verifyOvhUser.js

"use strict";

const Bluebird = require("bluebird");
const request = require("request");
const WebAuth = require("../../models/webAuth.model");
const logger = require("../../providers/logging/logger");
const config = require("../config-loader").load();
const cache = require("memory-cache");

module.exports = () =>
  function (req, res, next) {
    let user;

    if (!req.cookies.SESSION) {
      return res.status(400).json("Session is missing");
    }

    user = cache.get(req.cookies.SESSION);

    if (user) {
      req.user = JSON.parse(user);
      return next();
    }

    const options = {
      uri: "https://www.ovh.com/engine/apiv6/me",
      json: true,
      encoding: "utf8",
      headers: {
        "Content-Type": "application/json; charset=utf-8",
        Cookie: `cookieAccepted=true; SESSION=${req.cookies.SESSION}`,
        "User-Agent": req.headers["user-agent"],
        Referer: "https://www.ovh.com/manager/web/",
        Pragma: "no-cache",
        "Cache-Control": "no-cache"
      }
    };

    return new Bluebird((resolve, reject) => {
      request(options, (err, resp, body) => {
        if (err || resp.statusCode >= 400) {
          return reject(resp && resp.statusCode ? { statusCode: resp.statusCode, data: body } : { statusCode: 500, data: err });
        }
        cache.put(req.cookies.SESSION, JSON.stringify(body), config.web.cacheTime); // Cache the response for the next 2000 ms
        return resolve(body);
      });
    })
      .then((resp) => {
        req.user = resp;
        return WebAuth.findOne({ _nichandle: req.user.nichandle });
      })
      .then((rawAuthUser) => {
        let auth = !rawAuthUser ? new WebAuth({ _nichandle: req.user.nichandle, cookie: req.cookies.SESSION, userAgent: req.headers["user-agent"] }) : rawAuthUser;
        auth.cookie = req.cookies.SESSION;
        auth.userAgent = req.headers["user-agent"];
        return auth.save();
      })
      .then(() => next())
      .catch((err) => {
        logger.error(err);
        const errorApi = res.error(err.statusCode, err.data ? err.data.message : err);
        return res.status(errorApi.statusCode).json(errorApi);
      });
  };