immersive2/netlify/functions/users/users.mts

import axios from 'axios';

const baseurl = 'https://syncdb-service-d3f974de56ef.herokuapp.com/';
const auth = 'admin:stM8Lnm@Cuf-tWZHv';
const authToken = Buffer.from(auth).toString('base64');


type Params = {
    username: string,
    password: string,
    db: string
}

async function checkDB(auth: string, db: string) {
    try {
        console.log('Checking for DB');
        const exist = await axios.head(baseurl + db,
            {headers: {'Authorization': 'Basic ' + auth}});
        if (exist && exist.status == 200) {
            console.log("DB Found");
            return true;
        }
    } catch (err) {
        console.log("DB not Found");
        //console.log(err);
    }
    return false;
}

enum Access {
    DENIED,
    MISSING,
    ALLOWED,
}

function getUserToken(params: Params) {
    const userAuth = params.username + ':' + params.password;
    return Buffer.from(userAuth).toString('base64');
}

async function checkIfDbExists(params: Params): Promise<Access> {
    console.log("Checking if DB exists");
    if (!params.username || !params.password || !params.db) {
        throw new Error('No share key provided');
    }

    if (await checkDB(getUserToken(params), params.db)) {
        return Access.ALLOWED;
    }
    if (await checkDB(authToken, params.db)) {
        return Access.DENIED;
    }
    return Access.MISSING;

}

async function createDB(params: Params) {
    console.log("Creating DB");

    const response = await axios.put(
        baseurl + params.db,
        {},
        {
            headers: {
                'Authorization': 'Basic ' + authToken,
                'Content-Type': 'application/json',
                'Accept': 'application/json'
            }
        });
    console.log(response.status);
    console.log(response.data);
    return response;
}

async function createUser(params: Params) {
    try {
        console.log("Checking for User");
        const userResponse = await axios.head(
            baseurl + '_users/org.couchdb.user:' + params.username,
            {
                headers: {
                    'Authorization': 'Basic ' + getUserToken(params),
                    'Content-Type': 'application/json',
                    'Accept': 'application/json'
                }
            });
        if (userResponse.status == 200) {
            console.log("User Found");
            return userResponse;
        }
    } catch (err) {
        console.log("User Missing");
    }
    console.log("Creating User");
    const userResponse = await axios.put(
        baseurl + '_users/org.couchdb.user:' + params.username,
        {
            _id: 'org.couchdb.user:' + params.username,
            name: params.username,
            password: params.password, roles: [], type: 'user'
        },
        {
            headers: {
                'Authorization': 'Basic ' + authToken,
                'Content-Type': 'application/json',
                'Accept': 'application/json'
            }
        });
    return userResponse;
}

async function authorizeUser(params: Params) {
    console.log("Authorizing User");
    return await axios.put(
        baseurl + params.db + '/_security',
        {admins: {names: [], roles: []}, members: {names: [params.username], roles: []}},
        {
            headers: {
                'Authorization': 'Basic ' + authToken,
                'Content-Type': 'application/json',
                'Accept': 'application/json'
            }
        });
}

export default async (req: Request): Promise<Response> => {
    console.log(req.method);

    try {
        if (req.method == 'OPTIONS') {
            const origin = req.headers.get('Origin');
            const headers = req.headers.get('Access-Control-Request-Headers');
            console.log(origin);
            return new Response(
                'OK',
                {
                    headers: {
                        'Allow': 'POST',
                        'Max-Age': '30',
                        'Access-Control-Allow-Methods': 'POST',
                        'Access-Control-Allow-Origin': origin ? origin : 'https://cameras.immersiveidea.com',
                        'Access-Control-Allow-Credentials': 'true',
                        'Access-Control-Allow-Headers': headers ? headers : 'Content-Type'
                    },
                    status: 200
                });
        }
    } catch (err) {
        return new Response(
            JSON.stringify(err),
            {
                headers: {
                    'Allow': 'POST',
                    'Max-Age': '30',
                    'Access-Control-Allow-Methods': 'POST',
                    'Access-Control-Allow-Origin': origin ? origin : 'https://cameras.immersiveidea.com',
                    'Access-Control-Allow-Credentials': 'true'
                },
                status: 500
            });
    }


    try {
        const params = JSON.parse(await req.text());
        console.log(params);
        const createUserResponse = await createUser(params);
        console.log(createUserResponse.status);
        if (createUserResponse.status != 201 && createUserResponse.status != 200) {
            throw new Error('Could not create User');
        }

        const exists = await checkIfDbExists(params);
        switch (exists) {
            case Access.ALLOWED:
                console.log('Allowed');
                return new Response('OK', {status: 200});
            case Access.DENIED:
                console.log('Denied');
                return new Response('Denied', {status: 401});
            case Access.MISSING:
                console.log('Creating Missing DB');
                const createDbResponse = await createDB(params);
                if (createDbResponse.status != 201) {
                    throw new Error('Could not create DB');
                }


        }


        const authorizeUserResponse = await authorizeUser(params);
        if (authorizeUserResponse.status != 200) {
            throw new Error('could not authorize user');
        }
        const origin = req.headers.get('origin');
        console.log(origin);
        return new Response(
            'OK',
            {
                headers: [
                    ['Content-Type', 'application/json'],
                    ['Access-Control-Allow-Origin', origin],
                    ['Access-Control-Allow-Credentials', 'true']
                ],
                status: 200
            }
        )
    } catch (err) {
        console.log(err);
        const response = {err: err};
        return new Response('Error',
            {status: 500}
        )
    }
}