@ozdao/prometheus-framework 0.2.81 → 0.2.83

package/dist/organizations.server.js

@@ -8,24 +8,25 @@ const require$$0 = require("mongoose");
 const require$$5 = require("@googlemaps/google-maps-services-js");
 const addMembersQuantity$1 = require("./addMembersQuantity-B8UgqlUM.js");
 const mailing = require("./mailing-BX0q8DIs.js");
-const index = require("./index-CL9l0HRS.js");
+const index = require("./index-BCCiEK_u.js");
 const require$$0$2 = require("mongodb");
+const ownership_schema = require("./ownership.schema-DN0SlQL6.js");
+const credentials_schema = require("./credentials.schema-B-KD_ozQ.js");
 const controllerFactory$6 = (db) => {
   const Department = db.department;
-  const readOne = (req, res) => {
+  const readOne = (req, res2) => {
     Department.findOne({ _id: req.params._id }).populate("members.user").populate("subdepartments").then((department) => {
       if (!department) {
-        return res.status(404).send({ message: "Отдел не найден" });
+        return res2.status(404).send({ message: "Отдел не найден" });
       }
-      res.send(department);
+      res2.send(department);
     }).catch((err) => {
-      res.status(500).send({ message: err.message });
+      res2.status(500).send({ message: err.message });
     });
   };
-  const read = (req, res) => {
+  const read = (req, res2) => {
     let query = {};
     let options = {};
-    console.log(req.query);
     if (req.query.organization) {
       query.organization = new db.mongoose.Types.ObjectId(req.query.organization);
     }
@@ -34,43 +35,43 @@ const controllerFactory$6 = (db) => {
     }
     Department.find(query, null, options).populate("members.user").populate("subdepartments").then((departments) => {
       if (!departments) {
-        return res.status(404).send({ message: "Departments not found" });
+        return res2.status(404).send({ message: "Departments not found" });
       }
-      res.send(departments);
+      res2.send(departments);
     }).catch((err) => {
-      res.status(500).send({ message: err.message });
+      res2.status(500).send({ message: err.message });
     });
   };
-  const create = async (req, res) => {
+  const create = async (req, res2) => {
     try {
       const newDepartment = new Department({
         ...req.body,
         organization: req.params._id
       });
       const data = await newDepartment.save();
-      res.send(data);
+      res2.send(data);
     } catch (err) {
-      res.status(500).send({ message: err.message });
+      res2.status(500).send({ message: err.message });
     }
   };
-  const update = (req, res) => {
+  const update = (req, res2) => {
     Department.findOneAndUpdate({ _id: req.body._id }, req.body, { new: true }).then((department) => {
       if (!department) {
-        return res.status(404).send({ message: "Department not found" });
+        return res2.status(404).send({ message: "Department not found" });
       }
-      res.send(department);
+      res2.send(department);
     }).catch((err) => {
-      res.status(500).send({ message: err.message });
+      res2.status(500).send({ message: err.message });
     });
   };
-  const deleteDepartment = (req, res) => {
+  const deleteDepartment = (req, res2) => {
     Department.findOneAndRemove({ _id: req.body._id, organization: req.params._id }).then((department) => {
       if (!department) {
-        return res.status(404).send({ message: "Department not found" });
+        return res2.status(404).send({ message: "Department not found" });
       }
-      res.send({ message: "Department deleted successfully" });
+      res2.send({ message: "Department deleted successfully" });
     }).catch((err) => {
-      res.status(500).send({ message: err.message });
+      res2.status(500).send({ message: err.message });
     });
   };
   return {
@@ -93,7 +94,7 @@ const controllerFactory$5 = (db) => {
   const Membership = db.membership;
   db.user;
   db.role;
-  const read = async (req, res) => {
+  const read = async (req, res2) => {
     const Organization2 = db.organization;
     db.membership;
     db.user;
@@ -161,11 +162,11 @@ const controllerFactory$5 = (db) => {
           ];
           console.log(userLocation);
         } else {
-          return res.status(400).send({ message: "Unable to geocode the provided location." });
+          return res2.status(400).send({ message: "Unable to geocode the provided location." });
         }
       } catch (err) {
         console.log(err);
-        return res.status(500).send({ message: "Error occurred while geocoding." });
+        return res2.status(500).send({ message: "Error occurred while geocoding." });
       }
       const radius = city ? 500 : state ? 1e3 : 5e3;
       matchConditions.push({
@@ -351,13 +352,13 @@ const controllerFactory$5 = (db) => {
       console.log(stages);
       const organizations = await Organization2.aggregate(stages);
       console.log(organizations);
-      res.status(200).send(organizations);
+      res2.status(200).send(organizations);
     } catch (err) {
       console.log(err);
-      return res.status(500).send({ message: err });
+      return res2.status(500).send({ message: err });
     }
   };
-  const fetch = async (req, res) => {
+  const fetch = async (req, res2) => {
     const Organization2 = db.organization;
     let query = {};
     console.log(req.query);
@@ -376,14 +377,14 @@ const controllerFactory$5 = (db) => {
     try {
       const organizations = await Organization2.find(query, null, options);
       if (!organizations || organizations.length === 0) {
-        return res.status(404).send({ message: "Organizations not found." });
+        return res2.status(404).send({ message: "Organizations not found." });
       }
-      res.status(200).send(organizations);
+      res2.status(200).send(organizations);
     } catch (err) {
-      return res.status(500).send({ message: err });
+      return res2.status(500).send({ message: err });
     }
   };
-  const create = async (req, res) => {
+  const create = async (req, res2) => {
     if (req.body._id === null) {
       delete req.body._id;
     }
@@ -397,13 +398,13 @@ const controllerFactory$5 = (db) => {
         role: "owner"
       });
       const savedMembership = await membership.save();
-      res.status(201).json(savedOrganization);
+      res2.status(201).json(savedOrganization);
     } catch (error) {
       console.error("Error:", error);
-      res.status(500).send(error);
+      res2.status(500).send(error);
     }
   };
-  const update = async (req, res) => {
+  const update = async (req, res2) => {
     try {
       const organizationId = req.params._id;
       const updatedData = req.body;
@@ -412,17 +413,17 @@ const controllerFactory$5 = (db) => {
         runValidators: true
       });
       if (!organization) {
-        return res.status(404).json({ message: "Organization not found" });
+        return res2.status(404).json({ message: "Organization not found" });
       }
-      res.status(200).json({ message: "Organization updated successfully", organization });
+      res2.status(200).json({ message: "Organization updated successfully", organization });
     } catch (error) {
-      res.status(500).json({ error: error.message });
+      res2.status(500).json({ error: error.message });
     }
   };
-  const deleteOrganization = async (req, res) => {
+  const deleteOrganization = async (req, res2) => {
     Organization.findOneAndRemove({ _id: req.params._id }).then((organization) => {
       if (!organization) {
-        return res.status(404).send({ message: "Organization not found" });
+        return res2.status(404).send({ message: "Organization not found" });
       }
       Membership.deleteMany({ organization: req.params._id }).then(() => {
         const newToken = jwt.sign({
@@ -432,12 +433,12 @@ const controllerFactory$5 = (db) => {
           expiresIn: 86400
           // 24 hours
         });
-        res.send({ newToken });
+        res2.send({ newToken });
       }).catch((err) => {
-        res.status(500).send({ message: "Error deleting memberships: " + err.message });
+        res2.status(500).send({ message: "Error deleting memberships: " + err.message });
       });
     }).catch((err) => {
-      res.status(500).send({ message: err.message });
+      res2.status(500).send({ message: err.message });
     });
   };
   return {
@@ -453,7 +454,7 @@ var organizations_controller = controllerFactory$5;
 const ObjectId$1 = require$$0.Types.ObjectId;
 const controllerFactory$4 = (db) => {
   const Membership = db.membership;
-  const read = async (req, res) => {
+  const read = async (req, res2) => {
     try {
       const memberships = await Membership.aggregate([
         {
@@ -477,15 +478,15 @@ const controllerFactory$4 = (db) => {
         }
       ]);
       if (!memberships || memberships.length === 0) {
-        return res.status(404).send({ errorCode: "MEMBERSHIPS_NOT_FOUND" });
+        return res2.status(404).send({ errorCode: "MEMBERSHIPS_NOT_FOUND" });
       }
-      res.send(memberships);
+      res2.send(memberships);
     } catch (err) {
       console.log(err);
-      res.status(500).send({ errorCode: "SERVER_ERROR" });
+      res2.status(500).send({ errorCode: "SERVER_ERROR" });
     }
   };
-  const create = async (req, res) => {
+  const create = async (req, res2) => {
     console.log(req.body);
     const newMembership = new Membership({
       user: req.body.user,
@@ -495,35 +496,35 @@ const controllerFactory$4 = (db) => {
     });
     try {
       const data = await newMembership.save();
-      res.send(data);
+      res2.send(data);
     } catch (err) {
-      res.status(500).send({ errorCode: "SERVER_ERROR" });
+      res2.status(500).send({ errorCode: "SERVER_ERROR" });
     }
   };
-  const update = async (req, res) => {
+  const update = async (req, res2) => {
     try {
       const membership = await Membership.findByIdAndUpdate(req.body._id, req.body, { new: true });
       if (!membership) {
-        return res.status(404).send({ errorCode: "MEMBERSHIP_NOT_FOUND" });
+        return res2.status(404).send({ errorCode: "MEMBERSHIP_NOT_FOUND" });
       }
-      res.send(membership);
+      res2.send(membership);
     } catch (err) {
-      res.status(500).send({ errorCode: "SERVER_ERROR" });
+      res2.status(500).send({ errorCode: "SERVER_ERROR" });
     }
   };
-  const deleteMembership = async (req, res) => {
+  const deleteMembership = async (req, res2) => {
     console.log(req.body);
     try {
       const membership = await Membership.findOneAndDelete({ _id: new ObjectId$1(req.body._id) });
       if (!membership) {
-        return res.status(404).send({ errorCode: "MEMBERSHIP_NOT_FOUND" });
+        return res2.status(404).send({ errorCode: "MEMBERSHIP_NOT_FOUND" });
       } else {
         await Membership.deleteOne({ _id: membership._id });
-        res.status(200).send(membership);
+        res2.status(200).send(membership);
       }
     } catch (error) {
       console.log(error);
-      res.status(500).send({ errorCode: "SERVER_ERROR" });
+      res2.status(500).send({ errorCode: "SERVER_ERROR" });
     }
   };
   return {
@@ -540,34 +541,34 @@ const сontrollerFactory = (db) => {
   const User = db.user;
   const Invite = db.invite;
   const Membership = db.membership;
-  const getOneByCode = async (req, res) => {
+  const getOneByCode = async (req, res2) => {
     try {
       const invite = await Invite.findOne({ code: req.params._id });
       if (!invite) {
-        return res.status(404).send({ message: "Приглашение не найдено" });
+        return res2.status(404).send({ message: "Приглашение не найдено" });
       }
-      res.send(invite);
+      res2.send(invite);
     } catch (err) {
-      res.status(500).send({ message: err.message });
+      res2.status(500).send({ message: err.message });
     }
   };
-  const read = async (req, res) => {
+  const read = async (req, res2) => {
     try {
-      const invites = await Invite.find({ organization: req.params._id });
-      if (!invites) {
-        return res.status(404).send({ message: "Invites not found" });
+      const invites = await Invite.find({ "owner.target": req.params._id });
+      if (!invites || invites.length === 0) {
+        return res2.status(200).send([]);
       }
-      res.send(invites);
+      res2.send(invites);
     } catch (err) {
-      res.status(500).send({ message: err.message });
+      res2.status(500).send({ message: err.message });
     }
   };
-  const create = async (req, res) => {
-    const userInviter = JSON.parse(req.cookies.user);
-    const organizationId = req.params._id;
+  const create = async (req, res2) => {
+    const creator = req.body.creator;
+    const owner = req.body.owner;
+    const list = req.body.invites;
     try {
-      const invites = req.body;
-      for (let invite of invites) {
+      for (let invite of list) {
         let user2 = null;
         if (invite.contact.includes("@")) {
           user2 = await User.findOne({ email: invite.contact });
@@ -575,53 +576,52 @@ const сontrollerFactory = (db) => {
           user2 = await User.findOne({ phone: invite.contact });
         }
         if (user2) {
-          console.log(invite);
           const membership = new Membership({
             user: user2._id,
             type: "organization",
-            target: organizationId,
-            role: invite.role
+            target: req.body.owner.target,
+            role: "member",
+            label: "member"
           });
           await membership.save();
-          res.status(200).json({ message: "Invites sent successfully!" });
         } else {
           const newInvite = new Invite({
             code: uuid(),
-            organization: organizationId,
-            role: invite.role,
-            createdBy: userInviter._id,
-            invitedEmail: invite.contact.includes("@") ? invite.contact : null,
-            invitedPhone: !invite.contact.includes("@") ? invite.contact : null
+            creator,
+            owner,
+            role: "member",
+            email: invite.contact.includes("@") ? invite.contact : null,
+            phone: !invite.contact.includes("@") ? invite.contact : null
           });
           const savedInvite = await newInvite.save();
-          if (savedInvite.invitedEmail) {
-            const to = savedInvite.invitedEmail;
+          if (savedInvite.email !== null) {
+            const to = savedInvite.email;
             const subject = "You have been added to the organization";
             const text = `You have been invited to join an organization on ${process.env.APP_NAME}! Use this link to register: ${process.env.API_URL}/auth/invite?inviteCode=${newInvite.code}&type=email"`;
             await sendEmail(to, subject, text);
           }
-          if (savedInvite.invitedPhone !== null) {
-            const phone = savedInvite.invitedPhone;
+          if (savedInvite.phone !== null) {
+            const phone = savedInvite.phone;
             const message = `You have been invited to join an organization on ${process.env.APP_NAME}! Use this link to register: ${process.env.API_URL}/auth/invite?inviteCode=${newInvite.code}&type=phone`;
             await sendSms(phone, message);
           }
-          res.status(200).json({ message: "Invites sent successfully!" });
         }
       }
+      res2.status(200).json({ message: "Invites sent successfully!" });
     } catch (error) {
       console.error(error);
-      res.status(500).json({ message: "Something went wrong" });
+      res2.status(500).json({ message: "Something went wrong" });
     }
   };
-  const deleteInvite = async (req, res) => {
+  const deleteInvite = async (req, res2) => {
     try {
       const invite = await Invite.findOneAndDelete({ _id: req.params._id });
       if (!invite) {
-        return res.status(404).send({ message: "Invite not found" });
+        return res2.status(404).send({ message: "Invite not found" });
       }
-      res.send({ message: "Invite deleted successfully" });
+      res2.send({ message: "Invite deleted successfully" });
     } catch (err) {
-      res.status(500).send({ message: err.message });
+      res2.status(500).send({ message: err.message });
     }
   };
   return {
@@ -632,18 +632,135 @@ const сontrollerFactory = (db) => {
   };
 };
 var invites_controller = сontrollerFactory;
+let AccessController$1 = class AccessController {
+  db = null;
+  rule = null;
+  next = null;
+  entity = null;
+  /**
+   * @param {String} rule - Права на проверку (read, create, ...)
+   * @param {String} entity - Сущность на проверку (departments, post, ...)
+   */
+  check(rule, entity) {
+    if (this.rule === rule && this.entity === entity) {
+      return this.access.bind(this);
+    } else if (this.next) {
+      this.next.check(rule, entity);
+    } else {
+      console.error("Неудачная попытка вызова посредника verifyAccesses");
+      console.error("Переданные аргументы:", this.rule, this.entity);
+      return async (req, res2, next) => {
+        return res2.status(403).send({ message: "Access Denied. Middleware not founded" });
+      };
+    }
+  }
+};
+var AccessController_1 = AccessController$1;
+const AccessController2 = AccessController_1;
+let ReadDepartments$1 = class ReadDepartments extends AccessController2 {
+  rule = "read";
+  entity = "departments";
+  async access(req, res2, next) {
+    const Department = this.db.department;
+    try {
+      const userId = req.cookies.user._id;
+      const organization = req.query.organization;
+      const departments = await Department.find({
+        organization: { $eq: organization },
+        members: { $elemMatch: { user: userId } }
+      });
+      if (!departments.length) {
+        return res2.status(403).send({
+          message: "Access Denied. Read Departments. Департаменты не найдены"
+        });
+      }
+      let hasAccess = false;
+      departments.forEach((departament) => {
+        const accesses = departament.accesses;
+        if (getNestedProperty(accesses, rulePath)) {
+          hasAccess = true;
+        }
+      });
+      if (hasAccess) {
+        next();
+      } else {
+        return res2.status(403).send({ message: "Access Denied. Read Departments. No access" });
+      }
+    } catch (error) {
+      console.error("[canReadDepartments]", error);
+      return res2.status(500).send({ message: error.message });
+    }
+  }
+  /**
+   * // note: пока не использовался метод
+   * @param {Object} req объект 
+   * @returns 
+   */
+  async departmentsWhereUserIsMember(req) {
+    const Department = this.db.department;
+    try {
+      const userId = req.cookies.user._id;
+      const organization = req.query.organization;
+      const departments = await Department.find({
+        organization: { $eq: organization },
+        members: { $elemMatch: { user: userId } }
+      });
+      return departments;
+    } catch (error) {
+      console.error("[canReadDepartments]", error);
+      return res.status(500).send({ message: error.message });
+    }
+  }
+};
+var ReadDepartments_1 = ReadDepartments$1;
+function getNestedProperty(obj, propertyPath) {
+  const properties = propertyPath.split(".");
+  let value = obj;
+  for (const property of properties) {
+    if (!value.hasOwnProperty(property)) {
+      return void 0;
+    }
+    value = value[property];
+  }
+  return value;
+}
+const ReadDepartments2 = ReadDepartments_1;
+var verifyAccesses = (db) => {
+  const instances = [];
+  const middlewares = [
+    ReadDepartments2
+  ];
+  let nextMiddleware = null;
+  for (let i = middlewares.length - 1; i >= 0; i--) {
+    const Middleware = middlewares[i];
+    const middleware = new Middleware();
+    middleware.db = db;
+    middleware.next = nextMiddleware;
+    instances.unshift(middleware);
+    nextMiddleware = middleware;
+  }
+  return (rule, entity) => instances[0].check(rule, entity);
+};
 const controllerFactory$3 = departments_controller;
+const accessMiddlewaresFactory = verifyAccesses;
 var departments_routes = function(app, db) {
   const controller = controllerFactory$3(db);
-  app.use(function(req, res, next) {
-    res.header(
+  accessMiddlewaresFactory(db);
+  app.use(function(req, res2, next) {
+    res2.header(
       "Access-Control-Allow-Headers",
       "Access-Control-Allow-Origin",
       "x-access-token, Origin, Content-Type, Accept"
     );
     next();
   });
-  app.get("/api/departments/read", controller.read);
+  app.get(
+    "/api/departments/read",
+    // [
+    //   verifyAccesses('read', 'departments'),
+    // ],
+    controller.read
+  );
   app.get("/api/departments/get/:_id", controller.readOne);
   app.post("/api/departments/:_id/create", controller.create);
   app.post("/api/departments/:_id/update", controller.update);
@@ -652,8 +769,8 @@ var departments_routes = function(app, db) {
 const controllerFactory$2 = organizations_controller;
 var organizations_routes = function(app, db) {
   const controller = controllerFactory$2(db);
-  app.use(function(req, res, next) {
-    res.header(
+  app.use(function(req, res2, next) {
+    res2.header(
       "Access-Control-Allow-Headers",
       "Access-Control-Allow-Origin",
       "x-access-token, Origin, Content-Type, Accept"
@@ -680,8 +797,8 @@ var organizations_routes = function(app, db) {
 const controllerFactory$1 = memberships_controller;
 var memberships_routes = function(app, db) {
   const controller = controllerFactory$1(db);
-  app.use(function(req, res, next) {
-    res.header(
+  app.use(function(req, res2, next) {
+    res2.header(
       "Access-Control-Allow-Headers",
       "Access-Control-Allow-Origin",
       "x-access-token, Origin, Content-Type, Accept"
@@ -710,8 +827,8 @@ const middlewareFactory = index.server;
 var invites_routes = function(app, db) {
   const controller = controllerFactory(db);
   const { verifyInvites } = middlewareFactory(db);
-  app.use(function(req, res, next) {
-    res.header(
+  app.use(function(req, res2, next) {
+    res2.header(
       "Access-Control-Allow-Headers",
       "Access-Control-Allow-Origin",
       "x-access-token, Origin, Content-Type, Accept"
@@ -727,7 +844,7 @@ var invites_routes = function(app, db) {
     controller.read
   );
   app.post(
-    "/api/invites/:_id/create",
+    "/api/invites/create",
     [
       verifyInvites.checkInviteExist,
       verifyInvites.checkUsersExist
@@ -735,7 +852,7 @@ var invites_routes = function(app, db) {
     controller.create
   );
   app.delete(
-    "/api/invites/:_id/delete",
+    "/api/invites/delete/:_id",
     controller.delete
   );
 };
@@ -766,6 +883,50 @@ var department_model = (mongoose) => {
       type: Boolean,
       default: false
     },
+    accesses: {
+      products: {
+        read: {
+          type: Boolean,
+          default: false
+        },
+        edit: {
+          type: Boolean,
+          default: false
+        },
+        delete: {
+          type: Boolean,
+          default: false
+        }
+      },
+      orders: {
+        read: {
+          type: Boolean,
+          default: false
+        },
+        confirm: {
+          type: Boolean,
+          default: false
+        },
+        delete: {
+          type: Boolean,
+          default: false
+        }
+      },
+      departments: {
+        read: {
+          type: Boolean,
+          default: false
+        },
+        edit: {
+          type: Boolean,
+          default: false
+        },
+        delete: {
+          type: Boolean,
+          default: false
+        }
+      }
+    },
     // Marketplace options
     delivery: [String],
     payment: [String],
@@ -787,6 +948,8 @@ var department_model = (mongoose) => {
         ref: "Department"
       }
     ]
+  }, {
+    timestamps: true
   });
   departmentSchema.index({ organization: 1 });
   const Department = mongoose.model("Department", departmentSchema);
@@ -855,6 +1018,8 @@ var organization_model = (mongoose) => {
       },
       amount: Number
     }
+  }, {
+    timestamps: true
   });
   const Organization = mongoose.model("Organization", OrganizationSchema);
   return Organization;
@@ -891,51 +1056,50 @@ var membership_model = (mongoose) => {
       },
       required: true
     }
+  }, {
+    timestamps: true
   });
   const Membership = mongoose.model("Membership", MembershipSchema);
   return Membership;
 };
-var invite_model = (mongoose) => {
-  const InviteSchema = new mongoose.Schema({
+const applyOwnershipSchema = ownership_schema.ownership_schema;
+const applyCredentialsSchema = credentials_schema.credentials_schema;
+var invite_model = (db) => {
+  const InviteSchema = new db.mongoose.Schema({
     code: {
       type: String,
       required: true,
       unique: true
     },
-    organization: {
-      type: mongoose.Schema.Types.ObjectId,
-      ref: "Organization",
-      required: true
-    },
     status: {
       type: String,
-      enum: ["active", "used"],
+      enum: ["active", "used", "deactivated"],
       default: "active"
-    },
-    role: {
-      name: {
-        type: String,
-        default: "Сотрудник"
-      },
-      value: {
-        type: String,
-        default: "member"
-      }
-    },
-    createdBy: {
-      type: mongoose.Schema.Types.ObjectId,
-      ref: "User"
-    },
-    invitedEmail: {
-      type: String
-    },
-    invitedPhone: {
-      type: String
     }
   }, {
     timestamps: true
   });
-  const Invite = mongoose.model("Invite", InviteSchema);
+  applyOwnershipSchema(InviteSchema, db);
+  applyCredentialsSchema(InviteSchema);
+  InviteSchema.index({
+    owner: 1,
+    email: 1
+  }, {
+    unique: true,
+    partialFilterExpression: {
+      email: { $exists: true, $ne: "" }
+    }
+  });
+  InviteSchema.index({
+    owner: 1,
+    phone: 1
+  }, {
+    unique: true,
+    partialFilterExpression: {
+      phone: { $exists: true, $ne: "" }
+    }
+  });
+  const Invite = db.mongoose.model("Invite", InviteSchema);
   return Invite;
 };
 const DepartmentsController = departments_controller;