ToolJet/server/src/controllers/library_apps.controller.ts

import { Controller, Post, UseGuards, Get, ForbiddenException, Body } from '@nestjs/common';
import { LibraryAppCreationService } from '@services/library_app_creation.service';
import { User } from 'src/decorators/user.decorator';
import { App } from 'src/entities/app.entity';
import { AppsAbilityFactory } from 'src/modules/casl/abilities/apps-ability.factory';
import { JwtAuthGuard } from '../../src/modules/auth/jwt-auth.guard';
import { TemplateAppManifests } from '../../templates';

@Controller('library_apps')
export class LibraryAppsController {
  constructor(
    private libraryAppCreationService: LibraryAppCreationService,
    private appsAbilityFactory: AppsAbilityFactory
  ) {}

  @Post()
  @UseGuards(JwtAuthGuard)
  async create(@User() user, @Body('identifier') identifier) {
    const ability = await this.appsAbilityFactory.appsActions(user);

    if (!ability.can('createApp', App)) {
      throw new ForbiddenException('You do not have permissions to perform this action');
    }
    const newApp = await this.libraryAppCreationService.perform(user, identifier);

    return newApp;
  }

  @Get()
  @UseGuards(JwtAuthGuard)
  async index() {
    return { template_app_manifests: TemplateAppManifests };
  }
}