mylisabox/lisa-box

'use strict'

const Policy = require('trails/policy')

/**
 * @module RegisterPolicy
 * @description Protect registration when there already users in DB
 */
module.exports = class AuthTokenPolicy extends Policy {
  asQueryParam(req, res, next) {
    const token = req.query.token.replace('/', '')
    delete req.query.token
    req.headers['Authorization'] = 'JWT '+token
    return this.app.policies['Passport'].jwt(req, res, next)
  }

  protect(req, res, next) {
    const header = req.headers['device-id']
    const nextPolicy = () => this.app.policies['Passport'].jwt(req, res, next)
    const checkHeaderKnownDevice = () => {
      return this.app.orm.Device.findAll({
        where: {
          pluginName: 'lisa-plugin-voice'
        }
      }).then(devices => {
        const results = devices.filter(device => device.privateData.identifier === header)
        if (!devices || devices.length === 0 || results.length === 0) {
          // if device not known but coming form localhost we authorized it
          if (req.connection.remoteAddress === '127.0.0.1' ||
            req.connection.remoteAddress === '::ffff:127.0.0.1' ||
            req.connection.remoteAddress === '::1') {
            next()
          } else {
            nextPolicy()
          }
        }
        else {
          if (!req.body.context) {
            req.body.context = {}
          }
          //Device associated with a room, by default set the context to this room
          if (req.body.context.room) {
            next()
          }
          else {
            this.app.orm.Room.find({ where: { id: results[0].roomId } }).then(room => {
              req.body.context.room = room ? room.toJSON() : undefined
              next()
            })
          }

        }
      }).catch(err => nextPolicy())
    }

    if (header) {
      checkHeaderKnownDevice()
    } else if (req.connection.remoteAddress === '127.0.0.1' ||
      req.connection.remoteAddress === '::ffff:127.0.0.1' ||
      req.connection.remoteAddress === '::1') {
      next()
    } else {
      nextPolicy()
    }
  }
}