52774bbe64
* wip * wip * wip * Update index.ts * Update gen-openapi-spec.ts * Update api.ja-JP.md * Fix * Improve doc * Update gen-openapi-spec.ts * Update redoc.html * Improve doc * Update gen-openapi-spec.ts * Improve doc * Update CHANGELOG.md
88 lines
2.3 KiB
TypeScript
88 lines
2.3 KiB
TypeScript
import limiter from './limiter';
|
|
import { IUser } from '../../models/user';
|
|
import { IApp } from '../../models/app';
|
|
import endpoints from './endpoints';
|
|
import { ApiError } from './error';
|
|
import { apiLogger } from './logger';
|
|
|
|
const accessDenied = {
|
|
message: 'Access denied.',
|
|
code: 'ACCESS_DENIED',
|
|
id: '56f35758-7dd5-468b-8439-5d6fb8ec9b8e'
|
|
};
|
|
|
|
export default async (endpoint: string, user: IUser, app: IApp, data: any, file?: any) => {
|
|
const isSecure = user != null && app == null;
|
|
|
|
const ep = endpoints.find(e => e.name === endpoint);
|
|
|
|
if (ep == null) {
|
|
throw new ApiError({
|
|
message: 'No such endpoint.',
|
|
code: 'NO_SUCH_ENDPOINT',
|
|
id: 'f8080b67-5f9c-4eb7-8c18-7f1eeae8f709',
|
|
httpStatusCode: 404
|
|
});
|
|
}
|
|
|
|
if (ep.meta.secure && !isSecure) {
|
|
throw new ApiError(accessDenied);
|
|
}
|
|
|
|
if (ep.meta.requireCredential && user == null) {
|
|
throw new ApiError({
|
|
message: 'Credential required.',
|
|
code: 'CREDENTIAL_REQUIRED',
|
|
id: '1384574d-a912-4b81-8601-c7b1c4085df1',
|
|
httpStatusCode: 401
|
|
});
|
|
}
|
|
|
|
if (ep.meta.requireCredential && user.isSuspended) {
|
|
throw new ApiError(accessDenied, { reason: 'Your account has been suspended.' });
|
|
}
|
|
|
|
if (ep.meta.requireAdmin && !user.isAdmin) {
|
|
throw new ApiError(accessDenied, { reason: 'You are not the admin.' });
|
|
}
|
|
|
|
if (ep.meta.requireModerator && !user.isAdmin && !user.isModerator) {
|
|
throw new ApiError(accessDenied, { reason: 'You are not a moderator.' });
|
|
}
|
|
|
|
if (app && ep.meta.kind && !app.permission.some(p => p === ep.meta.kind)) {
|
|
throw new ApiError({
|
|
message: 'Your app does not have the necessary permissions to use this endpoint.',
|
|
code: 'PERMISSION_DENIED',
|
|
id: '1370e5b7-d4eb-4566-bb1d-7748ee6a1838',
|
|
});
|
|
}
|
|
|
|
if (ep.meta.requireCredential && ep.meta.limit) {
|
|
// Rate limit
|
|
await limiter(ep, user).catch(e => {
|
|
throw new ApiError({
|
|
message: 'Rate limit exceeded. Please try again later.',
|
|
code: 'RATE_LIMIT_EXCEEDED',
|
|
id: 'd5826d14-3982-4d2e-8011-b9e9f02499ef',
|
|
httpStatusCode: 429
|
|
});
|
|
});
|
|
}
|
|
|
|
// API invoking
|
|
return await ep.exec(data, user, app, file).catch((e: Error) => {
|
|
if (e instanceof ApiError) {
|
|
throw e;
|
|
} else {
|
|
apiLogger.error(e);
|
|
throw new ApiError(null, {
|
|
e: {
|
|
message: e.message,
|
|
code: e.name,
|
|
stack: e.stack
|
|
}
|
|
});
|
|
}
|
|
});
|
|
};
|