69 lines
1.9 KiB
TypeScript
69 lines
1.9 KiB
TypeScript
import { outputProcessing } from "../../utilities/rowProcessor"
|
|
import { InternalTables } from "../../db/utils"
|
|
import { getFullUser } from "../../utilities/users"
|
|
import { roles, context } from "@budibase/backend-core"
|
|
|
|
/**
|
|
* Add the attributes that are session based to the current user.
|
|
*/
|
|
const addSessionAttributesToUser = (ctx: any) => {
|
|
if (ctx.user) {
|
|
ctx.body.license = ctx.user.license
|
|
}
|
|
}
|
|
|
|
export async function fetchSelf(ctx: any) {
|
|
let userId = ctx.user.userId || ctx.user._id
|
|
/* istanbul ignore next */
|
|
if (!userId || !ctx.isAuthenticated) {
|
|
ctx.body = {}
|
|
return
|
|
}
|
|
|
|
const user = await getFullUser(ctx, userId)
|
|
// this shouldn't be returned by the app self
|
|
delete user.roles
|
|
// forward the csrf token from the session
|
|
user.csrfToken = ctx.user.csrfToken
|
|
|
|
if (context.getAppId()) {
|
|
const db = context.getAppDB()
|
|
// remove the full roles structure
|
|
delete user.roles
|
|
try {
|
|
const userTable = await db.get(InternalTables.USER_METADATA)
|
|
const metadata = await db.get(userId)
|
|
// make sure there is never a stale csrf token
|
|
delete metadata.csrfToken
|
|
// specifically needs to make sure is enriched
|
|
ctx.body = await outputProcessing(userTable, {
|
|
...user,
|
|
...metadata,
|
|
})
|
|
} catch (err: any) {
|
|
let response
|
|
// user didn't exist in app, don't pretend they do
|
|
if (user.roleId === roles.BUILTIN_ROLE_IDS.PUBLIC) {
|
|
response = {}
|
|
}
|
|
// user has a role of some sort, return them
|
|
else if (err.status === 404) {
|
|
const metadata = {
|
|
...user,
|
|
_id: userId,
|
|
}
|
|
const dbResp = await db.put(metadata)
|
|
user._rev = dbResp.rev
|
|
response = user
|
|
} else {
|
|
response = user
|
|
}
|
|
ctx.body = response
|
|
}
|
|
} else {
|
|
ctx.body = user
|
|
}
|
|
|
|
addSessionAttributesToUser(ctx)
|
|
}
|