feat: call gsuite-wrapper on key moments

config/index.js

@@ -14,6 +14,10 @@ const config = {
             url: 'http://mailer',
             port: 4000
         },
+        gsuiteWrapper: {
+            url: 'http://gsuite-wrapper',
+            port: 8084
+        },
         logger: {
             silent: false,
             level: process.env.LOGLEVEL || 'info'

lib/constants.js

@@ -92,5 +92,6 @@ module.exports = {
         NEW_JOIN_REQUEST: 'MyAEGEE: New join request for your body',
         NEW_MEMBER: 'MyAEGEE: Welcome to AEGEE'
     },
-    RESTRICTED_EMAILS: ['aegee.org', 'aegee.eu']
+    RESTRICTED_EMAILS: ['aegee.org', 'aegee.eu'],
+    GSUITE_DOMAIN: 'aegee.eu'
 };

lib/cron.js

@@ -1,6 +1,8 @@
 const cron = require('node-cron');
+const request = require('request-promise-native');
 const _ = require('lodash');
 
+const config = require('../config');
 const logger = require('./logger');
 const {
     MailConfirmation,
@@ -25,6 +27,13 @@ const JobCallbacks = {
             }, 'Deleting not confirmed user');
 
             await confirmation.destroy();
+            // TODO: check that GSuite account is also deleted
+            if (user.gsuite_id) {
+                await request({
+                    url: config.gsuiteWrapper.url + ':' + config.gsuiteWrapper.port + '/accounts/' + user.gsuite_id,
+                    method: 'DELETE'
+                });
+            }
             await user.destroy();
 
             logger.info('Deleted.');

middlewares/bodies.js

@@ -52,6 +52,8 @@ exports.createBody = async (req, res) => {
         return errors.makeForbiddenError(res, 'Permission global:create:body is required, but not present.');
     }
 
+    // TODO: if antenna, contact antenna or contact, then create GSuite account
+
     // TODO: filter out fields that are changed in the other way
     const body = await Body.create(req.body);
     return res.json({
@@ -65,6 +67,8 @@ exports.updateBody = async (req, res) => {
         return errors.makeForbiddenError(res, 'Permission update:body is required, but not present.');
     }
 
+    // TODO: if antenna, contact antenna or contact, then update GSuite account if needed
+
     await req.currentBody.update(req.body, { fields: req.permissions.getPermissionFilters('update:body') });
     return res.json({
         success: true,
@@ -89,6 +93,7 @@ exports.setBodyStatus = async (req, res) => {
         await BodyMembership.destroy({ where: { body_id: req.currentBody.id }, transaction: t });
         await Circle.destroy({ where: { body_id: req.currentBody.id }, transaction: t });
         await Payment.destroy({ where: { body_id: req.currentBody.id }, transaction: t });
+        // TODO: suspend GSuite account (if attached)
     });
 
     return res.json({
@@ -122,6 +127,7 @@ exports.createMember = async (req, res) => {
         body_id: req.currentBody.id
     });
 
+    // TODO: create active GSuite account
     return res.json({
         success: true,
         data: membership

middlewares/campaigns.js

@@ -1,3 +1,6 @@
+const crypto = require('crypto');
+const request = require('request-promise-native');
+const config = require('../config');
 const {
     User,
     MailConfirmation,
@@ -33,14 +36,38 @@ exports.registerUser = async (req, res) => {
             transaction: t
         });
 
+        // TODO: add uniqueness check; transliterate gsuiteEmail in case of umlauts or other special characters
+        // TODO: probably move this elsewhere since not all MyAEGEE users need a GSuite account
+        const gsuiteEmail = req.body.first_name + '.' + req.body.last_name + '@' + constants.GSUITE_DOMAIN;
+        const payload = {
+            primaryEmail: gsuiteEmail.toLowerCase().replace(' ', ''),
+            name: {
+                givenName: req.body.first_name,
+                familyName: req.body.last_name
+            },
+            secondaryEmail: req.body.email,
+            password: crypto.createHash('sha1').update(JSON.stringify(req.body.password)).digest('hex'),
+            userPK: req.body.username,
+            antenna: 'Undefined-yet'
+        };
+
         // Adding a person to a body if campaign has the autojoin body.
         if (campaign.autojoin_body_id) {
             await BodyMembership.create({
                 user_id: user.id,
                 body_id: campaign.autojoin_body_id
             }, { transaction: t });
+
+            payload.antenna = campaign.autojoin_body_id;
         }
 
+        await request({
+            url: config.gsuiteWrapper.url + ':' + config.gsuiteWrapper.port + '/accounts',
+            method: 'POST',
+            json: true,
+            body: payload
+        });
+
         const confirmation = await MailConfirmation.createForUser(user.id, t);
 
         await mailer.sendMail({

middlewares/circle-memberships.js

@@ -57,6 +57,8 @@ exports.createMembership = async (req, res) => {
         user_id: user.id
     });
 
+    // TODO: check if user got the permission for an active GSuite account, if true activate user
+
     return res.json({
         success: true,
         data: circleMembership
@@ -93,6 +95,8 @@ exports.deleteMembership = async (req, res) => {
 
     await req.currentCircleMembership.destroy();
 
+    // TODO: check if user still has the permission for an active GSuite account, otherwise suspend GSuite account
+
     return res.json({
         success: true,
         message: 'Membership is deleted.'
@@ -110,6 +114,8 @@ exports.deleteOwnMembership = async (req, res) => {
 
     await circleMembership.destroy();
 
+    // TODO: check if user still has the permission for an active GSuite account, otherwise suspend GSuite account
+
     return res.json({
         success: true,
         message: 'Membership is deleted.'

middlewares/members.js

@@ -1,6 +1,8 @@
 const moment = require('moment');
 const _ = require('lodash');
-
+const request = require('request-promise-native');
+const crypto = require('crypto');
+const config = require('../config');
 const { User, Body, MailChange, MailConfirmation } = require('../models');
 const constants = require('../lib/constants');
 const helpers = require('../lib/helpers');
@@ -122,6 +124,24 @@ exports.updateUser = async (req, res) => {
     }
 
     await req.currentUser.update(req.body, { fields: constants.FIELDS_TO_UPDATE.USER.UPDATE });
+
+    // TODO: update first/late name to GSuite account (if there is an account attached)
+    if (req.currentUser.gsuite_id && (req.body.first_name || req.body.last_name)) {
+        const payload = {
+            name: {
+                givenName: req.body.first_name || req.currentUser.first_name,
+                familyName: req.body.last_name || req.currentUser.last_name
+            }
+        };
+
+        await request({
+            url: config.gsuiteWrapper.url + ':' + config.gsuiteWrapper.port + '/accounts/' + req.currentUser.gsuite_id,
+            method: 'PUT',
+            json: true,
+            body: payload
+        });
+    }
+
     return res.json({
         success: true,
         data: req.currentUser
@@ -133,7 +153,16 @@ exports.deleteUser = async (req, res) => {
         return errors.makeForbiddenError(res, 'Permission delete:member is required, but not present.');
     }
 
+    // TODO: if user gets deleted the gsuite account also gets deleted (if there was an account attached)
+    if (req.currentUser.gsuite_id) {
+        await request({
+            url: config.gsuiteWrapper.url + ':' + config.gsuiteWrapper.port + '/accounts/' + req.currentUser.gsuite_id,
+            method: 'DELETE'
+        });
+    }
+
     await req.currentUser.destroy();
+
     return res.json({
         success: true,
         message: 'User is deleted.'
@@ -153,6 +182,19 @@ exports.setUserPassword = async (req, res) => {
 
     await userWithPassword.update({ password: req.body.password });
 
+    // TODO: password should be sent to gsuite-wrapper
+    if (req.currentUser.gsuite_id) {
+        const payload = {
+            password: crypto.createHash('sha1').update(JSON.stringify(req.body.password)).digest('hex')
+        };
+        await request({
+            url: config.gsuiteWrapper.url + ':' + config.gsuiteWrapper.port + '/accounts/' + req.currentUser.gsuite_id,
+            method: 'PUT',
+            json: true,
+            body: payload
+        });
+    }
+
     // TODO: add a mail that the password was changed.
 
     return res.json({
@@ -167,6 +209,7 @@ exports.setUserActive = async (req, res) => {
     }
 
     await req.currentUser.update({ active: req.body.active });
+
     return res.json({
         success: true,
         data: req.currentUser
@@ -186,6 +229,16 @@ exports.confirmUser = async (req, res) => {
 
     await confirmation.destroy();
 
+    // TODO: probably move this to another method since not all MyAEGEE members should have a GSuite account
+    if (req.currentUser.gsuite_id) {
+        await request({
+            url: config.gsuiteWrapper.url + ':' + config.gsuiteWrapper.port + '/accounts/' + req.currentUser.gsuite_id,
+            method: 'PUT',
+            json: true,
+            body: { suspended: false }
+        });
+    }
+
     return res.json({
         success: true,
         data: req.currentUser
@@ -207,9 +260,37 @@ exports.setPrimaryBody = async (req, res) => {
             return errors.makeForbiddenError(res, 'User is not a member of this body.');
         }
 
+        // TODO: set GSuite department to primary body
         await req.currentUser.update({ primary_body_id: body.id });
+        // await request({
+        //     url: config.gsuiteWrapper.url + ':' + config.gsuiteWrapper.port + '/accounts?DEPARTMENT',
+        //     method: 'POST',
+        //     json: true,
+        //     body:
+        // });
+
+        // await request({
+        //     url: config.gsuiteWrapper.url + ':' + config.gsuiteWrapper.port + '/groups?DEPARTMENT',
+        //     method: 'POST',
+        //     json: true,
+        //     body:
+        // });
     } else {
+        // TODO: set GSuite department to primary body
         await req.currentUser.update({ primary_body_id: null });
+        // await request({
+        //     url: config.gsuiteWrapper.url + ':' + config.gsuiteWrapper.port + '/accounts?DEPARTMENT',
+        //     method: 'POST',
+        //     json: true,
+        //     body:
+        // });
+
+        // await request({
+        //     url: config.gsuiteWrapper.url + ':' + config.gsuiteWrapper.port + '/groups?DEPARTMENT',
+        //     method: 'POST',
+        //     json: true,
+        //     body:
+        // });
     }
 
     return res.json({
@@ -276,9 +357,18 @@ exports.confirmEmailChange = async (req, res) => {
         return errors.makeNotFoundError(res, 'Token is expired.');
     }
 
+    // TODO: change GSuite secondary email
     await sequelize.transaction(async (t) => {
         await mailChange.user.update({ email: mailChange.new_email }, { transaction: t });
         await mailChange.destroy({ transaction: t });
+        if (req.currentUser.gsuite_id) {
+            await request({
+                url: config.gsuiteWrapper.url + ':' + config.gsuiteWrapper.port + '/accounts/' + req.currentUser.gsuite_id,
+                method: 'PUT',
+                json: true,
+                body: { secondaryEmail: mailChange.new_email }
+            });
+        }
     });
 
     return res.json({