Starship/CoreID
1
0
Fork 0
Code Issues 8 Pull Requests Releases 34 Wiki Activity

Finish server-side translations in controllers

Browse Source
This commit is contained in:
garrettmills
2020-05-30 20:16:10 -05:00
parent 86878efb52
commit d2ae9c43e8
26 changed files with 225 additions and 394 deletions
Download Patch File Download Diff File Expand all files Collapse all files

54
app/controllers/api/v1/LDAP.controller.js
View File

@@ -52,12 +52,12 @@ class LDAPController extends Controller {
if ( !client || !client.active )
return res.status(404)
.message('No client found with that ID.')
.message(req.T('api.client_not_found'))
.api()
if ( !req.user.can(`ldap:client:${client.id}:view`) )
return res.status(401)
.message('Insufficient permissions.')
.message(req.T('api.insufficient_permissions'))
.api()
return res.api(await client.to_api())
@@ -69,12 +69,12 @@ class LDAPController extends Controller {
if ( !group || !group.active )
return res.status(404)
.message('No group found with that ID.')
.message(req.T('api.group_not_found'))
.api()
if ( !req.user.can(`ldap:group:${group.id}:view`) )
return res.status(401)
.message('Insufficient permissions.')
.message(req.T('api.insufficient_permissions'))
.api()
return res.api(await group.to_api())
@@ -83,7 +83,7 @@ class LDAPController extends Controller {
async create_client(req, res, next) {
if ( !req.user.can('ldap:client:create') )
return res.status(401)
.message('Insufficient permissions.')
.message(req.T('api.insufficient_permissions'))
.api()
// validate inputs
@@ -91,7 +91,7 @@ class LDAPController extends Controller {
for ( const field of required_fields ) {
if ( !req.body[field] )
return res.status(400)
.message(`Missing required field: ${field}`)
.message(`${req.T('api.missing_field')} ${field}`)
}
// Make sure the uid is free
@@ -99,7 +99,7 @@ class LDAPController extends Controller {
const existing_user = await User.findOne({ uid: req.body.uid })
if ( existing_user )
return res.status(400)
.message('A user with that uid already exists.')
.message(req.T('api.user_already_exists'))
.api()
// Verify password complexity
@@ -107,7 +107,7 @@ class LDAPController extends Controller {
const result = zxcvbn(req.body.password)
if ( result.score < min_score )
return res.status(400)
.message(`Password does not meet the minimum complexity score of ${min_score}.`)
.message(req.T('auth.password_complexity_fail').replace('MIN_SCORE', min_score))
.api()
// Create the client
@@ -125,7 +125,7 @@ class LDAPController extends Controller {
console.log(req.body)
if ( !req.user.can(`ldap:group:create`) )
return res.status(401)
.message('Insufficient permissions.')
.message(req.T('api.insufficient_permissions'))
.api()
// validate inputs
@@ -133,7 +133,7 @@ class LDAPController extends Controller {
for ( const field of required_fields ) {
if ( !req.body[field] )
return res.status(400)
.message(`Missing required field: ${field}`)
.message(`${req.T('api.missing_field')} ${field}`)
.api()
}
@@ -143,13 +143,13 @@ class LDAPController extends Controller {
const existing_group = await Group.findOne({ name: req.body.name })
if ( existing_group )
return res.status(400)
.message('A group already exists with that name.')
.message(req.T('api.group_already_exists'))
.api()
// Make sure the role exists
if ( !this.configs.get('auth.roles')[req.body.role] )
return res.status(400)
.message('Invalid role.')
.message(`${req.T('common.invalid')} role.`)
.api()
const group = new Group({
@@ -168,7 +168,7 @@ class LDAPController extends Controller {
const user = await User.findById(user_id)
if ( !user )
return res.status(400)
.message(`Invalid user ID: ${user_id}`)
.message(`${req.T('common.invalid')} user_id: ${user_id}`)
.api()
}
@@ -185,19 +185,19 @@ class LDAPController extends Controller {
if ( !client || !client.active )
return res.status(404)
.message('No client found with that ID.')
.message(req.T('api.client_not_found'))
.api()
if ( !req.user.can(`ldap:client:${client.id}:update`) )
return res.status(401)
.message('Insufficient permissions.')
.message(req.T('api.insufficient_permissions'))
.api()
const required_fields = ['name', 'uid']
for ( const field of required_fields ) {
if ( !req.body[field] )
return res.status(400)
.message(`Missing required field: ${field}`)
.message(`${req.T('api.missing_field')} ${field}`)
.api()
}
@@ -216,7 +216,7 @@ class LDAPController extends Controller {
const existing_user = await User.findOne({ uid: req.body.uid })
if ( existing_user )
return res.status(400)
.message('A user already exists with that uid.')
.message(req.T('api.user_already_exists'))
.api()
user.uid = req.body.uid
@@ -229,7 +229,7 @@ class LDAPController extends Controller {
const result = zxcvbn(req.body.password)
if ( result.score < min_score )
return res.status(400)
.message(`Password does not meet the minimum complexity score of ${min_score}.`)
.message(req.T('auth.password_complexity_fail').replace('MIN_SCORE', min_score))
.api()
await user.reset_password(req.body.password)
@@ -247,19 +247,19 @@ class LDAPController extends Controller {
const group = await Group.findById(req.params.id)
if ( !group || !group.active )
return res.status(404)
.message('No group found with that ID.')
.message(req.T('api.group_not_found'))
.api()
if ( !req.user.can(`ldap:group:${group.id}:update`) )
return res.status(401)
.message('Insufficient permissions.')
.message(req.T('api.insufficient_permissions'))
.api()
const required_fields = ['role', 'name']
for ( const field of required_fields ) {
if ( !req.body[field] )
return res.status(400)
.message(`Missing required field: ${field}`)
.message(`${req.T('api.missing_field')} ${field}`)
.api()
}
@@ -267,7 +267,7 @@ class LDAPController extends Controller {
const existing_group = await Group.findOne({ name: req.body.name })
if ( existing_group && existing_group.id !== group.id )
return res.status(400)
.message('A group with that name already exists.')
.message(req.T('api.group_already_exists'))
.api()
group.name = req.body.name
@@ -282,7 +282,7 @@ class LDAPController extends Controller {
const user = await User.findById(user_id)
if ( !user )
return res.status(400)
.message(`Invalid user_id: ${user_id}`)
.message(`${req.T('common.invalid')} user_id: ${user_id}`)
.api()
}
@@ -301,12 +301,12 @@ class LDAPController extends Controller {
if ( !client || !client.active )
return res.status(404)
.message('Client not found with that ID.')
.message(req.T('api.client_not_found'))
.api()
if ( !req.user.can(`ldap:client:${client.id}:delete`) )
return res.status(401)
.message('Insufficient permissions.')
.message(req.T('api.insufficient_permissions'))
.api()
const user = await client.user()
@@ -325,12 +325,12 @@ class LDAPController extends Controller {
if ( !group || !group.active )
return res.status(404)
.message('No group found with that ID.')
.message(req.T('api.group_not_found'))
.api()
if ( !req.user.can(`ldap:group:${group.id}:delete`) )
return res.status(401)
.message('Insufficient permissions.')
.message(req.T('api.insufficient_permissions'))
.api()
group.active = false