agneta-platform/services/server/remotes/account/hasRoles.js

Agneta Platform - Integrate and customize business applications

/*   Copyright 2017 Agneta Network Applications, LLC.
 *
 *   Source file: services/server/remotes/account/hasRoles.js
 *
 *   Licensed under the Apache License, Version 2.0 (the "License");
 *   you may not use this file except in compliance with the License.
 *   You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 *   Unless required by applicable law or agreed to in writing, software
 *   distributed under the License is distributed on an "AS IS" BASIS,
 *   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *   See the License for the specific language governing permissions and
 *   limitations under the License.
 */
const _ = require('lodash');
const Promise = require('bluebird');

module.exports = function(Model, app) {

  var configRoles = app.get('roles');

  Model.hasRoles = function(roles, req) {

    roles = _.uniq(roles);

    return Promise.resolve()
      .then(function() {

        var role;

        for (role of roles) {
          if(!role){
            continue;
          }
          if (!configRoles[role]) {
            return {
              message: 'Role does not exist',
              role: role
            };
          }
        }

        if (!req.accessToken) {
          return {
            loggedOut: true,
            message: 'User not logged in'
          };
        }

        var has = [];

        for (role of roles) {
          if (req.accessToken.roles[role]) {
            has.push(role);
          }
        }

        if (!has.length) {
          return {
            message: 'User does not have a role that is required'
          };
        }

        return {
          message: 'Found roles for user',
          has: has
        };
      });

  };

  Model.remoteMethod(
    'hasRoles', {
      description: 'Check if a user has any of the requested roles.',
      accepts: [{
        arg: 'roles',
        type: 'array',
        required: true,
      }, {
        arg: 'req',
        type: 'object',
        'http': {
          source: 'req'
        }
      }],
      returns: {
        arg: 'result',
        type: 'object',
        root: true
      },
      http: {
        verb: 'post',
        path: '/has-roles'
      },
    }
  );

};