2018-12-25 13:02:37 +02:00
|
|
|
import limiter from './limiter';
|
2018-08-21 22:53:02 +03:00
|
|
|
import { IUser } from '../../models/user';
|
2018-04-11 11:40:01 +03:00
|
|
|
import { IApp } from '../../models/app';
|
2018-07-15 21:43:36 +03:00
|
|
|
import endpoints from './endpoints';
|
2018-04-11 11:40:01 +03:00
|
|
|
|
2019-01-23 12:33:29 +02:00
|
|
|
export default async (endpoint: string, user: IUser, app: IApp, data: any, file?: any) => {
|
2018-04-11 11:40:01 +03:00
|
|
|
const isSecure = user != null && app == null;
|
|
|
|
|
2018-07-15 21:43:36 +03:00
|
|
|
const ep = endpoints.find(e => e.name === endpoint);
|
2018-04-11 11:40:01 +03:00
|
|
|
|
2018-10-07 05:06:17 +03:00
|
|
|
if (ep == null) {
|
2019-01-23 12:33:29 +02:00
|
|
|
throw 'ENDPOINT_NOT_FOUND';
|
2018-10-07 05:06:17 +03:00
|
|
|
}
|
|
|
|
|
2018-07-15 21:25:35 +03:00
|
|
|
if (ep.meta.secure && !isSecure) {
|
2019-01-23 12:33:29 +02:00
|
|
|
throw 'ACCESS_DENIED';
|
2018-04-11 11:40:01 +03:00
|
|
|
}
|
|
|
|
|
2018-07-15 21:25:35 +03:00
|
|
|
if (ep.meta.requireCredential && user == null) {
|
2019-01-23 12:33:29 +02:00
|
|
|
throw 'CREDENTIAL_REQUIRED';
|
2018-04-11 11:40:01 +03:00
|
|
|
}
|
|
|
|
|
2018-07-15 21:25:35 +03:00
|
|
|
if (ep.meta.requireCredential && user.isSuspended) {
|
2019-01-23 12:33:29 +02:00
|
|
|
throw 'YOUR_ACCOUNT_HAS_BEEN_SUSPENDED';
|
2018-07-13 17:44:45 +03:00
|
|
|
}
|
|
|
|
|
2018-08-20 19:03:58 +03:00
|
|
|
if (ep.meta.requireAdmin && !user.isAdmin) {
|
2019-01-23 12:33:29 +02:00
|
|
|
throw 'YOU_ARE_NOT_ADMIN';
|
2018-08-13 19:05:58 +03:00
|
|
|
}
|
|
|
|
|
2018-11-14 21:15:42 +02:00
|
|
|
if (ep.meta.requireModerator && !user.isAdmin && !user.isModerator) {
|
2019-01-23 12:33:29 +02:00
|
|
|
throw 'YOU_ARE_NOT_MODERATOR';
|
2018-11-14 21:15:42 +02:00
|
|
|
}
|
|
|
|
|
2018-09-06 00:06:22 +03:00
|
|
|
if (app && ep.meta.kind && !app.permission.some(p => p === ep.meta.kind)) {
|
2019-01-23 12:33:29 +02:00
|
|
|
throw 'PERMISSION_DENIED';
|
2018-04-11 11:40:01 +03:00
|
|
|
}
|
|
|
|
|
2018-07-15 21:25:35 +03:00
|
|
|
if (ep.meta.requireCredential && ep.meta.limit) {
|
2018-04-11 11:40:01 +03:00
|
|
|
try {
|
2018-12-25 13:02:37 +02:00
|
|
|
await limiter(ep, user); // Rate limit
|
2018-04-11 11:40:01 +03:00
|
|
|
} catch (e) {
|
|
|
|
// drop request if limit exceeded
|
2019-01-23 12:33:29 +02:00
|
|
|
throw 'RATE_LIMIT_EXCEEDED';
|
2018-04-11 11:40:01 +03:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
let res;
|
|
|
|
|
|
|
|
// API invoking
|
|
|
|
try {
|
2018-11-02 06:47:44 +02:00
|
|
|
res = await ep.exec(data, user, app, file);
|
2018-04-11 11:40:01 +03:00
|
|
|
} catch (e) {
|
2018-11-13 12:34:09 +02:00
|
|
|
if (e && e.name == 'INVALID_PARAM') {
|
2019-01-23 12:33:29 +02:00
|
|
|
throw {
|
2018-10-26 08:38:34 +03:00
|
|
|
code: e.name,
|
|
|
|
param: e.param,
|
|
|
|
reason: e.message
|
2019-01-23 12:33:29 +02:00
|
|
|
};
|
2018-10-26 08:38:34 +03:00
|
|
|
} else {
|
2019-01-23 12:33:29 +02:00
|
|
|
throw e;
|
2018-10-26 08:38:34 +03:00
|
|
|
}
|
2018-04-11 11:40:01 +03:00
|
|
|
}
|
|
|
|
|
2019-01-23 12:33:29 +02:00
|
|
|
return res;
|
|
|
|
};
|