spellsaurus/repositories/school-repository.js

'use strict'
// Bookshelf
const bookshelf = require('../database/connection').bookshelf

const Spells = require('./spell-repository')

const MetaSchoolRepository = require('./meta-school-repository')
const MetaSchools = new MetaSchoolRepository()

// Model validation
const Validator = require('jsonschema').Validator
const v = new Validator()
const SchoolModel = require("../models/SchoolValidation")
v.addSchema(SchoolModel, "/SchoolModel")

// Validations
const regexXSS = RegExp(/<[^>]*script/)

// Error handling
const { HttpError } = require('../models/Errors')

class SchoolRepository {

    constructor() {
        this.model = bookshelf.Model.extend({
            tableName: 'school',
            spells() {
                return this.belongsToMany( Spells._model, 'spell_school', 'school_id', 'spell_id')
            },
            meta_schools() {
                return this.belongsTo( MetaSchools._model, 'meta_school_id')
            }
        })
    }

    set model(model) {
        this._model = model
    }

    get model() {
        return this._model
    }

    getAll() {
        return new Promise((resolve, reject) => {
            this._model.forge()
            .fetchAll({ withRelated: ['meta_schools'] })
            .then(v => {
                resolve(v.toJSON({ omitPivot: true }))
            })
            .catch(err => {
                console.log(err)
                reject(new HttpError(500, "Couldn't get schools"))
            })
        })
    }

    getOne(id) {
        return new Promise((resolve, reject) => {
            this._model.forge()
            .where({ 'id' : id })
            .fetch({ withRelated: ['meta_schools']})
            .then(v => {
                resolve(v.toJSON({ omitPivot: true }))
            })
            .catch(err => {
                console.log(err)
                reject(new HttpError(500, "Couldn't get school"))
            })
        })
    }

    addOne(s) {
        return new Promise((resolve, reject) => {
            // Checks if body exists and if the model fits, and throws errors if it doesn't
            if (this.isEmptyObject(s)) {
                reject(new HttpError(403, "Error: School cannot be nothing !"))
            } else if (!v.validate(s, SchoolModel).valid) {
                reject(new HttpError(403, "Error: Schema is not valid - " + v.validate(s, SchoolModel).errors))
            } else if (this.isXSSAttempt(s.name) || this.isXSSAttempt(s.description)) {
                reject(new HttpError(403, 'Injection attempt detected, aborting the request.'))
            } else {
                bookshelf.transaction(t => {
                    return this._model.forge({
                        'name': s.name,
                        'description': s.description,
                        'meta_school_id': s.meta_school_id,
                    }).save(null, {
                        transacting: t
                    })
                    .catch(err => {
                        throw err
                    })
                })
                .then(v => {
                    return v.load(['meta_schools'])
                })
                .then(v => {
                    resolve(this.getOne(v.id))
                })
                .catch(err => {
                    console.log(err)
                    reject(new HttpError(500, "Insert School error"))
                })
            }
        })
    }

    updateOne(id, s) {
        return new Promise((resolve, reject) => {
            // Checks if body exists and if the model fits, and throws errors if it doesn't
            if (this.isEmptyObject(s)) {
                reject(new HttpError(403, "Error: School cannot be nothing !"))
            } else if (!v.validate(s, SchoolModel).valid) {
                reject(new HttpError(403, "Error: Schema is not valid - " + v.validate(s, SchoolModel).errors))
            } else if (this.isXSSAttempt(s.name) || this.isXSSAttempt(s.description)) {
                reject(new HttpError(403, 'Injection attempt detected, aborting the request.'))
            } else {
                this._model.forge({id: id})
                .fetch({require: true, withRelated: ['meta_schools']})
                .then(v => {
                    bookshelf.transaction(t => {
                        return v.save({
                            'name': s.name,
                            'description': s.description,
                            'meta_school_id': s.meta_school_id
                        }, {
                            method: 'update',
                            transacting: t
                        })
                        .catch(err => {
                            console.log(err)
                            throw err
                        })
                    })
                    .then(v => {
                        return v.load(['meta_schools'])
                    })
                    .then(v => {
                        resolve(this.getOne(v.id))
                    })
                    .catch(err => {
                        console.log(err)
                        reject(new HttpError(500, "Update School error"))
                    })
                })
                .catch(err => {
                    console.log(err)
                    reject(new HttpError(404, "Couldn't get school"))
                })
            }
        })
    }

    deleteOne(id) {
        return new Promise((resolve, reject) => {
            this._model.forge()
            .where({ 'id' : id })
            .fetch({require: true, withRelated: ['spells', 'meta_schools']})
            .then(v => {

            })
            .then(() => {
                resolve({
                    'message': 'School with ID ' + id + ' successfully deleted !'
                })
            })
            .catch(err => {
                console.log(err)
                reject(new HttpError(404, "Couldn't get school"))
            })
        })
    }

    // Check if object is null
    isEmptyObject = (obj) => {
        if (Object.keys(obj).length === 0 && obj.constructor === Object) {
            return true
        } else {
            return false
        }
    }

    // Check if script injection attempt
    isXSSAttempt = (string) => {
        if (regexXSS.test(string)) {
            return true
        } else {
            return false
        }
    }
}

module.exports = SchoolRepository