express-gateway/lib/rest/routes/credentials.js

A microservices API gateway built on top of ExpressJS

const express = require('express');
const services = require('../../services');
const findConsumer = require('../utils/findConsumer');

module.exports = function () {
  const router = express.Router();

  router.get('/', function (req, res, next) {
    Promise.all([
      services.user.findAll(),
      services.application.findAll()
    ]).then(([{ users }, { apps }]) =>
      Promise.all(
        users.concat(apps)
          .map(consumer => services.credential.getCredentials(consumer.id).then(credentials =>
            credentials.map(c => Object.assign({ consumerId: consumer.id }, c)))
          )
      )
    ).then(credentials => res.json({ credentials: credentials.reduce((acc, element) => acc.concat(element), []) }))
      .catch(err => res.status(500).send(err.message));
  });

  router.post('/', function (req, res, next) {
    findConsumer(req.body.consumerId)
      .then(consumer => {
        if (!consumer) {
          return res.status(422).send(`No consumer found with id: ${req.body.consumerId}`);
        }

        return services.credential
          .insertCredential(consumer.id, req.body.type, req.body.credential)
          .then((data) => res.json(data));
      })
      .catch(next);
  });

  router.get('/:type/:id', function (req, res, next) {
    const { id, type } = req.params;
    services.credential.getCredential(id, type)
      .then(cred => res.json(cred))
      .catch(next);
  });

  router.put('/:type/:id/status', function (req, res, next) {
    const { id, type } = req.params;
    const status = req.body.status;

    services.credential.getCredential(id, type)
      .then(cred => {
        if (!cred) {
          return res.status(404).send(`No credential found with id: ${id}`);
        } else {
          if (cred.isActive === status) {
            return res.json({ status: cred.isActive ? 'Active' : 'Inactive' });
          }
        }
        if (status === true) {
          return services.credential
            .activateCredential(id, type)
            .then(status => res.json({ status: 'Activated' }));
        } else {
          return services.credential
            .deactivateCredential(id, type)
            .then(status => res.json({ status: 'Deactivated' }));
        }
      }).catch(next);
  });

  router.put('/:type/:id/scopes/:scope', function (req, res, next) {
    const { id, type, scope } = req.params;

    services.credential
      .addScopesToCredential(id, type, [scope])
      .then(success => res.status(204).send())
      .catch(next);
  });

  router.delete('/:type/:id/scopes/:scope', function (req, res, next) {
    const { id, type, scope } = req.params;
    services.credential.removeScopesFromCredential(id, type, [scope])
      .then(success => res.status(204).send())
      .catch(next);
  });

  router.put('/:type/:id/scopes', function (req, res, next) {
    // set entire scopes array for cred
    const { id, type } = req.params;
    services.credential.setScopesForCredential(id, type, req.body.scopes)
      .then(success => res.status(204).send())
      .catch(next);
  });

  router.get('/:consumerId', function (req, res, next) {
    findConsumer(req.params.consumerId)
      .then((consumer) => {
        if (!consumer) {
          return res.status(404).json(new Error('Consumer Not Found: id:' + req.body.consumerId));
        }

        return services.credential
          .getCredentials(consumer.id)
          .then(credentials => res.json({ credentials }));
      }).catch(next);
  });

  return router;
};