teams/teams.js

The team application allows teams to be created and maintained. When teams are created or modified, the teams application will generate events.

'use strict';
var http = require('http');
var url = require('url');
var lib = require('http-helper-functions');
var uuid = require('node-uuid');
var db = require('./teams-db.js');

var TEAMS = '/teams/';

function verifyTeam(req, team, user) {
  var rslt = lib.setStandardCreationProperties(req, team, user);
  if (team.isA == 'Team') {
    if (Array.isArray(team.members)) {
      return null;
    } else {
      return 'team must have an array of members';
    }
  } else { 
    return 'invalid JSON: "isA" property not set to "Team" ' + JSON.stringify(team);
  }
}

function createTeam(req, res, team) {
  var user = lib.getUser(req);
  if (user == null) {
    lib.unauthorized(req, res);
  } else { 
    var err = verifyTeam(req, team, user);
    if (err !== null) {
      lib.badRequest(res, err);
    } else {
      lib.internalizeURLs(team, req.headers.host); 
      var permissions = team.permissions;
      if (permissions !== undefined) {
        delete team.permissions;
      }
      var id = uuid();
      var selfURL = makeSelfURL(req, id);
      lib.createPermissonsFor(req, res, selfURL, permissions, function(permissionsURL, permissions){
        // Create permissions first. If we fail after creating the permissions resource but before creating the main resource, 
        // there will be a useless but harmless permissions document.
        // If we do things the other way around, a team without matching permissions could cause problems.
        db.createTeamThen(req, res, id, selfURL, team, function(etag) {
          team._self = selfURL; 
          lib.created(req, res, team, team._self, etag);
        });
      });
    }
  }
}

function makeSelfURL(req, key) {
  return '//' + req.headers.host + TEAMS + key;
}

function getTeam(req, res, id) {
  lib.ifAllowedThen(req, res, '_resource', 'read', function() {
    db.withTeamDo(req, res, id, function(team , etag) {
      team._self = makeSelfURL(req, id);
      team._permissions = `protocol://authority/permissions?${team._self}`;
      team._permissionsHeirs = `protocol://authority/permissions-heirs?${team._self}`;
      lib.externalizeURLs(team, req.headers.host);
      lib.found(req, res, team, etag);
    });
  });
}

function ifAllowedThen(req, res, subject, property, action, callback) {
  lib.ifAllowedThen(req, res, subject, property, action, function() {
    db.withTeamDo(req, res, subject, function(team, etag) {
      callback(permissions, etag);
    });
  });
}

function deleteTeam(req, res, id) {
  lib.ifAllowedThen(req, res, 'delete', function() {
    db.deleteTeamThen(req, res, id, function (team, etag) {
      lib.found(req, res, team, team.etag);
    });
  });
}

function updateTeam(req, res, id, patch) {
  lib.ifAllowedThen(req, res, 'update', function(team, etag) {
    var patchedTeam = lib.mergePatch(team, patch);
    db.updateTeamThen(req, res, id, team, patchedTeam, etag, function (etag) {
      patchedPermissions._self = selfURL(id, req); 
      lib.found(req, res, team, etag);
    });
  });
}

function getTeamsForUser(req, res, user) {
  var requestingUser = lib.getUser(req);
  user = lib.internalizeURL(user, req.headers.host);
  if (user == requestingUser) {
    db.withTeamsForUserDo(req, res, user, function (teamIDs) {
      var rslt = {
        _self: `protocol://authority${req.url}`,
        contents: teamIDs.map(id => `//${req.headers.host}${TEAMS}${id}`)
      }
      lib.externalizeURLs(rslt);
      lib.found(req, res, rslt);
    });
  } else {
    lib.forbidden(req, res)
  }
}

function requestHandler(req, res) {
  if (req.url == '/teams') {
    if (req.method == 'POST') {
      lib.getServerPostBody(req, res, createTeam);
    } else { 
      lib.methodNotAllowed(req, res, ['POST']);
    }
  } else {
    var req_url = url.parse(req.url);
    if (req_url.pathname.lastIndexOf(TEAMS, 0) > -1) {
      var id = req_url.pathname.substring(TEAMS.length);
      if (req.method == 'GET') {
        getTeam(req, res, id);
      } else if (req.method == 'DELETE') { 
        deleteTeam(req, res, id);
      } else if (req.method == 'PATCH') { 
        lib.getPostBody(req, res, function (req, res, jso) {
          updateTeam(req, res, id, jso)
        });
      } else {
        lib.methodNotAllowed(req, res, ['GET', 'DELETE', 'PATCH']);
      }
    } else if (req_url.pathname == '/teams' && req_url.search !== null) {
      getTeamsForUser(req, res, req_url.search.substring(1));
    } else {
      lib.notFound(req, res);
    }
  }
}
db.init(function(){
  var port = process.env.PORT;
  http.createServer(function(req, res){
    try {
      requestHandler(req, res);
    }
    catch (err) {
      console.log(err.stack || err);
      lib.internalError(res, err.stack || err);
    }
  }).listen(port, function() {
    console.log(`server is listening on ${port}`);
  });
});