@codetanzania/emis-stakeholder/src/auth.http.router.js

A representation of an entity (e.g municipal, individual, agency, organization etc) consisting of contact information (e.g. name, e-mail addresses, phone numbers) and other descriptive information of interest in emergency(or disaster) management.

import { waterfall } from 'async';
import _ from 'lodash';
import { idOf, normalizeError } from '@lykmapipo/common';
import { getString } from '@lykmapipo/env';
import { encode } from '@lykmapipo/jwt-common';
import { Router } from '@lykmapipo/express-common';
import { parsePhoneNumber } from '@lykmapipo/phone';

import Party from './party.model';

/* constants */
const API_VERSION = getString('API_VERSION', '1.0.0');

const router = new Router({
  version: API_VERSION,
});

/**
 * @description A route to handle authentication/signin to the application
 * @version 0.2.0
 * @since 1.5.0
 */
router.post('/signin', (request, response, next) => {
  /* prevent invalid sign in credentials */
  if (
    _.isEmpty(request.body) ||
    _.isEmpty(request.body.username) ||
    _.isEmpty(request.body.password)
  ) {
    next(new Error('Invalid signin details'));
  }

  // continue with signin
  else {
    // normalize credentials
    const { username } = _.merge({}, request.body);
    const email = username.toLowerCase();
    const parsedPhoneNumber = parsePhoneNumber(username);
    let phone;

    // check if phone number was parsed
    if (parsedPhoneNumber) {
      phone = parsedPhoneNumber.e164NoPlus;
    }

    const credentials = {
      $or: [{ email }, { mobile: phone || username }],
      deletedAt: {
        $eq: null,
      },
      password: request.body.password,
    };

    waterfall(
      [
        function authenticateParty(then) {
          // authenticate active party only
          Party.authenticate(credentials, then);
        },

        // ensure roles & permissions
        function populate(party, then) {
          party.populate('role', then);
        },

        function encodePartyToJWT(party, then) {
          encode({ id: idOf(party) }, function afterEncode(error, jwtToken) {
            if (error) {
              then(error);
            } else {
              then(null, {
                party: _.merge(party.toJSON()),
                token: jwtToken,
              });
            }
          });
        },
      ],
      function done(error, result) {
        // fail to authenticate party
        // return error message
        if (error) {
          // Set forbidden status code
          normalizeError({ status: 403 });
          next(error);
        }

        // party authenticated successfully
        // token generated successfully
        else {
          response.ok({
            success: true,
            party: result.party,
            token: result.token,
          });
        }
      }
    );
  }
});

/* expose authentication router */
export default router;