server/api/plugins/index.js - master - tisit/FUXA_SCADA

server/api/plugins/index.js
109 строк4 KB
unocelli
feat: permission with roles
05 дек 2024, 01:30
05 дек 2024, 01:3085fdb86
/**
 * 'api/plugin': Plugin API to GET/POST plugin data
 */

var express = require("express");
const authJwt = require('../jwt-helper');
var runtime;
var secureFnc;
var checkGroupsFnc;

module.exports = {
    init: function (_runtime, _secureFnc, _checkGroupsFnc) {
        runtime = _runtime;
        secureFnc = _secureFnc;
        checkGroupsFnc = _checkGroupsFnc;
    },
    app: function () {
        var pluginsApp = express();
        pluginsApp.use(function (req, res, next) {
            if (!runtime.project) {
                res.status(404).end();
            } else {
                next();
            }
        });

        /**
         * GET supported Plugin and status (installed) 
         */
        pluginsApp.get("/api/plugins", secureFnc, function (req, res) {
            const permission = checkGroupsFnc(req);
            if (res.statusCode === 403) {
                runtime.logger.error("api get plugins: Tocken Expired");
            } else if (!authJwt.haveAdminPermission(permission)) {
                res.status(401).json({ error: "unauthorized_error", message: "Unauthorized!" });
                runtime.logger.error("api get plugins: Unauthorized!");
            } else {
                runtime.plugins.getPlugins().then(result => {
                    // res.header("Access-Control-Allow-Origin", "*");
                    // res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
                    if (result) {
                        res.json(result);
                    } else {
                        res.end();
                    }
                }).catch(function (err) {
                    if (err.code) {
                        res.status(400).json({ error: err.code, message: err.message });
                    } else {
                        res.status(400).json({ error: "unexpected_error", message: err.toString() });
                    }
                    runtime.logger.error("api get plugins: " + err.message);
                });
            }
        });

        /**
         * POST Plugin
         * Install the plugin
         */
        pluginsApp.post("/api/plugins", secureFnc, function (req, res, next) {
            const permission = checkGroupsFnc(req);
            if (res.statusCode === 403) {
                runtime.logger.error("api post plugins: Tocken Expired");
            } else if (!authJwt.haveAdminPermission(permission)) {
                res.status(401).json({ error: "unauthorized_error", message: "Unauthorized!" });
                runtime.logger.error("api post plugins: Unauthorized");
            } else {
                runtime.plugins.addPlugin(req.body.params, true).then(function (data) {
                    runtime.devices.update();
                    res.end();
                }).catch(function (err) {
                    if (err.code) {
                        res.status(400).json({ error: err.code, message: err.message });
                    } else {
                        res.status(400).json({ error: "unexpected_error", message: err.toString() });
                    }
                    runtime.logger.error("api install plugins: " + err.message);
                });
            }
        });

        /**
         * DELETE Plugin
         * Unistall the plugin
         */
        pluginsApp.delete("/api/plugins", secureFnc, function (req, res, next) {
            const permission = checkGroupsFnc(req);
            if (res.statusCode === 403) {
                runtime.logger.error("api delete plugins: Tocken Expired");
            } else if (!authJwt.haveAdminPermission(permission)) {
                res.status(401).json({ error: "unauthorized_error", message: "Unauthorized!" });
                runtime.logger.error("api delete plugins: Unauthorized");
            } else {
                runtime.plugins.removePlugin(req.query.param).then(function (data) {
                    res.end();
                }).catch(function (err) {
                    if (err.code) {
                        res.status(400).json({ error: err.code, message: err.message });
                    } else {
                        res.status(400).json({ error: "unexpected_error", message: err.toString() });
                    }
                    runtime.logger.error("api delete plugins: " + err.message);
                });
            }
        });
        return pluginsApp;
    }
}