Re-Quest/backend
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: Add connection validation before sending messages and extend support chat admin access to include SUPER_ADMIN role.

Browse Source
This commit is contained in:
pradeepkumar
2026-03-25 23:57:59 +05:30
parent 9c270a942c
commit 0da76838a1
2 changed files with 15 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/messages/messages.service.ts
View File

@@ -191,6 +191,17 @@ export class MessagesService {
throw new ForbiddenException('You are not part of this conversation'); throw new ForbiddenException('You are not part of this conversation');
} }
// Verify connection is still active before allowing message
const canMessage = await this.validateCanMessage(
conversation.userId,
conversation.agentProfileId,
);
if (!canMessage) {
throw new ForbiddenException(
'You can only message users with accepted connection requests',
);
}
// Create the message // Create the message
const message = await this.prisma.message.create({ const message = await this.prisma.message.create({
data: { data: {

8
src/support-chat/support-chat.controller.ts
View File

@@ -74,7 +74,7 @@ export class SupportChatController {
@Query('limit') limit?: string, @Query('limit') limit?: string,
) { ) {
// Validate access // Validate access
const isAdmin = role === UserRole.ADMIN; const isAdmin = role === UserRole.ADMIN || role === UserRole.SUPER_ADMIN;
await this.supportChatService.getChat(chatId, userId, isAdmin); await this.supportChatService.getChat(chatId, userId, isAdmin);
return this.supportChatService.getMessages( return this.supportChatService.getMessages(
@@ -98,10 +98,10 @@ export class SupportChatController {
@Body() dto: SendSupportMessageDto, @Body() dto: SendSupportMessageDto,
) { ) {
// Validate access // Validate access
const isAdmin = role === UserRole.ADMIN; const isAdmin = role === UserRole.ADMIN || role === UserRole.SUPER_ADMIN;
await this.supportChatService.getChat(chatId, userId, isAdmin); await this.supportChatService.getChat(chatId, userId, isAdmin);
const senderRole = role === UserRole.ADMIN ? 'ADMIN' : 'USER'; const senderRole = (role === UserRole.ADMIN || role === UserRole.SUPER_ADMIN) ? 'ADMIN' : 'USER';
const message = await this.supportChatService.sendMessage(chatId, userId, senderRole, dto.content); const message = await this.supportChatService.sendMessage(chatId, userId, senderRole, dto.content);
// Emit WebSocket events for real-time updates // Emit WebSocket events for real-time updates
@@ -136,7 +136,7 @@ export class SupportChatController {
const result = await this.supportChatService.markAsRead(chatId, role); const result = await this.supportChatService.markAsRead(chatId, role);
// If admin marked as read, update sidebar badge for all admins // If admin marked as read, update sidebar badge for all admins
if (role === UserRole.ADMIN) { if (role === UserRole.ADMIN || role === UserRole.SUPER_ADMIN) {
const unreadTotal = await this.supportChatService.getAdminUnreadTotal(); const unreadTotal = await this.supportChatService.getAdminUnreadTotal();
this.messagesGateway.server.to('admin_room').emit('support_unread_update', { unreadTotal }); this.messagesGateway.server.to('admin_room').emit('support_unread_update', { unreadTotal });
} }