@simitgroup/simpleapp-generator 1.1.7 → 1.1.8

package/templates/nest/src/simpleapp/generate/commons/middlewares/tenant.middleware.ts.eta

@@ -4,13 +4,19 @@
  * last change 2023-10-28
  * Author: Ks Tan
  */
-import { Injectable, NestMiddleware, Logger,Scope,Inject } from '@nestjs/common';
+import {
+  Injectable,
+  NestMiddleware,
+  Logger,
+  Scope,
+  Inject,
+} from '@nestjs/common';
 import { Request, Response, NextFunction } from 'express';
 import { InjectModel } from '@nestjs/mongoose';
-import { Model,Connection } from 'mongoose';
+import { Model, Connection } from 'mongoose';
 // import * as mongoose from 'mongoose';
-import {   User,  }  from '../../types/user.type';
-import {   Permission,  }  from '../../types/perm.type';
+import { User } from '../../types/user.type';
+import { Permission } from '../../types/perm.type';
 import { InjectConnection } from '@nestjs/mongoose';
 
 const Base64URL = require('@darkwolf/base64url');
@@ -20,75 +26,80 @@ import { UserContext } from '../user.context';
 // import {KeycloakConfigService} from "../keycloak/keycloak.service"
 @Injectable()
 export class TenantMiddleware implements NestMiddleware {
-  protected defaultxorg=Base64URL.encodeText('0-0-0')
-  protected excludeXorgs = ['/profile', '/profile/tenant']
-  protected logger = new Logger()
-  protected transController
-  constructor(     
-    @InjectModel('User') private readonly usermodel:Model<User>,
-    @InjectModel('Permission') private readonly permmodel:Model<Permission>,
-    @InjectConnection() private readonly connection: Connection,
-    ){}
-  
-  requireXorg(baseurl:string):boolean{
+  protected defaultxorg = Base64URL.encodeText('0-0-0');
+  protected excludeXorgs = ['/profile', '/profile/tenant'];
+  protected logger = new Logger();
+  protected transController;
+  constructor(
+    @InjectModel('User') private readonly usermodel: Model<User>,
+    @InjectModel('Permission') private readonly permmodel: Model<Permission>,
+    
+  ) {}
+
+  requireXorg(baseurl: string): boolean {
     // console.log('requireXorg')
-    for(let i =0; i < this.excludeXorgs.length;i++){
-      if(baseurl.includes(this.excludeXorgs[i])){
-        this.logger.verbose("requireXorg = false")
-        return false
+    for (let i = 0; i < this.excludeXorgs.length; i++) {
+      if (baseurl.includes(this.excludeXorgs[i])) {
+        this.logger.verbose('requireXorg = false');
+        return false;
       }
     }
     // console.log("Require xorg")
-    return true
+    return true;
   }
   async use(req: Request, res: Response, next: NextFunction) {
     if (req.baseUrl == '/oauth2-redirect.html') {
       next();
       return;
     }
-    this.logger.debug(`running TenantMiddleware for ${req.baseUrl}`)
+    this.logger.debug(`running TenantMiddleware for ${req.baseUrl}`);
     if (!req.headers['authorization']) {
-      this.logger.log("undefine bearer token")
+      this.logger.log('undefine bearer token');
       return res.status(401).send('Undefine bearer token');
     }
     if (!req.headers['x-org'] && this.requireXorg(req.baseUrl)) {
-      this.logger.log("undefine x-org and require that at "+req.baseUrl,"TenantMiddleware")
+      this.logger.log(
+        'undefine x-org and require that at ' + req.baseUrl,
+        'TenantMiddleware',
+      );
       return res.status(401).send('undefine header string x-org');
     }
-    const session = await this.connection.startSession()
-    const u = new UserContext(this.usermodel,this.permmodel,session)
+    // const session = await this.connection.startSession();
+    const u = new UserContext(this.usermodel, this.permmodel);
     // console.log("line 43")
     try {
       let tokenstr: string = req.headers['authorization'];
       tokenstr = tokenstr.replace('Bearer ', '');
-      
-      const xorg = req.headers['x-org']?? this.defaultxorg
 
-      await u.setCurrentUserInfo(tokenstr,xorg)      
-      if(u.getId()=='' && this.requireXorg(req.baseUrl)){        
-        this.logger.log("access deny of no user:", req.baseUrl)
-        return res.status(401).send('access deny');  
-      }else{
-        if(u.getId()==''){
-          this.logger.verbose(`grant new user (${u.getUid()}) access ${req.baseUrl}`)
-        }else{
-          this.logger.verbose(`grant user (${u.getId()}) access ${req.baseUrl}`)
+      const xorg = req.headers['x-org'] ?? this.defaultxorg;
+
+      await u.setCurrentUserInfo(tokenstr, xorg);
+      if (u.getId() == '' && this.requireXorg(req.baseUrl)) {
+        this.logger.log('access deny of no user:', req.baseUrl);
+        return res.status(401).send('access deny');
+      } else {
+        if (u.getId() == '') {
+          this.logger.verbose(
+            `grant new user (${u.getUid()}) access ${req.baseUrl}`,
+          );
+        } else {
+          this.logger.verbose(
+            `grant user (${u.getId()}) access ${req.baseUrl}`,
+          );
         }
-        req['sessionuser'] = u
-        this.logger.verbose(u.getRoles())
+        req['sessionuser'] = u;
+        this.logger.verbose(u.getRoles());
 
         next();
       }
-      
-    } catch(err) {
-      this.logger.warn(err,"invalid xorg or user info",)
-      this.logger.error(err)
-      if(err=='invalid x-org'){
+    } catch (err) {
+      this.logger.warn(err, 'invalid xorg or user info');
+      this.logger.error(err);
+      if (err == 'invalid x-org') {
         return res.status(403).send(err);
-      }else{
+      } else {
         return res.status(401).send(err);
       }
-      
     }
   }
 }