auth0-extensions/auth0-delegated-administration-extension

import Promise from 'bluebird';
import { NotFoundError } from 'auth0-extension-tools';


export default (action, scriptManager) => (req, res, next) =>
  req.auth0.users.get({ id: req.params.id })
    .then(user => {
      if (!user) {
        return Promise.reject(new NotFoundError(`User not found: ${req.params.id}`));
      }

      const accessContext = {
        request: {
          user: req.user
        },
        payload: {
          user,
          action
        }
      };

      return scriptManager.execute('access', accessContext)
        .then(() => {
          // cache the target user so we don't have to get it again if it is needed
          req.targetUser = user;
        });
    })
    .then(() => next())
    .catch(next);