jambonz-api-server/lib/routes/api/lcr-routes.js

const router = require('express').Router();
const LcrRoute = require('../../models/lcr-route');
const Lcr = require('../../models/lcr');
const LcrCarrierSetEntry = require('../../models/lcr-carrier-set-entry');
const decorate = require('./decorate');
const {DbErrorBadRequest} = require('../../utils/errors');
const sysError = require('../error');

const validateAdd = async(req) => {
  // check if lcr sid is available
  if (!req.body.lcr_sid) {
    throw new DbErrorBadRequest('missing parameter lcr_sid');
  }

  const lcr = await Lcr.retrieve(req.body.lcr_sid);
  if (lcr.length === 0) {
    throw new DbErrorBadRequest('unknown lcr_sid');
  }
};

const validateUpdate = async(req) => {
  if (req.body.lcr_sid) {
    const lcr = await Lcr.retrieve(req.body.lcr_sid);
    if (lcr.length === 0) {
      throw new DbErrorBadRequest('unknown lcr_sid');
    }
  }
};

const validateDelete = async(req, sid) => {
  // delete all lcr carrier set entries
  await LcrCarrierSetEntry.deleteByLcrRouteSid(sid);
};

const checkUserScope = async(req, lcr_sid) => {
  if (!lcr_sid) {
    throw new DbErrorBadRequest('missing lcr_sid');
  }

  if (req.user.hasAdminAuth) return;

  const lcrList = await Lcr.retrieve(lcr_sid);
  if (lcrList.length === 0) throw new DbErrorBadRequest('unknown lcr_sid');
  const lcr = lcrList[0];
  if (req.user.hasAccountAuth) {
    if (!lcr.account_sid || lcr.account_sid !== req.user.account_sid) {
      throw new DbErrorBadRequest('unknown lcr_sid');
    }
  }

  if (req.user.hasServiceProviderAuth) {
    if (!lcr.service_provider_sid  || lcr.service_provider_sid !== req.user.service_provider_sid) {
      throw new DbErrorBadRequest('unknown lcr_sid');
    }
  }
};

const preconditions = {
  add: validateAdd,
  update: validateUpdate,
  delete: validateDelete,
};

decorate(router, LcrRoute, ['add', 'update', 'delete'], preconditions);

router.get('/', async(req, res) => {
  const logger = req.app.locals.logger;
  const lcr_sid = req.query.lcr_sid;
  try {
    await checkUserScope(req, lcr_sid);
    const results = await LcrRoute.retrieveAllByLcrSid(lcr_sid);
    for (const r of results) {
      r.lcr_carrier_set_entries = await LcrCarrierSetEntry.retrieveAllByLcrRouteSid(r.lcr_route_sid);
    }
    res.status(200).json(results);
  } catch (err) {
    sysError(logger, res, err);
  }
});

router.get('/:sid', async(req, res) => {
  const logger = req.app.locals.logger;
  const lcr_route_sid = req.params.sid;
  try {
    const results = await LcrRoute.retrieve(lcr_route_sid);
    if (results.length === 0) return res.sendStatus(404);
    const route = results[0];
    await checkUserScope(req, route.lcr_sid);
    route.lcr_carrier_set_entries = await LcrCarrierSetEntry.retrieveAllByLcrRouteSid(route.lcr_route_sid);
    res.status(200).json(route);
  } catch (err) {
    sysError(logger, res, err);
  }
});


module.exports = router;