fix: Get JWT_KEY from .env

backend/src/modules/authentication/authentication.guard.ts

@@ -5,15 +5,17 @@ import {
   UnauthorizedException,
 } from '@nestjs/common';
 import { JwtService } from '@nestjs/jwt';
-import { jwtConstants } from './constants.js';
 import { Request } from 'express';
 import { Reflector } from '@nestjs/core';
 import { IS_PUBLIC_KEY } from './authentication.decorator.js';
+import { ConfigService } from '@nestjs/config';
+import { buffer } from 'stream/consumers';
 @Injectable()
 export class AuthenticationGuard implements CanActivate {
   constructor(
     private jwtService: JwtService,
     private reflector: Reflector,
+    private configService: ConfigService
   ) {}
 
   async canActivate(context: ExecutionContext): Promise<boolean> {
@@ -33,7 +35,7 @@ export class AuthenticationGuard implements CanActivate {
     }
     try {
       const payload = await this.jwtService.verifyAsync(token, {
-        secret: jwtConstants.secret,
+        secret: this.configService.get<String>('JWT_KEY') as string,
       });
       // 💡 We're assigning the payload to the request object here
       // so that we can access it in our route handlers

backend/src/modules/authentication/authentication.module.ts

@@ -3,16 +3,19 @@ import { AuthenticationService } from './authentication.service.js';
 import { UserModule } from '../user/user.module.js';
 import { JwtModule } from '@nestjs/jwt';
 import { AuthenticationController } from './authentication.controller.js';
-import { jwtConstants } from './constants.js';
 import { AuthenticationGuard } from './authentication.guard.js';
 import { APP_GUARD } from '@nestjs/core';
+import { ConfigModule, ConfigService } from '@nestjs/config';
 @Module({
   imports: [
     UserModule,
-    JwtModule.register({
-      global: true,
-      secret: jwtConstants.secret,
-      signOptions: { expiresIn: '90s' },
+    JwtModule.registerAsync({
+      imports: [ConfigModule], // Nhập ConfigModule để sử dụng ConfigService
+      useFactory: async (configService: ConfigService) => ({
+        secret: configService.get<string>('JWT_KEY'), // Lấy giá trị từ biến môi trường
+        signOptions: { expiresIn: '60s' }, // Thời gian hết hạn token
+      }),
+      inject: [ConfigService], // Inject ConfigService vào factory
     }),
   ],
   providers: [
@@ -25,9 +28,4 @@ import { APP_GUARD } from '@nestjs/core';
   controllers: [AuthenticationController],
   exports: [AuthenticationService],
 })
-export class AuthenticationModule {
-  constructor() {
-    console.log('JWT Secret:', process.env.DB_USER);
-    console.log('JWT Secret:', process.env.JWT_KEY);
-  }
-}
+export class AuthenticationModule {}