Source: admin/index.js

  1. /**
  2.  * @module admin
  3.  */
  4. const adminRepo = require("../../repositories/admin");
  5. const jose = require("../jose");
  6. const digest = require("../digest");
  7. const config = require("../../config").jose.aud;
  8. const mail = require("../mail");
  10. /**
  11.  * Temporary logs of bugreports.
  12.  * Solely used for weekly notification of admins
  13.  * and cleared afterwards to ensure privacy of users.
  14.  */
  15. const bugReports = [];
  17. /**
  18.  * Temporary logs contact requests.
  19.  * Solely used for weekly notification of admins
  20.  * and cleared afterwards to ensure privacy of users.
  21.  */
  22. const contactRequests = [];
  24. /**
  25.  * Attempt to log in admin and generate a JWE token
  26.  * if successful.
  27.  * Throws an error on failure with appropriate message.
  28.  * @param {String} email
  29.  * @param {String} password
  30.  * @return {Object} JWE token on success
  31.  * @throws {Error} on invalid email or password
  32.  */
  33. const logInAdmin = async (email, password) => {
  34.     const findResult = await adminRepo.findByEmail(email);
  35.     if (findResult.rows.length === 0) {
  36.         throw new Error("Invalid admin email.");
  37.     }
  38.     const admin = findResult.rows[0];
  39.     if (digest.hashPassWithSaltInHex(password, admin.salt) === admin.passwordHash) {
  40.         return jose.signAndEncrypt({
  41.             sub: admin.id.toString(),
  42.             name: admin.username,
  43.             email: email,
  44.         });
  45.     } else {
  46.         throw new Error("Invalid admin password.");
  47.     }
  48. };
  50. /**
  51.  * Attempt to authenticate admin
  52.  * by JWE. Upon successful verification,
  53.  * the admin's (user)name is returned.
  54.  * Otherwise, a JWE or JWT error is thrown.
  55.  * @param {Object} jwe
  56.  * @return {string} name of admin
  57.  */
  58. const authenticateAdmin = (jwe) => {
  59.     return jose.decryptAndVerify(jwe, config).name;
  60. };
  62. /**
  63.  * Log a copy of a bugreport in
  64.  * weekly temp storage.
  65.  * @param {Object} bugreport
  66.  */
  67. const logBugReport = (bugreport) => {
  68.     bugReports.push(bugreport);
  69. };
  71. /**
  72.  * Log a copy of a contact request in
  73.  * weekly temp storage.
  74.  * @param {Object} contactRequest
  75.  */
  76. const logContactRequest = (contactRequest) => {
  77.     contactRequests.push(contactRequest);
  78. };
  80. /**
  81.  * Send weekly summary of bugreports and contact
  82.  * requests to admins, then clear temp storage
  83.  * to ensure privacy of users.
  84.  */
  85. const sendSummary = () => {
  86.     mail.sendEmail(
  87.         process.env.DEFAULT_EMAIL_ADDRESS,
  88.         process.env.SUMMARY_EMAIL_ADDRESS,
  89.         "Your RDFmapped weekly summary",
  90.         `Hello,\nHere is your rdfmapped.com weekly summary.\n\n` +
  91.         `Number of new bugreports: ${bugReports.length}\nNumber of new contact requests: ${contactRequests.length}\n\n\n` +
  92.         `Bug reports: ${bugReports.toString()}\n\n` +
  93.         `Contact requests: ${contactRequests.toString()}\n\n`,
  94.         `<p>Hello,</p><p>Here is your rdfmapped.com weekly summary.<br></p>` +
  95.         `<p>Number of new bugreports: <b>${bugReports.length}</b></p>` +
  96.         `<p>Number of new contact requests: <b>${contactRequests.length}</b><br></p>` +
  97.         `<p>Bug reports: <code>${JSON.stringify(bugReports)}</code><br></p>` +
  98.         `<p>Contact requests: <code>${JSON.stringify(contactRequests)}</code></p>`);
  99.     bugReports.length = 0;
  100.     contactRequests.length = 0;
  101. };
  103. module.exports = {
  104.     logInAdmin,
  105.     authenticateAdmin,
  106.     logBugReport,
  107.     logContactRequest,
  108.     sendSummary,
  109. };