API-Explorer-II/server/controllers/RequestController.ts

/*
 * Open Bank Project -  API Explorer II
 * Copyright (C) 2023-2024, TESOBE GmbH
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
 * Email: contact@tesobe.com
 * TESOBE GmbH
 * Osloerstrasse 16/17
 * Berlin 13359, Germany
 *
 *   This product includes software developed at
 *   TESOBE (http://www.tesobe.com/)
 *
 */

import { Controller, Session, Req, Res, Get, Delete, Post, Put } from 'routing-controllers'
import { Request, Response } from 'express'
import OBPClientService from '../services/OBPClientService'
import { Service, Container } from 'typedi'

@Service()
@Controller()
export class OBPController {
  private obpClientService: OBPClientService

  constructor() {
    // Explicitly get OBPClientService from the container to avoid injection issues
    this.obpClientService = Container.get(OBPClientService)
  }

  @Get('/get')
  async get(@Session() session: any, @Req() request: Request, @Res() response: Response): Response {
    const path = request.query.path
    const oauthConfig = session['clientConfig']

    // Debug logging
    console.log('RequestController.get - Path:', path)
    console.log('RequestController.get - Has session:', !!session)
    console.log('RequestController.get - Has clientConfig:', !!oauthConfig)
    console.log('RequestController.get - Has oauth2:', !!oauthConfig?.oauth2)
    console.log('RequestController.get - Has accessToken:', !!oauthConfig?.oauth2?.accessToken)
    console.log('RequestController.get - Session keys:', Object.keys(session || {}))

    // Check if user is authenticated
    if (!oauthConfig || !oauthConfig.oauth2?.accessToken) {
      console.log('RequestController.get - User not authenticated')
      return response.status(401).json({
        code: 401,
        message: 'OBP-20001: User not logged in. Authentication is required!'
      })
    }

    try {
      const result = await this.obpClientService.get(path, oauthConfig)
      return response.json(result)
    } catch (error: any) {
      console.error('RequestController.get error:', error)
      return response.status(error.status || 500).json({
        code: error.status || 500,
        message: error.message || 'Internal server error'
      })
    }
  }

  @Post('/create')
  async create(
    @Session() session: any,
    @Req() request: Request,
    @Res() response: Response
  ): Response {
    const path = request.query.path
    const data = request.body
    const oauthConfig = session['clientConfig']

    // Check if user is authenticated
    if (!oauthConfig || !oauthConfig.oauth2?.accessToken) {
      return response.status(401).json({
        code: 401,
        message: 'OBP-20001: User not logged in. Authentication is required!'
      })
    }

    try {
      const result = await this.obpClientService.create(path, data, oauthConfig)
      return response.json(result)
    } catch (error: any) {
      console.error('RequestController.create error:', error)
      return response.status(error.status || 500).json({
        code: error.status || 500,
        message: error.message || 'Internal server error'
      })
    }
  }

  @Put('/update')
  async update(
    @Session() session: any,
    @Req() request: Request,
    @Res() response: Response
  ): Response {
    const path = request.query.path
    const data = request.body
    const oauthConfig = session['clientConfig']

    // Check if user is authenticated
    if (!oauthConfig || !oauthConfig.oauth2?.accessToken) {
      return response.status(401).json({
        code: 401,
        message: 'OBP-20001: User not logged in. Authentication is required!'
      })
    }

    try {
      const result = await this.obpClientService.update(path, data, oauthConfig)
      return response.json(result)
    } catch (error: any) {
      console.error('RequestController.update error:', error)
      return response.status(error.status || 500).json({
        code: error.status || 500,
        message: error.message || 'Internal server error'
      })
    }
  }

  @Delete('/delete')
  async delete(
    @Session() session: any,
    @Req() request: Request,
    @Res() response: Response
  ): Response {
    const path = request.query.path
    const oauthConfig = session['clientConfig']

    // Check if user is authenticated
    if (!oauthConfig || !oauthConfig.oauth2?.accessToken) {
      return response.status(401).json({
        code: 401,
        message: 'OBP-20001: User not logged in. Authentication is required!'
      })
    }

    try {
      const result = await this.obpClientService.discard(path, oauthConfig)
      return response.json(result)
    } catch (error: any) {
      console.error('RequestController.delete error:', error)
      return response.status(error.status || 500).json({
        code: error.status || 500,
        message: error.message || 'Internal server error'
      })
    }
  }
}