feat: draft template api

apps/OpenSignServer/cloud/parsefunction/getDocument.js

@@ -1,10 +1,12 @@
 import axios from 'axios';
-import { cloudServerUrl } from '../../Utils.js';
+import { cloudServerUrl, parseJwt } from '../../Utils.js';
+import jwt from 'jsonwebtoken';
 
 export default async function getDocument(request) {
   const serverUrl = cloudServerUrl; //process.env.SERVER_URL;
   const docId = request.params.docId;
-
+  const jwttoken = request?.headers?.jwttoken || '';
+  const sessiontoken = request?.headers?.sessiontoken || '';
   try {
     if (docId) {
       try {
@@ -27,12 +29,12 @@ export default async function getDocument(request) {
           if (!IsEnableOTP) {
             return document;
           } else {
-            if (request?.headers?.['sessiontoken']) {
+            if (sessiontoken) {
               try {
                 const userRes = await axios.get(serverUrl + '/users/me', {
                   headers: {
                     'X-Parse-Application-Id': process.env.APP_ID,
-                    'X-Parse-Session-Token': request.headers['sessiontoken'],
+                    'X-Parse-Session-Token': sessiontoken,
                   },
                 });
                 const userId = userRes.data && userRes.data?.objectId;
@@ -46,6 +48,37 @@ export default async function getDocument(request) {
                 console.log('err user in not authenticated', err);
                 return { error: "You don't have access of this document!" };
               }
+            } else if (jwttoken) {
+              try {
+                const jwtDecode = parseJwt(jwttoken);
+                if (jwtDecode?.user_email) {
+                  const userCls = new Parse.Query(Parse.User);
+                  userCls.equalTo('email', jwtDecode?.user_email);
+                  const userRes = await userCls.first({ useMasterKey: true });
+                  const userId = userRes?.id;
+                  const tokenQuery = new Parse.Query('appToken');
+                  tokenQuery.equalTo('userId', {
+                    __type: 'Pointer',
+                    className: '_User',
+                    objectId: userId,
+                  });
+                  const appRes = await tokenQuery.first({ useMasterKey: true });
+                  const decoded = jwt.verify(jwttoken, appRes?.get('token'));
+                  if (decoded?.user_email) {
+                    const acl = res.getACL();
+                    if (userId && acl && acl.getReadAccess(userId)) {
+                      return document;
+                    } else {
+                      return { error: "You don't have access of this document!" };
+                    }
+                  } else {
+                    return { status: 'error', result: 'Invalid token!' };
+                  }
+                }
+              } catch (err) {
+                console.log('err in jwt', err);
+                return { error: "You don't have access of this document!" };
+              }
             } else {
               return { error: "You don't have access of this document!" };
             }