96 lines
3.2 KiB
JavaScript
96 lines
3.2 KiB
JavaScript
const _ = require('underscore');
|
|
|
|
function isApiKeyFound(apikey) {
|
|
return apikey.type !== null &&
|
|
apikey.user !== null &&
|
|
apikey.databasePassword !== null &&
|
|
apikey.databaseRole !== null;
|
|
}
|
|
|
|
function UserDatabaseService(metadataBackend) {
|
|
this.metadataBackend = metadataBackend;
|
|
}
|
|
|
|
function errorUserNotFoundMessageTemplate (user) {
|
|
return `Sorry, we can't find CARTO user '${user}'. Please check that you have entered the correct domain.`;
|
|
}
|
|
|
|
/**
|
|
* Callback is invoked with `dbParams` and `authDbParams`.
|
|
* `dbParams` depends on AuthApi verification so it might return a public user with just SELECT permission, where
|
|
* `authDbParams` will always return connection params as AuthApi had authorized the connection.
|
|
* That might be useful when you have to run a query with and without permissions.
|
|
*
|
|
* @param {AuthApi} authApi
|
|
* @param {String} cdbUsername
|
|
* @param {Function} callback (err, dbParams, authDbParams)
|
|
*/
|
|
UserDatabaseService.prototype.getConnectionParams = function (username, apikeyToken, authenticated, callback) {
|
|
this.metadataBackend.getAllUserDBParams(username, (err, dbParams) => {
|
|
if (err) {
|
|
err.http_status = 404;
|
|
err.message = errorUserNotFoundMessageTemplate(username);
|
|
|
|
return callback(err);
|
|
}
|
|
|
|
const dbopts = {
|
|
port: global.settings.db_port,
|
|
host: dbParams.dbhost,
|
|
dbname: dbParams.dbname,
|
|
};
|
|
|
|
this.metadataBackend.getApikey(username, apikeyToken, (err, apikey) => {
|
|
if (err) {
|
|
err.http_status = 404;
|
|
err.message = errorUserNotFoundMessageTemplate(username);
|
|
|
|
return callback(err);
|
|
}
|
|
|
|
if (!isApiKeyFound(apikey)) {
|
|
const apiKeyNotFoundError = new Error('Unauthorized');
|
|
apiKeyNotFoundError.type = 'auth';
|
|
apiKeyNotFoundError.subtype = 'api-key-not-found';
|
|
apiKeyNotFoundError.http_status = 401;
|
|
|
|
return callback(apiKeyNotFoundError);
|
|
}
|
|
|
|
dbopts.user = apikey.databaseRole;
|
|
dbopts.pass = apikey.databasePassword;
|
|
|
|
this.metadataBackend.getMasterApikey(username, (err, masterApikey) => {
|
|
if (err) {
|
|
err.http_status = 404;
|
|
err.message = errorUserNotFoundMessageTemplate(username);
|
|
|
|
return callback(err);
|
|
}
|
|
|
|
if (!isApiKeyFound(apikey)) {
|
|
const apiKeyNotFoundError = new Error('Unauthorized');
|
|
apiKeyNotFoundError.type = 'auth';
|
|
apiKeyNotFoundError.subtype = 'api-key-not-found';
|
|
apiKeyNotFoundError.http_status = 401;
|
|
|
|
return callback(apiKeyNotFoundError);
|
|
}
|
|
|
|
dbopts.user = apikey.databaseRole;
|
|
dbopts.pass = apikey.databasePassword;
|
|
|
|
const authDbOpts = _.defaults({
|
|
user: masterApikey.databaseRole,
|
|
pass: masterApikey.databasePassword },
|
|
dbopts);
|
|
|
|
callback(null, dbopts, authDbOpts);
|
|
});
|
|
|
|
});
|
|
});
|
|
};
|
|
|
|
module.exports = UserDatabaseService;
|