screwdriver-api/plugins/tokens/create.js

API server for the Screwdriver.cd service

'use strict';

const urlLib = require('url');
const boom = require('@hapi/boom');
const schema = require('screwdriver-data-schema');

module.exports = () => ({
    method: 'POST',
    path: '/tokens',
    options: {
        description: 'Create a new token',
        notes: 'Create a specific token',
        tags: ['api', 'tokens'],
        auth: {
            strategies: ['token'],
            scope: ['user', '!guest']
        },

        handler: async (request, h) => {
            const { tokenFactory } = request.server.app;
            const { userFactory } = request.server.app;
            const { username } = request.auth.credentials;
            const { scmContext } = request.auth.credentials;

            return (
                userFactory
                    .get({ username, scmContext })
                    .then(user => {
                        if (!user) {
                            throw boom.notFound(`User ${username} does not exist`);
                        }

                        return user.tokens.then(tokens => {
                            // Make sure the name is unique
                            const match = tokens && tokens.find(t => t.name === request.payload.name);

                            if (match) {
                                throw boom.conflict(`Token with name ${match.name} already exists`);
                            }

                            return tokenFactory.create({
                                name: request.payload.name,
                                description: request.payload.description,
                                userId: user.id
                            });
                        });
                    })
                    .then(token => {
                        const location = urlLib.format({
                            host: request.headers.host,
                            port: request.headers.port,
                            protocol: request.server.info.protocol,
                            pathname: `${request.path}/${token.id}`
                        });

                        return h.response(token.toJson()).header('Location', location).code(201);
                    })
                    // something broke, respond with error
                    .catch(err => {
                        throw err;
                    })
            );
        },
        validate: {
            payload: schema.models.token.create
        }
    }
});