ThinkDeepTech/thinkdeep

/**
 * Check whether the permissions object is valid.
 * @param {Object} permissions - Permissions subject.
 * @return {Boolean} - True if the user object is valid. False otherwise.
 */
const isValidPerm = (permissions) => {
  return (
    !!permissions && !!Object.keys(permissions).length && !!permissions?.scope
  );
};

/**
 * Check whether the me object is valid.
 * @param {Object} me - Object extracted from an ID token.
 * @return {Boolean} - True if the me object is valid. False otherwise.
 */
const isValidMe = (me) => {
  return !!me && !!me?.email;
};

/**
 * Determine if the user has read all access.
 * @param {Object} permissions - Permissions object taken from access token.
 * @return {Boolean} - True if the user has read:all scope. False otherwise.
 */
const hasReadAllAccess = (permissions) => {
  return (
    isValidPerm(permissions) &&
    !!permissions?.scope?.split(' ').includes('read:all')
  );
};

/**
 * Check whether the specified user email matches that pulled from the me object.
 * @param {String} userEmail
 * @param {Object} me - Me object pulled from the ID token.
 * @return {Boolean} - True if the userEmail and me.email match. False otherwise.
 */
const isCurrentUser = (userEmail, me) => {
  if (!isValidMe(me)) return false;
  return userEmail.toLowerCase() === me.email.toLowerCase();
};

export {hasReadAllAccess, isCurrentUser};