx;
+            return true;
+        }
+        catch (e) {
+            this.logger.debug('Authentication failed', e.message);
+            throw new common_1.UnauthorizedException('Invalid token or authentication failed');
+        }
+    }
+};
+exports.OidcGuard = OidcGuard;
+exports.OidcGuard = OidcGuard = OidcGuard_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [oidc_service_1.OidcService, authentication_service_1.AuthenticationService])
+], OidcGuard);
+//# sourceMappingURL=oidc.guard.js.map

dist/modules/auth/guards/oidc.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.guard.js","sourceRoot":"","sources":["../../../../src/modules/auth/guards/oidc.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAkH;AAClH,kDAA8C;AAC9C,sEAAkE;AAG3D,IAAM,SAAS,iBAAf,MAAM,SAAS;IAES;IAAoC;IADhD,MAAM,GAAG,IAAI,eAAM,CAAC,WAAS,CAAC,IAAI,CAAC,CAAC;IACrD,YAA6B,IAAiB,EAAmB,KAA4B;QAAhE,SAAI,GAAJ,IAAI,CAAa;QAAmB,UAAK,GAAL,KAAK,CAAuB;IAAG,CAAC;IAEjG,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,8BAAqB,CAAC,sBAAsB,CAAC,CAAC;QAC9H,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEvC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACjD,mDAAmD;YACnD,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAG,CAAS,CAAC,OAAO,CAAC,CAAC;YAC/D,MAAM,IAAI,8BAAqB,CAAC,wCAAwC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;CACF,CAAA;AApBY,8BAAS;oBAAT,SAAS;IADrB,IAAA,mBAAU,GAAE;qCAGwB,0BAAW,EAA0B,8CAAqB;GAFlF,SAAS,CAoBrB"}