dsi-icl/optimise

/*eslint no-console: "off"*/
import dbcon from '../utils/db-connection';

class RequestMiddleware {
    static verifySessionAndPrivilege(req, res, next) {
        const user = req.user ? req.user.id : null;
        if (user !== null) {
            next();
        } else if (req.url === '/users/login' || req.url === '/whoami' || req.url === '/sync' || req.url === '/sync/status') {
            next();
        } else {
            res.status(400).json({ status: 'error', message: 'Please login first' });
        }
    }

    /*
    ** Method:  addActionToCollection
    ** Purpose: Monitor behavior of the user and save in the database each action taken by the user.
    */
    static addActionToCollection(req, __unused__res, next) {
        const username = req.user ? req.user.username : req.body ? req.body.username : '';
        const body = Object.assign({}, req.body);
        // We do not filter here are assume password are always sent as 'pw'
        if (body.pw !== undefined)
            body.pw = '*';
        dbcon()('LOG_ACTIONS')
            .insert({ router: req.url, method: req.method, body: JSON.stringify(body), user: username ? username : '' })
            .then(() => {
                if (process.env.NODE_ENV === 'development')
                    console.debug(`${req.method} - ${req.originalUrl} ${username ? `: ${username}` : ''}`);
                return true;
            })
            .catch(err => {
                if (process.env.NODE_ENV === 'development')
                    console.debug(`Error caught :${err}`);
                return false;
            });
        next();
    }
}


export default RequestMiddleware;