MusareFork/backend/logic/actions/hooks/adminRequired.js

import async from "async";

import db from "../../db";
import cache from "../../cache";
import utils from "../../utils";

export default destination => async (session, ...args) => {
	const userModel = await db.runJob("GET_MODEL", { modelName: "user" });

	const cb = args[args.length - 1];

	async.waterfall(
		[
			next => {
				cache
					.runJob("HGET", {
						table: "sessions",
						key: session.sessionId
					})
					.then(session => {
						next(null, session);
					})
					.catch(next);
			},
			(session, next) => {
				if (!session || !session.userId) return next("Login required.");
				return userModel.findOne({ _id: session.userId }, next);
			},
			(user, next) => {
				if (!user) return next("Login required.");
				if (user.role !== "admin") return next("Insufficient permissions.");
				return next();
			}
		],
		async err => {
			if (err) {
				err = await utils.runJob("GET_ERROR", { error: err });
				console.log("INFO", "ADMIN_REQUIRED", `User failed to pass admin required check. "${err}"`);
				return cb({ status: "failure", message: err });
			}
			console.log("INFO", "ADMIN_REQUIRED", `User "${session.userId}" passed admin required check.`, false);
			return destination(session, ...args);
		}
	);
};