-
Notifications
You must be signed in to change notification settings - Fork 27
/
app-routes.js
99 lines (91 loc) · 3.33 KB
/
app-routes.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
/**
* Configure all routes for express app
*/
const _ = require('lodash')
const config = require('config')
const HttpStatus = require('http-status-codes')
const helper = require('./src/common/helper')
const errors = require('./src/common/errors')
// const logger = require('./src/common/logger')
const routes = require('./src/routes')
const authenticator = require('tc-core-library-js').middleware.jwtAuthenticator
/**
* Configure all routes for express app
* @param app the express app
*/
module.exports = (app) => {
// Load all routes
_.each(routes, (verbs, path) => {
_.each(verbs, (def, verb) => {
const controllerPath = `./src/controllers/${def.controller}`
const method = require(controllerPath)[def.method]; // eslint-disable-line
if (!method) {
throw new Error(`${def.method} is undefined`)
}
const actions = []
actions.push((req, res, next) => {
req.signature = `${def.controller}#${def.method}`
next()
})
// add Authenticator check if route has auth
if (def.auth) {
actions.push((req, res, next) => {
let token
if (req.headers.authorization && req.headers.authorization.split(' ')[0] === 'Bearer') {
token = req.headers.authorization.split(' ')[1]
}
if (def.allowAnonymous && !token) {
next()
} else {
authenticator(_.pick(config, ['AUTH_SECRET', 'VALID_ISSUERS']))(req, res, next)
}
})
if (def.blockByIp) {
actions.push((req, res, next) => {
req.authUser.blockIP = _.find(req.authUser, (value, key) => {
return (key.indexOf('blockIP') !== -1)
})
if (req.authUser.blockIP) {
throw new errors.ForbiddenError('Access denied')
} else {
next()
}
})
}
if (!def.allowAnonymous) {
actions.push((req, res, next) => {
if (req.authUser.isMachine) {
// logger.warn(`Request Auth User ${req.authUser} calling ${controllerPath} ${method}`)
// M2M
if (!req.authUser.scopes || !helper.checkIfExists(def.scopes, req.authUser.scopes)) {
next(new errors.ForbiddenError('You are not allowed to perform this action!'))
} else {
next()
}
} else {
// User
req.authUser.userId = String(req.authUser.userId)
console.log(req.authUser)
if (!req.authUser.roles || !helper.checkIfExists(def.access, req.authUser.roles)) {
next(new errors.ForbiddenError('You are not allowed to perform this action!'))
} else {
next()
}
}
})
}
}
actions.push(method)
app[verb](`/${config.API_VERSION}${path}`, helper.autoWrapExpress(actions))
})
})
// Check if the route is not found or HTTP method is not supported
app.use('*', (req, res) => {
const route = routes[req.baseUrl.replace(`/${config.API_VERSION}`, '')]
if (route) {
res.status(HttpStatus.METHOD_NOT_ALLOWED).json({ message: 'The requested HTTP method is not supported.' })
} else {
res.status(HttpStatus.NOT_FOUND).json({ message: 'The requested resource cannot be found.' })
}
})
}