budibase/packages/server/src/api/controllers/user.js

const CouchDB = require("../../db")
const {
  generateUserMetadataID,
  getUserMetadataParams,
  getEmailFromUserMetadataID,
} = require("../../db/utils")
const { InternalTables } = require("../../db/utils")
const { getRole } = require("../../utilities/security/roles")
const {
  getGlobalUsers,
  saveGlobalUser,
  deleteGlobalUser,
} = require("../../utilities/workerRequests")
const { getFullUser } = require("../../utilities/users")

exports.fetchMetadata = async function(ctx) {
  const database = new CouchDB(ctx.appId)
  const global = await getGlobalUsers(ctx, ctx.appId)
  const metadata = (
    await database.allDocs(
      getUserMetadataParams(null, {
        include_docs: true,
      })
    )
  ).rows.map(row => row.doc)
  const users = []
  for (let user of global) {
    const info = metadata.find(meta => meta._id.includes(user.email))
    // remove these props, not for the correct DB
    delete user._id
    delete user._rev
    users.push({
      ...user,
      ...info,
      // make sure the ID is always a local ID, not a global one
      _id: generateUserMetadataID(user.email),
    })
  }
  ctx.body = users
}

exports.createMetadata = async function(ctx) {
  const appId = ctx.appId
  const db = new CouchDB(appId)
  const { roleId } = ctx.request.body
  const email = ctx.request.body.email || ctx.user.email

  // check role valid
  const role = await getRole(appId, roleId)
  if (!role) ctx.throw(400, "Invalid Role")

  const metadata = await saveGlobalUser(ctx, appId, email, ctx.request.body)

  const user = {
    ...metadata,
    _id: generateUserMetadataID(email),
    type: "user",
    tableId: InternalTables.USER_METADATA,
  }

  const response = await db.post(user)
  // for automations to make it obvious was successful
  ctx.status = 200
  ctx.body = {
    _id: response.id,
    _rev: response.rev,
    email,
  }
}

exports.updateMetadata = async function(ctx) {
  const appId = ctx.appId
  const db = new CouchDB(appId)
  const user = ctx.request.body
  let email = user.email || getEmailFromUserMetadataID(user._id)
  const metadata = await saveGlobalUser(ctx, appId, email, ctx.request.body)
  if (!metadata._id) {
    metadata._id = generateUserMetadataID(email)
  }
  if (!metadata._rev) {
    metadata._rev = ctx.request.body._rev
  }
  ctx.body = await db.put({
    ...metadata,
  })
}

exports.destroyMetadata = async function(ctx) {
  const db = new CouchDB(ctx.appId)
  const email =
    ctx.params.email || getEmailFromUserMetadataID(ctx.params.userId)
  await deleteGlobalUser(ctx, email)
  try {
    const dbUser = await db.get(generateUserMetadataID(email))
    await db.remove(dbUser._id, dbUser._rev)
  } catch (err) {
    // error just means the global user has no config in this app
  }
  ctx.body = {
    message: `User ${ctx.params.email} deleted.`,
  }
}

exports.findMetadata = async function(ctx) {
  ctx.body = await getFullUser({
    ctx,
    email: ctx.params.email,
    userId: ctx.params.userId,
  })
}