const admin = require("firebase-admin"); const client = require("../../../graphql-client/graphql-client").client; const { DELETE_SHOP, DELETE_VENDORS_BY_SHOP, GET_BODYSHOP, GET_ASSOCIATED_USERS, DELETE_ASSOCIATIONS_BY_SHOP, GET_USER_ASSOCIATIONS_COUNT, DELETE_USER, GET_VENDORS, GET_JOBS_BY_SHOP, DELETE_JOBLINES_BY_JOB_IDS, DELETE_JOBS_BY_IDS, DELETE_AUDIT_TRAIL_BY_SHOP } = require("../partsManagement.queries"); /** * Deletes a Firebase user by UID. * @param uid * @returns {Promise} */ const deleteFirebaseUser = async (uid) => { return admin.auth().deleteUser(uid); }; /** * Deletes all vendors associated with a shop. * @param shopId * @returns {Promise} */ const deleteVendorsByShop = async (shopId) => { await client.request(DELETE_VENDORS_BY_SHOP, { shopId }); }; /** * Deletes a bodyshop from the database. * @param shopId * @returns {Promise} */ const deleteBodyshop = async (shopId) => { await client.request(DELETE_SHOP, { id: shopId }); }; /** * Fetch job ids for a given shop * @param shopId * @returns {Promise} */ const getJobIdsForShop = async (shopId) => { const resp = await client.request(GET_JOBS_BY_SHOP, { shopId }); return resp.jobs.map((j) => j.id); }; /** * Delete joblines for the given job ids * @param jobIds {string[]} * @returns {Promise} affected rows */ const deleteJoblinesForJobs = async (jobIds) => { if (!jobIds.length) return 0; const resp = await client.request(DELETE_JOBLINES_BY_JOB_IDS, { jobIds }); return resp.delete_joblines.affected_rows; }; /** * Delete jobs for the given job ids * @param jobIds {string[]} * @returns {Promise} affected rows */ const deleteJobsByIds = async (jobIds) => { if (!jobIds.length) return 0; const resp = await client.request(DELETE_JOBS_BY_IDS, { jobIds }); return resp.delete_jobs.affected_rows; }; /** * Handles deprovisioning a shop for parts management. * @param req * @param res * @returns {Promise<*>} */ const partsManagementDeprovisioning = async (req, res) => { const { logger } = req; const p = req.body; if (process.env.NODE_ENV === "production") { return res.status(403).json({ error: "Deprovisioning not allowed in production environment." }); } try { if (!p.shopId) { throw { status: 400, message: "shopId is required." }; } // Fetch bodyshop and check external_shop_id const shopResp = await client.request(GET_BODYSHOP, { id: p.shopId }); const shop = shopResp.bodyshops_by_pk; if (!shop) { throw { status: 404, message: `Bodyshop with id ${p.shopId} not found.` }; } if (!shop.external_shop_id) { throw { status: 400, message: "Cannot delete bodyshop without external_shop_id." }; } logger.log("admin-delete-shop", "debug", null, null, { shopId: p.shopId, shopname: shop.shopname, ioadmin: true }); // Get vendors const vendorsResp = await client.request(GET_VENDORS, { shopId: p.shopId }); const deletedVendors = vendorsResp.vendors.map((v) => v.name); // Get associated users const assocResp = await client.request(GET_ASSOCIATED_USERS, { shopId: p.shopId }); const associatedUsers = assocResp.associations.map((assoc) => ({ authId: assoc.user.authid, email: assoc.user.email })); // Delete associations for the shop const assocDeleteResp = await client.request(DELETE_ASSOCIATIONS_BY_SHOP, { shopId: p.shopId }); const associationsDeleted = assocDeleteResp.delete_associations.affected_rows; // For each user, check if they have remaining associations; if not, delete user and Firebase account const deletedUsers = []; for (const user of associatedUsers) { const countResp = await client.request(GET_USER_ASSOCIATIONS_COUNT, { userEmail: user.email }); const assocCount = countResp.associations_aggregate.aggregate.count; if (assocCount === 0) { await client.request(DELETE_USER, { email: user.email }); await deleteFirebaseUser(user.authId); deletedUsers.push(user.email); } } // Get all job ids for this shop, then delete joblines and jobs (joblines first) const jobIds = await getJobIdsForShop(p.shopId); const joblinesDeleted = await deleteJoblinesForJobs(jobIds); const jobsDeleted = await deleteJobsByIds(jobIds); // Delete any audit trail entries tied to this bodyshop to avoid FK violations const auditResp = await client.request(DELETE_AUDIT_TRAIL_BY_SHOP, { shopId: p.shopId }); const auditDeleted = auditResp.delete_audit_trail.affected_rows; // Delete vendors await deleteVendorsByShop(p.shopId); // Delete shop await deleteBodyshop(p.shopId); // Summary log logger.log("admin-delete-shop-summary", "info", null, null, { shopId: p.shopId, shopname: shop.shopname, associationsDeleted, deletedUsers, deletedVendors, joblinesDeleted, jobsDeleted, auditDeleted }); return res.status(200).json({ message: `Bodyshop ${p.shopId} and associated resources deleted successfully.`, deletedShop: { id: p.shopId, name: shop.shopname }, deletedAssociationsCount: associationsDeleted, deletedUsers: deletedUsers, deletedVendors: deletedVendors, deletedJoblinesCount: joblinesDeleted, deletedJobsCount: jobsDeleted, deletedAuditTrailCount: auditDeleted }); } catch (err) { logger.log("admin-delete-shop-error", "error", null, null, { message: err.message, detail: err.detail || err }); return res.status(err.status || 500).json({ error: err.message || "Internal server error" }); } }; module.exports = partsManagementDeprovisioning;