2017-09-12 18:31:14 +03:00
|
|
|
var Promise = require('bluebird'),
|
|
|
|
_ = require('lodash'),
|
2017-12-14 00:20:02 +03:00
|
|
|
pipeline = require('../lib/promise/pipeline'),
|
2016-09-21 17:48:14 +03:00
|
|
|
mail = require('./../mail'),
|
|
|
|
globalUtils = require('../utils'),
|
2017-12-11 21:14:05 +03:00
|
|
|
urlService = require('../services/url'),
|
2017-12-14 00:14:19 +03:00
|
|
|
localUtils = require('./utils'),
|
2017-09-12 18:31:14 +03:00
|
|
|
models = require('../models'),
|
2017-12-12 00:47:46 +03:00
|
|
|
common = require('../lib/common'),
|
2017-09-12 18:31:14 +03:00
|
|
|
mailAPI = require('./mail'),
|
|
|
|
settingsAPI = require('./settings'),
|
2016-09-21 17:48:14 +03:00
|
|
|
docName = 'invites',
|
2016-11-16 12:33:44 +03:00
|
|
|
allowedIncludes = ['created_by', 'updated_by'],
|
2016-09-21 17:48:14 +03:00
|
|
|
invites;
|
|
|
|
|
|
|
|
invites = {
|
|
|
|
browse: function browse(options) {
|
|
|
|
var tasks;
|
|
|
|
|
|
|
|
function modelQuery(options) {
|
2017-09-12 18:31:14 +03:00
|
|
|
return models.Invite.findPage(options);
|
2016-09-21 17:48:14 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
tasks = [
|
2017-12-14 00:14:19 +03:00
|
|
|
localUtils.validate(docName, {opts: localUtils.browseDefaultOptions}),
|
|
|
|
localUtils.handlePublicPermissions(docName, 'browse'),
|
|
|
|
localUtils.convertOptions(allowedIncludes),
|
2016-09-21 17:48:14 +03:00
|
|
|
modelQuery
|
|
|
|
];
|
|
|
|
|
|
|
|
return pipeline(tasks, options);
|
|
|
|
},
|
|
|
|
|
|
|
|
read: function read(options) {
|
|
|
|
var attrs = ['id', 'email'],
|
|
|
|
tasks;
|
|
|
|
|
|
|
|
function modelQuery(options) {
|
2017-09-27 11:31:41 +03:00
|
|
|
return models.Invite.findOne(options.data, _.omit(options, ['data']))
|
|
|
|
.then(function onModelResponse(model) {
|
|
|
|
if (!model) {
|
2017-12-12 00:47:46 +03:00
|
|
|
return Promise.reject(new common.errors.NotFoundError({
|
|
|
|
message: common.i18n.t('errors.api.invites.inviteNotFound')
|
2017-09-27 11:31:41 +03:00
|
|
|
}));
|
|
|
|
}
|
|
|
|
|
|
|
|
return {
|
|
|
|
invites: [model.toJSON(options)]
|
|
|
|
};
|
|
|
|
});
|
2016-09-21 17:48:14 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
tasks = [
|
2017-12-14 00:14:19 +03:00
|
|
|
localUtils.validate(docName, {attrs: attrs}),
|
|
|
|
localUtils.handlePublicPermissions(docName, 'read'),
|
|
|
|
localUtils.convertOptions(allowedIncludes),
|
2016-09-21 17:48:14 +03:00
|
|
|
modelQuery
|
|
|
|
];
|
|
|
|
|
2017-09-27 11:31:41 +03:00
|
|
|
return pipeline(tasks, options);
|
2016-09-21 17:48:14 +03:00
|
|
|
},
|
|
|
|
|
|
|
|
destroy: function destroy(options) {
|
|
|
|
var tasks;
|
|
|
|
|
|
|
|
function modelQuery(options) {
|
2017-09-12 18:31:14 +03:00
|
|
|
return models.Invite.findOne({id: options.id}, _.omit(options, ['data']))
|
2016-09-21 17:48:14 +03:00
|
|
|
.then(function (invite) {
|
|
|
|
if (!invite) {
|
2017-12-12 00:47:46 +03:00
|
|
|
throw new common.errors.NotFoundError({message: common.i18n.t('errors.api.invites.inviteNotFound')});
|
2016-09-21 17:48:14 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
return invite.destroy(options).return(null);
|
|
|
|
});
|
|
|
|
}
|
|
|
|
|
|
|
|
tasks = [
|
2017-12-14 00:14:19 +03:00
|
|
|
localUtils.validate(docName, {opts: localUtils.idDefaultOptions}),
|
|
|
|
localUtils.handlePermissions(docName, 'destroy'),
|
|
|
|
localUtils.convertOptions(allowedIncludes),
|
2016-09-21 17:48:14 +03:00
|
|
|
modelQuery
|
|
|
|
];
|
|
|
|
|
|
|
|
return pipeline(tasks, options);
|
|
|
|
},
|
|
|
|
|
|
|
|
add: function add(object, options) {
|
|
|
|
var tasks,
|
|
|
|
loggedInUser = options.context.user,
|
|
|
|
emailData,
|
|
|
|
invite;
|
|
|
|
|
|
|
|
function addInvite(options) {
|
|
|
|
var data = options.data;
|
|
|
|
|
2017-09-12 18:31:14 +03:00
|
|
|
return models.Invite.add(data.invites[0], _.omit(options, 'data'))
|
2016-09-21 17:48:14 +03:00
|
|
|
.then(function (_invite) {
|
|
|
|
invite = _invite;
|
|
|
|
|
2017-09-12 18:31:14 +03:00
|
|
|
return settingsAPI.read({key: 'title'});
|
2016-09-21 17:48:14 +03:00
|
|
|
})
|
|
|
|
.then(function (response) {
|
2017-12-11 21:14:05 +03:00
|
|
|
var adminUrl = urlService.utils.urlFor('admin', true);
|
2016-09-21 17:48:14 +03:00
|
|
|
|
|
|
|
emailData = {
|
|
|
|
blogName: response.settings[0].value,
|
|
|
|
invitedByName: loggedInUser.get('name'),
|
|
|
|
invitedByEmail: loggedInUser.get('email'),
|
|
|
|
// @TODO: resetLink sounds weird
|
2017-12-11 21:14:05 +03:00
|
|
|
resetLink: urlService.utils.urlJoin(adminUrl, 'signup', globalUtils.encodeBase64URLsafe(invite.get('token')), '/')
|
2016-09-21 17:48:14 +03:00
|
|
|
};
|
|
|
|
|
|
|
|
return mail.utils.generateContent({data: emailData, template: 'invite-user'});
|
|
|
|
}).then(function (emailContent) {
|
|
|
|
var payload = {
|
|
|
|
mail: [{
|
|
|
|
message: {
|
|
|
|
to: invite.get('email'),
|
2017-12-12 00:47:46 +03:00
|
|
|
subject: common.i18n.t('common.api.users.mail.invitedByName', {
|
2016-09-21 17:48:14 +03:00
|
|
|
invitedByName: emailData.invitedByName,
|
|
|
|
blogName: emailData.blogName
|
|
|
|
}),
|
|
|
|
html: emailContent.html,
|
|
|
|
text: emailContent.text
|
|
|
|
},
|
|
|
|
options: {}
|
|
|
|
}]
|
|
|
|
};
|
|
|
|
|
2017-09-12 18:31:14 +03:00
|
|
|
return mailAPI.send(payload, {context: {internal: true}});
|
2016-09-21 17:48:14 +03:00
|
|
|
}).then(function () {
|
|
|
|
options.id = invite.id;
|
2017-09-12 18:31:14 +03:00
|
|
|
return models.Invite.edit({status: 'sent'}, options);
|
2016-09-21 17:48:14 +03:00
|
|
|
}).then(function () {
|
|
|
|
invite.set('status', 'sent');
|
|
|
|
var inviteAsJSON = invite.toJSON();
|
2017-09-27 11:31:41 +03:00
|
|
|
|
|
|
|
return {
|
|
|
|
invites: [inviteAsJSON]
|
|
|
|
};
|
2016-09-21 17:48:14 +03:00
|
|
|
}).catch(function (error) {
|
|
|
|
if (error && error.errorType === 'EmailError') {
|
2017-12-12 00:47:46 +03:00
|
|
|
error.message = common.i18n.t('errors.api.invites.errorSendingEmail.error', {message: error.message}) + ' ' +
|
|
|
|
common.i18n.t('errors.api.invites.errorSendingEmail.help');
|
|
|
|
common.logging.warn(error.message);
|
2016-09-21 17:48:14 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
return Promise.reject(error);
|
|
|
|
});
|
|
|
|
}
|
|
|
|
|
|
|
|
function destroyOldInvite(options) {
|
|
|
|
var data = options.data;
|
|
|
|
|
2017-09-12 18:31:14 +03:00
|
|
|
return models.Invite.findOne({email: data.invites[0].email}, _.omit(options, 'data'))
|
2016-09-21 17:48:14 +03:00
|
|
|
.then(function (invite) {
|
|
|
|
if (!invite) {
|
|
|
|
return Promise.resolve(options);
|
|
|
|
}
|
|
|
|
|
|
|
|
return invite.destroy(options);
|
|
|
|
})
|
|
|
|
.then(function () {
|
|
|
|
return options;
|
|
|
|
});
|
|
|
|
}
|
|
|
|
|
|
|
|
function validation(options) {
|
|
|
|
if (!options.data.invites[0].email) {
|
2017-12-12 00:47:46 +03:00
|
|
|
return Promise.reject(new common.errors.ValidationError({message: common.i18n.t('errors.api.invites.emailIsRequired')}));
|
2016-09-21 17:48:14 +03:00
|
|
|
}
|
|
|
|
|
2016-11-16 12:33:44 +03:00
|
|
|
if (!options.data.invites[0].role_id) {
|
2017-12-12 00:47:46 +03:00
|
|
|
return Promise.reject(new common.errors.ValidationError({message: common.i18n.t('errors.api.invites.roleIsRequired')}));
|
2016-09-21 17:48:14 +03:00
|
|
|
}
|
|
|
|
|
2017-01-25 15:07:31 +03:00
|
|
|
// @TODO remove when we have a new permission unit
|
2016-09-21 17:48:14 +03:00
|
|
|
// Make sure user is allowed to add a user with this role
|
2017-01-25 15:07:31 +03:00
|
|
|
// We cannot use permissible because we don't have access to the role_id!!!
|
|
|
|
// Adding a permissible function to the invite model, doesn't give us much context of the invite we would like to add
|
|
|
|
// As we are looking forward to replace the permission system completely, we do not add a hack here
|
2017-09-12 18:31:14 +03:00
|
|
|
return models.Role.findOne({id: options.data.invites[0].role_id}).then(function (roleToInvite) {
|
2017-01-25 15:07:31 +03:00
|
|
|
if (!roleToInvite) {
|
2017-12-12 00:47:46 +03:00
|
|
|
return Promise.reject(new common.errors.NotFoundError({message: common.i18n.t('errors.api.invites.roleNotFound')}));
|
2016-11-16 12:33:44 +03:00
|
|
|
}
|
|
|
|
|
2017-01-25 15:07:31 +03:00
|
|
|
if (roleToInvite.get('name') === 'Owner') {
|
2017-12-12 00:47:46 +03:00
|
|
|
return Promise.reject(new common.errors.NoPermissionError({message: common.i18n.t('errors.api.invites.notAllowedToInviteOwner')}));
|
2016-09-21 17:48:14 +03:00
|
|
|
}
|
2017-01-25 15:07:31 +03:00
|
|
|
|
|
|
|
var loggedInUserRole = loggedInUser.related('roles').models[0].get('name'),
|
|
|
|
allowed = [];
|
|
|
|
|
|
|
|
if (loggedInUserRole === 'Owner' || loggedInUserRole === 'Administrator') {
|
|
|
|
allowed = ['Administrator', 'Editor', 'Author'];
|
|
|
|
} else if (loggedInUserRole === 'Editor') {
|
|
|
|
allowed = ['Author'];
|
|
|
|
}
|
|
|
|
|
|
|
|
if (allowed.indexOf(roleToInvite.get('name')) === -1) {
|
2017-12-12 00:47:46 +03:00
|
|
|
return Promise.reject(new common.errors.NoPermissionError({
|
|
|
|
message: common.i18n.t('errors.api.invites.notAllowedToInvite')
|
2017-01-25 15:07:31 +03:00
|
|
|
}));
|
|
|
|
}
|
2016-09-21 17:48:14 +03:00
|
|
|
}).then(function () {
|
|
|
|
return options;
|
|
|
|
});
|
|
|
|
}
|
|
|
|
|
2017-07-14 22:55:49 +03:00
|
|
|
function checkIfUserExists(options) {
|
2017-09-12 18:31:14 +03:00
|
|
|
return models.User.findOne({email: options.data.invites[0].email}, options)
|
2017-07-14 22:55:49 +03:00
|
|
|
.then(function (user) {
|
|
|
|
if (user) {
|
2017-12-12 00:47:46 +03:00
|
|
|
return Promise.reject(new common.errors.ValidationError({
|
|
|
|
message: common.i18n.t('errors.api.users.userAlreadyRegistered')
|
2017-07-14 22:55:49 +03:00
|
|
|
}));
|
|
|
|
}
|
|
|
|
|
|
|
|
return options;
|
|
|
|
});
|
|
|
|
}
|
|
|
|
|
2017-01-25 15:07:31 +03:00
|
|
|
function fetchLoggedInUser(options) {
|
2017-09-12 18:31:14 +03:00
|
|
|
return models.User.findOne({id: loggedInUser}, _.merge({}, options, {include: ['roles']}))
|
2017-01-25 15:07:31 +03:00
|
|
|
.then(function (user) {
|
|
|
|
if (!user) {
|
2017-12-12 00:47:46 +03:00
|
|
|
return Promise.reject(new common.errors.NotFoundError({message: common.i18n.t('errors.api.users.userNotFound')}));
|
2017-01-25 15:07:31 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
loggedInUser = user;
|
|
|
|
return options;
|
|
|
|
});
|
|
|
|
}
|
|
|
|
|
2016-09-21 17:48:14 +03:00
|
|
|
tasks = [
|
2017-12-14 00:14:19 +03:00
|
|
|
localUtils.validate(docName, {opts: ['email']}),
|
|
|
|
localUtils.handlePermissions(docName, 'add'),
|
|
|
|
localUtils.convertOptions(allowedIncludes),
|
2017-01-25 15:07:31 +03:00
|
|
|
fetchLoggedInUser,
|
2016-09-21 17:48:14 +03:00
|
|
|
validation,
|
2017-07-14 22:55:49 +03:00
|
|
|
checkIfUserExists,
|
2016-09-21 17:48:14 +03:00
|
|
|
destroyOldInvite,
|
|
|
|
addInvite
|
|
|
|
];
|
|
|
|
|
|
|
|
return pipeline(tasks, object, options);
|
|
|
|
}
|
|
|
|
};
|
|
|
|
|
|
|
|
module.exports = invites;
|