agatha
5fbbc1e67f
Protects image upload, delete, and tag-update endpoints behind Bearer token auth. Public read endpoints remain open. Angular SPA gains a login page, auth interceptor, and route guard for /upload. - JWTAuthProvider (HS256, sub/iat/exp, secrets.compare_digest) - POST /api/v1/auth/token login endpoint - require_auth FastAPI dependency on all write routes - AuthService, LoginComponent, authInterceptor, authGuard - Detail page hides write controls for unauthenticated visitors - 43 unit tests passing; integration tests require Docker stack Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
24 lines
755 B
TypeScript
24 lines
755 B
TypeScript
import { inject } from '@angular/core';
|
|
import { HttpInterceptorFn, HttpErrorResponse } from '@angular/common/http';
|
|
import { Router } from '@angular/router';
|
|
import { catchError, throwError } from 'rxjs';
|
|
import { AuthService } from './auth.service';
|
|
|
|
export const authInterceptor: HttpInterceptorFn = (req, next) => {
|
|
const auth = inject(AuthService);
|
|
const router = inject(Router);
|
|
const token = auth.getToken();
|
|
if (token) {
|
|
req = req.clone({ setHeaders: { Authorization: `Bearer ${token}` } });
|
|
}
|
|
return next(req).pipe(
|
|
catchError((err) => {
|
|
if (err instanceof HttpErrorResponse && err.status === 401) {
|
|
auth.logout();
|
|
router.navigate(['/login']);
|
|
}
|
|
return throwError(() => err);
|
|
}),
|
|
);
|
|
};
|