Sharkey/src/server/api/call.ts

71 lines
1.5 KiB
TypeScript
Raw Normal View History

2018-07-19 05:45:55 +03:00
import { performance } from 'perf_hooks';
import limitter from './limitter';
2018-08-21 22:53:02 +03:00
import { IUser } from '../../models/user';
import { IApp } from '../../models/app';
2018-07-15 21:43:36 +03:00
import endpoints from './endpoints';
2018-07-15 21:43:36 +03:00
export default (endpoint: string, user: IUser, app: IApp, data: any, file?: any) => new Promise<any>(async (ok, rej) => {
const isSecure = user != null && app == null;
2018-07-15 21:43:36 +03:00
const ep = endpoints.find(e => e.name === endpoint);
if (ep == null) {
return rej('ENDPOINT_NOT_FOUND');
}
2018-07-15 21:25:35 +03:00
if (ep.meta.secure && !isSecure) {
return rej('ACCESS_DENIED');
}
2018-07-15 21:25:35 +03:00
if (ep.meta.requireCredential && user == null) {
return rej('SIGNIN_REQUIRED');
}
2018-07-15 21:25:35 +03:00
if (ep.meta.requireCredential && user.isSuspended) {
return rej('YOUR_ACCOUNT_HAS_BEEN_SUSPENDED');
}
2018-08-20 19:03:58 +03:00
if (ep.meta.requireAdmin && !user.isAdmin) {
2018-08-13 19:05:58 +03:00
return rej('YOU_ARE_NOT_ADMIN');
}
2018-09-06 00:06:22 +03:00
if (app && ep.meta.kind && !app.permission.some(p => p === ep.meta.kind)) {
return rej('PERMISSION_DENIED');
}
2018-07-15 21:25:35 +03:00
if (ep.meta.requireCredential && ep.meta.limit) {
try {
2018-07-15 21:43:36 +03:00
await limitter(ep, user); // Rate limit
} catch (e) {
// drop request if limit exceeded
return rej('RATE_LIMIT_EXCEEDED');
}
}
2018-07-15 21:25:35 +03:00
let exec = ep.exec;
2018-07-25 01:18:50 +03:00
if (ep.meta.requireFile && file) {
2018-04-13 05:44:39 +03:00
exec = exec.bind(null, file);
}
let res;
// API invoking
try {
2018-07-20 20:18:35 +03:00
const before = performance.now();
res = await exec(data, user, app);
2018-07-20 20:18:35 +03:00
const after = performance.now();
2018-07-19 05:45:55 +03:00
2018-07-20 20:18:35 +03:00
const time = after - before;
2018-07-26 10:50:50 +03:00
if (time > 1000) {
2018-08-13 19:05:58 +03:00
console.warn(`SLOW API CALL DETECTED: ${ep.name} (${time}ms)`);
2018-07-19 05:45:55 +03:00
}
} catch (e) {
rej(e);
return;
}
ok(res);
});