Nathnael 79fec14c9a feat(auth): deny by default with employee/customer audience guards ...

FreightPermissionGuard now rejects non-employee user types before the key
check, making every BookingStaff route staff-only in one place. Adds
PortalCustomer and MixedAudience for the routes both audiences share, and
stops ServiceAuthGuard failing open when SERVICE_AUTH_TOKEN is unset.

2026-08-07 07:32:25 +00:00

..

service-auth.guard.ts

feat(auth): deny by default with employee/customer audience guards

2026-08-07 07:32:25 +00:00