🔒 :: 카테고리 api 어드민 auth guard 적용

src/category/category.controller.ts

@@ -6,15 +6,22 @@ import {
   Param,
   Post,
   Put,
+  UseGuards,
 } from '@nestjs/common';
-import { ApiOkResponse, ApiOperation, ApiTags } from '@nestjs/swagger';
+import {
+  ApiHeader,
+  ApiOkResponse,
+  ApiOperation,
+  ApiTags,
+} from '@nestjs/swagger';
 import { CategoryService } from './category.service';
 import { Category } from 'src/entity/category.entity';
 import { CommonResponseDto } from 'src/common/dto/common-response.dto';
 import { createResponse } from 'src/common/utils/response.helper';
 import { CreateCategoryDto } from './dto/create-category.dto';
 import { CategoriesResponseDto } from './dto/category-response.dto';
 import { CategoryListSwaggerDto } from './dto/swagger/category-response.swagger.dto';
+import { AdminAuthGuard } from 'src/guards/admin-auth.guard';
 
 @Controller('category')
 @ApiTags('Category')
@@ -35,12 +42,16 @@ export class CategoryController {
     return { categories };
   }
 
-  // TODO: ADMIN 권한 필요
   @Post()
+  @UseGuards(AdminAuthGuard)
   @ApiOperation({
     summary: '카테고리 생성',
     description: '카테고리를 생성하는 API입니다.',
   })
+  @ApiHeader({
+    name: 'Authorization',
+    description: 'Bearer {JWT 토큰}',
+  })
   @ApiOkResponse({
     description: '카테고리 생성 성공',
     type: Category,
@@ -52,12 +63,16 @@ export class CategoryController {
     return createResponse(200, '카테고리 생성 성공', category.id);
   }
 
-  // TODO: ADMIN 권한 필요
   @Put(':id')
+  @UseGuards(AdminAuthGuard)
   @ApiOperation({
     summary: '카테고리 수정',
     description: '카테고리를 수정하는 API입니다.',
   })
+  @ApiHeader({
+    name: 'Authorization',
+    description: 'Bearer {JWT 토큰}',
+  })
   @ApiOkResponse({
     description: '카테고리 수정 성공',
     type: Category,
@@ -70,12 +85,16 @@ export class CategoryController {
     return createResponse(200, '카테고리 수정 성공', id);
   }
 
-  // TODO: ADMIN 권한 필요
   @Delete(':id')
+  @UseGuards(AdminAuthGuard)
   @ApiOperation({
     summary: '카테고리 삭제',
     description: '카테고리를 삭제하는 API입니다.',
   })
+  @ApiHeader({
+    name: 'Authorization',
+    description: 'Bearer {JWT 토큰}',
+  })
   @ApiOkResponse({
     description: '카테고리 삭제 성공',
     type: Category,