firt

nodejs/utils/object_validate.js

@@ -0,0 +1,80 @@
+'use strict';
+
+const process_type = {
+	number: function(key, value){
+		if(key.min && value < key.min) return `is to small, min ${key.min}.`
+		if(key.max && value > key.max) return `is to large, max ${key.max}.`
+	},
+	string: function(key, value){
+		if(key.min && value.length < key.min) return `is too short, min ${key.min}.`
+		if(key.max && value.length > key.max) return `is too short, max ${key.max}.`
+	}
+}
+
+function returnOrCall(value){
+	return typeof(value) === 'function' ? value() : value;
+} 
+
+function processKeys(map, data, partial){
+	let errors = [];
+	let out = {};
+
+	for(let key of Object.keys(map)){
+		if(!map[key].always && partial && !data.hasOwnProperty(key)) continue;
+
+		if(!partial && map[key].isRequired && !data.hasOwnProperty(key)){
+			errors.push({key, message:`${key} is required.`});
+			continue;
+		} 
+
+		if(data.hasOwnProperty(key) && map[key].type && typeof(data[key]) !== map[key].type){
+			errors.push({key, message:`${key} is not ${map[key].type} type.`});
+			continue;
+		}
+
+		out[key] = data.hasOwnProperty(key) && data[key] !== undefined ? data[key] : returnOrCall(map[key].default);
+
+		if(data.hasOwnProperty(key) && process_type[map[key].type]){
+			let typeError = process_type[map[key].type](map[key], data[key]);
+			if(typeError){
+				errors.push({key, message:`${key} ${typeError}`});
+				
+				continue;
+			}
+		}
+	}
+
+	if(errors.length !== 0){
+		throw new ObjectValidateError(errors);
+		return {__errors__: errors};
+	}
+
+	return out;
+}
+
+function parseFromString(map, data){
+	let types = {
+		boolean: function(value){ return value === 'false' ? false : true },
+		number: Number,
+		string: String,
+	};
+
+	for(let key of Object.keys(data)){
+		if(map[key] && map[key].type){
+			data[key] = types[map[key].type](data[key]);
+		}
+	}
+
+	return data;
+}
+
+function ObjectValidateError(message) {
+	this.name = 'ObjectValidateError';
+	this.message = (message || {});
+	this.status = 422;
+}
+
+ObjectValidateError.prototype = Error.prototype;
+
+
+module.exports = {processKeys, parseFromString, ObjectValidateError};

nodejs/utils/permission.js

@@ -0,0 +1,34 @@
+'use static';
+
+const {Group} = require('../models/group_ldap');
+
+let byGroup = async function(user, groups, ownerOf){
+	for(let group of groups){
+		try{
+			console.log('checking group', group, 'for access', groups, ownerOf)
+			group = await Group.get(group);
+			if(group.member.includes(user.dn)) return true
+		}catch(error){
+			console.error('Error byGroup', groups, ownerOf);
+		}
+	}
+
+	for(let group of ownerOf || []){
+		try{
+			console.log('checking group owners', group, 'for access', groups, ownerOf)
+
+			group = await Group.get(group);
+			if(group.owner.includes(user.dn)) return true
+		}catch(error){
+			console.error('Error byGroup', groups, ownerOf);
+		}
+	}
+
+	let error = new Error('Insufficient Permission');
+	error.name = 'Insufficient Permission';
+	error.message = `You do not have permission to perform this action.`;
+	error.status = 401;
+	throw error;
+}
+
+module.exports = {byGroup};

nodejs/utils/redis.js

@@ -0,0 +1,27 @@
+'use strict';
+
+const {createClient} = require('redis');
+const {promisify} = require('util');
+
+const config = {
+	prefix: 'sso_'
+}
+
+function client() {
+	return createClient(config);
+}
+
+const _client = client();
+
+module.exports = {
+	client: client,
+	HGET: promisify(_client.HGET).bind(_client),
+	HDEL: promisify(_client.HDEL).bind(_client),
+	SADD: promisify(_client.SADD).bind(_client),
+	SREM: promisify(_client.SREM).bind(_client),
+	DEL: promisify(_client.DEL).bind(_client),
+	HSET: promisify(_client.HSET).bind(_client),
+	HGETALL: promisify(_client.HGETALL).bind(_client),
+	SMEMBERS: promisify(_client.SMEMBERS).bind(_client),
+	RENAME: promisify(_client.RENAME).bind(_client),
+};

nodejs/utils/redis_model.js

@@ -0,0 +1,190 @@
+'use strict';
+
+const client = require('../utils/redis');
+const objValidate = require('../utils/object_validate');
+
+
+let table = {};
+
+table.get = async function(data){
+	try{
+		// if the data argument was passed as the index key value, make a data
+		// object and add the index key to it.
+		if(typeof data !== 'object'){
+			let key = data;
+			data = {};
+			data[this._key] = key;
+		}
+
+		// Get all the hash keys for the passed index key.
+		let res = await client.HGETALL(`${this._name}_${data[this._key]}`);
+
+		// If the redis query resolved to something, prepare the data.
+		if(res){
+
+			// Redis always returns strings, use the keyMap schema to turn them
+			// back to native values.
+			res = objValidate.parseFromString(this._keyMap, res);
+
+			// Make sure the index key in in the returned object.
+			res[this._key] = data[this._key];
+
+			// Create a instance for this redis entry.
+			var entry = Object.create(this);
+
+			// Insert the redis response into the instance.
+			Object.assign(entry, res);
+
+			// Return the instance to the caller.
+			return entry;
+		}
+
+	}catch(error){
+		throw error
+	}
+
+	let error = new Error('EntryNotFound');
+	error.name = 'EntryNotFound';
+	error.message = `${this._name}:${data[this._key]} does not exists`;
+	error.status = 404;
+	throw error;
+};
+
+table.exists = async function(data){
+	// Return true or false if the requested entry exists ignoring error's.
+	try{
+		await this.get(data);
+
+		return true
+	}catch(error){
+		return false;
+	}
+};
+
+table.list = async function(){
+	// return a list of all the index keys for this table.
+	try{
+
+		return await client.SMEMBERS(this._name);
+
+	}catch(error){
+		throw error;
+	}
+};
+
+table.listDetail = async function(){
+	// Return a list of the entries as instances.
+	let out = [];
+
+	for(let entry of await this.list()){
+		out.push(await this.get(entry));
+	}
+
+	return out
+};
+
+table.add = async function(data){
+	// Add a entry to this redis table.
+	try{
+
+		// Validate the passed data by the keyMap schema.
+
+		data = objValidate.processKeys(this._keyMap, data);
+
+		// Do not allow the caller to overwrite an existing index key,
+		if(data[this._key] && await this.exists(data)){
+			let error = new Error('EntryNameUsed');
+			error.name = 'EntryNameUsed';
+			error.message = `${this._name}:${data[this._key]} already exists`;
+			error.status = 409;
+
+			throw error;
+		}
+
+		// Add the key to the members for this redis table
+		await client.SADD(this._name, data[this._key]);
+
+		// Add the values for this entry.
+		for(let key of Object.keys(data)){
+			await client.HSET(`${this._name}_${data[this._key]}`, key, data[key]);
+		}
+
+		// return the created redis entry as entry instance.
+		return await this.get(data[this._key]);
+	} catch(error){
+		throw error;
+	}
+};
+
+table.update = async function(data, key){
+	// Update an existing entry.
+	try{
+		// If an index key is passed, we assume is passed, assume we are not
+		// part of an entry instance. Make one and recall this from from a entry
+		// instance,
+		if(key) return await (await this.get(key)).update(data);
+
+		// Check to see if entry name changed.
+		if(data[this._key] && data[this._key] !== this[this._key]){
+
+			// Merge the current data into with the updated data 
+			let newData = Object.assign({}, this, data);
+
+			// Remove the updated failed so it doesnt keep it
+			delete newData.updated;
+
+			// Create a new record for the updated entry. If that succeeds,
+			// delete the old recored
+			if(await this.add(newData)) await this.remove();
+
+		}else{
+			// Update what ever fields that where passed.
+
+			// Validate the passed data, ignoring required fields.
+			data = objValidate.processKeys(this._keyMap, data, true);
+			
+			// Loop over the data fields and apply them to redis
+			for(let key of Object.keys(data)){
+				this[key] = data[key];
+				await client.HSET(`${this._name}_${this[this._key]}`, key, data[key]);
+			}
+		}
+
+		return this;
+	
+	} catch(error){
+		// Pass any error to the calling function
+		throw error;
+	}
+};
+
+table.remove = async function(data){
+	// Remove an entry from this table.
+
+	data = data || this;
+	try{
+		// Remove the index key from the tables members list.
+		await client.SREM(this._name, data[this._key]);
+
+		// Remove the entries hash values.
+		let count = await client.DEL(`${this._name}_${data[this._key]}`);
+
+		// Return the number of removed values to the caller.
+		return count;
+
+	} catch(error) {
+		throw error;
+	}
+};
+
+function Table(data){
+	// Create a table instance.
+	let instance = Object.create(data);
+	Object.assign(instance, table);
+
+	// Return the table instance to the caller.
+	return Object.create(instance);
+
+};
+
+module.exports = Table;