137 lines
3.4 KiB
JavaScript
137 lines
3.4 KiB
JavaScript
import Router from 'koa-router';
|
|
import httpErrors from 'http-errors';
|
|
import fetch from 'isomorphic-fetch';
|
|
import querystring from 'querystring';
|
|
|
|
import { presentUser, presentTeam } from '../presenters';
|
|
import { User, Team } from '../models';
|
|
|
|
const router = new Router();
|
|
|
|
router.post('auth.signup', async (ctx) => {
|
|
const { username, name, email, password } = ctx.request.body;
|
|
|
|
ctx.assertPresent(username, 'name is required');
|
|
ctx.assertPresent(name, 'name is required');
|
|
ctx.assertPresent(email, 'email is required');
|
|
ctx.assertEmail(email, 'email is invalid');
|
|
ctx.assertPresent(password, 'password is required');
|
|
|
|
if (await User.findOne({ where: { email } })) {
|
|
throw httpErrors.BadRequest('User already exists with this email');
|
|
}
|
|
|
|
if (await User.findOne({ where: { username } })) {
|
|
throw httpErrors.BadRequest('User already exists with this username');
|
|
}
|
|
|
|
const user = await User.create({
|
|
username,
|
|
name,
|
|
email,
|
|
password,
|
|
});
|
|
|
|
ctx.body = { data: {
|
|
user: await presentUser(ctx, user),
|
|
accessToken: user.getJwtToken(),
|
|
} };
|
|
});
|
|
|
|
router.post('auth.slack', async (ctx) => {
|
|
const { code } = ctx.body;
|
|
ctx.assertPresent(code, 'code is required');
|
|
|
|
const body = {
|
|
client_id: process.env.SLACK_KEY,
|
|
client_secret: process.env.SLACK_SECRET,
|
|
redirect_uri: `${process.env.URL}/auth/slack/`,
|
|
code,
|
|
};
|
|
|
|
let data;
|
|
try {
|
|
const response = await fetch(`https://slack.com/api/oauth.access?${querystring.stringify(body)}`);
|
|
data = await response.json();
|
|
} catch (e) {
|
|
throw httpErrors.BadRequest();
|
|
}
|
|
|
|
if (!data.ok) throw httpErrors.BadRequest(data.error);
|
|
|
|
// Temp to block
|
|
const allowedSlackIds = process.env.ALLOWED_SLACK_IDS.split(',');
|
|
if (!allowedSlackIds.includes(data.team.id)) throw httpErrors.BadRequest('Invalid Slack team');
|
|
|
|
// User
|
|
let user = await User.findOne({ where: { slackId: data.user.id } });
|
|
|
|
// Team
|
|
let team = await Team.findOne({ where: { slackId: data.team.id } });
|
|
const teamExisted = !!team;
|
|
if (!team) {
|
|
team = await Team.create({
|
|
name: data.team.name,
|
|
slackId: data.team.id,
|
|
slackData: data.team,
|
|
});
|
|
} else {
|
|
team.name = data.team.name;
|
|
team.slackData = data.team;
|
|
team = await team.save();
|
|
}
|
|
|
|
if (user) {
|
|
user.slackAccessToken = data.access_token;
|
|
user.slackData = data.user;
|
|
await user.save();
|
|
} else {
|
|
user = await User.create({
|
|
slackId: data.user.id,
|
|
username: data.user.name,
|
|
name: data.user.name,
|
|
email: data.user.email,
|
|
teamId: team.id,
|
|
slackData: data.user,
|
|
slackAccessToken: data.access_token,
|
|
});
|
|
}
|
|
|
|
if (!teamExisted) {
|
|
await team.createFirstAtlas(user.id);
|
|
}
|
|
|
|
ctx.body = { data: {
|
|
user: await presentUser(ctx, user),
|
|
team: await presentTeam(ctx, team),
|
|
accessToken: user.getJwtToken(),
|
|
} };
|
|
});
|
|
|
|
router.post('auth.slackCommands', async (ctx) => {
|
|
const { code } = ctx.body;
|
|
ctx.assertPresent(code, 'code is required');
|
|
|
|
const body = {
|
|
client_id: process.env.SLACK_KEY,
|
|
client_secret: process.env.SLACK_SECRET,
|
|
redirect_uri: `${process.env.URL}/auth/slack/commands`,
|
|
code,
|
|
};
|
|
|
|
let data;
|
|
try {
|
|
const response = await fetch(`https://slack.com/api/oauth.access?${querystring.stringify(body)}`);
|
|
data = await response.json();
|
|
} catch (e) {
|
|
throw httpErrors.BadRequest();
|
|
}
|
|
|
|
if (!data.ok) throw httpErrors.BadRequest(data.error);
|
|
|
|
ctx.body = { success: true };
|
|
});
|
|
|
|
|
|
export default router;
|