- Finish cleanup

Signed-off-by: Dave Richer <dave@imexsystems.ca>

server/firebase/firebase-handler.js

@@ -1,287 +1,215 @@
-var admin = require("firebase-admin");
+const admin = require("firebase-admin");
 const logger = require("../utils/logger");
 const path = require("path");
-const { auth } = require("firebase-admin");
+const {auth} = require("firebase-admin");
+
 require("dotenv").config({
-  path: path.resolve(
-    process.cwd(),
-    `.env.${process.env.NODE_ENV || "development"}`
-  ),
+    path: path.resolve(
+        process.cwd(),
+        `.env.${process.env.NODE_ENV || "development"}`
+    ),
 });
 const client = require("../graphql-client/graphql-client").client;
-var serviceAccount = require(process.env.FIREBASE_ADMINSDK_JSON);
+
+const serviceAccount = require(process.env.FIREBASE_ADMINSDK_JSON);
+const adminEmail = require("../utils/adminEmail");
 
 admin.initializeApp({
-  credential: admin.credential.cert(serviceAccount),
-  databaseURL: process.env.FIREBASE_DATABASE_URL,
+    credential: admin.credential.cert(serviceAccount),
+    databaseURL: process.env.FIREBASE_DATABASE_URL,
 });
 
 exports.admin = admin;
 
-const adminEmail = [
-  "patrick@imex.dev",
-  //"patrick@imex.test",
-  "patrick@imex.prod",
-  "patrick@imexsystems.ca",
-  "patrick@thinkimex.com",
-];
-
 exports.createUser = async (req, res) => {
-  logger.log("admin-create-user", "ADMIN", req.user.email, null, {
-    request: req.body,
-    ioadmin: true,
-  });
+    logger.log("admin-create-user", "ADMIN", req.user.email, null, {
+        request: req.body,
+        ioadmin: true,
+    });
 
-  const { email, displayName, password, shopid, authlevel } = req.body;
-  try {
-    const userRecord = await admin
-      .auth()
-      .createUser({ email, displayName, password });
+    const {email, displayName, password, shopid, authlevel} = req.body;
+    try {
+        const userRecord = await admin
+            .auth()
+            .createUser({email, displayName, password});
 
-    // See the UserRecord reference doc for the contents of userRecord.
+        // See the UserRecord reference doc for the contents of userRecord.
 
-    const result = await client.request(
-      `
+        const result = await client.request(
+            `
         mutation INSERT_USER($user: users_insert_input!) {
           insert_users_one(object: $user) {
             email
           }
         }
       `,
-      {
-        user: {
-          email: email.toLowerCase(),
-          authid: userRecord.uid,
-          associations: {
-            data: [{ shopid, authlevel, active: true }],
-          },
-        },
-      }
-    );
+            {
+                user: {
+                    email: email.toLowerCase(),
+                    authid: userRecord.uid,
+                    associations: {
+                        data: [{shopid, authlevel, active: true}],
+                    },
+                },
+            }
+        );
 
-    res.json({ userRecord, result });
-  } catch (error) {
-    logger.log("admin-update-user-error", "ERROR", req.user.email, null, {
-      error,
-    });
-    res.status(500).json(error);
-  }
+        res.json({userRecord, result});
+    } catch (error) {
+        logger.log("admin-update-user-error", "ERROR", req.user.email, null, {
+            error,
+        });
+        res.status(500).json(error);
+    }
 };
 
 exports.updateUser = (req, res) => {
-  logger.log("admin-update-user", "ADMIN", req.user.email, null, {
-    request: req.body,
-    ioadmin: true,
-  });
-
-  if (!adminEmail.includes(req.user.email) && !req.user.ioadmin) {
-    logger.log(
-      "admin-update-user-unauthorized",
-      "ERROR",
-      req.user.email,
-      null,
-      {
+    logger.log("admin-update-user", "ADMIN", req.user.email, null, {
         request: req.body,
-        user: req.user,
-      }
-    );
-    res.sendStatus(404);
-    return;
-  }
-
-  admin
-    .auth()
-    .updateUser(
-      req.body.uid,
-      req.body.user
-      // {
-      // email: "modifiedUser@example.com",
-      // phoneNumber: "+11234567890",
-      // emailVerified: true,
-      // password: "newPassword",
-      // displayName: "Jane Doe",
-      // photoURL: "http://www.example.com/12345678/photo.png",
-      // disabled: true,
-      // }
-    )
-    .then((userRecord) => {
-      // See the UserRecord reference doc for the contents of userRecord.
-
-      logger.log("admin-update-user-success", "ADMIN", req.user.email, null, {
-        userRecord,
         ioadmin: true,
-      });
-      res.json(userRecord);
-    })
-    .catch((error) => {
-      logger.log("admin-update-user-error", "ERROR", req.user.email, null, {
-        error,
-      });
-      res.status(500).json(error);
     });
+
+    if (!adminEmail.includes(req.user.email) && !req.user.ioadmin) {
+        logger.log(
+            "admin-update-user-unauthorized",
+            "ERROR",
+            req.user.email,
+            null,
+            {
+                request: req.body,
+                user: req.user,
+            }
+        );
+        res.sendStatus(404);
+        return;
+    }
+
+    admin
+        .auth()
+        .updateUser(
+            req.body.uid,
+            req.body.user
+            // {
+            // email: "modifiedUser@example.com",
+            // phoneNumber: "+11234567890",
+            // emailVerified: true,
+            // password: "newPassword",
+            // displayName: "Jane Doe",
+            // photoURL: "http://www.example.com/12345678/photo.png",
+            // disabled: true,
+            // }
+        )
+        .then((userRecord) => {
+            // See the UserRecord reference doc for the contents of userRecord.
+
+            logger.log("admin-update-user-success", "ADMIN", req.user.email, null, {
+                userRecord,
+                ioadmin: true,
+            });
+            res.json(userRecord);
+        })
+        .catch((error) => {
+            logger.log("admin-update-user-error", "ERROR", req.user.email, null, {
+                error,
+            });
+            res.status(500).json(error);
+        });
 };
 
 exports.getUser = (req, res) => {
-  logger.log("admin-get-user", "ADMIN", req.user.email, null, {
-    request: req.body,
-    ioadmin: true,
-  });
-
-  if (!adminEmail.includes(req.user.email) && !req.user.ioadmin) {
-    logger.log(
-      "admin-update-user-unauthorized",
-      "ERROR",
-      req.user.email,
-      null,
-      {
+    logger.log("admin-get-user", "ADMIN", req.user.email, null, {
         request: req.body,
-        user: req.user,
-      }
-    );
-    res.sendStatus(404);
-    return;
-  }
-
-  admin
-    .auth()
-    .getUser(req.body.uid)
-    .then((userRecord) => {
-      res.json(userRecord);
-    })
-    .catch((error) => {
-      logger.log("admin-get-user-error", "ERROR", req.user.email, null, {
-        error,
-      });
-      res.status(500).json(error);
+        ioadmin: true,
     });
+
+    if (!adminEmail.includes(req.user.email) && !req.user.ioadmin) {
+        logger.log(
+            "admin-update-user-unauthorized",
+            "ERROR",
+            req.user.email,
+            null,
+            {
+                request: req.body,
+                user: req.user,
+            }
+        );
+        res.sendStatus(404);
+        return;
+    }
+
+    admin
+        .auth()
+        .getUser(req.body.uid)
+        .then((userRecord) => {
+            res.json(userRecord);
+        })
+        .catch((error) => {
+            logger.log("admin-get-user-error", "ERROR", req.user.email, null, {
+                error,
+            });
+            res.status(500).json(error);
+        });
 };
 
 exports.sendNotification = async (req, res) => {
-  setTimeout(() => {
-    // Send a message to the device corresponding to the provided
-    // registration token.
-    admin
-      .messaging()
-      .send({
-        topic: "PRD_PATRICK-messaging",
-        notification: {
-          title: `ImEX Online Message - +16049992002`,
-          body: "Test Noti.",
-          //imageUrl: "https://thinkimex.com/img/io-fcm.png",
-        },
-        data: {
-          type: "messaging-inbound",
-          conversationid: "e0eb17c3-3a78-4e3f-b932-55ef35aa2297",
-          text: "Hello. ",
-          image_path: "",
-          phone_num: "+16049992002",
-        },
-      })
-      .then((response) => {
-        // Response is a message ID string.
-        console.log("Successfully sent message:", response);
-      })
-      .catch((error) => {
-        console.log("Error sending message:", error);
-      });
+    setTimeout(() => {
+        // Send a message to the device corresponding to the provided
+        // registration token.
+        admin
+            .messaging()
+            .send({
+                topic: "PRD_PATRICK-messaging",
+                notification: {
+                    title: `ImEX Online Message - +16049992002`,
+                    body: "Test Noti.",
+                    //imageUrl: "https://thinkimex.com/img/io-fcm.png",
+                },
+                data: {
+                    type: "messaging-inbound",
+                    conversationid: "e0eb17c3-3a78-4e3f-b932-55ef35aa2297",
+                    text: "Hello. ",
+                    image_path: "",
+                    phone_num: "+16049992002",
+                },
+            })
+            .then((response) => {
+                // Response is a message ID string.
+                console.log("Successfully sent message:", response);
+            })
+            .catch((error) => {
+                console.log("Error sending message:", error);
+            });
 
-    res.sendStatus(200);
-  }, 500);
+        res.sendStatus(200);
+    }, 500);
 };
 
 exports.subscribe = async (req, res) => {
-  const result = await admin
-    .messaging()
-    .subscribeToTopic(
-      req.body.fcm_tokens,
-      `${req.body.imexshopid}-${req.body.type}`
-    );
+    const result = await admin
+        .messaging()
+        .subscribeToTopic(
+            req.body.fcm_tokens,
+            `${req.body.imexshopid}-${req.body.type}`
+        );
 
-  res.json(result);
+    res.json(result);
 };
 
 exports.unsubscribe = async (req, res) => {
-  try {
-    const result = await admin
-      .messaging()
-      .unsubscribeFromTopic(
-        req.body.fcm_tokens,
-        `${req.body.imexshopid}-${req.body.type}`
-      );
+    try {
+        const result = await admin
+            .messaging()
+            .unsubscribeFromTopic(
+                req.body.fcm_tokens,
+                `${req.body.imexshopid}-${req.body.type}`
+            );
 
-    res.json(result);
-  } catch (error) {
-    res.sendStatus(500);
-  }
+        res.json(result);
+    } catch (error) {
+        res.sendStatus(500);
+    }
 };
 
-exports.validateFirebaseIdToken = async (req, res, next) => {
-  if (
-    (!req.headers.authorization ||
-      !req.headers.authorization.startsWith("Bearer ")) &&
-    !(req.cookies && req.cookies.__session)
-  ) {
-    console.error("Unauthorized attempt. No authorization provided.");
-    res.status(403).send("Unauthorized");
-    return;
-  }
-
-  let idToken;
-  if (
-    req.headers.authorization &&
-    req.headers.authorization.startsWith("Bearer ")
-  ) {
-    // console.log('Found "Authorization" header');
-    // Read the ID Token from the Authorization header.
-    idToken = req.headers.authorization.split("Bearer ")[1];
-  } else if (req.cookies) {
-    //console.log('Found "__session" cookie');
-    // Read the ID Token from cookie.
-    idToken = req.cookies.__session;
-  } else {
-    // No cookie
-    console.error("Unauthorized attempt. No cookie provided.");
-    logger.log("api-unauthorized-call", "WARN", null, null, {
-      req,
-      type: "no-cookie",
-    });
-    res.status(403).send("Unauthorized");
-    return;
-  }
-
-  try {
-    const decodedIdToken = await admin.auth().verifyIdToken(idToken);
-    //console.log("ID Token correctly decoded", decodedIdToken);
-    req.user = decodedIdToken;
-    next();
-    return;
-  } catch (error) {
-    logger.log("api-unauthorized-call", "WARN", null, null, {
-      path: req.path,
-      body: req.body,
-
-      type: "unauthroized",
-      ...error,
-    });
-
-    res.status(401).send("Unauthorized");
-    return;
-  }
-};
-
-exports.validateAdmin = async (req, res, next) => {
-  if (!adminEmail.includes(req.user.email) && !req.user.ioadmin) {
-    logger.log("admin-validation-failed", "ERROR", req.user.email, null, {
-      request: req.body,
-      user: req.user,
-    });
-    res.sendStatus(404);
-    return;
-  } else {
-    next();
-    return;
-  }
-};
 
 //Admin claims code.
 // const uid = "JEqqYlsadwPEXIiyRBR55fflfko1";