Sharkey/src/server/api/call.ts

67 lines
1.4 KiB
TypeScript
Raw Normal View History

2018-12-25 12:02:37 +01:00
import limiter from './limiter';
2018-08-21 21:53:02 +02:00
import { IUser } from '../../models/user';
import { IApp } from '../../models/app';
2018-07-15 20:43:36 +02:00
import endpoints from './endpoints';
2019-01-23 11:33:29 +01:00
export default async (endpoint: string, user: IUser, app: IApp, data: any, file?: any) => {
const isSecure = user != null && app == null;
2018-07-15 20:43:36 +02:00
const ep = endpoints.find(e => e.name === endpoint);
if (ep == null) {
2019-01-23 11:33:29 +01:00
throw 'ENDPOINT_NOT_FOUND';
}
2018-07-15 20:25:35 +02:00
if (ep.meta.secure && !isSecure) {
2019-01-23 11:33:29 +01:00
throw 'ACCESS_DENIED';
}
2018-07-15 20:25:35 +02:00
if (ep.meta.requireCredential && user == null) {
2019-01-23 11:33:29 +01:00
throw 'CREDENTIAL_REQUIRED';
}
2018-07-15 20:25:35 +02:00
if (ep.meta.requireCredential && user.isSuspended) {
2019-01-23 11:33:29 +01:00
throw 'YOUR_ACCOUNT_HAS_BEEN_SUSPENDED';
}
2018-08-20 18:03:58 +02:00
if (ep.meta.requireAdmin && !user.isAdmin) {
2019-01-23 11:33:29 +01:00
throw 'YOU_ARE_NOT_ADMIN';
2018-08-13 18:05:58 +02:00
}
2018-11-14 20:15:42 +01:00
if (ep.meta.requireModerator && !user.isAdmin && !user.isModerator) {
2019-01-23 11:33:29 +01:00
throw 'YOU_ARE_NOT_MODERATOR';
2018-11-14 20:15:42 +01:00
}
2018-09-05 23:06:22 +02:00
if (app && ep.meta.kind && !app.permission.some(p => p === ep.meta.kind)) {
2019-01-23 11:33:29 +01:00
throw 'PERMISSION_DENIED';
}
2018-07-15 20:25:35 +02:00
if (ep.meta.requireCredential && ep.meta.limit) {
try {
2018-12-25 12:02:37 +01:00
await limiter(ep, user); // Rate limit
} catch (e) {
// drop request if limit exceeded
2019-01-23 11:33:29 +01:00
throw 'RATE_LIMIT_EXCEEDED';
}
}
let res;
// API invoking
try {
2018-11-02 05:47:44 +01:00
res = await ep.exec(data, user, app, file);
} catch (e) {
if (e && e.name == 'INVALID_PARAM') {
2019-01-23 11:33:29 +01:00
throw {
2018-10-26 07:38:34 +02:00
code: e.name,
param: e.param,
reason: e.message
2019-01-23 11:33:29 +01:00
};
2018-10-26 07:38:34 +02:00
} else {
2019-01-23 11:33:29 +01:00
throw e;
2018-10-26 07:38:34 +02:00
}
}
2019-01-23 11:33:29 +01:00
return res;
};