99 lines
2.7 KiB
TypeScript
99 lines
2.7 KiB
TypeScript
import {
|
|
APP_DEV_PREFIX,
|
|
DocumentType,
|
|
getGlobalIDFromUserMetadataID,
|
|
} from "../db/utils"
|
|
import {
|
|
doesUserHaveLock,
|
|
updateLock,
|
|
checkDebounce,
|
|
setDebounce,
|
|
} from "../utilities/redis"
|
|
import { db as dbCore, cache } from "@budibase/backend-core"
|
|
import { UserCtx, Database } from "@budibase/types"
|
|
|
|
const DEBOUNCE_TIME_SEC = 30
|
|
|
|
/************************************************** *
|
|
* This middleware has been broken out of the *
|
|
* "authorized" middleware as it had nothing to do *
|
|
* with authorization, but requires the perms *
|
|
* imparted by it. This middleware shouldn't *
|
|
* be called directly, it should always be called *
|
|
* through the authorized middleware *
|
|
****************************************************/
|
|
|
|
async function checkDevAppLocks(ctx: UserCtx) {
|
|
const appId = ctx.appId
|
|
|
|
// if any public usage, don't proceed
|
|
if (!ctx.user?._id && !ctx.user?.userId) {
|
|
return
|
|
}
|
|
|
|
// not a development app, don't need to do anything
|
|
if (!appId || !appId.startsWith(APP_DEV_PREFIX)) {
|
|
return
|
|
}
|
|
|
|
// If this user already owns the lock, then update it
|
|
if (await doesUserHaveLock(appId, ctx.user)) {
|
|
await updateLock(appId, ctx.user)
|
|
}
|
|
}
|
|
|
|
async function updateAppUpdatedAt(ctx: UserCtx) {
|
|
const appId = ctx.appId
|
|
// if debouncing skip this update
|
|
// get methods also aren't updating
|
|
if (ctx.method === "GET" || (await checkDebounce(appId))) {
|
|
return
|
|
}
|
|
await dbCore.doWithDB(appId, async (db: Database) => {
|
|
try {
|
|
const metadata = await db.get<any>(DocumentType.APP_METADATA)
|
|
metadata.updatedAt = new Date().toISOString()
|
|
|
|
metadata.updatedBy = getGlobalIDFromUserMetadataID(ctx.user?.userId!)
|
|
|
|
const response = await db.put(metadata)
|
|
metadata._rev = response.rev
|
|
await cache.app.invalidateAppMetadata(appId, metadata)
|
|
// set a new debounce record with a short TTL
|
|
await setDebounce(appId, DEBOUNCE_TIME_SEC)
|
|
} catch (err: any) {
|
|
// if a 409 occurs, then multiple clients connected at the same time - ignore
|
|
if (err?.status === 409) {
|
|
return
|
|
} else {
|
|
throw err
|
|
}
|
|
}
|
|
})
|
|
}
|
|
|
|
export default async function builder(ctx: UserCtx) {
|
|
const appId = ctx.appId
|
|
// this only functions within an app context
|
|
if (!appId) {
|
|
return
|
|
}
|
|
|
|
// check authenticated
|
|
if (!ctx.isAuthenticated) {
|
|
return ctx.throw(403, "Session not authenticated")
|
|
}
|
|
|
|
const referer = ctx.headers["referer"]
|
|
|
|
const hasAppId = !referer ? false : referer.includes(appId)
|
|
const editingApp = referer ? hasAppId : false
|
|
// check this is a builder call and editing
|
|
if (!editingApp) {
|
|
return
|
|
}
|
|
// check locks
|
|
await checkDevAppLocks(ctx)
|
|
// set updated at time on app
|
|
await updateAppUpdatedAt(ctx)
|
|
}
|