Skip to content
This repository was archived by the owner on Feb 25, 2019. It is now read-only.

Add endpoints for manipulating client roles #306

Merged
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
90 changes: 90 additions & 0 deletions routes/rest/v1/clientRoles.js
Original file line number Diff line number Diff line change
@@ -0,0 +1,90 @@
/**
* Module dependencies
*/

var Client = require('../../../models/Client')
var Role = require('../../../models/Role')
var NotFoundError = require('../../../errors/NotFoundError')
var settings = require('../../../boot/settings')
var oidc = require('../../../oidc')

/**
* Export
*/

module.exports = function (server) {
/**
* Token-based Auth Middleware
*/

var authorize = [
oidc.parseAuthorizationHeader,
oidc.getBearerToken,
oidc.verifyAccessToken({
iss: settings.issuer,
key: settings.keys.sig.pub,
scope: 'realm'
})
]

/**
* GET /v1/clients/:clientId/roles
*/

server.get('/v1/clients/:clientId/roles',
authorize,
function (req, res, next) {
// first, ensure the client exists
Client.get(req.params.clientId, function (err, instance) {
if (err) { return next(err) }
if (!instance) { return next(new NotFoundError()) }

// then list roles by account
Role.listByClients(req.params.clientId, function (err, instances) {
if (err) { return next(err) }
res.json(instances)
})
})
})

/**
* PUT /v1/clients/:clientId/roles/:roleId
*/

server.put('/v1/clients/:clientId/roles/:roleId',
authorize,
function (req, res, next) {
Client.get(req.params.clientId, function (err, instance) {
if (err) { return next(err) }
if (!instance) { return next(new NotFoundError()) }

Role.get(req.params.roleId, function (err, role) {
if (err) { return next(err) }
if (!role) { return next(new NotFoundError()) }

instance.addRoles(req.params.roleId, function (err, result) {
if (err) { return next(err) }
res.json({ added: true })
})
})
})
})

/**
* DELETE /v1/clients/:clientId/roles/:roleId
*/

server.delete('/v1/clients/:clientId/roles/:roleId',
authorize,
function (req, res, next) {
Client.get(req.params.clientId, function (err, instance) {
if (err) { return next(err) }
if (!instance) { return next(new NotFoundError()) }

instance.removeRoles(req.params.roleId, function (err, result) {
if (err) { return next(err) }
res.sendStatus(204)
})
})
})
}
1 change: 1 addition & 0 deletions server.js
Original file line number Diff line number Diff line change
Expand Up @@ -43,6 +43,7 @@ require('./routes/applications')(server)
*/

require('./routes/rest/v1/users')(server)
require('./routes/rest/v1/clientRoles')(server)
require('./routes/rest/v1/clients')(server)
require('./routes/rest/v1/scopes')(server)
require('./routes/rest/v1/roles')(server)
Expand Down
Loading