better errors + better tools

This commit is contained in:
Yanis Rigaudeau 2022-10-30 19:35:35 +01:00
parent 46a7e07b86
commit 82d356ef5e
Signed by: yanis
GPG Key ID: 4DD2841DF1C94D83
7 changed files with 93 additions and 53 deletions

View File

@ -9,7 +9,7 @@ declare module 'express-session' {
} }
} }
export function getId(req: Request): string { export function getRequestId(req: Request): string {
return req.header('request-id') || 'unknown'; return req.header('request-id') || 'unknown';
} }
@ -22,8 +22,9 @@ export function RequestId(): RequestHandler {
export function CheckPermissions(): RequestHandler { export function CheckPermissions(): RequestHandler {
function getResourceId(req: Request): string | null { function getResourceId(req: Request): string | null {
if (req.params.uuid) return req.params.uuid; if (req.method === 'GET' && req.params.uuid) return req.params.uuid;
if (req.body.uuid) return req.body.uuid; if ((req.method === 'POST' || req.method === 'PUT') && req.body.uuid)
return req.body.uuid;
return null; return null;
} }
@ -48,6 +49,7 @@ export function CheckPermissions(): RequestHandler {
next({ status: 403, messsage: 'Forbidden' }); next({ status: 403, messsage: 'Forbidden' });
return; return;
} }
if (canAccessRessource(req.session.user, ressourceId)) { if (canAccessRessource(req.session.user, ressourceId)) {
next(); next();
return; return;
@ -56,7 +58,8 @@ export function CheckPermissions(): RequestHandler {
return; return;
} }
next({ status: 401, messsage: 'Unauthorized' }); // Should be unreachable
next({ status: 403, messsage: 'Forbidden' });
}; };
} }
@ -76,6 +79,6 @@ export function ErrorHandler(): ErrorRequestHandler {
return (error, req, res, next) => { return (error, req, res, next) => {
error.status error.status
? res.status(error.status).send(error) ? res.status(error.status).send(error)
: res.status(500).send(error); : res.status(500).send({ status: 500, message: error.message });
}; };
} }

View File

@ -7,17 +7,19 @@ import {
ReadUserSchema, ReadUserSchema,
LogoutUserSchema, LogoutUserSchema,
} from './schema/user'; } from './schema/user';
import { CheckPermissions, getId, SchemaValidator } from './middleware'; import { CheckPermissions, getRequestId, SchemaValidator } from './middleware';
function LoginHandler(services: Services): RequestHandler { function LoginHandler(services: Services): RequestHandler {
const login = LoginUser(services); const login = LoginUser(services);
return async (req, res, next) => { return async (req, res, next) => {
const user = await login(getId(req), req.body); try {
user ? (req.session.user = user) : (req.session.user = null); const user = await login(getRequestId(req), req.body);
user user ? (req.session.user = user) : (req.session.user = null);
? res.status(200).send(user) res.status(200).send(user);
: next({ status: 401, message: 'wrong username or password' }); } catch (error) {
next({ status: 401, message: 'wrong username or password' });
}
}; };
} }
@ -27,7 +29,7 @@ function LogoutHandler(services: Services): RequestHandler {
req.session.user = null; req.session.user = null;
res.status(204).send(); res.status(204).send();
} else { } else {
next({ status: 401, message: 'not logged in' }); next({ status: 401, message: 'Not Logged In' });
} }
}; };
} }
@ -36,8 +38,12 @@ function CreateHandler(services: Services): RequestHandler {
const createUser = CreateUser(services); const createUser = CreateUser(services);
return async (req, res, next) => { return async (req, res, next) => {
const user = await createUser(getId(req), req.body); try {
user ? res.status(201).send(user) : next(); const user = await createUser(getRequestId(req), req.body);
res.status(201).send(user);
} catch (error) {
next({ status: 409, message: 'User Already Exists' });
}
}; };
} }
@ -45,10 +51,12 @@ function ReadHandler(services: Services): RequestHandler {
const readUser = ReadUser(services); const readUser = ReadUser(services);
return async (req, res, next) => { return async (req, res, next) => {
const user = await readUser(getId(req), req.params.uuid); try {
user const user = await readUser(getRequestId(req), req.params.uuid);
? res.status(200).send(user) res.status(200).send(user);
: next({ status: 404, message: 'user not found' }); } catch (error) {
next({ status: 404, message: 'User Not Found' });
}
}; };
} }

View File

@ -1,5 +1,5 @@
import { Collection, Db } from 'mongodb'; import { Collection, Db } from 'mongodb';
import { LoginUserBody } from '../../../../core/src/user'; import { LoginUserBody, UserInfo } from '@core';
import { User, UserWithPassword } from '../../entities/user'; import { User, UserWithPassword } from '../../entities/user';
import log from '../../functions/logger'; import log from '../../functions/logger';
import { generateHash } from '../../functions/password'; import { generateHash } from '../../functions/password';
@ -11,42 +11,58 @@ class UserModel {
this.collection = db.collection<User>('users'); this.collection = db.collection<User>('users');
} }
public async login(tracker: string, data: LoginUserBody) { public async login(tracker: string, data: LoginUserBody): Promise<User> {
const checkUser = await this.collection.findOne({ const checkUser = await this.collection.findOne({
username: data.username, username: data.username,
}); });
if (checkUser === null) { if (!checkUser) {
log(tracker, 'User Not Found'); log(tracker, 'User Not Found');
return null; throw new Error();
} }
const user = await this.collection.findOne({ const userDocument = await this.collection.findOne({
uuid: checkUser.uuid, uuid: checkUser.uuid,
password: generateHash(checkUser.uuid, data.password), password: generateHash(checkUser.uuid, data.password),
}); });
if (user === null) { if (!userDocument) {
log(tracker, 'Wrong Password'); log(tracker, 'Wrong Password');
return null; throw new Error();
} }
const user = new User(userDocument);
log(tracker, 'LOG IN', user); log(tracker, 'LOG IN', user);
return new User(user); return new User(user);
} }
public async create(tracker: string, user: UserWithPassword) { public async create(
await this.collection.insertOne(user); tracker: string,
userInfo: UserWithPassword,
): Promise<User> {
const checkUser = await this.collection.findOne({
username: userInfo.username,
});
if (checkUser) {
log(tracker, 'User Already Exists');
throw new Error();
}
await this.collection.insertOne(userInfo);
const user = await this.read(tracker, userInfo.uuid);
log(tracker, 'CREATE USER', user); log(tracker, 'CREATE USER', user);
return this.read(tracker, user.uuid); return user;
} }
public async read(tracker: string, uuid: string) { public async read(tracker: string, uuid: string): Promise<User> {
const user = await this.collection.findOne({ uuid }); const userDocument = await this.collection.findOne({ uuid });
if (user === null) { if (!userDocument) {
log(tracker, 'User Not Found'); log(tracker, 'User Not Found');
return null; throw new Error();
} }
const user = new User(userDocument);
log(tracker, 'READ USER', user); log(tracker, 'READ USER', user);
return new User(user); return user;
} }
} }

View File

@ -1,11 +1,12 @@
export function log(tracker: string, ...message: unknown[]) { export function log(tracker: string, ...message: unknown[]) {
message.forEach((obj, index) => { if (message)
try { message.forEach((obj, index) => {
message[index] = JSON.stringify(obj); try {
} catch {} message[index] = JSON.stringify(obj);
}); } catch {}
});
tracker ? console.log(`[${tracker}]`, ...message) : console.log(...message); message ? console.log(`[${tracker}]`, ...message) : console.log(...tracker);
} }
export default log; export default log;

View File

@ -4,33 +4,33 @@ import { UserWithPassword } from '../entities/user';
export function LoginUser( export function LoginUser(
services: Services, services: Services,
): (tracker: string, raw: LoginUserBody) => Promise<UserInfo | null> { ): (tracker: string, raw: LoginUserBody) => Promise<UserInfo> {
const { userModel } = services; const { userModel } = services;
return async (tracker, raw) => { return async (tracker, raw) => {
const user = await userModel.login(tracker, raw); const user = await userModel.login(tracker, raw);
return user ? user.Info() : null; return user.Info();
}; };
} }
export function CreateUser( export function CreateUser(
services: Services, services: Services,
): (tracker: string, raw: CreateUserBody) => Promise<UserInfo | null> { ): (tracker: string, raw: CreateUserBody) => Promise<UserInfo> {
const { userModel } = services; const { userModel } = services;
return async (tracker, raw) => { return async (tracker, raw) => {
const user = await userModel.create(tracker, new UserWithPassword(raw)); const user = await userModel.create(tracker, new UserWithPassword(raw));
return user ? user.Info() : null; return user.Info();
}; };
} }
export function ReadUser( export function ReadUser(
services: Services, services: Services,
): (tracker: string, uuid: string) => Promise<UserInfo | null> { ): (tracker: string, uuid: string) => Promise<UserInfo> {
const { userModel } = services; const { userModel } = services;
return async (tracker, uuid) => { return async (tracker, uuid) => {
const user = await userModel.read(tracker, uuid); const user = await userModel.read(tracker, uuid);
return user ? user.Info() : null; return user.Info();
}; };
} }

View File

@ -1,6 +1,8 @@
#!/usr/bin/python #!/usr/bin/python
import os from os import chdir, system, path
import sys from sys import argv
from subprocess import run, PIPE
from multiprocessing import Process
apps = ['core', 'api', 'www'] apps = ['core', 'api', 'www']
commands = { commands = {
@ -14,19 +16,29 @@ def print_commands():
print('Available commands:', [c for c in commands]) print('Available commands:', [c for c in commands])
def run_command_in_app(app: str, command: str):
chdir(app)
result = run(command.split(' '), stdout=PIPE, stderr=PIPE, text=True)
status = 'DONE' if result.returncode == 0 else 'ERROR'
print('%s:\t%s' % (app, status))
if status == 'ERROR':
print(result.stdout, result.stderr)
if __name__ == '__main__': if __name__ == '__main__':
if len(sys.argv) < 2: if len(argv) < 2:
print_commands() print_commands()
exit() exit()
cmd = sys.argv[1] cmd = argv[1]
if cmd not in commands: if cmd not in commands:
print('Command \'%s\' not available' % cmd) print('Command \'%s\' not available' % cmd)
print_commands() print_commands()
exit() exit()
chdir(path.join(path.dirname(path.realpath(__file__)), '..'))
print('Running \'%s\' on %d apps: %s' % (commands[cmd], len(apps), apps)) print('Running \'%s\' on %d apps: %s' % (commands[cmd], len(apps), apps))
for app in apps: for app in apps:
os.chdir(app) Process(target=run_command_in_app, args=(app, commands[cmd])).start()
os.system(commands[cmd])
os.chdir('..')

View File

@ -5,7 +5,7 @@
"author": "Yanis Rigaudeau - Axel Barault", "author": "Yanis Rigaudeau - Axel Barault",
"private": true, "private": true,
"scripts": { "scripts": {
"build": "rollup -c", "build": "rollup -c --failAfterWarnings",
"dev": "rollup -c -w", "dev": "rollup -c -w",
"start": "sirv public --no-clear --host --single", "start": "sirv public --no-clear --host --single",
"check": "svelte-check --tsconfig ./tsconfig.json", "check": "svelte-check --tsconfig ./tsconfig.json",