Feature/helmet cors rate limit

.gitignore

@@ -30,6 +30,7 @@ lerna-debug.log*
 *.sublime-workspace
 
 # IDE - VSCode
+.vscode/
 .vscode/*
 !.vscode/settings.json
 !.vscode/tasks.json

package.json

@@ -20,6 +20,7 @@
     "test:e2e": "playwright test"
   },
   "dependencies": {
+    "@fastify/helmet": "^13.0.1",
     "@fastify/static": "^8.1.1",
     "@nestjs/axios": "^4.0.0",
     "@nestjs/common": "^11.0.1",
@@ -31,13 +32,14 @@
     "@nestjs/platform-express": "^11.0.1",
     "@nestjs/platform-fastify": "^11.0.9",
     "@nestjs/swagger": "^11.0.5",
+    "@nestjs/throttler": "^6.4.0",
     "@nestjs/typeorm": "^11.0.0",
     "@types/uuid": "^10.0.0",
     "axios": "^1.7.9",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.1",
     "dotenv": "^16.4.7",
-    "fastify": "^5.2.1",
+    "fastify": "^5.3.3",
     "jsonwebtoken": "^9.0.2",
     "nestjs-pino": "^4.3.0",
     "passport": "^0.7.0",

src/app.module.ts

@@ -37,6 +37,8 @@ import { AnswerTemplatesModule } from './answer-templates/answer-templates.modul
 // IMPORTS POUR LA SÉCURITÉ GLOBALE
 import { APP_GUARD } from '@nestjs/core';
 import { GlobalAuthGuard } from './auth/guards/global-auth.guard';
+import { ThrottlerModule } from '@nestjs/throttler';
+
 
 /**
  * Module principal de l'application
@@ -84,7 +86,11 @@ import { GlobalAuthGuard } from './auth/guards/global-auth.guard';
     SignatureModule,
     PollTemplatesModule,
     QuestionTemplatesModule,
-    AnswerTemplatesModule
+    AnswerTemplatesModule,
+    ThrottlerModule.forRoot([{
+      ttl: 1, // 1 seconde
+      limit: 50, // 50 requêtes par seconde
+    }]),
   ],
   controllers: [AppController],
   // CONFIGURATION DU GUARD GLOBAL

src/auth/auth.service.ts

@@ -210,7 +210,11 @@ export class AuthService {
       guildId: this.allowedGuildId,
     };
 
-    return this.jwtService.sign(payload);
+    const token = this.jwtService.sign(payload);
+
+    console.log('JWT Token', token)
+
+    return token;
   }
 
   /**

src/campuses/campuses.controller.ts

@@ -1,43 +1,84 @@
-import { Controller, Get, Post, Body, Put, Param, Delete, NotFoundException } from '@nestjs/common';
-import { CampusesService } from './campuses.service';
+import {
+  Controller,
+  Get,
+  Post,
+  Body,
+  Put,
+  Param,
+  Delete,
+  NotFoundException,
+  Inject,
+} from '@nestjs/common';
 import { CreateCampusDto } from './dto/create-campus.dto';
 import { UpdateCampusDto } from './dto/update-campus.dto';
-import { ApiTags, ApiOperation, ApiResponse } from '@nestjs/swagger';
+import {
+  ApiTags,
+  ApiOperation,
+  ApiResponse,
+  ApiBearerAuth,
+} from '@nestjs/swagger';
 import { Campus } from './entities/campus.entity';
+import {
+  ICampusesServiceToken,
+  ICampusesService,
+} from './interfaces/campus.interface';
 
 @ApiTags('campuses')
+@ApiBearerAuth('JWT-auth')
 @Controller('campuses')
 export class CampusesController {
-  constructor(private readonly campusService: CampusesService) {}
+  constructor(
+    @Inject(ICampusesServiceToken)
+    private readonly campusService: ICampusesService,
+  ) {}
 
   @Post()
   @ApiOperation({ summary: 'Créer un nouveau campus' })
-  @ApiResponse({ status: 201, description: 'Le campus a été créé avec succès.', type: Campus })
+  @ApiResponse({
+    status: 201,
+    description: 'Le campus a été créé avec succès.',
+    type: Campus,
+  })
   @ApiResponse({ status: 400, description: 'Requête invalide' })
   create(@Body() createCampusDto: CreateCampusDto) {
     return this.campusService.create(createCampusDto);
   }
 
   @Get()
   @ApiOperation({ summary: 'Récupérer tous les campus' })
-  @ApiResponse({ status: 200, description: 'Liste des campus récupérée avec succès.', type: [Campus] })
+  @ApiResponse({
+    status: 200,
+    description: 'Liste des campus récupérée avec succès.',
+    type: [Campus],
+  })
   findAll() {
     return this.campusService.findAll();
   }
 
   @Get(':uuid')
   @ApiOperation({ summary: 'Récupérer un campus par son UUID' })
-  @ApiResponse({ status: 200, description: 'Le campus a été trouvé.', type: Campus })
+  @ApiResponse({
+    status: 200,
+    description: 'Le campus a été trouvé.',
+    type: Campus,
+  })
   @ApiResponse({ status: 404, description: 'Campus non trouvé' })
   findOne(@Param('uuid') uuid: string) {
     return this.campusService.findOne(uuid);
   }
 
   @Put(':uuid')
   @ApiOperation({ summary: 'Mettre à jour un campus' })
-  @ApiResponse({ status: 200, description: 'Le campus a été mis à jour avec succès.', type: Campus })
+  @ApiResponse({
+    status: 200,
+    description: 'Le campus a été mis à jour avec succès.',
+    type: Campus,
+  })
   @ApiResponse({ status: 404, description: 'Campus non trouvé' })
-  async update(@Param('uuid') uuid: string, @Body() updateCampusDto: UpdateCampusDto) {
+  async update(
+    @Param('uuid') uuid: string,
+    @Body() updateCampusDto: UpdateCampusDto,
+  ) {
     const campus = await this.campusService.update(uuid, updateCampusDto);
     if (!campus) {
       throw new NotFoundException(`Campus with UUID "${uuid}" not found`);
@@ -47,7 +88,10 @@ export class CampusesController {
 
   @Delete(':uuid')
   @ApiOperation({ summary: 'Supprimer un campus' })
-  @ApiResponse({ status: 200, description: 'Le campus a été supprimé avec succès.' })
+  @ApiResponse({
+    status: 200,
+    description: 'Le campus a été supprimé avec succès.',
+  })
   @ApiResponse({ status: 404, description: 'Campus non trouvé' })
   remove(@Param('uuid') uuid: string) {
     return this.campusService.remove(uuid);

src/campuses/campuses.module.ts

@@ -4,10 +4,17 @@ import { CampusesService } from './campuses.service';
 import { CampusesController } from './campuses.controller';
 import { Campus } from './entities/campus.entity';
 import { RolesModule } from 'src/roles/roles.module';
+import { ICampusesServiceToken } from './interfaces/campus.interface';
 
 @Module({
   imports: [TypeOrmModule.forFeature([Campus]), RolesModule],
   controllers: [CampusesController],
-  providers: [CampusesService],
+  providers: [
+    {
+      provide: ICampusesServiceToken,
+      useClass: CampusesService,
+    },
+  ],
+  exports: [ICampusesServiceToken],
 })
 export class CampusesModule {}

src/campuses/campuses.service.ts

@@ -1,13 +1,18 @@
-import { Injectable, BadRequestException, NotFoundException } from '@nestjs/common';
+import {
+  Injectable,
+  BadRequestException,
+  NotFoundException,
+} from '@nestjs/common';
 import { InjectRepository } from '@nestjs/typeorm';
 import { Repository } from 'typeorm';
 import { CreateCampusDto } from './dto/create-campus.dto';
 import { UpdateCampusDto } from './dto/update-campus.dto';
-import { Campus } from './entities/campus.entity';
 import { Role } from 'src/roles/entities/role.entity';
+import { Campus } from './entities/campus.entity';
+import { ICampusesService } from './interfaces/campus.interface';
 
 @Injectable()
-export class CampusesService {
+export class CampusesService implements ICampusesService {
   constructor(
     @InjectRepository(Campus)
     private campusRepository: Repository<Campus>,
@@ -19,13 +24,13 @@ export class CampusesService {
   async create(createCampusDto: CreateCampusDto): Promise<Campus> {
     try {
       const newRole = this.roleRepository.create({
-        uuidRole: createCampusDto.uuidRole, 
+        uuidRole: createCampusDto.uuidRole,
         uuidGuild: createCampusDto.uuidGuild,
         name: createCampusDto.name,
         memberCount: 0,
         rolePosition: 0,
         hoist: false,
-        color: "#000000",
+        color: '#000000',
       });
 
       const savedRole = await this.roleRepository.save(newRole);
@@ -37,11 +42,13 @@ export class CampusesService {
 
       return await this.campusRepository.save(newCampus);
     } catch (error) {
-      throw new BadRequestException('Erreur lors de la création du campus: ' + error.message);
+      throw new BadRequestException(
+        'Erreur lors de la création du campus: ' + error.message,
+      );
     }
   }
 
-  findAll() {
+  findAll(): Promise<Campus[]> {
     return this.campusRepository.find();
   }
 

src/campuses/dto/create-campus.dto.ts

@@ -3,7 +3,7 @@ import { PickableDtoFields } from 'src/utils/pickable-dto-fields';
 import { PickableDiscordUUIDFields } from 'src/utils/pickable-discord-uuid-fields';
 
 export class CreateCampusDto extends PickType(IntersectionType(PickableDtoFields, PickableDiscordUUIDFields), [
-  'name',
+  'name', //name_campus dans le MCD
   'uuidRole',
   'uuidGuild'
 ]) {