Add middlewares

Author: anshulk

server/controllers/InvitationController.js

@@ -5,7 +5,7 @@ class InvitationController extends CrudController {
     invite = async (req, res, next) => {
         try {
             if (!("organisationId" in req.body && "emailList" in req.body)) {
-                throw "Missing parameters";
+                throw FliptaskError.missingParams();
             }
             req.body.createdBy = req.user.id;
             const data = await this.service.inviteMany(req.body);
@@ -18,7 +18,7 @@ class InvitationController extends CrudController {
     details = async (req, res, next) => {
         try {
             if (!("link" in req.query)) {
-                throw "Missing parameters";
+                throw FliptaskError.missingParams();
             }
             const data = await this.service.details(req.query.link);
             Response.success(res, data);
@@ -32,7 +32,7 @@ class InvitationController extends CrudController {
             const { user, body } = req;
             const { link, accept } = body;
             if (!(link && accept)) {
-                throw "Missing parameters";
+                throw FliptaskError.missingParams();
             }
             const data = await this.service.resolve({ user, link, accept });
             Response.success(res, data);

server/controllers/WorkspaceController.js

@@ -1,3 +1,3 @@
 const CrudController = require("./base/CrudController");
 
-global.WorkspaceController = new CrudController(WorkspaceService);
+global.workspaceController = new CrudController(workspaceService);

server/controllers/base/Response.js

@@ -8,8 +8,8 @@ class Response {
 
         let messages = {};
 
-        if (typeof error === "string") {
-            messages["error"] = error;
+        if (error instanceof Error) {
+            messages["error"] = error.message;
         } else if ("errors" in error && error["errors"].length) {
             messages = error["errors"].reduce((acc, item) => {
                 if (item.path && item.message) {

server/errors/FliptaskError.js

@@ -0,0 +1,11 @@
+class FliptaskError extends Error {
+    static permissionDenied(message = "Permission Denied") {
+        return new FliptaskError(message);
+    }
+
+    static missingParams(message = "Missing Parameters") {
+        return new FliptaskError(message);
+    }
+}
+
+global.FliptaskError = FliptaskError;

server/errors/index.js

@@ -0,0 +1 @@
+require("./FliptaskError");

server/index.js

@@ -19,10 +19,10 @@ const configuration = {
     bootstrap: [
         "Multer",
         "Mailer",
-        "Logger",
+        // "Logger",
         // "DB",
         // "Model",
-        "Middleware",
+        // "Middleware",
         // "Controller",
         // "Route",
         "Express"
@@ -65,10 +65,12 @@ const loadApp = async () => {
 
 
     require("./database");
+    require("./errors");
     require("./models");
     require("./services");
     require("./controllers");
     require("./auth");
+    require("./middlewares");
     require("./routes");
 
     const { PORT } = process.env;

server/middlewares/Auth.js

@@ -0,0 +1,13 @@
+class Modifier {
+    static paramIdIsOrgId(req, res, next) {
+        res.locals.orgId = req.params.id;
+        next();
+    }
+
+    static createdByUser(req, res, next) {
+        req.query.createdBy = req.user.id;
+        next();
+    }
+}
+
+global.Modifier = Modifier;

server/middlewares/Modifier.js

@@ -0,0 +1,27 @@
+const Response = require("../controllers/base/Response");
+
+class Permission {
+    static async userIsOrgMember(req, res, next) {
+        try {
+            let orgId;
+            if ("orgId" in res.locals) {
+                orgId = res.locals.orgId;
+            } else if (req.query && "organisationId" in req.query) {
+                orgId = req.query.organisationId;
+            } else if (req.body && "organisationId" in req.body) {
+                orgId = req.body.organisationId;
+            }
+            const userOrgs = await req.user.getOrganisations();
+            const orgIds = userOrgs.map((org) => org.id);
+            if (orgIds.indexOf(parseInt(orgId, 10)) < 0) {
+                throw FliptaskError.permissionDenied();
+            }
+            next();
+        } catch (error) {
+            console.log(error instanceof Error);
+            Response.error(res, error);
+        }
+    }
+}
+
+global.Permission = Permission;

server/middlewares/Permission.js

@@ -0,0 +1,2 @@
+require("./Permission");
+require("./Modifier");