P42/P42_API
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

switched to imports, debugged sessions

Browse Source
This commit is contained in:
STEINNI
2025-09-03 20:49:15 +00:00
parent f90a1f5065
commit 4cb56c8cbd
6 changed files with 225 additions and 184 deletions
Download Patch File Download Diff File Expand all files Collapse all files
p42ApiEndpoints.js
+58 -145
View File
@@ -1,29 +1,21 @@
const mysql = require('mysql2/promise');
class P42ApiEndpoints{
constructor(app) {
this.db = null
import { Utils } from './helpers/utils.js'
export class P42ApiEndpoints{
constructor(app, db) {
this.db = db
this.app = app
this.userinfos = null
this.utils = new Utils()
this.registerPaths()
setInterval(() => {
this.db.query('SELECT 1');
}, 5000);
}
registerPaths(){
this.app.get('/hw', this.hw.bind(this))
}
async connectDB(mysqlCreds) {
this.db = await mysql.createConnection({
host: mysqlCreds.host,
port: mysqlCreds.port,
socketPath: mysqlCreds.socketPath,
database: mysqlCreds.database,
user: mysqlCreds.user,
password: mysqlCreds.password
});
setInterval(() => {
this.db.query('SELECT 1');
}, 5000);
this.app.get('/checkauth', this.checkauth.bind(this))
this.app.post('/login', this.login.bind(this))
}
err(req, res, msg, debug, status=500) {
@@ -56,55 +48,7 @@ class P42ApiEndpoints{
}
getSession(req, res) {
this.userinfos = {
"at_hash": "fhaNqJbWprmseino7D7vQhdEIWzlss6a08DvgY_Y7ik",
"sub": "steinic",
"amr": [
"pwd"
],
"iss": "https://ecas.acceptance.ec.europa.eu/cas/oauth2",
// Impersonate here
"preferred_username": "fallimi", //"steinic",
"locale": "en",
"https://ecas.ec.europa.eu/claims/domain": "eu.europa.ec",
"acr": "https://ecas.ec.europa.eu/loa/basic",
"auth_time": 1686415198,
"nickname": "steinic",
"https://ecas.ec.europa.eu/claims/teleworking_priority": false,
"exp": 1686415501,
"iat": 1686415201,
"email": "Nicolas.STEIN@ext.ec.europa.eu",
"https://ecas.ec.europa.eu/claims/employee_number": "90218167",
"email_verified": true,
"https://ecas.ec.europa.eu/claims/department_number": "EISMEA.C.02.2",
"https://ecas.ec.europa.eu/claims/employee_type": "x",
"given_name": "Nicolas",
"https://ecas.ec.europa.eu/claims/org_id": "232619",
"aud": "zjDAOobFg2JJzMxhzfoTyPg1BrOzPzG4EMUJOoqUbF1mYTkwddaZwL4o9YzzK3unIZAEunze7fQAfOoOgXnq9Xhr-NaAc23CqASenqizgfAeUl6",
"c_hash": "8pzkBbmGEZW48yLZYoEoR_H3QC0GIeWYxlzUCfRMElg",
"https://ecas.ec.europa.eu/claims/sso": false,
"https://ecas.ec.europa.eu/claims/authentication_factors": [
{
"username": "steinic"
}
],
"name": "Nicolas STEIN",
"https://ecas.ec.europa.eu/claims/uid": "steinic",
"family_name": "STEIN",
"userRoles": [
"BP_PO",
"APPLICANT",
]
}
return(true)
if((!req.session.userinfo) || (!req.session.userinfo.isAuthenticated)) {
this.err(req, res, 'Not authenticated !')
this.userinfos = null
return(false)
} else {
@@ -125,87 +69,56 @@ class P42ApiEndpoints{
return(false)
}
CheckMapOutput(data, remap, transformers) {
if(!data) return(null)
let rows = Array.isArray(data) ? data : [data]
let filteredRows = []
for(let row of rows) {
let filteredRow = {}
Object.keys(row).forEach((key, index) => {
if(Object.keys(remap).indexOf(key)>-1) {
if(transformers && transformers[key] && (typeof(transformers[key])=='function')) {
filteredRow[remap[key]] = transformers[key](row[key])
} else filteredRow[remap[key]] = row[key]
}
});
filteredRows.push(filteredRow)
}
if(Array.isArray(data)) return(filteredRows)
else return(filteredRows[0])
}
CheckMapInput(dataIn, remap, checks) {
let dataOut = {}
for(let field in checks) {
let dbName = checks[field](dataIn[field])
if(dbName && (dataIn[field]!=null)) dataOut[remap[field]] = dataIn[field]
}
return(dataOut)
}
async isMemberOf(pic) {
let [rows, fields] = await this.db.query(`
SELECT count(*) as cnt FROM organisation_members
WHERE (om_pic=?)
AND (om_uid=?)
`,
[pic, this.userinfos.preferred_username]);
return(rows[0]['cnt']>0)
}
async isOrgAdminOf(pic) {
let [rows, fields] = await this.db.query(`
SELECT count(*) as cnt FROM organisation_members
WHERE (om_pic=?)
AND (om_uid=?)
AND om_administrator=1
`,
[pic, this.userinfos.preferred_username]);
return(rows[0]['cnt']>0)
}
async isPropAdminOf(pid) {
let [rows, fields] = await this.db.query(`
SELECT count(*) as cnt FROM shortprops_members
WHERE (spm_prop_id=?)
AND (spm_uid=?)
AND spm_administrator=1
`,
[pid, this.userinfos.preferred_username]);
return(rows[0]['cnt']>0)
}
async isPropMemberOf(pid) {
let [rows, fields] = await this.db.query(`
SELECT count(*) as cnt FROM shortprops_members
WHERE (spm_prop_id=?)
AND (spm_uid=?)
`,
[pid, this.userinfos.preferred_username]);
return(rows[0]['cnt']>0)
}
async merge(table, where, whereVals, data) {
let [rows, field] = await this.db.query(`SELECT * FROM ${table} WHERE ${where}`, whereVals)
if(rows.length==0) return(data)
else return(Object.assign(rows[0], data))
}
///////////////////////////API starts here.../////////////////////////////
async hw(req, res) {
this.ok(req, res, {hello:'world'})
}
async checkauth(req, res) {
if(this.getSession(req, res)) {
this.ok(req, res, {
authenticated: true,
userInfos: this.userinfos,
})
} else {
this.ok(req, res, {
authenticated: false,
userInfos: null,
})
}
}
async login(req, res) {
console.log('====>req.json', req.body)
let [isValid, payload, errors] = this.utils.validateMapObject(req.body, {
username: ((val, obj) => (typeof(val)=='string') && (val.length>3) ),
passwd: ((val, obj) => (typeof(val)=='string') && (val.length>7) ),
},{
'username': 'username',
'passwd': 'passwd',
})
if((!isValid)){
this.err(req, res, `Invalid request', 'Invalid login payload:: ${errors}`, 401)
return
}
if((payload.username=='toto') && (payload.passwd=='azertyuiop')){
req.session.userinfo = {
username: payload.username,
roles: ['admin']
}
this.ok(req, res, {
authenticated: true,
userInfos: req.session.userinfo,
})
} else {
this.ok(req, res, {
authenticated: false,
userInfos: null,
})
}
}
}
module.exports = P42ApiEndpoints;