OpenSign/apps/OpenSignServer/cloud/parsefunction/GetTemplate.js

import axios from 'axios';
import { cloudServerUrl } from '../../Utils.js';

export default async function GetTemplate(request) {
  const serverUrl = cloudServerUrl; //process.env.SERVER_URL;
  const templateId = request.params.templateId;
  const sessiontoken = request.headers?.sessiontoken;
  try {
    let userEmail;
    if (sessiontoken) {
      const userRes = await axios.get(serverUrl + '/users/me', {
        headers: {
          'X-Parse-Application-Id': process.env.APP_ID,
          'X-Parse-Session-Token': sessiontoken,
        },
      });
      userEmail = userRes.data && userRes.data.email;
    }
    if (templateId && userEmail) {
      try {
        let template = new Parse.Query('contracts_Template');
        template.equalTo('objectId', templateId);
        template.notEqualTo('IsArchive', true);
        template.include('ExtUserPtr');
        template.include('Signers');
        template.include('CreatedBy');
        template.include('ExtUserPtr.TenantId');
        template.include('Bcc');
        const extUserQuery = new Parse.Query('contracts_Users');
        extUserQuery.equalTo('Email', userEmail);
        extUserQuery.include('TeamIds');
        const extUser = await extUserQuery.first({ useMasterKey: true });
        if (extUser) {
          const _extUser = JSON.parse(JSON.stringify(extUser));
          if (_extUser?.TeamIds && _extUser.TeamIds?.length > 0) {
            let teamsArr = [];
            _extUser?.TeamIds?.forEach(x => (teamsArr = [...teamsArr, ...x.Ancestors]));
            // Create the first query
            const sharedWithTeamQuery = new Parse.Query('contracts_Template');
            sharedWithTeamQuery.containedIn('SharedWith', teamsArr);

            // Create the second query
            const sharedWithJsersQuery = new Parse.Query('contracts_Template');
            sharedWithJsersQuery.equalTo('SharedWithUsers', {
              __type: 'Pointer',
              className: 'contracts_Users',
              objectId: extUser.id,
            });
            // Create the third query
            const createdByQuery = new Parse.Query('contracts_Template');
            createdByQuery.equalTo('ExtUserPtr', {
              __type: 'Pointer',
              className: 'contracts_Users',
              objectId: extUser.id,
            });
            template = Parse.Query.or(sharedWithTeamQuery, sharedWithJsersQuery, createdByQuery);
            template.equalTo('objectId', templateId);
            template.notEqualTo('IsArchive', true);
            template.include('ExtUserPtr');
            template.include('Signers');
            template.include('CreatedBy');
            template.include('ExtUserPtr.TenantId');
            template.include('Placeholders.signerPtr');
            template.include('Bcc');
          }
        }
        const res = await template.first({ useMasterKey: true });
        if (res) {
          const templateRes = JSON.parse(JSON.stringify(res));
          delete templateRes?.ExtUserPtr?.TenantId?.FileAdapters;
          delete templateRes?.ExtUserPtr?.TenantId?.PfxFile;
          return templateRes;
        } else {
          return { error: "template deleted or you don't have access." };
        }
      } catch (err) {
        console.log('err', err);
        return err;
      }
    } else {
      return { error: "template deleted or you don't have access." };
    }
  } catch (err) {
    console.log('err', err);
    if (err?.response?.data?.code === 209 || err.code == 209) {
      return { error: 'Invalid session token' };
    } else {
      return { error: "template deleted or you don't have access." };
    }
  }
}