mirror of
https://github.com/overleaf/overleaf.git
synced 2024-09-16 02:52:31 -04:00
64 lines
2.1 KiB
CoffeeScript
64 lines
2.1 KiB
CoffeeScript
Project = require('../../models/Project').Project
|
|
PublicAccessLevels = require '../Authorization/PublicAccessLevels'
|
|
ObjectId = require("mongojs").ObjectId
|
|
|
|
module.exports = TokenAccessHandler =
|
|
|
|
findProjectWithReadOnlyToken: (token, callback=(err, project)->) ->
|
|
Project.findOne {
|
|
'tokens.readOnly': token,
|
|
'publicAccesLevel': PublicAccessLevels.TOKEN_BASED
|
|
}, {_id: 1, publicAccesLevel: 1}, (err, project) ->
|
|
return callback(err) if err?
|
|
callback(null, project)
|
|
|
|
findProjectWithReadAndWriteToken: (token, callback=(err, project)->) ->
|
|
Project.findOne {
|
|
'tokens.readAndWrite': token,
|
|
'publicAccesLevel': PublicAccessLevels.TOKEN_BASED
|
|
}, {_id: 1, publicAccesLevel: 1}, (err, project) ->
|
|
return callback(err) if err?
|
|
callback(null, project)
|
|
|
|
addReadOnlyUserToProject: (userId, projectId, callback=(err)->) ->
|
|
userId = ObjectId(userId.toString())
|
|
projectId = ObjectId(projectId.toString())
|
|
Project.update {
|
|
_id: projectId
|
|
}, {
|
|
$addToSet: {tokenAccessReadOnly_refs: userId}
|
|
}, (err) ->
|
|
callback(err)
|
|
|
|
addReadAndWriteUserToProject: (userId, projectId, callback=(err)->) ->
|
|
userId = ObjectId(userId.toString())
|
|
projectId = ObjectId(projectId.toString())
|
|
Project.update {
|
|
_id: projectId
|
|
}, {
|
|
$addToSet: {tokenAccessReadAndWrite_refs: userId}
|
|
}, (err) ->
|
|
callback(err)
|
|
|
|
grantSessionReadOnlyTokenAccess: (req, projectId, token) ->
|
|
if req.session?
|
|
if !req.session.anonReadOnlyTokenAccess?
|
|
req.session.anonReadOnlyTokenAccess = {}
|
|
req.session.anonReadOnlyTokenAccess[projectId.toString()] = token.toString()
|
|
|
|
requestHasReadOnlyTokenAccess: (req, projectId, callback=(err, allowed)->) ->
|
|
token = (
|
|
req?.session?.anonReadOnlyTokenAccess?[projectId.toString()] or
|
|
req.headers['x-sl-anon-token']
|
|
)
|
|
if !token
|
|
return callback null, false
|
|
TokenAccessHandler.findProjectWithReadOnlyToken token, (err, project) ->
|
|
return callback(err) if err?
|
|
isAllowed = (
|
|
project? and
|
|
project.publicAccesLevel == PublicAccessLevels.TOKEN_BASED and
|
|
project._id.toString() == projectId.toString()
|
|
)
|
|
callback null, isAllowed
|
|
|