shuttlepro-shared 1.0.0 → 1.1.0

package/constants/index.js

@@ -0,0 +1,25 @@
+exports.HttpStatusCode = {
+  OK: 200,
+  CREATE: 201,
+  CREATED: 200,
+  ACCEPTED: 202,
+  NOT_SUCCESSFULL: 220,
+  NOT_FOUND: 404,
+  UNAUTHORIZED: 401,
+  BAD_REQUEST: 400,
+  FORBIDDEN: 403,
+  UNPROCESSABLE_ENTITY: 422,
+  INTERNAL_SERVER_ERROR: 500,
+  DUPLICATE: 409,
+};
+
+exports.GenericMessages = {
+  INTERNAL_SERVER_ERROR: "Internal server error!",
+  TOKEN_NOT_FOUND: "Token doesn't exist!",
+  INVALID_TOKEN: "Invalid Token!",
+  PERMISSION_DENIED: "Permission Denied!",
+  SERVER_ERROR: "Internal server error!",
+  DATE_SAVED: "Data saved Successfully!",
+  URL_FETCH_SUCCESS: "Url Fetched successfully!",
+  WORKSPACE_NOT_FOUND: "Workspace not found!",
+};

package/functions.js

@@ -0,0 +1,5 @@
+const { checkPermission } = require("./middlewares/checkPermission");
+
+module.exports = {
+  checkPermission,
+};

package/index.js

@@ -1,11 +1,7 @@
-const Website = require("./models/Website");
-const ProductQueue = require("./models/ProductQueue");
-const ColumnPreference = require("./models/ColumnPreference");
-const UserPermission = require("./models/UserPermission");
+const sharedModels = require("./models");
+const sharedFunctions = require("./functions");
 
 module.exports = {
-  Website,
-  ProductQueue,
-  ColumnPreference,
-  UserPermission,
+  sharedModels,
+  sharedFunctions,
 };

package/middlewares/checkPermission/index.js

@@ -0,0 +1,57 @@
+const { HttpStatusCode, GenericMessages } = require("../../constants");
+const { getBodyFromDecodeToken, getModule } = require("../../utils");
+
+exports.checkPermission = async (req, res, next, values) => {
+  try {
+    const token =
+      request.headers && request.headers.authorization
+        ? request.headers.authorization
+        : null;
+    if (token) {
+      const workspaceId =
+        req.query?.workspaceId ||
+        req.params?.workspaceId ||
+        req.body?.workspaceId ||
+        "";
+      if (!workspaceId) {
+        return res.status(HttpStatusCode.UNAUTHORIZED).json({
+          code: HttpStatusCode.UNAUTHORIZED,
+          message: GenericMessages.WORKSPACE_NOT_FOUND,
+        });
+      }
+      const body = getBodyFromDecodeToken(token);
+      if (body) {
+        const { module, action } = values;
+        const moduleObj = getModule(body, module);
+        if (moduleObj) {
+          if (moduleObj.includes(action)) {
+            return next();
+          } else {
+            return res.status(HttpStatusCode.UNAUTHORIZED).json({
+              code: HttpStatusCode.UNAUTHORIZED,
+              message: GenericMessages.PERMISSION_DENIED,
+            });
+          }
+        } else {
+          return res.status(HttpStatusCode.UNAUTHORIZED).json({
+            code: HttpStatusCode.UNAUTHORIZED,
+            message: GenericMessages.PERMISSION_DENIED,
+          });
+        }
+      }
+      return res.status(HttpStatusCode.UNAUTHORIZED).json({
+        code: HttpStatusCode.UNAUTHORIZED,
+        message: GenericMessages.PERMISSION_DENIED,
+      });
+    }
+    return res.status(HttpStatusCode.UNAUTHORIZED).json({
+      code: HttpStatusCode.UNAUTHORIZED,
+      message: GenericMessages.PERMISSION_DENIED,
+    });
+  } catch (err) {
+    return res.status(HttpStatusCode.UNAUTHORIZED).json({
+      code: HttpStatusCode.UNAUTHORIZED,
+      message: GenericMessages.INTERNAL_SERVER_ERROR,
+    });
+  }
+};

package/models.js

@@ -0,0 +1,11 @@
+const Website = require("./models/Website");
+const ProductQueue = require("./models/ProductQueue");
+const ColumnPreference = require("./models/ColumnPreference");
+const UserPermission = require("./models/UserPermission");
+
+module.exports = {
+  Website,
+  ProductQueue,
+  ColumnPreference,
+  UserPermission,
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shuttlepro-shared",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "",
   "main": "index.js",
   "scripts": {
@@ -11,6 +11,7 @@
   "license": "ISC",
   "access": "restricted",
   "dependencies": {
-    "mongoose": "^5.11.18"
+    "mongoose": "^5.11.18",
+    "jsonwebtoken": "^9.0.2"
   }
 }

package/utils/index.js

@@ -0,0 +1,23 @@
+const jwt = require("jsonwebtoken");
+
+exports.getBodyFromDecodeToken = (token) => {
+  try {
+    const decoded = jwt.decode(token, { complete: true });
+    if (decoded && decoded.payload) {
+      return decoded.payload || null;
+    }
+    return null;
+  } catch (err) {
+    return null;
+  }
+};
+
+exports.getModule = (obj, module) => {
+  return (
+    (obj &&
+      obj.permissions &&
+      obj.permissions.length > 0 &&
+      obj?.permissions[module]) ||
+    null
+  );
+};