prescottprue/fireadmin

import * as admin from 'firebase-admin'
import * as functions from 'firebase-functions'
import fetch from 'node-fetch'
import { eventPathName } from './constants'
import { to } from '../utils/async'
import {
  authClientFromServiceAccount,
  serviceAccountFromFirestorePath,
  ServiceAccount
} from '../utils/serviceAccounts'
import { PROJECTS_COLLECTION } from '../constants/firebasePaths'

interface RequestSettings {
  method: string
  body: any
  json?: boolean
  headers: any
}

interface RequestSettingsWithAuth extends RequestSettings {
  headers: { Authorization: string }
}

/**
 * Add authentication to a google request using serviceAccount
 * @param serviceAccount - Service account object
 * @param requestSettings - Request object without auth
 * @returns Resolves with request that has auth attached
 */
async function addServiceAccountAuthToRequest(
  serviceAccount: ServiceAccount,
  requestSettings: RequestSettings
): Promise<RequestSettingsWithAuth> {
  const client = await authClientFromServiceAccount(serviceAccount)
  return {
    ...requestSettings,
    headers: {
      Authorization: `${client.credentials.token_type} ${client.credentials.access_token}`
    }
  }
}

/**
 * Request google APIs with auth attached
 * @param serviceAccount - Service account object
 * @param requestSettings - Settings for request
 * @returns Resolves with results of Goggle API request
 */
export async function googleApisRequest(
  serviceAccount: ServiceAccount,
  apiUrl: string,
  requestSettings: RequestSettings
): Promise<any> {
  const requestSettingsWithAuth = await addServiceAccountAuthToRequest(
    serviceAccount,
    requestSettings
  )
  try {
    const response = await fetch(apiUrl, requestSettingsWithAuth)
    const jsonResponse = await response.json()
    console.log(`Google API Request completed successfully`, jsonResponse)
    return jsonResponse
  } catch (err) {
    console.error(
      `Google API Responded with an error code: ${err.statusCode} \n ${
        err.error ? err.error.message : ''
      }`
    )
    throw err.error || err
  }
}

/**
 * Call a Google API with a Service Account
 * @param snap - Snapshot of the event
 * @param context - Context of the event
 * @returns Resolves with results of calling Google API
 */
export default async function callGoogleApi(
  snap: admin.database.DataSnapshot,
  context: functions.EventContext
): Promise<any> {
  const eventVal = snap.val()
  const { pushId: eventId } = context.params
  const {
    apiUrl,
    api = 'storage',
    method = 'get',
    body,
    apiVersion = 'v1',
    suffix = `b/${eventVal.storageBucket}`,
    projectId,
    environment
  } = eventVal

  const responseRef = admin
    .database()
    .ref(`responses/${eventPathName}/${eventId}`)

  let serviceAccount
  // Set to application default credentials when using compute api
  if (projectId && environment) {
    const serviceAccountPath = `${PROJECTS_COLLECTION}/${projectId}/environments/${environment}`
    console.log(
      'Searching for service account from: ',
      serviceAccountPath
    )
    let getSAErr
    // Get Service Account object by decryping string from Firestore
    ;[getSAErr, serviceAccount] = await to(
      serviceAccountFromFirestorePath(serviceAccountPath)
    )
    // Handle errors getting service account
    if (getSAErr || !serviceAccount) {
      console.error('Error getting service account:', getSAErr)
      const missingParamsErr = getSAErr
      await responseRef.set({
        completed: true,
        error: getSAErr.message || getSAErr,
        completedAt: admin.database.ServerValue.TIMESTAMP
      })
      throw missingParamsErr
    }
  } else {
    if (!functions.config().service_account) {
      throw new Error('service_account functions config variable not set')
    }
    serviceAccount = functions.config().service_account
  }

  const uri =
    apiUrl ||
    `https://www.googleapis.com/${api}/${apiVersion}/${suffix}${
      api === 'storage' ? '?cors' : ''
    }`
  // Call Google API with service account
  const [err, response] = await to(
    googleApisRequest(serviceAccount, uri, {
      method,
      body,
      headers: {
        'Gdata-Version': '3.0'
      },
      json: true
    })
  )

  // Handle errors calling Google API
  if (err) {
    const errorMessage = err?.error?.message || JSON.stringify(err)
    const errorCode = err?.error?.code || 500
    console.error(`Error calling Google API: ${uri}`, err.message || err)
    await responseRef.set({
      completed: true,
      successful: false,
      error: {
        message: errorMessage,
        code: errorCode
      },
      completedAt: admin.database.ServerValue.TIMESTAMP
    })
    throw new Error(errorMessage)
  }

  console.log('Google API responded successfully. Writing response to RTDB...')
  await responseRef.set({
    completed: true,
    responseData: response,
    completedAt: admin.database.ServerValue.TIMESTAMP
  })

  console.log('Success! Response data written to RTDB. Exiting.')
  return response
}