feat: auth for jobs socket

Signed-off-by: mertmit <mertmit99@gmail.com>

packages/nc-gui/plugins/events.ts

@@ -13,8 +13,6 @@ export default defineNuxtPlugin(async (nuxtApp) => {
 
       const url = new URL(appInfo.ncSiteUrl, window.location.href.split(/[?#]/)[0])
 
-      url.port = '8081'
-
       socket = io(`${url.href}jobs`, {
         extraHeaders: { 'xc-auth': token },
       })

packages/nocodb-nest/src/modules/jobs/jobs.gateway.ts

@@ -6,26 +6,39 @@ import {
   WebSocketServer,
 } from '@nestjs/websockets';
 import { Server, Socket } from 'socket.io';
-import { Injectable, UseGuards } from '@nestjs/common';
+import { Injectable } from '@nestjs/common';
-import { GlobalGuard } from 'src/guards/global/global.guard';
+import { ExecutionContextHost } from '@nestjs/core/helpers/execution-context-host';
-import { ExtractProjectIdMiddleware } from 'src/middlewares/extract-project-id/extract-project-id.middleware';
+import { AuthGuard } from '@nestjs/passport';
 import { JobsService } from './jobs.service';
+import type { OnModuleInit } from '@nestjs/common';
 
-@WebSocketGateway(8081, {
+@WebSocketGateway({
   cors: {
     origin: '*',
-  },
     allowedHeaders: ['xc-auth'],
     credentials: true,
+  },
   namespace: 'jobs',
 })
 @Injectable()
-export class JobsGateway {
+export class JobsGateway implements OnModuleInit {
   constructor(private readonly jobsService: JobsService) {}
 
   @WebSocketServer()
   server: Server;
 
+  async onModuleInit() {
+    this.server.use(async (socket, next) => {
+      try {
+        const context = new ExecutionContextHost([socket.handshake as any]);
+        const guard = new (AuthGuard('jwt'))(context);
+        await guard.canActivate(context);
+      } catch {}
+
+      next();
+    });
+  }
+
   @SubscribeMessage('subscribe')
   async subscribe(
     @MessageBody() data: { type: string; id: string },