@oneuptime/common 7.0.4263 → 7.0.4298

package/build/dist/Server/API/StatusPageAPI.js

@@ -34,7 +34,6 @@ import QueryHelper from "../Types/Database/QueryHelper";
 import logger from "../Utils/Logger";
 import Response from "../Utils/Response";
 import BaseAPI from "./BaseAPI";
-import CommonAPI from "./CommonAPI";
 import BaseModel from "../../Models/DatabaseModels/DatabaseBaseModel/DatabaseBaseModel";
 import ArrayUtil from "../../Utils/Array";
 import SortOrder from "../../Types/BaseDatabase/SortOrder";
@@ -471,13 +470,14 @@ export default class StatusPageAPI extends BaseAPI {
         this.router.post(`${(_k = new this.entityType()
             .getCrudApiPath()) === null || _k === void 0 ? void 0 : _k.toString()}/resources/:statusPageId`, UserMiddleware.getUserMiddleware, async (req, res, next) => {
             try {
-                const objectId = new ObjectID(req.params["statusPageId"]);
-                if (!(await this.service.hasReadAccess(objectId, await CommonAPI.getDatabaseCommonInteractionProps(req), req))) {
-                    throw new NotAuthenticatedException("You are not authenticated to access this status page");
-                }
+                const statusPageId = new ObjectID(req.params["statusPageId"]);
+                await this.checkHasReadAccess({
+                    statusPageId: statusPageId,
+                    req: req,
+                });
                 const resources = await StatusPageResourceService.findBy({
                     query: {
-                        statusPageId: objectId,
+                        statusPageId: statusPageId,
                     },
                     select: {
                         _id: true,
@@ -510,9 +510,10 @@ export default class StatusPageAPI extends BaseAPI {
                 if (!statusPageId || !statusPageResourceId) {
                     throw new BadDataException("Status Page or Resource not found");
                 }
-                if (!(await this.service.hasReadAccess(statusPageId, await CommonAPI.getDatabaseCommonInteractionProps(req), req))) {
-                    throw new NotAuthenticatedException("You are not authenticated to access this status page");
-                }
+                await this.checkHasReadAccess({
+                    statusPageId: statusPageId,
+                    req: req,
+                });
                 // get start and end date from request body.
                 // if no end date is provided then it will be current date.
                 // if no start date is provided then it will be 14 days ago from end date.
@@ -682,14 +683,15 @@ export default class StatusPageAPI extends BaseAPI {
         this.router.post(`${(_m = new this.entityType()
             .getCrudApiPath()) === null || _m === void 0 ? void 0 : _m.toString()}/overview/:statusPageId`, UserMiddleware.getUserMiddleware, async (req, res, next) => {
             try {
-                const objectId = new ObjectID(req.params["statusPageId"]);
-                if (!(await this.service.hasReadAccess(objectId, await CommonAPI.getDatabaseCommonInteractionProps(req), req))) {
-                    throw new NotAuthenticatedException("You are not authenticated to access this status page");
-                }
+                const statusPageId = new ObjectID(req.params["statusPageId"]);
+                await this.checkHasReadAccess({
+                    statusPageId: statusPageId,
+                    req: req,
+                });
                 const startDate = OneUptimeDate.getSomeDaysAgo(90);
                 const endDate = OneUptimeDate.getCurrentDate();
                 const { monitorStatuses, monitorGroupCurrentStatuses, statusPageResources, statusPage, monitorsOnStatusPage, monitorStatusTimelines, statusPageGroups, monitorsInGroup, } = await this.getStatusPageResourcesAndTimelines({
-                    statusPageId: objectId,
+                    statusPageId: statusPageId,
                     startDateForMonitorTimeline: startDate,
                     endDateForMonitorTimeline: endDate,
                 });
@@ -808,7 +810,7 @@ export default class StatusPageAPI extends BaseAPI {
                 if (statusPage.showAnnouncementsOnStatusPage) {
                     activeAnnouncements = await StatusPageAnnouncementService.findBy({
                         query: {
-                            statusPages: objectId,
+                            statusPages: statusPageId,
                             showAnnouncementAt: QueryHelper.lessThan(today),
                             endAnnouncementAt: QueryHelper.greaterThanOrNull(today),
                             projectId: statusPage.projectId,
@@ -861,7 +863,7 @@ export default class StatusPageAPI extends BaseAPI {
                                 currentScheduledMaintenanceState: {
                                     isOngoingState: true,
                                 },
-                                statusPages: objectId,
+                                statusPages: statusPageId,
                                 projectId: statusPage.projectId,
                                 isVisibleOnStatusPage: true,
                             },
@@ -884,7 +886,7 @@ export default class StatusPageAPI extends BaseAPI {
                                 currentScheduledMaintenanceState: {
                                     isScheduledState: true,
                                 },
-                                statusPages: objectId,
+                                statusPages: statusPageId,
                                 projectId: statusPage.projectId,
                                 isVisibleOnStatusPage: true,
                             },
@@ -962,7 +964,7 @@ export default class StatusPageAPI extends BaseAPI {
                 // get all status page bar chart rules
                 const statusPageHistoryChartBarColorRules = await StatusPageHistoryChartBarColorRuleService.findBy({
                     query: {
-                        statusPageId: objectId,
+                        statusPageId: statusPageId,
                     },
                     select: {
                         _id: true,
@@ -1051,7 +1053,7 @@ export default class StatusPageAPI extends BaseAPI {
             .getCrudApiPath()) === null || _s === void 0 ? void 0 : _s.toString()}/incidents/:statusPageId`, UserMiddleware.getUserMiddleware, async (req, res, next) => {
             try {
                 const objectId = new ObjectID(req.params["statusPageId"]);
-                const response = await this.getIncidents(objectId, null, await CommonAPI.getDatabaseCommonInteractionProps(req), req);
+                const response = await this.getIncidents(objectId, null, req);
                 return Response.sendJsonObjectResponse(req, res, response);
             }
             catch (err) {
@@ -1062,7 +1064,7 @@ export default class StatusPageAPI extends BaseAPI {
             .getCrudApiPath()) === null || _t === void 0 ? void 0 : _t.toString()}/scheduled-maintenance-events/:statusPageId`, UserMiddleware.getUserMiddleware, async (req, res, next) => {
             try {
                 const objectId = new ObjectID(req.params["statusPageId"]);
-                const response = await this.getScheduledMaintenanceEvents(objectId, null, await CommonAPI.getDatabaseCommonInteractionProps(req), req);
+                const response = await this.getScheduledMaintenanceEvents(objectId, null, req);
                 return Response.sendJsonObjectResponse(req, res, response);
             }
             catch (err) {
@@ -1073,7 +1075,7 @@ export default class StatusPageAPI extends BaseAPI {
             .getCrudApiPath()) === null || _u === void 0 ? void 0 : _u.toString()}/announcements/:statusPageId`, UserMiddleware.getUserMiddleware, async (req, res, next) => {
             try {
                 const objectId = new ObjectID(req.params["statusPageId"]);
-                const response = await this.getAnnouncements(objectId, null, await CommonAPI.getDatabaseCommonInteractionProps(req), req);
+                const response = await this.getAnnouncements(objectId, null, req);
                 return Response.sendJsonObjectResponse(req, res, response);
             }
             catch (err) {
@@ -1085,7 +1087,7 @@ export default class StatusPageAPI extends BaseAPI {
             try {
                 const objectId = new ObjectID(req.params["statusPageId"]);
                 const incidentId = new ObjectID(req.params["incidentId"]);
-                const response = await this.getIncidents(objectId, incidentId, await CommonAPI.getDatabaseCommonInteractionProps(req), req);
+                const response = await this.getIncidents(objectId, incidentId, req);
                 return Response.sendJsonObjectResponse(req, res, response);
             }
             catch (err) {
@@ -1097,7 +1099,7 @@ export default class StatusPageAPI extends BaseAPI {
             try {
                 const objectId = new ObjectID(req.params["statusPageId"]);
                 const scheduledMaintenanceId = new ObjectID(req.params["scheduledMaintenanceId"]);
-                const response = await this.getScheduledMaintenanceEvents(objectId, scheduledMaintenanceId, await CommonAPI.getDatabaseCommonInteractionProps(req), req);
+                const response = await this.getScheduledMaintenanceEvents(objectId, scheduledMaintenanceId, req);
                 return Response.sendJsonObjectResponse(req, res, response);
             }
             catch (err) {
@@ -1109,7 +1111,7 @@ export default class StatusPageAPI extends BaseAPI {
             try {
                 const objectId = new ObjectID(req.params["statusPageId"]);
                 const announcementId = new ObjectID(req.params["announcementId"]);
-                const response = await this.getAnnouncements(objectId, announcementId, await CommonAPI.getDatabaseCommonInteractionProps(req), req);
+                const response = await this.getAnnouncements(objectId, announcementId, req);
                 return Response.sendJsonObjectResponse(req, res, response);
             }
             catch (err) {
@@ -1117,10 +1119,11 @@ export default class StatusPageAPI extends BaseAPI {
             }
         });
     }
-    async getScheduledMaintenanceEvents(statusPageId, scheduledMaintenanceId, props, req) {
-        if (!(await this.service.hasReadAccess(statusPageId, props, req))) {
-            throw new NotAuthenticatedException("You are not authenticated to access this status page");
-        }
+    async getScheduledMaintenanceEvents(statusPageId, scheduledMaintenanceId, req) {
+        await this.checkHasReadAccess({
+            statusPageId: statusPageId,
+            req: req,
+        });
         const statusPage = await StatusPageService.findOneBy({
             query: {
                 _id: statusPageId.toString(),
@@ -1358,10 +1361,11 @@ export default class StatusPageAPI extends BaseAPI {
         };
         return response;
     }
-    async getAnnouncements(statusPageId, announcementId, props, req) {
-        if (!(await this.service.hasReadAccess(statusPageId, props, req))) {
-            throw new NotAuthenticatedException("You are not authenticated to access this status page");
-        }
+    async getAnnouncements(statusPageId, announcementId, req) {
+        await this.checkHasReadAccess({
+            statusPageId: statusPageId,
+            req: req,
+        });
         const statusPage = await StatusPageService.findOneBy({
             query: {
                 _id: statusPageId.toString(),
@@ -1442,15 +1446,15 @@ export default class StatusPageAPI extends BaseAPI {
         return response;
     }
     async manageExistingSubscription(req) {
-        const objectId = new ObjectID(req.params["statusPageId"]);
-        logger.debug(`Managing Existing Subscription for Status Page: ${objectId}`);
-        if (!(await this.service.hasReadAccess(objectId, await CommonAPI.getDatabaseCommonInteractionProps(req), req))) {
-            logger.debug(`No read access to status page with ID: ${objectId}`);
-            throw new NotAuthenticatedException("You are not authenticated to access this status page");
-        }
+        const statusPageId = new ObjectID(req.params["statusPageId"]);
+        logger.debug(`Managing Existing Subscription for Status Page: ${statusPageId}`);
+        await this.checkHasReadAccess({
+            statusPageId: statusPageId,
+            req: req,
+        });
         const statusPage = await StatusPageService.findOneBy({
             query: {
-                _id: objectId.toString(),
+                _id: statusPageId.toString(),
             },
             select: {
                 _id: true,
@@ -1466,27 +1470,27 @@ export default class StatusPageAPI extends BaseAPI {
             },
         });
         if (!statusPage) {
-            logger.debug(`Status page not found with ID: ${objectId}`);
+            logger.debug(`Status page not found with ID: ${statusPageId}`);
             throw new BadDataException("Status Page not found");
         }
         if (!statusPage.showSubscriberPageOnStatusPage) {
-            logger.debug(`Subscriber page not enabled for status page with ID: ${objectId}`);
+            logger.debug(`Subscriber page not enabled for status page with ID: ${statusPageId}`);
             throw new BadDataException("Subscribes not enabled for this status page.");
         }
         logger.debug(`Status page found: ${JSON.stringify(statusPage)}`);
         if (req.body.data["subscriberEmail"] &&
             !statusPage.enableEmailSubscribers) {
-            logger.debug(`Email subscribers not enabled for status page with ID: ${objectId}`);
+            logger.debug(`Email subscribers not enabled for status page with ID: ${statusPageId}`);
             throw new BadDataException("Email subscribers not enabled for this status page.");
         }
         if (req.body.data["subscriberPhone"] && !statusPage.enableSmsSubscribers) {
-            logger.debug(`SMS subscribers not enabled for status page with ID: ${objectId}`);
+            logger.debug(`SMS subscribers not enabled for status page with ID: ${statusPageId}`);
             throw new BadDataException("SMS subscribers not enabled for this status page.");
         }
         // if no email or phone, throw error.
         if (!req.body.data["subscriberEmail"] &&
             !req.body.data["subscriberPhone"]) {
-            logger.debug(`No email or phone provided for subscription to status page with ID: ${objectId}`);
+            logger.debug(`No email or phone provided for subscription to status page with ID: ${statusPageId}`);
             throw new BadDataException("Email or phone is required to subscribe to this status page.");
         }
         const email = req.body.data["subscriberEmail"]
@@ -1501,7 +1505,7 @@ export default class StatusPageAPI extends BaseAPI {
             statusPageSubscriber = await StatusPageSubscriberService.findOneBy({
                 query: {
                     subscriberEmail: email,
-                    statusPageId: objectId,
+                    statusPageId: statusPageId,
                 },
                 select: {
                     _id: true,
@@ -1517,7 +1521,7 @@ export default class StatusPageAPI extends BaseAPI {
             statusPageSubscriber = await StatusPageSubscriberService.findOneBy({
                 query: {
                     subscriberPhone: phone,
-                    statusPageId: objectId,
+                    statusPageId: statusPageId,
                 },
                 select: {
                     _id: true,
@@ -1537,10 +1541,10 @@ export default class StatusPageAPI extends BaseAPI {
             }
             throw new BadDataException(`Subscription not found for this status page. Please make sure your ${emailOrPhone} is correct.`);
         }
-        const statusPageURL = await StatusPageService.getStatusPageURL(objectId);
+        const statusPageURL = await StatusPageService.getStatusPageURL(statusPageId);
         const manageUrlink = StatusPageSubscriberService.getUnsubscribeLink(URL.fromString(statusPageURL), statusPageSubscriber.id).toString();
         const statusPages = await StatusPageSubscriberService.getStatusPagesToSendNotification([
-            objectId,
+            statusPageId,
         ]);
         for (const statusPage of statusPages) {
             // send email to subscriber or sms if phone is provided.
@@ -1591,10 +1595,10 @@ export default class StatusPageAPI extends BaseAPI {
     async subscribeToStatusPage(req) {
         const objectId = new ObjectID(req.params["statusPageId"]);
         logger.debug(`Subscribing to status page with ID: ${objectId}`);
-        if (!(await this.service.hasReadAccess(objectId, await CommonAPI.getDatabaseCommonInteractionProps(req), req))) {
-            logger.debug(`No read access to status page with ID: ${objectId}`);
-            throw new NotAuthenticatedException("You are not authenticated to access this status page");
-        }
+        await this.checkHasReadAccess({
+            statusPageId: objectId,
+            req: req,
+        });
         const statusPage = await StatusPageService.findOneBy({
             query: {
                 _id: objectId.toString(),
@@ -1727,9 +1731,10 @@ export default class StatusPageAPI extends BaseAPI {
     }
     async getSubscriber(req) {
         const objectId = new ObjectID(req.params["statusPageId"]);
-        if (!(await this.service.hasReadAccess(objectId, await CommonAPI.getDatabaseCommonInteractionProps(req), req))) {
-            throw new NotAuthenticatedException("You are not authenticated to access this status page");
-        }
+        await this.checkHasReadAccess({
+            statusPageId: objectId,
+            req: req,
+        });
         const statusPage = await StatusPageService.findOneBy({
             query: {
                 _id: objectId.toString(),
@@ -1768,10 +1773,11 @@ export default class StatusPageAPI extends BaseAPI {
         }
         return statusPageSubscriber;
     }
-    async getIncidents(statusPageId, incidentId, props, req) {
-        if (!(await this.service.hasReadAccess(statusPageId, props, req))) {
-            throw new NotAuthenticatedException("You are not authenticated to access this status page");
-        }
+    async getIncidents(statusPageId, incidentId, req) {
+        await this.checkHasReadAccess({
+            statusPageId: statusPageId,
+            req: req,
+        });
         const statusPage = await StatusPageService.findOneBy({
             query: {
                 _id: statusPageId.toString(),
@@ -2198,17 +2204,27 @@ export default class StatusPageAPI extends BaseAPI {
             monitorsInGroup,
         };
     }
+    async checkHasReadAccess(data) {
+        const accessResult = await this.service.hasReadAccess({
+            statusPageId: data.statusPageId,
+            req: data.req,
+        });
+        if (!accessResult.hasReadAccess) {
+            throw (accessResult.error ||
+                new NotAuthenticatedException("You are not authenticated to access this status page"));
+        }
+    }
 }
 __decorate([
     CaptureSpan(),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [ObjectID, Object, Object, Object]),
+    __metadata("design:paramtypes", [ObjectID, Object, Object]),
     __metadata("design:returntype", Promise)
 ], StatusPageAPI.prototype, "getScheduledMaintenanceEvents", null);
 __decorate([
     CaptureSpan(),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [ObjectID, Object, Object, Object]),
+    __metadata("design:paramtypes", [ObjectID, Object, Object]),
     __metadata("design:returntype", Promise)
 ], StatusPageAPI.prototype, "getAnnouncements", null);
 __decorate([
@@ -2232,7 +2248,7 @@ __decorate([
 __decorate([
     CaptureSpan(),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [ObjectID, Object, Object, Object]),
+    __metadata("design:paramtypes", [ObjectID, Object, Object]),
     __metadata("design:returntype", Promise)
 ], StatusPageAPI.prototype, "getIncidents", null);
 __decorate([