@ozdao/prometheus-framework 0.2.133 → 0.2.135

package/dist/index-CDbtWkBj.js

@@ -0,0 +1,243 @@
+"use strict";
+const require$$0 = require("jsonwebtoken");
+const require$$0$1 = require("crypto");
+const require$$0$2 = require("mongodb");
+const jwt = require$$0;
+const middlewareFactory$4 = (db) => {
+  const User = db.user;
+  const Role = db.role;
+  const verifyToken = async (req, res, next) => {
+    try {
+      if (!req.cookies.user) {
+        req.userId = null;
+        return next();
+      }
+      let user = JSON.parse(req.cookies.user);
+      let token = req.headers["x-access-token"] || user.accessToken;
+      if (!token) {
+        req.userId = null;
+        return next();
+      }
+      const decoded = jwt.verify(token, process.env.SECRET_KEY);
+      req.userId = decoded._id;
+      next();
+    } catch (err) {
+      console.log(err);
+      req.userId = null;
+      next();
+    }
+  };
+  const checkRole = (roleToCheck) => async (req, res, next) => {
+    try {
+      const user = await User.findById(req.userId).exec();
+      if (!user) {
+        return res.status(404).send({ message: "User Not found." });
+      }
+      const roles = await Role.find({ _id: { $in: user.roles } }).exec();
+      for (let role of roles) {
+        if (role.name === roleToCheck) {
+          next();
+          return;
+        }
+      }
+      res.status(403).send({ message: `Require ${roleToCheck} Role!` });
+    } catch (err) {
+      res.status(500).send({ message: err.message });
+    }
+  };
+  const isAdmin = checkRole("admin");
+  const isModerator = checkRole("moderator");
+  return {
+    verifyToken,
+    isAdmin,
+    isModerator
+  };
+};
+var authJwt = middlewareFactory$4;
+var authSecret;
+var hasRequiredAuthSecret;
+function requireAuthSecret() {
+  if (hasRequiredAuthSecret) return authSecret;
+  hasRequiredAuthSecret = 1;
+  const crypto = require$$0$1;
+  const middlewareFactory2 = () => {
+    const verifySecret = (method, endpoint, secret) => async (req, res, next) => {
+      const requestSignature = req.headers.signature;
+      const signature = crypto.createHmac("sha256", secret).update(method + endpoint).digest("hex");
+      if (signature === requestSignature) {
+        return next();
+      }
+      res.status(403).send("Forbidden");
+    };
+    return { verifySecret };
+  };
+  authSecret = middlewareFactory2;
+  return authSecret;
+}
+const middlewareFactory$3 = (db) => {
+  const User = db.user;
+  db.role;
+  const checkDuplicateUsernameOrEmail = async (req, res, next) => {
+    const { type, email, phone } = req.body;
+    console.log(req.body);
+    let query;
+    if (type === "phone" && phone) {
+      query = { phone };
+    }
+    if (type === "email" && email) {
+      query = { email };
+    }
+    try {
+      const user = await User.findOne(query).exec();
+      if (user) {
+        console.log(`USER_ALREADY_REGISTERED`);
+        res.status(400).send({ errorCode: "USER_ALREADY_REGISTERED" });
+        return;
+      }
+      next();
+    } catch (err) {
+      console.log(err);
+      res.status(500).send({ message: err.message });
+    }
+  };
+  const checkRolesExisted = (req, res, next) => {
+    if (req.body.roles) {
+      for (let i = 0; i < req.body.roles.length; i++) {
+        if (!ROLES.includes(req.body.roles[i])) {
+          console.log(`Failed! Role ${req.body.roles[i]} does not exist!`);
+          res.status(400).send({
+            message: `Failed! Role ${req.body.roles[i]} does not exist!`
+          });
+          return;
+        }
+      }
+    }
+    next();
+  };
+  return {
+    checkDuplicateUsernameOrEmail,
+    checkRolesExisted
+  };
+};
+var verifySignUp = middlewareFactory$3;
+const middlewareFactory$2 = (db) => {
+  const User = db.user;
+  db.role;
+  const checkUserExist = async (req, res, next) => {
+    const { type, email, phone } = req.body;
+    let query;
+    if (type === "phone" && phone) {
+      query = { phone };
+    }
+    if (type === "email" && email) {
+      query = { email };
+    }
+    try {
+      const user = await User.findOne(query).exec();
+      if (!user) {
+        console.log(query);
+        res.status(400).send({ errorCode: "USER_NOT_REGISTERED_YET" });
+        return;
+      }
+      next();
+    } catch (err) {
+      res.status(500).send({ message: err.message });
+    }
+  };
+  return {
+    checkUserExist
+  };
+};
+var verifyUser = middlewareFactory$2;
+const { ObjectId } = require$$0$2;
+const middlewareFactory$1 = (db) => {
+  const User = db.user;
+  const Invite = db.invite;
+  const Membership = db.membership;
+  const checkInviteExist = async (req, res, next) => {
+    for (let invite of req.body.invites) {
+      let query;
+      if (invite.contact.includes("@")) {
+        query = { invitedEmail: invite.contact };
+      } else {
+        query = { invitedPhone: invite.contact };
+      }
+      query["owner.target"] = req.body.owner.target;
+      const userInvite = await Invite.findOne(query).exec();
+      if (userInvite) {
+        console.log(userInvite);
+        res.status(400).send({ message: "Инвайт c таким email или телефоном уже создан!" });
+        return;
+      }
+    }
+    next();
+  };
+  const checkUsersExist = async (req, res, next) => {
+    for (let invite of req.body.invites) {
+      let query;
+      if (invite.contact.includes("@")) {
+        query = { email: invite.contact };
+      } else {
+        query = { phone: invite.contact };
+      }
+      const user = await User.findOne(query).exec();
+      console.log(req.params);
+      if (user) {
+        const membership = await Membership.findOne({ user: new ObjectId(user._id), "owner.target": req.body.owner.target }).exec();
+        if (membership) {
+          console.log(membership);
+          res.status(400).send({ message: "Пользователь с таким email или телефоном уже добавлен в организацию!" });
+          return;
+        }
+      }
+    }
+    next();
+  };
+  return {
+    checkInviteExist,
+    checkUsersExist
+  };
+};
+var verifyInvites = middlewareFactory$1;
+const middlewareFactory = (db) => {
+  const Category = db.category;
+  const checkCategoryExistOrNot = async (req, res, next) => {
+    try {
+      const category = await Category.findOne({ url: req.body.url });
+      if (category) {
+        res.status(400).send({ message: "Failed! Category with this URL is already in use!" });
+        return;
+      }
+      next();
+    } catch (err) {
+      res.status(500).send({ message: err });
+    }
+  };
+  return {
+    checkCategoryExistOrNot
+  };
+};
+var verifyCategory = middlewareFactory;
+const middlewareIndexFactory = (db) => {
+  const authJwt$1 = authJwt(db);
+  const authSecret2 = requireAuthSecret()();
+  const verifySignUp$1 = verifySignUp(db);
+  const verifyUser$1 = verifyUser(db);
+  const verifyInvites$1 = verifyInvites(db);
+  const verifyCategory$1 = verifyCategory(db);
+  return {
+    authJwt: authJwt$1,
+    authSecret: authSecret2,
+    verifySignUp: verifySignUp$1,
+    verifyUser: verifyUser$1,
+    verifyInvites: verifyInvites$1,
+    verifyCategory: verifyCategory$1
+  };
+};
+var server = middlewareIndexFactory;
+exports.authJwt = authJwt;
+exports.server = server;
+exports.verifyCategory = verifyCategory;
+exports.verifyInvites = verifyInvites;
+exports.verifySignUp = verifySignUp;
+exports.verifyUser = verifyUser;