ti2 1.0.0

package/auth/authHandler.js

@@ -0,0 +1,87 @@
+const jsonwebtoken = require('jsonwebtoken');
+const Promise = require('bluebird');
+const assert = require('assert');
+
+const sqldb = require('../models');
+
+const {
+  env: {
+    frontendKey,
+    adminKey,
+    jwtSecret,
+  },
+} = process;
+
+const invalid = next => next({ status: 401, message: 'Unauthorized' });
+const getToken = ({ req }) => {
+  if (
+    !req.header('Authorization')
+    || req.header('Authorization').substring(0, 7) !== 'Bearer '
+  ) return null;
+  return req.header('Authorization').split(' ')[1];
+};
+// the authentication middleware
+const app = async (req, res, next) => {
+  if (!req.pathParams || !req.pathParams.app) return invalid(next);
+  const token = getToken({ req });
+  if (!token) return invalid(next);
+  // try {
+  const appRecord = await sqldb.Integration.findOne({
+    where: {
+      name: req.pathParams.app,
+    },
+  });
+  if (!appRecord) return invalid(next);
+  if (appRecord.apiKey !== token) {
+    return invalid(next);
+  }
+  req.appRecord = appRecord.dataValues;
+  return next();
+};
+
+// The requester is an admin; createApps and other admin tasks
+const admin = async (req, res, next) => {
+  const token = getToken({ req });
+  if (token !== adminKey) return invalid(next);
+  return next();
+};
+
+// the request is from a user, checke the userId agains the url param
+const user = async (req, res, next) => {
+  const token = getToken({ req });
+  if (!token) return invalid(next);
+  try {
+    const { userId } = jsonwebtoken.verify(token, jwtSecret);
+    assert(userId);
+    if (req.params.userId && userId !== req.params.userId) return invalid(next);
+  } catch (err) {
+    return invalid(next);
+  }
+  return next();
+};
+
+// The requester comes from frontend; frontend driven tasks
+const frontend = async (req, res, next) => {
+  const token = getToken({ req });
+  if (token !== frontendKey) return invalid(next);
+  return next();
+};
+
+const adminOrUser = levels => async (req, res, next) => {
+  result = await Promise.all(levels.map(
+    level => level(req, res, err => err),
+  ));
+  if (result.some(val => (!Boolean(val)))) {
+    return next();
+  }
+  return next(result[0]);
+};
+
+module.exports = {
+  app,
+  frontend,
+  admin,
+  user,
+  'admin,user': adminOrUser([admin, user]),
+  'admin,app,user': adminOrUser([admin, app, user]),
+};

package/config/config.js

@@ -0,0 +1,5 @@
+module.exports = {
+  [process.env.NODE_ENV || 'development']: {
+    use_env_variable: 'DB_URL',
+  },
+};

package/controllers/README.md

@@ -0,0 +1 @@
+Place your controllers in this directory.

package/controllers/__fixtures__/fieldData.js

@@ -0,0 +1,330 @@
+module.exports = {
+  leftSide: {
+    name: 'TourConnect',
+    entityImage:
+      'https://s3.amazonaws.com/tourconnect_staging/images/images/536830b6ed19afa44a000002/profile?1501741129917',
+  },
+  rightSide: {
+    name: 'Didgigo',
+  },
+  fieldSets: {
+    profile: {
+      caption: 'Company Details',
+      mappingType: 'fields',
+      leftSide: {
+        entityType: 'Profile',
+        entityName: 'Luxury Island Suites',
+        entity: 'Profile',
+        fields: [
+          {
+            id: 'name',
+            title: 'Company Name',
+            content: 'Luxury Island Suites',
+          },
+          {
+            id: 'address',
+            title: 'Address',
+            content: {
+              country: 'Australia',
+              state: 'QLD',
+              city: 'Arlie Beach',
+              postalCode: '4802',
+              address1: '30 Golden Orchad Drive',
+              address2: null,
+              gps: {
+                lat: '1.3644202',
+                lng: '103.9915308',
+              },
+            },
+          },
+          {
+            id: 'description',
+            title: 'Description',
+            content:
+              'Luxury Island Suites stands as the stylish, forward thinking leader of island hospitality. With over 60 years of experience, LIS continues to be synonymous with luxury because of our innovative approach to products, amenities and service. We help make traveling easier with our smart design, innovative restaurant concepts, authentic hospitality and commitment to the global community.',
+          },
+          {
+            id: 'website',
+            title: 'Website',
+            content: 'www.luxuryislandsuites.com.au',
+          },
+          {
+            id: 'telephone',
+            title: 'Telephone Number',
+            content: '1800 700 600',
+          },
+        ],
+      },
+      rightSide: {
+        entityType: 'Public Profile',
+        entityName: 'Luxury Suites of Australia',
+        fields: [
+          {
+            id: 'name',
+            title: 'Company Name',
+            content: 'Luxury Suites of Australia',
+          },
+          {
+            id: 'address',
+            title: 'Address',
+            content: '',
+          },
+          {
+            id: 'description',
+            title: 'Welcome Paragraph',
+            content:
+              'Actually try-hard vape marfa wayfarers. Woke live-edge dreamcatcher copper mug selvage kinfolk pork belly normcore tumeric ennui crucifix squid four loko. Pitchfork ugh cray, blog succulents blue bottle small batch fixie scenester sustainable. Cred fingerstache art party pop-up coloring book ugh. Woke raclette kombucha narwhal kickstarter, meh ugh roof party banjo meggings copper mug. Ugh air plant tattooed pitchfork cold-pressed, hashtag mumblecore gentrify tumeric succulents knausgaard lumbersexual. Hexagon shaman mixtape cornhole plaid cliche whatever celiac kickstarter distillery microdosing.',
+          },
+        ],
+      },
+      mappings: [],
+    },
+    locations: {
+      caption: 'Properties / Locations',
+      mappingType: 'locations',
+      leftSide: {
+        entity: 'Locations',
+        entityName: 'Location',
+        entityType: 'Locations',
+        locations: [
+          {
+            locationId: '5368655d97417de435000001',
+            locationName: 'Arlie Beach Luxury Island Suites',
+            description:
+              "Luxury Island Suites in Airlie Beach offers a pampering vacation experience that is truly unique among Airlie Beach hotels. Situated on a cliff rising above the sea, all of Island's suites enjoy full panoramic views.",
+            media: {
+              images: [
+                {
+                  url:
+                    'https://s3.amazonaws.com/tourconnect_staging/7624471190451/d6fd2cc1-dc54-11e8-b9ed-eb2f0d66c310',
+                },
+                {
+                  url:
+                    'https://s3.amazonaws.com/tourconnect_staging/5035112190451/b428be21-dc55-11e8-b85e-59746f3f59b6',
+                },
+              ],
+            },
+            location: {
+              country: 'Australia',
+              state: 'QLD',
+              city: 'Arlie Beach',
+              postalCode: '4802',
+              address1: '30 Golden Orchad Drive',
+              address2: null,
+              gps: {
+                lat: '1.3644202',
+                lng: '103.9915308',
+              },
+            },
+          },
+          {
+            locationId: '5f2d3bdea7ea49524000001',
+            locationName: 'Isla Mujeres Island Suites',
+            description:
+              'Relax into island time in the comfort and easy elegance of Orcas Island’s premier specialty lodging. Water view suites are located in the heart of Eastsound Village, just steps away from shops & galleries, world-renowned dining, beach strolling, outdoor adventures and more. Eastsound Suites are a popular alternative accommodation to hotels, motels or B&B’s. Much more special!',
+            media: {
+              images: [
+                {
+                  url:
+                    'https://s3.amazonaws.com/tourconnect_staging/5035112190451/b428be21-dc55-11e8-b85e-59746f3f59b6',
+                },
+              ],
+            },
+            location: {
+              country: 'Mexico',
+              state: 'Quintana Roo',
+              city: 'Isla Mujeres',
+              postalCode: '00',
+              address1: 'tbc',
+            },
+          },
+        ],
+      },
+      rightSide: {
+        entity: 'Products',
+        entityName: 'Product',
+        entityType: 'Product',
+        locations: [
+          {
+            locationId: '332233',
+            locationName: 'Hilton',
+            description:
+              'Hampton Inn by Hilton Cancun Cumbres is a modern business hotel that is located in a recently developed area of Cancun. The hotel is just steps away from various shops, supermarkets and malls, and also offers easy access to the highway which takes you to the downtown area and airport.',
+            media: {
+              images: [
+                {
+                  url:
+                    'https://cdn.bestday.net/_lib/vimages/Cancun/Hotels/hotel-hampton-inn-hilton-cancun-cumbres/fachada_g.jpg',
+                },
+              ],
+            },
+            location: {
+              country: 'Mexico',
+              state: 'Quintana Roo',
+              city: 'Cancun',
+              postalcode: '7500',
+              address1: 'SM 310 MZ 01 L-4-02',
+              address2: 'Blvd. Luis Donaldo Colosio',
+            },
+          },
+          {
+            locationId: '332234',
+            locationName: 'Hilton Lagoon',
+            description:
+              'Simple rooms in an unpretentious hotel featuring lagoon views, a restaurant/bar & an outdoor pool.',
+            media: {
+              images: [
+                {
+                  url:
+                    'http://www.iceportal.com/data/2813-55900-f7541089_XXLejpg/Mexico/Cancun/Hotel/Grand-Royal-Lagoon/Photo/Grand-Royal-Lagoon-Cancun-Exterior-view-Exterior.jpg',
+                },
+              ],
+            },
+            location: {
+              country: 'Mexico',
+              state: 'Quintana Roo',
+              city: 'Cancun',
+              postalCode: '77500',
+              address1: 'Blvd. Kukulcan Km 7.5, Punta Cancun, Zona Hotelera',
+            },
+          },
+        ],
+      },
+      mappings: [],
+    },
+    products: {
+      caption: 'Products',
+      mappingType: 'products',
+      leftSide: {
+        entity: 'Products',
+        entityName: 'Location/Product',
+        entityType: 'Products',
+        products: [
+          {
+            locationId: '5368655d97417de435000001',
+            locationName: 'Arlie Beach Luxury Island Suites',
+            productId: '536868d097417d07e0000003',
+            productName: 'King Suite',
+            description:
+              'There’s plenty of room for work and play in our Executive King Suite with its comfortable, modern design. Its elegant, modern design features a media hub for all your gadgets, plenty of space to get work done, and plush furnishings to ensure your comfort all the while.',
+            media: {
+              images: [
+                {
+                  url:
+                    'https://static.mgmresorts.com/content/dam/MGM/mgm-grand/hotel/mgm-grand/graphic-elements/mgm-grand-hotel-rooms-details-bedroom-bed-close-up-@2x.jpg.image.744.418.high.jpg',
+                },
+                {
+                  url:
+                    'https://static.mgmresorts.com/content/dam/MGM/mgm-grand/hotel/mgm-grand/executive-king-suite/architecture/mgm_grand_room_executive_king_suite.png.image.1488.836.high.jpg',
+                },
+              ],
+            },
+          },
+          {
+            locationId: '5368655d97417de435000001',
+            locationName: 'Arlie Beach Luxury Island Suites',
+            productId: '5368698c97417de435000013',
+            productName: 'Master King Suite',
+            description:
+              "Knausgaard hell of bitters 90's pickled tote bag narwhal farm-to-table paleo lyft taxidermy man braid meditation vinyl glossier. Live-edge tousled disrupt, pug meh keffiyeh venmo tofu organic occupy swag chicharrones ethical humblebrag. Dreamcatcher keytar biodiesel, banjo cronut vaporware marfa heirloom. Meh coloring book chartreuse, synth taiyaki etsy kinfolk succulents raclette lomo humblebrag lo-fi taxidermy edison bulb slow-carb. Neutra occupy thundercats sustainable fingerstache hot chicken next level forage. Godard coloring book iceland photo booth waistcoat next level 3 wolf moon, vice mumblecore wolf poutine paleo four dollar toast seitan authentic.",
+            media: {
+              images: [
+                {
+                  url:
+                    'https://photos.hotelbeds.com/giata/bigger/45/457081/457081a_hb_ro_002.jpg',
+                },
+                {
+                  url:
+                    'https://photos.hotelbeds.com/giata/bigger/45/457081/457081a_hb_ro_016.jpg',
+                },
+              ],
+            },
+          },
+          {
+            locationId: '5368655d97417de435000001',
+            locationName: 'Arlie Beach Luxury Island Suites',
+            productId: '55b189b682c2b00300c9dd41',
+            productName: '1 Bedroom Apartment/Suite',
+          },
+          {
+            locationId: '5368655d97417de435000001',
+            locationName: 'Arlie Beach Luxury Island Suites',
+            productId: '536867a697417de43500000f',
+            productName: 'King Deluxe Guest Room',
+          },
+          {
+            locationId: '5f2d3bdea7ea49524000001',
+            locationName: 'Isla Mujeres Island Suites',
+            productId: ':5407d059707f0fe2900001f1',
+            productName: 'Deluxe Island Suite',
+          },
+          {
+            locationId: '5f2d3bdea7ea49524000001',
+            locationName: 'Isla Mujeres Island Suites',
+            productId: '5407cc9d707f0fe2900000cc',
+            productName: 'Island Suite',
+          },
+          {
+            locationId: '5f2d3bdea7ea49524000001',
+            locationName: 'Isla Mujeres Island Suites',
+            productId: '55b5b51a8f58920300a115cc',
+            productName: 'Garden Sunset Suite',
+          },
+        ],
+      },
+      rightSide: {
+        entity: 'Options',
+        entityType: 'Options',
+        entityName: 'Products/Options',
+        products: [
+          {
+            locationId: '332233',
+            locationName: 'Hilton Beach',
+            productId: '009992',
+            productName: 'Queen Suite',
+          },
+          {
+            locationId: '332234',
+            locationName: 'Hilton Lagoon',
+            productId: '009993',
+            productName: 'King Suite',
+          },
+        ],
+      },
+      mappings: [
+        {
+          leftSide: {
+            locationId: '5368655d97417de435000001',
+            productId: '536868d097417d07e0000003',
+          },
+          action: 'left',
+        },
+        {
+          rightSide: {
+            locationId: '332233',
+            productId: '009992',
+          },
+          action: 'right',
+        },
+        {
+          leftSide: {
+            locationId: '5368655d97417de435000001',
+            productId: '5368698c97417de435000013',
+          },
+          rightSide: {
+            locationId: '332234',
+            productId: '009993',
+          },
+          action: 'left',
+        },
+        {
+          leftSide: {
+            locationId: '5368655d97417de435000001',
+            productId: '55b189b682c2b00300c9dd41',
+          },
+          action: 'ignore',
+        },
+      ],
+    },
+  },
+};

package/controllers/__mocks__/plugin.js

@@ -0,0 +1,17 @@
+/* globals jest */
+const faker = require('faker');
+const { fieldSets } = require('../__fixtures__/fieldData');
+
+module.exports = () => ({
+  validateToken: jest.fn(() => true),
+  getProfile: jest.fn(() => fieldSets.profile.leftSide),
+  updateProfile: jest.fn(() => true),
+  getLocations: jest.fn(() => fieldSets.locations.leftSide.locations),
+  getLocation: jest.fn(() => fieldSets.locations.leftSide.locations[0]),
+  createLocation: jest.fn(() => ({ locationId: faker.random.uuid() })),
+  updateLocation: jest.fn(() => true),
+  getProducts: jest.fn(),
+  getProduct: jest.fn(),
+  createProduct: jest.fn(() => (({ productId: faker.random.uuid() }))),
+  updateProduct: jest.fn(() => true),
+});

package/controllers/__tests__/admin.js

@@ -0,0 +1,61 @@
+/* globals describe it expect afterAll */
+
+const faker = require('faker');
+const request = require('supertest');
+const app = require('../../../app');
+const sqldb = require('../../../models');
+
+const { env: { adminKey } } = process;
+
+describe('admin', () => {
+  const appName = faker.helpers.slugify(
+    faker.company.companyName(),
+  );
+  const newApp = {
+    name: appName,
+    packageName: `ti2-${appName}`,
+    adminEmail: faker.internet.email(),
+  };
+  let appKey;
+  const userId = '536830b6ed19afa44a000002';
+  afterAll(async () => {
+    await sqldb.sequelize.connectionManager.close();
+  });
+  it('should be able to create an app', async () => {
+    const resp = await request(app)
+      .post('/app')
+      .set('Authorization', `Bearer ${adminKey}`)
+      .send(newApp);
+    expect(resp.statusCode).toBe(200);
+    expect(resp.body.value).toBeTruthy();
+    appKey = resp.body.value;
+  });
+  it('the created app should be on the list of apps', async () => {
+    const resp = await request(app)
+      .get('/apps')
+      .set('Authorization', `Bearer ${adminKey}`);
+    expect(resp.statusCode).toBe(200);
+    const { body: { integrations } } = resp;
+    expect(integrations).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining(newApp),
+      ]),
+    );
+  });
+  it('should be able to reset an app\'s key', async () => {
+    const url = `/app/resetAppKey/${newApp.name}`;
+    const resp = await request(app)
+      .get(url)
+      .set('Authorization', `Bearer ${adminKey}`);
+    expect(resp.statusCode).toBe(200);
+    const { body: { value } } = resp;
+    expect(value).toBeTruthy();
+    expect(value).not.toBe(appKey);
+  });
+  it.skip('should be able to create a new user authentication token', async () => {
+    const resp = await request(app).post('/user')
+      .set('Authorization', `Bearer ${adminKey}`)
+      .send({ userId });
+    expect(resp.statusCode).toBe(200);
+  });
+});

package/controllers/__tests__/app.js

@@ -0,0 +1,82 @@
+/* globals describe it expect beforeAll, afterAll */
+
+const faker = require('faker');
+const request = require('supertest');
+const jwt = require('jwt-promise');
+const app = require('../../../app');
+const sqldb = require('../../../models');
+
+const { env: { adminKey, jwtSecret } } = process;
+
+describe('app', () => {
+  const appName = faker.helpers.slugify(
+    faker.company.companyName(),
+  ).toLowerCase();
+  const newApp = {
+    name: appName,
+    packageName: `ti2-${appName}`,
+    adminEmail: faker.internet.email(),
+  };
+  let appKey;
+  const userId = faker.random.uuid();
+  const apiKey = faker.random.uuid();
+  // this token can be as long needed
+  const token = {
+    endpoint: faker.internet.url(),
+    apiKey,
+  };
+  const encodePayload = {
+    payload: { lorem: faker.lorem.paragraph() },
+  };
+  let encodedKey;
+  beforeAll(async () => {
+    const resp = await request(app)
+      .post('/app')
+      .set('Authorization', `Bearer ${adminKey}`)
+      .send(newApp);
+    expect(resp.statusCode).toBe(200);
+    expect(resp.body.value).toBeTruthy();
+    appKey = resp.body.value;
+  });
+  afterAll(async () => {
+    await sqldb.sequelize.connectionManager.close();
+  });
+  it('should encode an airbitrary object', async () => {
+    const resp = await request(app)
+      .put(`/app/encode/${appName}`)
+      .set('Authorization', `Bearer ${appKey}`)
+      .send({ payload: encodePayload });
+    expect(resp.statusCode).toBe(200);
+    expect(resp.body.value).toBeTruthy();
+    encodedKey = resp.body.value;
+  });
+  it('the encoded key should be decodable', async () => {
+    const decoded = await jwt.verify(encodedKey, `${appName}.${jwtSecret}`);
+    expect(decoded.payload).toEqual(expect.objectContaining(encodePayload));
+  });
+  it('should be able to create a user token for the app', async () => {
+    const resp = await request(app)
+      .post(`/${appName}/${userId}`)
+      .set('Authorization', `Bearer ${appKey}`)
+      .send({
+        tokenHint: apiKey.split('-')[0],
+        token,
+      });
+    expect(resp.statusCode).toBe(200);
+  });
+  it('should be able to get a list of all tokens related to the app', async () => {
+    const resp = await request(app)
+      .get(`/app/tokens/${appName}`)
+      .set('Authorization', `Bearer ${appKey}`);
+    expect(resp.statusCode).toBe(200);
+    expect(resp.body.userAppKeys).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          hint: apiKey.split('-')[0],
+          userId,
+          integrationId: appName,
+        }),
+      ]),
+    );
+  });
+});

package/controllers/__tests__/bookings.js

@@ -0,0 +1,76 @@
+/* globals describe it expect beforeAll, afterAll, afterEach, jest */
+
+const { doApiGet, doApiPost } = require('../../../test/utils');
+
+const { env: { adminKey } } = process;
+
+
+const newApp = {
+  name: 'travelgate',
+  packageName: 'ti2-travelgate',
+  adminEmail: 'engineering+travelgate@tourconnect.com',
+};
+const appKey = newApp.name;
+const userId = '551394be5ac58e5c76000019';
+const newIntegration = {
+  tokenHint: 'testingToken',
+  token: {
+    endpoint: 'https://api.travelgatex.com',
+    apiKey: '8ca687f8-7968-4331-7b1a-dfcb276e5e44',
+    client: 'tourconnect',
+  },
+};
+
+describe('user: booking search', () => {
+  let userToken;
+  it('create the travelgate app', async () => {
+    // create the travelgate app
+    // get the list of existing
+    const { integrations } = await doApiGet({
+      url: '/apps',
+      token: adminKey,
+    });
+    if (!integrations.map(e => e.name).includes(newApp.name)) {
+      // creating the app
+      const { value: appKey } = await doApiPost({
+        url: '/app',
+        token: adminKey,
+        payload: newApp,
+      });
+      expect(appKey).toBeTruthy();
+    }
+    // create the user token
+    ({ value: userToken } = await doApiPost({
+      url: '/user',
+      token: adminKey,
+      payload: { userId },
+    }));
+    expect(userToken).toBeTruthy();
+  });
+  it('create the travelGage+User setup', async () => {
+    const { userAppKeys } = await doApiGet({
+      url: `/user/${userId}/apps`,
+      token: userToken,
+    });
+    if (!userAppKeys.map(e => e.integrationId).includes(newApp.name)) {
+      // relation does not exits
+      const { value } = await doApiPost({
+        url: `/${appKey}/${userId}`,
+        token: userToken,
+        payload: newIntegration,
+      });
+      expect(value).toBeTruthy();
+    }
+  });
+  it('should be able to search a travel gate for a booking', async () => {
+    const retVal = await doApiPost({
+      url: `/bookings/${appKey}/${userId}/search`,
+      token: userToken,
+      payload: {
+        bookingId: '', supplierId: '', name: '',
+      },
+    });
+    expect(Array.isArray(retVal.bookings)).toBeTruthy();
+    expect(retVal.bookings.length > 0).toBeTruthy();
+  });
+});

package/controllers/__tests__/ping.js

@@ -0,0 +1,23 @@
+/* global describe, it, expect */
+
+// const should = require('should');
+const request = require('supertest');
+const server = require('../../../app');
+
+describe('ping', () => {
+  it('should get a server pong', async () => {
+    const response = await request(server)
+      .get('/ping')
+      .set('Accept', 'application/json');
+    expect(response.headers['content-type']).toMatch(/json/);
+    expect(response.statusCode).toBe(200);
+    expect(response.body.error).toBeUndefined();
+    expect(Object.keys(response.body))
+      .toEqual(expect.arrayContaining([
+        'name',
+        'description',
+        'version',
+        'uptime',
+      ]));
+  });
+});