[OGUI-1604] Add middleware to 'edit layout' requests

QualityControl/lib/api.js

@@ -43,7 +43,13 @@ export const setup = (http, ws) => {
   http.get('/layout/:id', layoutService.getLayoutHandler.bind(layoutService));
   http.get('/layout', layoutService.getLayoutByNameHandler.bind(layoutService));
   http.post('/layout', layoutService.postLayoutHandler.bind(layoutService));
-  http.put('/layout/:id', layoutService.putLayoutHandler.bind(layoutService));
+  http.put(
+    '/layout/:id',
+    layoutServiceMiddleware(jsonDb),
+    layoutIdMiddleware(jsonDb),
+    layoutOwnerMiddleware(jsonDb),
+    layoutService.putLayoutHandler.bind(layoutService),
+  );
   http.delete(
     '/layout/:id',
     layoutServiceMiddleware(jsonDb),
@@ -53,6 +59,8 @@ export const setup = (http, ws) => {
   );
   http.patch(
     '/layout/:id',
+    layoutServiceMiddleware(jsonDb),
+    layoutIdMiddleware(jsonDb),
     minimumRoleMiddleware(UserRole.GLOBAL),
     layoutService.patchLayoutHandler.bind(layoutService),
   );

QualityControl/lib/controllers/LayoutController.js

@@ -20,8 +20,6 @@ import { LayoutPatchDto } from './../dtos/LayoutPatchDto.js';
 
 import {
   InvalidInputError,
-  NotFoundError,
-  UnauthorizedAccessError,
   updateAndSendExpressResponseFromNativeError,
 }
   from '@aliceo2/web-ui';
@@ -126,47 +124,28 @@ export class LayoutController {
   async putLayoutHandler(req, res) {
     const { id } = req.params;
     try {
-      if (!id) {
-        updateAndSendExpressResponseFromNativeError(res, new InvalidInputError('Missing parameter "id" of layout'));
-      } else if (!req.body) {
+      let layoutProposed = {};
+      try {
+        layoutProposed = await LayoutDto.validateAsync(req.body);
+      } catch (error) {
         updateAndSendExpressResponseFromNativeError(
           res,
-          new InvalidInputError('Missing body content to update layout with'),
+          new InvalidInputError(`Failed to update layout: ${error?.details?.[0]?.message || ''}`),
         );
-      } else {
-        const { personid } = req.session;
-        const { owner_id } = await this._dataService.readLayout(id);
-
-        if (Number(owner_id) !== Number(personid)) {
-          updateAndSendExpressResponseFromNativeError(
-            res,
-            new UnauthorizedAccessError('Only the owner of the layout can update it'),
-          );
-        } else {
-          let layoutProposed = {};
-          try {
-            layoutProposed = await LayoutDto.validateAsync(req.body);
-          } catch (error) {
-            updateAndSendExpressResponseFromNativeError(
-              res,
-              new Error(`Failed to update layout ${error?.details?.[0]?.message || ''}`),
-            );
-            return;
-          }
+        return;
+      }
 
-          const layouts = await this._dataService.listLayouts({ name: layoutProposed.name });
-          const layoutExistsWithName = layouts.every((layout) => layout.id !== layoutProposed.id);
-          if (layouts.length > 0 && layoutExistsWithName) {
-            updateAndSendExpressResponseFromNativeError(
-              res,
-              new InvalidInputError(`Proposed layout name: ${layoutProposed.name} already exists`),
-            );
-            return;
-          }
-          const layout = await this._dataService.updateLayout(id, layoutProposed);
-          res.status(201).json({ id: layout });
-        }
+      const layouts = await this._dataService.listLayouts({ name: layoutProposed.name });
+      const layoutExistsWithName = layouts.every((layout) => layout.id !== layoutProposed.id);
+      if (layouts.length > 0 && layoutExistsWithName) {
+        updateAndSendExpressResponseFromNativeError(
+          res,
+          new InvalidInputError(`Proposed layout name: ${layoutProposed.name} already exists`),
+        );
+        return;
       }
+      const layoutId = await this._dataService.updateLayout(id, layoutProposed);
+      res.status(201).json({ id: layoutId });
     } catch (error) {
       updateAndSendExpressResponseFromNativeError(res, error);
     }
@@ -229,33 +208,22 @@ export class LayoutController {
    */
   async patchLayoutHandler(req, res) {
     const { id } = req.params;
-    if (!id) {
-      updateAndSendExpressResponseFromNativeError(res, new InvalidInputError('Missing ID'));
-    } else {
-      let layout = {};
-      try {
-        layout = await LayoutPatchDto.validateAsync(req.body);
-      } catch {
-        updateAndSendExpressResponseFromNativeError(
-          res,
-          new InvalidInputError('Invalid request body to update layout'),
-        );
-        return;
-      }
-
-      try {
-        await this._dataService.readLayout(id);
-      } catch {
-        updateAndSendExpressResponseFromNativeError(res, new NotFoundError(`Unable to find layout with id: ${id}`));
-        return;
-      }
-      try {
-        const layoutUpdated = await this._dataService.updateLayout(id, layout);
-        res.status(201).json(layoutUpdated);
-      } catch {
-        updateAndSendExpressResponseFromNativeError(res, new Error(`Unable to update layout with id: ${id}`));
-        return;
-      }
+    let layout = {};
+    try {
+      layout = await LayoutPatchDto.validateAsync(req.body);
+    } catch (error) {
+      updateAndSendExpressResponseFromNativeError(
+        res,
+        new InvalidInputError(`Failed to validate layout: ${error?.details[0]?.message || ''}`),
+      );
+      return;
+    }
+    try {
+      const layoutId = await this._dataService.updateLayout(id, layout);
+      res.status(201).json({ id: layoutId });
+    } catch {
+      updateAndSendExpressResponseFromNativeError(res, new Error(`Unable to update layout with id: ${id}`));
+      return;
     }
   }
 }

QualityControl/package.json

@@ -44,7 +44,8 @@
     "globals": "^15.14.0",
     "nock": "^13.5.0",
     "puppeteer": "^24.0.0",
-    "sinon": "^19.0.2"
+    "sinon": "^19.0.2",
+    "supertest": "^7.0.0"
   },
   "bundleDependencies": [
     "@aliceo2/web-ui",