Class AuthController

apps/backend/src/auth/auth.controller.ts:19–101

@Controller('dyan/auth')
export class AuthController {
  constructor(
    private authService: AuthService,
    private jwtService: JwtService,
  ) {}

@Get('me')
async me(@Req() req: Request) {
    const token = req.cookies?.['dyan-token'];
    console.log('[me] Received request with token:', token);

    if (!token) {
        console.warn('[me] No token found in cookies');
        throw new UnauthorizedException('No token found');
    }

    try {
        const payload = await this.jwtService.verifyAsync<{ userId: string }>(
            token,
        );
        console.log('[me] Decoded JWT payload:', payload);

        const user = await prisma.user.findUnique({
            where: { id: payload.userId },
            select: { email: true, isAdmin: true },
        });

        if (!user) {
            console.warn('[me] No user found for email:', payload.userId);
            throw new UnauthorizedException('User not found');
        }

        console.log('[me] User found:', user);
        return user;
    } catch (error) {
        console.error('[me] Error verifying token or fetching user:', error);
        throw new UnauthorizedException('Invalid token');
    }
}

  @Post('request')
  async requestLogin(@Body('email') email: string) {
    if (!email || !email.includes('@')) {
      throw new HttpException('Invalid email', HttpStatus.BAD_REQUEST);
    }

    const existingUser = await prisma.user.findFirst();

    let user = await prisma.user.findUnique({ where: { email } });

    if (!user) {
      // first user becomes admin
      user = await prisma.user.create({
        data: { email, isAdmin: !existingUser },
      });
    }

    return this.authService.sendMagicLink(email);