freedom-accounts-util/src/server.js

Utility helper for OAuth2.0 calls to Freedom! Accounts

const moment = require('moment');
const cudl = require('cuddle');
const _ = require('lodash');

const config = require('./config');
const cache = require('./cache');

module.exports = {
    verify_scopes
};

function verify_scopes (required_scopes) {
    return (req, res, next) => {
        return check_scopes(req, required_scopes)
            .then(result => {
                req.client_id = result.client_id;
                next();
            })
            .catch(next);
    };
}

function check_scopes (request, required_scopes) {
    const access_token = request.headers['access-token'];

    return check_input(access_token)
        .then(get_token_info)
        .then(result => ({access_token, result, required_scopes}))
        .then(check_token_validity);
}

function check_input (access_token) {
    return new Promise((resolve, reject) => {
        if (!access_token) {
            return reject(new Error('Access token is required.'));
        }

        resolve(access_token);
    });
}

function get_token_info (access_token) {
    const cached_token_info_result = cache.get('server', access_token);

    if (_.has(cached_token_info_result, 'date_expiration')) {
        const date_expiration = moment.utc(cached_token_info_result.date_expiration, 'x');
        const token_is_expired = date_expiration.isSameOrBefore(moment());

        if (!token_is_expired) {
            return Promise.resolve(cached_token_info_result);
        }

        cache.forget('server', access_token);
    }

    return cudl.get
        .to(config.base_url + config.path + '/oauth/tokeninfo')
        .send({access_token: access_token})
        .max_retry(config.retry_count)
        .promise()
        .then(result => {
            if (result.scopes) {
                cache.set('server', access_token, result, config.server_expiry);
            }

            return result;
        })
        .catch(error => Promise.reject(
            _.has(error, 'response.message')
                ? error.response
                : error
        )
        );

}

function check_token_validity ({result, access_token, required_scopes}) {
    return new Promise((resolve, reject) => {
        if (!_.has(result, 'scopes')) {
            cache.forget('server', access_token);

            return reject(new Error('Something went wrong, server did not return scopes, please try again.'));
        }

        const result_scopes = result.scopes.split(' ');
        const has_valid_scopes = _.intersection(result_scopes, required_scopes).length;

        if (has_valid_scopes) {
            return resolve(result);
        }

        reject(new Error(
            `You need at least one of the ff. scopes to access this endpoint: ${required_scopes.join(', ')}`
        ));
    });
}