tickets

3.2 KB

1. // invites.hl — PEOPLE JOIN A PROJECT THROUGH IDENT'S INVITE SERVICE (ticket #20; ident README "Invites",
2. // ident#22). tickets asks ident for an invite for one project and a role and shows the link; whoever opens
3. // it and picks an identity is sent back to /login/callback?ident_code=…&invite=<invite id>. project.hl then
4. // exchanges the code (users.hl), asks ident who ACCEPTED the invite (`identities`) and only then makes that
5. // person a member. Statics only, the server realm. A failed fetch is absorbed by project.hl's `on Error`
6. // (the call then yields null → "ident did not answer").
7. import { fetch } from 'hl:fetch'
8. import { identKey, identSecret, identExchangeUrl, callbackUrl } from './users.hl'
10. static ua = { 'user-agent' = 'tickets.worldapi.org (ident invites)' }
12. // only letters, digits and dashes (ident's invite ids)
13. static isInviteId = (s) => {
14. if (s == null || hlTypeName(s) != 'String' || s.length == 0 || s.length > 100) { return false }
15. let i = 0
16. while (i < s.length) {
17. let c = s.charCodeAt(i)
18. if (!((c >= 48 && c <= 57) || (c >= 97 && c <= 122) || (c >= 65 && c <= 90) || c == 45 || c == 95)) { return false }
19. i = i + 1
20. }
21. return true
22. }
24. static identCall = (path, body) => {
25. if (identKey == '' || identSecret == '') { return { error = 'invites are not set up on this server (IDENT_API_KEY / IDENT_API_SECRET missing)' } }
26. let json = { key = identKey secret = identSecret }
27. for (k of body.keys()) { json[k] = body[k] }
28. let r = fetch(identExchangeUrl + path, { method = 'POST' json = json headers = ua timeoutMs = 10000 })
29. if (r == null || r.status == null || r.status == 0) { return { error = 'ident did not answer' } }
30. let j = r.json()
31. if (r.status != 200) { return { error = 'ident refused (' + r.status + (j != null && j.error != null ? ': ' + j.error : '') + ')' } }
32. if (j == null) { return { error = 'ident answered nothing readable' } }
33. return { body = j }
34. }
36. // an invite link for `projectId` and `role`: { url, id, expires } | { error }. `email` (optional) makes ident mail it.
37. static createInvite = (projectId, role, uses, days, email) => {
38. let body = { project = projectId role = role return = callbackUrl uses = uses days = days }
39. if (email != null && email != '') { body.email = email }
40. let r = identCall('/api/invites', body)
41. if (r.error != null) { return r }
42. let j = r.body
43. if (j.url == null || j.id == null) { return { error = 'ident answered no invite link' } }
44. return { url = j.url id = j.id expires = j.expires mailed = j.mailed == true }
45. }
47. // did this identity accept this invite? { project (id), role } | { error }
48. static acceptedInvite = (inviteId, identity) => {
49. if (!isInviteId(inviteId)) { return { error = 'that is not an invite id' } }
50. let r = identCall('/api/invites/get', { id = inviteId })
51. if (r.error != null) { return r }
52. let inv = r.body.invite
53. if (inv == null || inv.project == null || inv.role == null) { return { error = 'ident answered no invite' } }
54. let ok = false
55. if (inv.identities != null && countOfIds(inv.identities) > 0) { for (i of inv.identities) { if (i == identity) { ok = true } } }
56. if (!ok) { return { error = 'this login did not accept that invite' } }
57. return { project = inv.project role = inv.role }
58. }
59. static countOfIds = (list) => {
60. let n = list.length
61. return n == null ? 0 : n
62. }