NestJS: Session-Based User Authentication

$ npm i express-session
$ npm i -D @types/express-session

https://github.com/youngkiu/nestjs-kakaologin/blob/passport-kakao_session_serialize/src/auth/auth.controller.ts

export class AuthController {
  constructor(private readonly configService: ConfigService) {}

  @Get('callback')
  @UseGuards(KakaoAuthGuard)
  callback(@Res() res) {
    res.redirect('protected');
  }

  @Get('login')
  @Render('login')
  login() {
    return {
      data: {
        host: this.configService.get<string>('KAKAO_REST_API_HOST'),
        restApiKey: this.configService.get<string>('KAKAO_REST_API_KEY'),
        redirectUri: this.configService.get<string>('KAKAO_REDIRECT_URI'),
      },
    };
  }

  @Get('protected')
  @UseGuards(SessionAuthGuard)
  @Render('protected')
  protected(@User() user) {
    const { provider, id, username } = user;
    return {
      data: {
        provider,
        id,
        username,
      },
    };
  }

  @Get('logout')
  logout(@Session() session: Record<string, any>, @Res() res) {
    session.destroy();
    res.redirect('login');
  }
}

controller에 strategy 구현 후 @UseGuards(AuthGuard('kakao')) 이렇게 바로 사용할 수 있지만,
빈 class 라도 class KakaoAuthGuard extends AuthGuard('kakao') {} 만들어 사용하는 것이 좋을 것 같다.

https://github.com/youngkiu/nestjs-kakaologin/blob/passport-kakao_session_serialize/src/auth/kakao.auth.guard.ts

KakaoAuthGuard에서 serializeUser() 호출되기 위해서는 super.logIn(request)가 필요하다.

import { AuthGuard } from '@nestjs/passport';
import { Injectable, ExecutionContext } from '@nestjs/common';

@Injectable()
export class KakaoAuthGuard extends AuthGuard('kakao') {
  async canActivate(context: ExecutionContext) {
    const result = (await super.canActivate(context)) as boolean;
    const request = context.switchToHttp().getRequest();
    await super.logIn(request);
    return result;
  }
}

참고)

• https://docs.nestjs.com/techniques/session
• https://docs.nestjs.com/security/authentication
• https://docs.nestjs.com/guards
• https://blog.loginradius.com/engineering/guest-post/session-authentication-with-nestjs-and-mongodb/#protect-authentication-routes
• https://ownid.com/blog/how-to-implement-passport-js-in-nest-js-an-easy-tutorial/
• https://blog.naver.com/biud436/222841223210
• https://sangjuntech.tistory.com/10
• https://github.com/nestjs/nest/issues/1365#issuecomment-494789315
• https://sound-story.tistory.com/17
• https://kyounghwan01.github.io/blog/etc/nest/controller-service/#%E1%84%91%E1%85%B3%E1%84%85%E1%85%A9%E1%84%8C%E1%85%A6%E1%86%A8%E1%84%90%E1%85%B3-%E1%84%80%E1%85%AE%E1%84%8C%E1%85%A9
• https://velog.io/@eslerkang/TIL-NestJSpassport-kakao