screwdriver-api/plugins/tokens/update.js

API server for the Screwdriver.cd service

'use strict';

const boom = require('@hapi/boom');
const schema = require('screwdriver-data-schema');
const joi = require('joi');
const idSchema = schema.models.token.base.extract('id');

module.exports = () => ({
    method: 'PUT',
    path: '/tokens/{id}',
    options: {
        description: 'Update a token',
        notes: 'Update a specific token',
        tags: ['api', 'tokens'],
        auth: {
            strategies: ['token'],
            scope: ['user', '!guest']
        },

        handler: async (request, h) => {
            const { tokenFactory } = request.server.app;
            const { userFactory } = request.server.app;
            const { username } = request.auth.credentials;
            const { scmContext } = request.auth.credentials;

            return Promise.all([tokenFactory.get(request.params.id), userFactory.get({ username, scmContext })])
                .then(([token, user]) => {
                    if (!token) {
                        throw boom.notFound('Token does not exist');
                    }

                    if (!user) {
                        throw boom.notFound('User does not exist');
                    }

                    if (token.userId !== user.id) {
                        throw boom.forbidden('User does not own token');
                    }

                    return user.tokens.then(tokens => {
                        // Make sure it won't cause a name conflict
                        const match = tokens && tokens.find(t => t.name === request.payload.name);

                        if (match && request.params.id !== match.id) {
                            throw boom.conflict(`Token with name ${match.name} already exists`);
                        }

                        Object.keys(request.payload).forEach(key => {
                            token[key] = request.payload[key];
                        });

                        return token.update().then(() => h.response(token.toJson()).code(200));
                    });
                })
                .catch(err => {
                    throw err;
                });
        },
        validate: {
            params: joi.object({
                id: idSchema
            }),
            payload: schema.models.token.update
        }
    }
});