Merge branch 'task/secure-endpoint' into 'development'

task/secure-endpoint

See merge request !29

src/akun/akun.controller.ts

@@ -83,8 +83,11 @@ export class AkunController {
     return this.akunService.findById(param.id);
   }
 
-  // TODO: protect/secure this endpoint
+  @ApiCookieAuth()
+  @ApiBearerAuth()
   @ApiOkResponse({ type: IdDto })
+  @UseGuards(JwtAuthGuard, RolesGuard)
+  @Roles(RoleEnum.ADMIN, RoleEnum.S1_TIM_TA, RoleEnum.S2_TIM_TESIS)
   @Put("/")
   createOrUpdateAccount(@Body() createAkunDto: CreateAkunDto) {
     return this.akunService.createOrUpdateAccount(createAkunDto);

src/app.module.ts

@@ -21,7 +21,7 @@ const defaultOptions: TypeOrmModuleOptions = {
   imports: [
     ConfigModule.forRoot({
       validate,
-      /* WARNING: allowUnknown is set to true, but please only use 
+      /* WARNING: allowUnknown is set to true, but please only use
       environment variables defined in env.validation.ts */
       validationOptions: { abortEarly: true, allowUnknown: true },
     }),
@@ -32,7 +32,7 @@ const defaultOptions: TypeOrmModuleOptions = {
       username: process.env.S1_POSTGRES_USER,
       password: process.env.S1_POSTGRES_PASSWORD,
       database: process.env.S1_POSTGRES_DATABASE,
-      synchronize: true,
+      // synchronize: true,
       name: "S1Connection",
     }),
     TypeOrmModule.forRoot({
@@ -42,7 +42,7 @@ const defaultOptions: TypeOrmModuleOptions = {
       username: process.env.S2_POSTGRES_USER,
       password: process.env.S2_POSTGRES_PASSWORD,
       database: process.env.S2_POSTGRES_DATABASE,
-      synchronize: true,
+      // synchronize: true,
       name: "S2Connection",
     }),
     AkunModule,