picl-keyserver/routes/user.js

/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

const Hapi = require('Hapi');

const users = require('../lib/users.js');
const prereqs = require('../lib/prereqs.js');

const Str = Hapi.Types.String;
const Bool = Hapi.Types.Boolean;
const Num = Hapi.Types.Number;

exports.routes = [
  {
    method: 'POST',
    path: '/user',
    handler: create,
    config: {
      description: 'create a new user',
      pre: [ prereqs.email ],
      validate: {
        schema: {
          email: Str().required()
        }
      },
      response: {
        schema: {
          success: Bool().required(),
          kA: Str().required(),
          deviceId: Str().required(),
          version: Num().integer().required()
        }
      }
    }
  },
  {
    method: 'GET',
    path: '/user/{deviceId?}',
    handler: get,
    config: {
      description: 'get user meta data',
      pre: [ prereqs.emailGet, prereqs.userId, prereqs.user ],
      validate: {
        query: {
          email: Str().required()
        }
      },
      response: {
        schema: {
          success: Bool().required(),
          kA: Str().required(),
          version: Num().integer().required()
        }
      }
    }
  },
  {
    method: 'POST',
    path: '/user/bump/{deviceId}',
    handler: bump,
    config: {
      description: 'Create a new class A key for the user and bump the version number',
      pre: [ prereqs.email, prereqs.userId ],
      validate: {
        schema: {
          email: Str().required()
        }
      },
      response: {
        schema: {
          success: Bool().required(),
          kA: Str().required(),
          version: Num().integer().required()
        }
      }
    }
  }
];


// create a user by assertion
function create(request) {
  users.create(request.pre.email, function(err, result) {
    if (err) return request.reply(Hapi.Error.badRequest(err));

    request.reply({
      success: true,
      kA: result.kA,
      deviceId: result.deviceId,
      version: result.version
    });
  });
}

// get a user's class A key and its version number
function get(request) {
  var pre = request.pre;

  // For NULL auth, deviceId is not required
  if (! request.params.deviceId) {
    return request.reply({
      success: true,
      kA: pre.user.kA,
      version: pre.user.kA_version
    });
  }

  // update the device's last kA request time
  users.updateDevice(pre.userId, request.params.deviceId, function(err) {
    if (err) return request.reply(Hapi.Error.badRequest(err));

    request.reply({
      success: true,
      kA: pre.user.kA,
      version: pre.user.kA_version
    });
  });
}

// create a new class A key and bump the version number
function bump(request) {
  var pre = request.pre;

  // mark all other devices as having a stale key
  users.outdateDevices(pre.userId, request.params.deviceId, function(err) {
    if (err) return request.reply(Hapi.Error.badRequest(err));

    // create a new key and bump the version
    users.bumpkA(pre.userId, function(err, user) {
      if (err) return request.reply(Hapi.Error.badRequest(err));

      request.reply({
        success: true,
        kA: user.kA,
        version: user.kA_version
      });
    });
  });
}