Added basic creation of shops.

server/firebase/firebase-handler.js

@@ -1,13 +1,14 @@
 var admin = require("firebase-admin");
 const logger = require("../utils/logger");
 const path = require("path");
+const { auth } = require("firebase-admin");
 require("dotenv").config({
   path: path.resolve(
     process.cwd(),
     `.env.${process.env.NODE_ENV || "development"}`
   ),
 });
-
+const client = require("../graphql-client/graphql-client").client;
 var serviceAccount = require(process.env.FIREBASE_ADMINSDK_JSON);
 
 admin.initializeApp({
@@ -19,54 +20,61 @@ exports.admin = admin;
 
 const adminEmail = [
   "patrick@imex.dev",
-  "patrick@imex.text",
+  //"patrick@imex.test",
   "patrick@imex.prod",
   "patrick@imexsystems.ca",
   "patrick@thinkimex.com",
 ];
 
-exports.createUser = (req, res) => {
-  logger.log("admin-create-user", "WARN", req.user.email, null, {
+exports.createUser = async (req, res) => {
+  logger.log("admin-create-user", "ADMIN", req.user.email, null, {
     request: req.body,
+    ioadmin: true,
   });
-  if (!adminEmail.includes(req.user.email)) {
-    logger.log(
-      "admin-create-user-unauthorized",
-      "ERROR",
-      req.user.email,
-      null,
+
+  const { email, displayName, password, shopid, authlevel } = req.body;
+  try {
+    const userRecord = await admin
+      .auth()
+      .createUser({ email, displayName, password });
+
+    // See the UserRecord reference doc for the contents of userRecord.
+
+    const result = await client.request(
+      `
+        mutation INSERT_USER($user: users_insert_input!) {
+          insert_users_one(object: $user) {
+            email
+          }
+        }
+      `,
       {
-        request: req.body,
-        user: req.user,
+        user: {
+          email,
+          authid: userRecord.uid,
+          associations: {
+            data: [{ shopid, authlevel, active: true }],
+          },
+        },
       }
     );
-    res.sendStatus(404);
-  }
-  const { email, displayName, password } = req.body;
-  admin
-    .auth()
-    .createUser({ email, displayName, password })
-    .then((userRecord) => {
-      // See the UserRecord reference doc for the contents of userRecord.
 
-      logger.log("admin-update-user-success", "DEBUG", req.user.email, null, {
-        userRecord,
-      });
-      res.json(userRecord);
-    })
-    .catch((error) => {
-      logger.log("admin-update-user-error", "ERROR", req.user.email, null, {
-        error,
-      });
-      res.status(500).json(error);
+    res.json({ userRecord, result });
+  } catch (error) {
+    logger.log("admin-update-user-error", "ERROR", req.user.email, null, {
+      error,
     });
+    res.status(500).json(error);
+  }
 };
 
 exports.updateUser = (req, res) => {
-  logger.log("admin-update-user", "WARN", req.user.email, null, {
+  logger.log("admin-update-user", "ADMIN", req.user.email, null, {
     request: req.body,
+    ioadmin: true,
   });
-  if (!adminEmail.includes(req.user.email)) {
+
+  if (!adminEmail.includes(req.user.email) && !req.user.ioadmin) {
     logger.log(
       "admin-update-user-unauthorized",
       "ERROR",
@@ -78,6 +86,7 @@ exports.updateUser = (req, res) => {
       }
     );
     res.sendStatus(404);
+    return;
   }
 
   admin
@@ -98,8 +107,9 @@ exports.updateUser = (req, res) => {
     .then((userRecord) => {
       // See the UserRecord reference doc for the contents of userRecord.
 
-      logger.log("admin-update-user-success", "DEBUG", req.user.email, null, {
+      logger.log("admin-update-user-success", "ADMIN", req.user.email, null, {
         userRecord,
+        ioadmin: true,
       });
       res.json(userRecord);
     })
@@ -111,6 +121,41 @@ exports.updateUser = (req, res) => {
     });
 };
 
+exports.getUser = (req, res) => {
+  logger.log("admin-get-user", "ADMIN", req.user.email, null, {
+    request: req.body,
+    ioadmin: true,
+  });
+
+  if (!adminEmail.includes(req.user.email) && !req.user.ioadmin) {
+    logger.log(
+      "admin-update-user-unauthorized",
+      "ERROR",
+      req.user.email,
+      null,
+      {
+        request: req.body,
+        user: req.user,
+      }
+    );
+    res.sendStatus(404);
+    return;
+  }
+
+  admin
+    .auth()
+    .getUser(req.body.uid)
+    .then((userRecord) => {
+      res.json(userRecord);
+    })
+    .catch((error) => {
+      logger.log("admin-get-user-error", "ERROR", req.user.email, null, {
+        error,
+      });
+      res.status(500).json(error);
+    });
+};
+
 exports.sendNotification = async (req, res) => {
   setTimeout(() => {
     // Send a message to the device corresponding to the provided
@@ -221,3 +266,35 @@ exports.validateFirebaseIdToken = async (req, res, next) => {
     return;
   }
 };
+
+exports.validateAdmin = async (req, res, next) => {
+  if (!adminEmail.includes(req.user.email) && !req.user.ioadmin) {
+    logger.log("admin-validation-failed", "ERROR", req.user.email, null, {
+      request: req.body,
+      user: req.user,
+    });
+    res.sendStatus(404);
+    return;
+  } else {
+    next();
+    return;
+  }
+};
+
+//Admin claims code.
+// const uid = "JEqqYlsadwPEXIiyRBR55fflfko1";
+
+// admin
+//   .auth()
+//   .getUser(uid)
+//   .then((user) => {
+//     console.log(user);
+//     admin.auth().setCustomUserClaims(uid, {
+//       ioadmin: true,
+//       "https://hasura.io/jwt/claims": {
+//         "x-hasura-default-role": "admin",
+//         "x-hasura-allowed-roles": ["admin"],
+//         "x-hasura-user-id": uid,
+//       },
+//     });
+//   });