hrms-bangkok/hrms-api-probation
7
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

Merge branch 'develop'

Browse source
This commit is contained in:
DESKTOP-2S5P7D1\Windows 10 2024-12-18 19:02:28 +07:00
commit 25545e02ad
4 changed files with 370 additions and 362 deletions
Download patch file Download diff file Expand all files Collapse all files

1
src/controllers/ReportController.ts
View file

@ -1227,6 +1227,7 @@ export class ReportController extends Controller {
commandYear: number commandYear: number
templateDoc: string | null templateDoc: string | null
amount: Double | null amount: Double | null
amountSpecial?: Double | null
positionSalaryAmount: Double | null positionSalaryAmount: Double | null
mouthSalaryAmount: Double | null mouthSalaryAmount: Double | null
}[] }[]

172
src/interfaces/call-api.ts
View file

@ -1,86 +1,86 @@
import { Path } from "tsoa" import { Path } from "tsoa"
import axios from "axios" import axios from "axios"
import { addLogSequence } from "./utils" import { addLogSequence } from "./utils"
class CallAPI { class CallAPI {
//Get //Get
public async GetData(request: any, @Path() path: any, log = true) { public async GetData(request: any, @Path() path: any, log = true) {
const token = "Bearer " + request.headers.authorization.replace("Bearer ", "") const token = "Bearer " + request.headers.authorization.replace("Bearer ", "")
const url = process.env.API_URL + path const url = process.env.API_URL + path
try { try {
const response = await axios.get(url, { const response = await axios.get(url, {
headers: { headers: {
Authorization: `${token}`, Authorization: `${token}`,
"Content-Type": "application/json", "Content-Type": "application/json",
api_key: process.env.API_KEY, api_key: process.env.API_KEY,
}, },
}) })
if (log) if (log)
addLogSequence(request, { addLogSequence(request, {
action: "request", action: "request",
status: "success", status: "success",
description: "connected", description: "connected",
request: { request: {
method: "GET", method: "GET",
url: url, url: url,
response: JSON.stringify(response.data.result), response: JSON.stringify(response.data.result),
}, },
}) })
return response.data.result return response.data.result
} catch (error) { } catch (error) {
if (log) if (log)
addLogSequence(request, { addLogSequence(request, {
action: "request", action: "request",
status: "error", status: "error",
description: "unconnected", description: "unconnected",
request: { request: {
method: "GET", method: "GET",
url: url, url: url,
response: JSON.stringify(error), response: JSON.stringify(error),
}, },
}) })
throw error throw error
} }
} }
//Post //Post
public async PostData(request: any, @Path() path: any, sendData: any) { public async PostData(request: any, @Path() path: any, sendData: any) {
const token = "Bearer " + request.headers.authorization.replace("Bearer ", "") const token = "Bearer " + request.headers.authorization.replace("Bearer ", "")
const url = process.env.API_URL + path const url = process.env.API_URL + path
try { try {
const response = await axios.post(url, sendData, { const response = await axios.post(url, sendData, {
headers: { headers: {
Authorization: `${token}`, Authorization: `${token}`,
"Content-Type": "application/json", "Content-Type": "application/json",
api_key: process.env.API_KEY, api_key: process.env.API_KEY,
}, },
}) })
addLogSequence(request, { addLogSequence(request, {
action: "request", action: "request",
status: "success", status: "success",
description: "connected", description: "connected",
request: { request: {
method: "POST", method: "POST",
url: url, url: url,
payload: JSON.stringify(sendData), payload: JSON.stringify(sendData),
response: JSON.stringify(response.data.result), response: JSON.stringify(response.data.result),
}, },
}) })
return response.data.result return response.data.result
} catch (error) { } catch (error) {
addLogSequence(request, { addLogSequence(request, {
action: "request", action: "request",
status: "error", status: "error",
description: "unconnected", description: "unconnected",
request: { request: {
method: "POST", method: "POST",
url: url, url: url,
payload: JSON.stringify(sendData), payload: JSON.stringify(sendData),
response: JSON.stringify(error), response: JSON.stringify(error),
}, },
}) })
throw error throw error
} }
} }
} }
export default CallAPI export default CallAPI

490
src/interfaces/permission.ts
View file

@ -1,245 +1,245 @@
import axios from "axios" import axios from "axios"
import { RequestWithUser } from "../middlewares/user" import { RequestWithUser } from "../middlewares/user"
import CallAPI from "./call-api" import CallAPI from "./call-api"
import HttpError from "./http-error" import HttpError from "./http-error"
import HttpStatus from "./http-status" import HttpStatus from "./http-status"
import { promisify } from "util" import { promisify } from "util"
class CheckAuth { class CheckAuth {
private redis = require("redis") private redis = require("redis")
public async Permission(req: RequestWithUser, system: string, action: string) { public async Permission(req: RequestWithUser, system: string, action: string) {
if (req.headers.hasOwnProperty("api_key") && req.headers["api_key"] && req.headers["api_key"] == process.env.API_KEY) { if (req.headers.hasOwnProperty("api_key") && req.headers["api_key"] && req.headers["api_key"] == process.env.API_KEY) {
return null return null
} }
return await new CallAPI() return await new CallAPI()
.GetData(req, "/org/permission") .GetData(req, "/org/permission")
.then(x => { .then(x => {
let permission = false let permission = false
let role = x.roles.find((x: any) => x.authSysId == system) let role = x.roles.find((x: any) => x.authSysId == system)
if (!role) throw "ไม่มีสิทธิ์เข้าระบบ" if (!role) throw "ไม่มีสิทธิ์เข้าระบบ"
if (role.attrOwnership == "OWNER") return "OWNER" if (role.attrOwnership == "OWNER") return "OWNER"
if (action.trim().toLocaleUpperCase() == "CREATE") permission = role.attrIsCreate if (action.trim().toLocaleUpperCase() == "CREATE") permission = role.attrIsCreate
if (action.trim().toLocaleUpperCase() == "DELETE") permission = role.attrIsDelete if (action.trim().toLocaleUpperCase() == "DELETE") permission = role.attrIsDelete
if (action.trim().toLocaleUpperCase() == "GET") permission = role.attrIsGet if (action.trim().toLocaleUpperCase() == "GET") permission = role.attrIsGet
if (action.trim().toLocaleUpperCase() == "LIST") permission = role.attrIsList if (action.trim().toLocaleUpperCase() == "LIST") permission = role.attrIsList
if (action.trim().toLocaleUpperCase() == "UPDATE") permission = role.attrIsUpdate if (action.trim().toLocaleUpperCase() == "UPDATE") permission = role.attrIsUpdate
if (permission == false) throw "ไม่มีสิทธิ์ใช้งานระบบนี้" if (permission == false) throw "ไม่มีสิทธิ์ใช้งานระบบนี้"
return role.attrPrivilege return role.attrPrivilege
}) })
.catch(x => { .catch(x => {
if (x.status != undefined) { if (x.status != undefined) {
throw new HttpError(x.status, x.message) throw new HttpError(x.status, x.message)
} else { } else {
throw new HttpError(HttpStatus.FORBIDDEN, x) throw new HttpError(HttpStatus.FORBIDDEN, x)
} }
}) })
} }
public async PermissionOrg(req: RequestWithUser, system: string, action: string) { public async PermissionOrg(req: RequestWithUser, system: string, action: string) {
if (req.headers.hasOwnProperty("api_key") && req.headers["api_key"] && req.headers["api_key"] == process.env.API_KEY) { if (req.headers.hasOwnProperty("api_key") && req.headers["api_key"] && req.headers["api_key"] == process.env.API_KEY) {
return { return {
root: null, root: null,
child1: null, child1: null,
child2: null, child2: null,
child3: null, child3: null,
child4: null, child4: null,
} }
} }
return await new CallAPI() return await new CallAPI()
.GetData(req, `/org/permission/org/${system}/${action}`) .GetData(req, `/org/permission/org/${system}/${action}`)
.then(async x => { .then(async x => {
let privilege = x.privilege let privilege = x.privilege
let data: any = { let data: any = {
root: [null], root: [null],
child1: [null], child1: [null],
child2: [null], child2: [null],
child3: [null], child3: [null],
child4: [null], child4: [null],
privilege: [null], privilege: [null],
} }
let node = 4 let node = 4
if (x.orgChild1Id == null) { if (x.orgChild1Id == null) {
node = 0 node = 0
} else if (x.orgChild2Id == null) { } else if (x.orgChild2Id == null) {
node = 1 node = 1
} else if (x.orgChild3Id == null) { } else if (x.orgChild3Id == null) {
node = 2 node = 2
} else if (x.orgChild4Id == null) { } else if (x.orgChild4Id == null) {
node = 3 node = 3
} }
if (privilege == "OWNER") { if (privilege == "OWNER") {
data = { data = {
root: null, root: null,
child1: null, child1: null,
child2: null, child2: null,
child3: null, child3: null,
child4: null, child4: null,
privilege: "OWNER", privilege: "OWNER",
} }
} else if (privilege == "ROOT") { } else if (privilege == "ROOT") {
data = { data = {
root: [x.orgRootId], root: [x.orgRootId],
child1: null, child1: null,
child2: null, child2: null,
child3: null, child3: null,
child4: null, child4: null,
privilege: "ROOT", privilege: "ROOT",
} }
} else if (privilege == "CHILD") { } else if (privilege == "CHILD") {
data = { data = {
root: node >= 0 ? [x.orgRootId] : null, root: node >= 0 ? [x.orgRootId] : null,
child1: node >= 1 ? [x.orgChild1Id] : null, child1: node >= 1 ? [x.orgChild1Id] : null,
child2: node >= 2 ? [x.orgChild2Id] : null, child2: node >= 2 ? [x.orgChild2Id] : null,
child3: node >= 3 ? [x.orgChild3Id] : null, child3: node >= 3 ? [x.orgChild3Id] : null,
child4: node >= 4 ? [x.orgChild4Id] : null, child4: node >= 4 ? [x.orgChild4Id] : null,
privilege: "CHILD", privilege: "CHILD",
} }
} else if (privilege == "NORMAL") { } else if (privilege == "NORMAL") {
data = { data = {
root: [x.orgRootId], root: [x.orgRootId],
child1: [x.orgChild1Id], child1: [x.orgChild1Id],
child2: [x.orgChild2Id], child2: [x.orgChild2Id],
child3: [x.orgChild3Id], child3: [x.orgChild3Id],
child4: [x.orgChild4Id], child4: [x.orgChild4Id],
privilege: "NORMAL", privilege: "NORMAL",
} }
} else if (privilege == "SPECIFIC") { } else if (privilege == "SPECIFIC") {
} }
return data return data
}) })
.catch(x => { .catch(x => {
if (x.status != undefined) { if (x.status != undefined) {
throw new HttpError(x.status, x.message) throw new HttpError(x.status, x.message)
} else { } else {
throw new HttpError(HttpStatus.FORBIDDEN, x) throw new HttpError(HttpStatus.FORBIDDEN, x)
} }
}) })
} }
public async PermissionOrgByUser(req: RequestWithUser, system: string, action: string, profileId: string) { public async PermissionOrgByUser(req: RequestWithUser, system: string, action: string, profileId: string) {
if (req.headers.hasOwnProperty("api_key") && req.headers["api_key"] && req.headers["api_key"] == process.env.API_KEY) { if (req.headers.hasOwnProperty("api_key") && req.headers["api_key"] && req.headers["api_key"] == process.env.API_KEY) {
return true return true
} }
return await new CallAPI() return await new CallAPI()
.GetData(req, `/org/permission/user/${system}/${action}/${profileId}`) .GetData(req, `/org/permission/user/${system}/${action}/${profileId}`)
.then(async x => { .then(async x => {
let org = x.org let org = x.org
if (org.root != null) if (x.orgRootId != org.root[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล" if (org.root != null) if (x.orgRootId != org.root[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล"
if (org.child1 != null) if (x.orgChild1Id != org.child1[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล" if (org.child1 != null) if (x.orgChild1Id != org.child1[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล"
if (org.child2 != null) if (x.orgChild2Id != org.child2[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล" if (org.child2 != null) if (x.orgChild2Id != org.child2[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล"
if (org.child3 != null) if (x.orgChild3Id != org.child3[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล" if (org.child3 != null) if (x.orgChild3Id != org.child3[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล"
if (org.child4 != null) if (x.orgChild4Id != org.child4[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล" if (org.child4 != null) if (x.orgChild4Id != org.child4[0]) throw "ไม่มีสิทธิ์เข้าถึงข้อมูล"
return true return true
}) })
.catch(x => { .catch(x => {
if (x.status != undefined) { if (x.status != undefined) {
throw new HttpError(x.status, x.message) throw new HttpError(x.status, x.message)
} else { } else {
throw new HttpError(HttpStatus.FORBIDDEN, x) throw new HttpError(HttpStatus.FORBIDDEN, x)
} }
}) })
} }
public async Workflow(req: RequestWithUser, id: string, sysName: string) { public async Workflow(req: RequestWithUser, id: string, sysName: string) {
if (req.headers.hasOwnProperty("api_key") && req.headers["api_key"] && req.headers["api_key"] == process.env.API_KEY) { if (req.headers.hasOwnProperty("api_key") && req.headers["api_key"] && req.headers["api_key"] == process.env.API_KEY) {
return null return null
} }
return await new CallAPI() return await new CallAPI()
.PostData(req, "/org/workflow/keycloak/isofficer", { .PostData(req, "/org/workflow/keycloak/isofficer", {
refId: id, refId: id,
sysName: sysName, sysName: sysName,
}) })
.then(x => { .then(x => {
return true return true
}) })
.catch(x => { .catch(x => {
return false return false
}) })
} }
public async checkOrg(token: any, keycloakId: string) { public async checkOrg(token: any, keycloakId: string) {
const redisClient = await this.redis.createClient({ const redisClient = await this.redis.createClient({
host: process.env.REDIS_HOST, host: process.env.REDIS_HOST,
port: process.env.REDIS_PORT, port: process.env.REDIS_PORT,
}) })
const getAsync = promisify(redisClient.get).bind(redisClient) const getAsync = promisify(redisClient.get).bind(redisClient)
let reply = await getAsync("org_" + keycloakId) try {
if (reply != null) { let reply = await getAsync("org_" + keycloakId)
reply = JSON.parse(reply) if (reply != null) {
} else { reply = JSON.parse(reply)
try { } else {
if (!keycloakId) throw "Error calling API No KeycloakId" if (!keycloakId) throw new Error("No KeycloakId provided")
const x = await new CallAPI().GetData( const x = await new CallAPI().GetData(
{ {
headers: { authorization: token }, headers: { authorization: token },
}, },
`/org/permission/checkOrg/${keycloakId}`, `/org/permission/checkOrg/${keycloakId}`,
false false
) )
const data = { const data = {
orgRootId: x.orgRootId, orgRootId: x.orgRootId,
orgChild1Id: x.orgChild1Id, orgChild1Id: x.orgChild1Id,
orgChild2Id: x.orgChild2Id, orgChild2Id: x.orgChild2Id,
orgChild3Id: x.orgChild3Id, orgChild3Id: x.orgChild3Id,
orgChild4Id: x.orgChild4Id, orgChild4Id: x.orgChild4Id,
} }
return data return data
} catch (error) { }
console.error("Error calling API:", error) } catch (error) {
throw error console.error("Error calling API:", error)
} throw error
} }
} }
public async PermissionCreate(req: RequestWithUser, system: string) { public async PermissionCreate(req: RequestWithUser, system: string) {
return await this.Permission(req, system, "CREATE") return await this.Permission(req, system, "CREATE")
} }
public async PermissionDelete(req: RequestWithUser, system: string) { public async PermissionDelete(req: RequestWithUser, system: string) {
return await this.Permission(req, system, "DELETE") return await this.Permission(req, system, "DELETE")
} }
public async PermissionGet(req: RequestWithUser, system: string) { public async PermissionGet(req: RequestWithUser, system: string) {
return await this.Permission(req, system, "GET") return await this.Permission(req, system, "GET")
} }
public async PermissionList(req: RequestWithUser, system: string) { public async PermissionList(req: RequestWithUser, system: string) {
return await this.Permission(req, system, "LIST") return await this.Permission(req, system, "LIST")
} }
public async PermissionUpdate(req: RequestWithUser, system: string) { public async PermissionUpdate(req: RequestWithUser, system: string) {
return await this.Permission(req, system, "UPDATE") return await this.Permission(req, system, "UPDATE")
} }
public async PermissionOrgCreate(req: RequestWithUser, system: string) { public async PermissionOrgCreate(req: RequestWithUser, system: string) {
return await this.PermissionOrg(req, system, "CREATE") return await this.PermissionOrg(req, system, "CREATE")
} }
public async PermissionOrgDelete(req: RequestWithUser, system: string) { public async PermissionOrgDelete(req: RequestWithUser, system: string) {
return await this.PermissionOrg(req, system, "DELETE") return await this.PermissionOrg(req, system, "DELETE")
} }
public async PermissionOrgGet(req: RequestWithUser, system: string) { public async PermissionOrgGet(req: RequestWithUser, system: string) {
return await this.PermissionOrg(req, system, "GET") return await this.PermissionOrg(req, system, "GET")
} }
public async PermissionOrgList(req: RequestWithUser, system: string) { public async PermissionOrgList(req: RequestWithUser, system: string) {
return await this.PermissionOrg(req, system, "LIST") return await this.PermissionOrg(req, system, "LIST")
} }
public async PermissionOrgUpdate(req: RequestWithUser, system: string) { public async PermissionOrgUpdate(req: RequestWithUser, system: string) {
return await this.PermissionOrg(req, system, "UPDATE") return await this.PermissionOrg(req, system, "UPDATE")
} }
public async PermissionOrgUserCreate(req: RequestWithUser, system: string, profileId: string) { public async PermissionOrgUserCreate(req: RequestWithUser, system: string, profileId: string) {
return await this.PermissionOrgByUser(req, system, "CREATE", profileId) return await this.PermissionOrgByUser(req, system, "CREATE", profileId)
} }
public async PermissionOrgUserDelete(req: RequestWithUser, system: string, profileId: string) { public async PermissionOrgUserDelete(req: RequestWithUser, system: string, profileId: string) {
return await this.PermissionOrgByUser(req, system, "DELETE", profileId) return await this.PermissionOrgByUser(req, system, "DELETE", profileId)
} }
public async PermissionOrgUserGet(req: RequestWithUser, system: string, profileId: string) { public async PermissionOrgUserGet(req: RequestWithUser, system: string, profileId: string) {
return await this.PermissionOrgByUser(req, system, "GET", profileId) return await this.PermissionOrgByUser(req, system, "GET", profileId)
} }
public async PermissionOrgUserList(req: RequestWithUser, system: string, profileId: string) { public async PermissionOrgUserList(req: RequestWithUser, system: string, profileId: string) {
return await this.PermissionOrgByUser(req, system, "LIST", profileId) return await this.PermissionOrgByUser(req, system, "LIST", profileId)
} }
public async PermissionOrgUserUpdate(req: RequestWithUser, system: string, profileId: string) { public async PermissionOrgUserUpdate(req: RequestWithUser, system: string, profileId: string) {
return await this.PermissionOrgByUser(req, system, "UPDATE", profileId) return await this.PermissionOrgByUser(req, system, "UPDATE", profileId)
} }
} }
export default CheckAuth export default CheckAuth

69
src/middlewares/logs.ts
View file

@ -19,12 +19,10 @@ const LOG_LEVEL_MAP: Record<string, number> = {
const elasticsearch = new Client({ const elasticsearch = new Client({
node: `${process.env.ELASTICSEARCH_PROTOCOL}://${process.env.ELASTICSEARCH_HOST}:${process.env.ELASTICSEARCH_PORT}`, node: `${process.env.ELASTICSEARCH_PROTOCOL}://${process.env.ELASTICSEARCH_HOST}:${process.env.ELASTICSEARCH_PORT}`,
}) })
async function logMiddleware(req: Request, res: Response, next: NextFunction) { async function logMiddleware(req: Request, res: Response, next: NextFunction) {
if (!req.url.startsWith("/api/")) return next() if (!req.url.startsWith("/api/")) return next()
let data: any let data: any
const originalJson = res.json const originalJson = res.json
res.json = function (v: any) { res.json = function (v: any) {
@ -38,41 +36,50 @@ async function logMiddleware(req: Request, res: Response, next: NextFunction) {
req.app.locals.logData = {} req.app.locals.logData = {}
res.on("finish", async () => { res.on("finish", async () => {
if (!req.url.startsWith("/api/")) return try {
if (!req.url.startsWith("/api/")) return
const level = LOG_LEVEL_MAP[process.env.LOG_LEVEL ?? "debug"] || 4 const level = LOG_LEVEL_MAP[process.env.LOG_LEVEL ?? "debug"] || 4
if (level === 1 && res.statusCode < 500) return if (level === 1 && res.statusCode < 500) return
if (level === 2 && res.statusCode < 400) return if (level === 2 && res.statusCode < 400) return
if (level === 3 && res.statusCode < 200) return if (level === 3 && res.statusCode < 200) return
let token: any const token = req.headers["authorization"]
token = req.headers["authorization"] let rootId = null
const rootId = await new permission().checkOrg(token, req.app.locals.logData.userId) try {
rootId = token ? await new permission().checkOrg(token, req.app.locals.logData.userId) : null
} catch (err) {
console.warn("Error fetching rootId:", err)
}
const obj = { const obj = {
logType: res.statusCode >= 500 ? "error" : res.statusCode >= 400 ? "warning" : "info", logType: res.statusCode >= 500 ? "error" : res.statusCode >= 400 ? "warning" : "info",
ip: req.ip, ip: req.ip,
rootId: rootId ? rootId.orgRootId : null, rootId: rootId?.orgRootId ?? null,
systemName: "probation", systemName: "evaluation",
startTimeStamp: timestamp, startTimeStamp: timestamp,
endTimeStamp: new Date().toISOString(), endTimeStamp: new Date().toISOString(),
processTime: performance.now() - start, processTime: performance.now() - start,
host: req.hostname, host: req.hostname,
method: req.method, method: req.method,
endpoint: req.url, endpoint: req.url,
responseCode: String(res.statusCode === 304 ? 200 : res.statusCode), responseCode: String(res.statusCode === 304 ? 200 : res.statusCode),
responseDescription: data?.message, responseDescription: data?.message,
input: (level === 4 && JSON.stringify(req.body, null, 2)) || undefined, input: level === 4 ? JSON.stringify(req.body, null, 2) : undefined,
output: (level === 4 && JSON.stringify(data, null, 2)) || undefined, output: level === 4 ? JSON.stringify(data, null, 2) : undefined,
...req.app.locals.logData, ...req.app.locals.logData,
}
// Send log to Elasticsearch
await elasticsearch.index({
index: ELASTICSEARCH_INDEX,
document: obj,
})
} catch (err) {
console.error("Error in logMiddleware:", err)
} }
elasticsearch.index({
index: ELASTICSEARCH_INDEX,
document: obj,
})
}) })
return next() return next()