81 lines
2.6 KiB
TypeScript
81 lines
2.6 KiB
TypeScript
import { createRoute, OpenAPIHono, z } from "@hono/zod-openapi";
|
|
import { setUserAccess } from "../../controllers/userRoles/setUserRoles.js";
|
|
import { apiHit } from "../../../../globalUtils/apiHits.js";
|
|
import { apiReturn } from "../../../../globalUtils/apiReturn.js";
|
|
import { authMiddleware } from "../../middleware/authMiddleware.js";
|
|
import hasCorrectRole from "../../middleware/roleCheck.js";
|
|
import { responses } from "../../../../globalUtils/routeDefs/responses.js";
|
|
|
|
const app = new OpenAPIHono();
|
|
|
|
const responseSchema = z.object({
|
|
success: z.boolean().openapi({ example: true }),
|
|
message: z.string().optional().openapi({ example: "user access" }),
|
|
data: z.array(z.object({})).optional().openapi({ example: [] }),
|
|
});
|
|
|
|
const UserAccess = z.object({
|
|
username: z
|
|
.string()
|
|
.regex(/^[a-zA-Z0-9_]{3,30}$/)
|
|
.openapi({ example: "smith034" }),
|
|
module: z.string().openapi({ example: "production" }),
|
|
role: z.string().openapi({ example: "viewer" }),
|
|
override: z.string().optional().openapi({ example: "secretString" }),
|
|
});
|
|
|
|
app.openapi(
|
|
createRoute({
|
|
tags: ["Auth:admin"],
|
|
summary: "Sets Users access",
|
|
method: "post",
|
|
path: "/setuseraccess",
|
|
middleware: [
|
|
authMiddleware,
|
|
hasCorrectRole(["admin", "systemAdmin"], "admin"),
|
|
],
|
|
description: "When logged in you will be able to grant new permissions",
|
|
request: {
|
|
body: {
|
|
content: {
|
|
"application/json": { schema: UserAccess },
|
|
},
|
|
},
|
|
},
|
|
responses: responses(),
|
|
}),
|
|
async (c) => {
|
|
//apiHit(c, { endpoint: "api/auth/setUserRoles" });
|
|
const { username, module, role, override } = await c.req.json();
|
|
try {
|
|
const access = await setUserAccess(
|
|
username,
|
|
module,
|
|
role,
|
|
override
|
|
);
|
|
//return apiReturn(c, true, access?.message, access?.data, 200);
|
|
return c.json(
|
|
{
|
|
success: access.success,
|
|
message: access.message,
|
|
data: [], //access?.data,
|
|
},
|
|
200
|
|
);
|
|
} catch (error) {
|
|
console.log(error);
|
|
//return apiReturn(c, false, "Error in setting the user access", error, 400);
|
|
return c.json(
|
|
{
|
|
success: false,
|
|
message: "Error in setting the user access",
|
|
data: error,
|
|
},
|
|
400
|
|
);
|
|
}
|
|
}
|
|
);
|
|
export default app;
|