redash/client/app/services/auth.js

import debug from 'debug';
import { includes, extend } from 'lodash';

// eslint-disable-next-line import/no-mutable-exports
export let Auth = null;

export const currentUser = {
  canEdit(object) {
    const userId = object.user_id || (object.user && object.user.id);
    return this.hasPermission('admin') || (userId && userId === this.id);
  },

  hasPermission(permission) {
    return includes(this.permissions, permission);
  },

  get isAdmin() {
    return this.hasPermission('admin');
  },
};

export const clientConfig = {};
export const messages = [];

const logger = debug('redash:auth');
const session = { loaded: false };

function updateSession(sessionData) {
  logger('Updating session to be:', sessionData);
  extend(session, sessionData, { loaded: true });
  extend(currentUser, session.user);
  extend(clientConfig, session.client_config);
  extend(messages, session.messages);
}

function AuthService($window, $location, $q, $http) {
  return {
    isAuthenticated() {
      return session.loaded && session.user.id;
    },
    login() {
      const next = encodeURI($location.url());
      logger('Calling login with next = %s', next);
      window.location.href = `login?next=${next}`;
    },
    logout() {
      logger('Logout.');
      $window.location.href = 'logout';
    },
    loadSession() {
      logger('Loading session');
      if (session.loaded && session.user.id) {
        logger('Resolving with local value.');
        return $q.resolve(session);
      }

      this.setApiKey(null);
      return $http.get('api/session').then((response) => {
        updateSession(response.data);
        return session;
      });
    },
    loadConfig() {
      logger('Loading config');
      return $http.get('/api/config').then((response) => {
        updateSession({ client_config: response.data.client_config, user: { permissions: [] }, messages: [] });
        return response.data;
      });
    },
    setApiKey(apiKey) {
      logger('Set API key to: %s', apiKey);
      this.apiKey = apiKey;
    },
    getApiKey() {
      return this.apiKey;
    },
    requireSession() {
      logger('Requested authentication');
      if (this.isAuthenticated()) {
        return $q.when(session);
      }
      return this.loadSession()
        .then(() => {
          if (this.isAuthenticated()) {
            logger('Loaded session');
            return session;
          }
          logger('Need to login, redirecting');
          this.login();
        })
        .catch(() => {
          logger('Need to login, redirecting');
          this.login();
        });
    },
  };
}

function apiKeyHttpInterceptor($injector) {
  return {
    request(config) {
      const apiKey = $injector.get('Auth').getApiKey();
      if (apiKey) {
        config.headers.Authorization = `Key ${apiKey}`;
      }

      return config;
    },
  };
}

export default function init(ngModule) {
  ngModule.factory('Auth', AuthService);
  ngModule.value('currentUser', currentUser);
  ngModule.value('clientConfig', clientConfig);
  ngModule.value('messages', messages);
  ngModule.factory('apiKeyHttpInterceptor', apiKeyHttpInterceptor);

  ngModule.config(($httpProvider) => {
    $httpProvider.interceptors.push('apiKeyHttpInterceptor');
  });

  ngModule.run(($injector) => {
    Auth = $injector.get('Auth');
  });
}

init.init = true;