Nils-Johan Gynther
41ae7d4d06
- Implemented functionality to set recipe visibility (public/private) with appropriate checks for user permissions. - Added ability to share recipes with other users, including validation for existing users and permissions. - Introduced new DTOs for setting visibility and sharing recipes. - Updated RecipesController and RecipesService to handle new endpoints for visibility and sharing. - Enhanced inventory preview to consider user permissions and shared recipes. - Updated front-end to support new sharing and visibility features, including UI changes for recipe detail and admin user management.
46 lines
1.6 KiB
Dart
46 lines
1.6 KiB
Dart
import 'dart:convert';
|
|
|
|
/// Decodes a JWT token payload without verifying signature.
|
|
/// Returns the decoded claims or an empty map on failure.
|
|
Map<String, dynamic> decodeJwtPayload(String token) {
|
|
try {
|
|
final parts = token.split('.');
|
|
if (parts.length != 3) return {};
|
|
// Normalize base64url to standard base64.
|
|
final payload = base64Url.normalize(parts[1]);
|
|
final decoded = utf8.decode(base64Url.decode(payload));
|
|
return json.decode(decoded) as Map<String, dynamic>;
|
|
} catch (_) {
|
|
return {};
|
|
}
|
|
}
|
|
|
|
/// Returns the role claim from a JWT token. Defaults to 'user'.
|
|
String jwtRole(String? token) {
|
|
if (token == null || token.isEmpty) return 'user';
|
|
final claims = decodeJwtPayload(token);
|
|
return claims['role'] as String? ?? 'user';
|
|
}
|
|
|
|
/// Returns true if the JWT token contains role == 'admin'.
|
|
bool jwtIsAdmin(String? token) => jwtRole(token) == 'admin';
|
|
|
|
/// Returns username claim from JWT token, if present.
|
|
String? jwtUsername(String? token) {
|
|
if (token == null || token.isEmpty) return null;
|
|
final claims = decodeJwtPayload(token);
|
|
final value = claims['username']?.toString().trim();
|
|
if (value == null || value.isEmpty) return null;
|
|
return value;
|
|
}
|
|
|
|
/// Returns user id claim from JWT token, if present.
|
|
int? jwtUserId(String? token) {
|
|
if (token == null || token.isEmpty) return null;
|
|
final claims = decodeJwtPayload(token);
|
|
final raw = claims['sub'] ?? claims['userId'] ?? claims['id'];
|
|
if (raw is num) return raw.toInt();
|
|
if (raw is String) return int.tryParse(raw);
|
|
return null;
|
|
}
|