fix: add validation in the user role guard (#854)

* fix: add validation in the user role guard Signed-off-by: KulkarniShashank <shashank.kulkarni@ayanworks.com> * fix: modify validation in the user role guard Signed-off-by: KulkarniShashank <shashank.kulkarni@ayanworks.com> * fix: modify validation and error message changes in the user role guard Signed-off-by: KulkarniShashank <shashank.kulkarni@ayanworks.com> --------- Signed-off-by: KulkarniShashank <shashank.kulkarni@ayanworks.com>
credebl · Sep 6, 2024 · e57012b · e57012b
1 parent 63277f8
commit e57012b
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/apps/api-gateway/src/authz/guards/user-role.guard.ts b/apps/api-gateway/src/authz/guards/user-role.guard.ts
@@ -8,8 +8,12 @@ export class UserRoleGuard implements CanActivate {
 
     const { user } = request;
 
-    if (user?.userRole && user?.userRole.includes('holder')) {
-      throw new ForbiddenException('This role is a holder.');
+    if (!user?.userRole) {
+      throw new ForbiddenException('This role is not a holder.');
+    }
+
+    if (!user?.userRole.includes('holder')) {
+      throw new ForbiddenException('This role is not a holder.');
     }
 
     return true;