openhim-core/lib/api/contactGroups.js

The OpenHIM core application that provides logging and routing of http requests

"use strict";

Object.defineProperty(exports, "__esModule", {
  value: true
});
exports.addContactGroup = addContactGroup;
exports.getContactGroup = getContactGroup;
exports.updateContactGroup = updateContactGroup;
exports.removeContactGroup = removeContactGroup;
exports.getContactGroups = getContactGroups;

var _winston = _interopRequireDefault(require("winston"));

var _contactGroups = require("../model/contactGroups");

var authorisation = _interopRequireWildcard(require("./authorisation"));

var _channels = require("../model/channels");

var utils = _interopRequireWildcard(require("../utils"));

function _getRequireWildcardCache() { if (typeof WeakMap !== "function") return null; var cache = new WeakMap(); _getRequireWildcardCache = function () { return cache; }; return cache; }

function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } if (obj === null || typeof obj !== "object" && typeof obj !== "function") { return { default: obj }; } var cache = _getRequireWildcardCache(); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj.default = obj; if (cache) { cache.set(obj, newObj); } return newObj; }

function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }

async function addContactGroup(ctx) {
  // Must be admin
  if (!authorisation.inGroup('admin', ctx.authenticated)) {
    utils.logAndSetResponse(ctx, 403, `User ${ctx.authenticated.email} is not an admin, API access to addContactGroup denied.`, 'info');
    return;
  }

  const contactGroupData = ctx.request.body;

  try {
    const contactGroup = new _contactGroups.ContactGroupModelAPI(contactGroupData);
    await contactGroup.save();
    utils.logAndSetResponse(ctx, 201, 'Contact Group successfully created', 'info');
  } catch (err) {
    utils.logAndSetResponse(ctx, 400, `Could not add a contact group via the API: ${err}`, 'error');
  }
}

async function getContactGroup(ctx, contactGroupId) {
  // Must be admin
  if (!authorisation.inGroup('admin', ctx.authenticated)) {
    utils.logAndSetResponse(ctx, 403, `User ${ctx.authenticated.email} is not an admin, API access to getContactGroup denied.`, 'info');
    return;
  }

  contactGroupId = unescape(contactGroupId);

  try {
    const result = await _contactGroups.ContactGroupModelAPI.findById(contactGroupId).exec();

    if (result === null) {
      ctx.body = `Contact Group with id '${contactGroupId}' could not be found.`;
      ctx.status = 404;
    } else {
      ctx.body = result;
    }
  } catch (err) {
    utils.logAndSetResponse(ctx, 500, `Could not find Contact Group by id '${contactGroupId}' via the API: ${err}`, 'error');
  }
}

async function updateContactGroup(ctx, contactGroupId) {
  // Must be admin
  if (!authorisation.inGroup('admin', ctx.authenticated)) {
    utils.logAndSetResponse(ctx, 403, `User ${ctx.authenticated.email} is not an admin, API access to updateContactGroup denied.`, 'info');
    return;
  }

  contactGroupId = unescape(contactGroupId);
  const contactGroupData = ctx.request.body; // Ignore _id if it exists, a user shouldnt be able to update the internal id

  if (contactGroupData._id) {
    delete contactGroupData._id;
  }

  try {
    await _contactGroups.ContactGroupModelAPI.findByIdAndUpdate(contactGroupId, contactGroupData).exec();
    ctx.body = 'Successfully updated contact group.';

    _winston.default.info(`User ${ctx.authenticated.email} updated contact group with id ${contactGroupId}`);
  } catch (err) {
    utils.logAndSetResponse(ctx, 500, `Could not update Contact Group by id ${contactGroupId} via the API: ${err}`, 'error');
  }
}

async function removeContactGroup(ctx, contactGroupId) {
  // Must be admin
  if (!authorisation.inGroup('admin', ctx.authenticated)) {
    utils.logAndSetResponse(ctx, 403, `User ${ctx.authenticated.email} is not an admin, API access to removeContactGroup denied.`, 'info');
    return;
  }

  contactGroupId = unescape(contactGroupId);

  try {
    const linkedAlerts = await _channels.ChannelModelAPI.find({
      alerts: {
        $elemMatch: {
          groups: {
            $in: [contactGroupId]
          }
        }
      }
    }).exec();

    if (linkedAlerts.length > 0) {
      ctx.status = 409;
      ctx.body = linkedAlerts;
    } else {
      await _contactGroups.ContactGroupModelAPI.findByIdAndRemove(contactGroupId).exec();
      ctx.body = `Successfully removed contact group with ID '${contactGroupId}'`;

      _winston.default.info(`User ${ctx.authenticated.email} removed contact group with id ${contactGroupId}`);
    }
  } catch (err) {
    utils.logAndSetResponse(ctx, 500, `Could not remove Contact Group by id ${contactGroupId} via the API: ${err}`, 'error');
  }
}

async function getContactGroups(ctx) {
  // Must be admin
  if (!authorisation.inGroup('admin', ctx.authenticated)) {
    utils.logAndSetResponse(ctx, 403, `User ${ctx.authenticated.email} is not an admin, API access to getContactGroups denied.`, 'info');
    return;
  }

  try {
    ctx.body = await _contactGroups.ContactGroupModelAPI.find().exec();
  } catch (err) {
    utils.logAndSetResponse(ctx, 500, `Could not fetch all Contact Group via the API: ${err}`, 'error');
  }
}
//# sourceMappingURL=contactGroups.js.map