mirror of
https://github.com/bckelley/cgm-remote-monitor.git
synced 2026-08-24 03:14:12 -05:00
This change allows each route to express policies for interpreting and parsing the request body. Before this change uploads to entries or treatments api would error if they were larger than 100Kb due to the preference being set for the whole server. This change removes the global preference in favor of allowing each route to choose it's own request size limit. We also refactor usage of body-parser to be more consistent throughout the code base. Most routes can use jsonParser, rawPraser, and urlencodedParser provided by the common wares component. Anything doing something else should be called out as such. For example, treatments, activity, and entries allow uploads up to 50Mb. Other v1 endpoints are using the common configuration set to 1Mb.
214 lines
6.0 KiB
JavaScript
214 lines
6.0 KiB
JavaScript
'use strict';
|
|
|
|
const _forEach = require('lodash/forEach');
|
|
const _isNil = require('lodash/isNil');
|
|
const _isArray = require('lodash/isArray');
|
|
const _take = require('lodash/take');
|
|
|
|
const constants = require('../../constants');
|
|
const moment = require('moment');
|
|
|
|
function configure (app, wares, ctx, env) {
|
|
var express = require('express')
|
|
, api = express.Router();
|
|
|
|
api.use(wares.compression());
|
|
|
|
// text body types get handled as raw buffer stream
|
|
api.use(wares.rawParser);
|
|
// json body types get handled as parsed json
|
|
api.use(wares.bodyParser.json({
|
|
limit: '50Mb'
|
|
}));
|
|
// also support url-encoded content-type
|
|
api.use(wares.urlencodedParser);
|
|
|
|
// invoke common middleware
|
|
api.use(wares.sendJSONStatus);
|
|
|
|
api.use(ctx.authorization.isPermitted('api:treatments:read'));
|
|
|
|
function serveTreatments(req,res, err, results) {
|
|
|
|
var ifModifiedSince = req.get('If-Modified-Since');
|
|
|
|
var d1 = null;
|
|
|
|
const deNormalizeDates = env.settings.deNormalizeDates;
|
|
|
|
_forEach(results, function clean (t) {
|
|
t.carbs = Number(t.carbs);
|
|
t.insulin = Number(t.insulin);
|
|
|
|
if (deNormalizeDates && Object.prototype.hasOwnProperty.call(t, 'utcOffset')) {
|
|
const d = moment(t.created_at).utcOffset(t.utcOffset);
|
|
t.created_at = d.toISOString(true);
|
|
delete t.utcOffset;
|
|
}
|
|
|
|
var d2 = null;
|
|
|
|
if (Object.prototype.hasOwnProperty.call(t, 'created_at')) {
|
|
d2 = new Date(t.created_at);
|
|
} else {
|
|
if (Object.prototype.hasOwnProperty.call(t, 'timestamp')) {
|
|
d2 = new Date(t.timestamp);
|
|
}
|
|
}
|
|
|
|
if (d2 == null) { return; }
|
|
|
|
if (d1 == null || d2.getTime() > d1.getTime()) {
|
|
d1 = d2;
|
|
}
|
|
});
|
|
|
|
if (!_isNil(d1)) res.setHeader('Last-Modified', d1.toUTCString());
|
|
|
|
if (ifModifiedSince && d1.getTime() <= moment(ifModifiedSince).valueOf()) {
|
|
res.status(304).send({
|
|
status: 304
|
|
, message: 'Not modified'
|
|
, type: 'internal'
|
|
});
|
|
return;
|
|
} else {
|
|
return res.json(results);
|
|
}
|
|
}
|
|
|
|
// List treatments available
|
|
api.get('/treatments', function(req, res) {
|
|
var query = req.query;
|
|
if (!query.count) {
|
|
// If there's a date search involved, default to a higher number of objects
|
|
query.count = query.find ? 1000 : 100;
|
|
}
|
|
|
|
const inMemoryData = ctx.cache.treatments;
|
|
const canServeFromMemory = inMemoryData && inMemoryData.length >= query.count && Object.keys(query).length == 1 ? true : false;
|
|
|
|
if (canServeFromMemory) {
|
|
serveTreatments(req, res, null, _take(inMemoryData,query.count));
|
|
} else {
|
|
ctx.treatments.list(query, function(err, results) {
|
|
serveTreatments(req,res,err,results);
|
|
});
|
|
}
|
|
});
|
|
|
|
function config_authed (app, api, wares, ctx) {
|
|
|
|
function post_response (req, res) {
|
|
var treatments = req.body;
|
|
|
|
if (!_isArray(treatments)) {
|
|
treatments = [treatments];
|
|
}
|
|
|
|
for (let i = 0; i < treatments.length; i++) {
|
|
const t = treatments[i];
|
|
|
|
if (!t.created_at) {
|
|
t.created_at = new Date().toISOString();
|
|
}
|
|
|
|
ctx.purifier.purifyObject(t);
|
|
|
|
/*
|
|
if (!t.created_at) {
|
|
console.log('Trying to create treatment without created_at field', t);
|
|
res.sendJSONStatus(res, constants.HTTP_VALIDATION_ERROR, 'Treatments must contain created_at');
|
|
return;
|
|
}
|
|
const d = moment(t.created_at);
|
|
if (!d.isValid()) {
|
|
console.log('Trying to insert date with invalid created_at', t);
|
|
res.sendJSONStatus(res, constants.HTTP_VALIDATION_ERROR, 'Treatments created_at must be an ISO-8601 date');
|
|
return;
|
|
}
|
|
*/
|
|
|
|
}
|
|
|
|
ctx.treatments.create(treatments, function(err, created) {
|
|
if (err) {
|
|
console.log('Error adding treatment', err);
|
|
res.sendJSONStatus(res, constants.HTTP_INTERNAL_ERROR, 'Mongo Error', err);
|
|
} else {
|
|
console.log('REST API treatment created', created);
|
|
res.json(created);
|
|
}
|
|
});
|
|
}
|
|
|
|
api.post('/treatments/', ctx.authorization.isPermitted('api:treatments:create'), post_response);
|
|
|
|
/**
|
|
* @function delete_records
|
|
* Delete treatments. The query logic works the same way as find/list. This
|
|
* endpoint uses same search logic to remove records from the database.
|
|
*/
|
|
function delete_records (req, res, next) {
|
|
var query = req.query;
|
|
if (!query.count) {
|
|
query.count = 10
|
|
}
|
|
|
|
// remove using the query
|
|
ctx.treatments.remove(query, function(err, stat) {
|
|
if (err) {
|
|
console.log('treatments delete error: ', err);
|
|
return next(err);
|
|
}
|
|
|
|
// yield some information about success of operation
|
|
res.json(stat);
|
|
|
|
return next();
|
|
});
|
|
}
|
|
|
|
api.delete('/treatments/:id', ctx.authorization.isPermitted('api:treatments:delete'), function(req, res, next) {
|
|
if (!req.query.find) {
|
|
req.query.find = {
|
|
_id: req.params.id
|
|
};
|
|
} else {
|
|
req.query.find._id = req.params.id;
|
|
}
|
|
|
|
if (req.query.find._id === '*') {
|
|
// match any record id
|
|
delete req.query.find._id;
|
|
}
|
|
next();
|
|
}, delete_records);
|
|
|
|
// delete record that match query
|
|
api.delete('/treatments/', ctx.authorization.isPermitted('api:treatments:delete'), delete_records);
|
|
|
|
// update record
|
|
api.put('/treatments/', ctx.authorization.isPermitted('api:treatments:update'), function(req, res) {
|
|
var data = req.body;
|
|
ctx.treatments.save(data, function(err, created) {
|
|
if (err) {
|
|
res.sendJSONStatus(res, constants.HTTP_INTERNAL_ERROR, 'Mongo Error', err);
|
|
console.log('Error saving treatment', err);
|
|
} else {
|
|
res.json(created);
|
|
console.log('Treatment saved', data);
|
|
}
|
|
});
|
|
});
|
|
}
|
|
|
|
if (app.enabled('api') && app.enabled('careportal')) {
|
|
config_authed(app, api, wares, ctx);
|
|
}
|
|
|
|
return api;
|
|
}
|
|
|
|
module.exports = configure;
|