budibase/packages/server/src/utilities/users.ts

import { InternalTables } from "../db/utils"
import { getGlobalUser } from "./global"
import { context, db as dbCore, roles } from "@budibase/backend-core"
import { BBContext } from "@budibase/types"

export async function getFullUser(ctx: BBContext, userId: string) {
  const global = await getGlobalUser(userId)
  let metadata: any = {}

  // always prefer the user metadata _id and _rev
  delete global._id
  delete global._rev

  try {
    // this will throw an error if the db doesn't exist, or there is no appId
    const db = context.getAppDB()
    metadata = await db.get(userId)
  } catch (err) {
    // it is fine if there is no user metadata yet
  }
  delete metadata.csrfToken
  return {
    ...metadata,
    ...global,
    roleId: global.roleId || roles.BUILTIN_ROLE_IDS.PUBLIC,
    tableId: InternalTables.USER_METADATA,
    // make sure the ID is always a local ID, not a global one
    _id: userId,
  }
}

export function publicApiUserFix(ctx: BBContext) {
  if (!ctx.request.body) {
    return ctx
  }
  if (!ctx.request.body._id && ctx.params.userId) {
    ctx.request.body._id = ctx.params.userId
  }
  if (!ctx.request.body.roles) {
    ctx.request.body.roles = {}
  } else {
    const newRoles: { [key: string]: any } = {}
    for (let [appId, role] of Object.entries(ctx.request.body.roles)) {
      newRoles[dbCore.getProdAppID(appId)] = role
    }
    ctx.request.body.roles = newRoles
  }
  return ctx
}