exportExcel.js 2.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475
  1. import { ReactiveCache } from '/imports/reactiveCache';
  2. import { TAPi18n } from '/imports/i18n';
  3. import { runOnServer } from './runOnServer';
  4. runOnServer(function() {
  5. // the ExporterExcel class is only available on server and in order to import
  6. // it here we use runOnServer to have it inside a function instead of an
  7. // if (Meteor.isServer) block
  8. import { ExporterExcel } from './server/ExporterExcel';
  9. import { Picker } from 'meteor/communitypackages:picker';
  10. // todo XXX once we have a real API in place, move that route there
  11. // todo XXX also share the route definition between the client and the server
  12. // so that we could use something like
  13. // `ApiRoutes.path('boards/exportExcel', boardId)``
  14. // on the client instead of copy/pasting the route path manually between the
  15. // client and the server.
  16. /**
  17. * @operation exportExcel
  18. * @tag Boards
  19. *
  20. * @summary This route is used to export the board Excel.
  21. *
  22. * @description If user is already logged-in, pass loginToken as param
  23. * "authToken": '/api/boards/:boardId/exportExcel?authToken=:token'
  24. *
  25. * See https://blog.kayla.com.au/server-side-route-authentication-in-meteor/
  26. * for detailed explanations
  27. *
  28. * @param {string} boardId the ID of the board we are exporting
  29. * @param {string} authToken the loginToken
  30. */
  31. Picker.route('/api/boards/:boardId/exportExcel', function (params, req, res) {
  32. const boardId = params.boardId;
  33. let user = null;
  34. let impersonateDone = false;
  35. let adminId = null;
  36. const loginToken = params.query.authToken;
  37. if (loginToken) {
  38. const hashToken = Accounts._hashLoginToken(loginToken);
  39. user = Meteor.users.findOne({
  40. 'services.resume.loginTokens.hashedToken': hashToken,
  41. });
  42. adminId = user._id.toString();
  43. impersonateDone = ImpersonatedUsers.findOne({
  44. adminId: adminId,
  45. });
  46. } else if (!Meteor.settings.public.sandstorm) {
  47. Authentication.checkUserId(req.userId);
  48. user = ReactiveCache.getUser({
  49. _id: req.userId,
  50. isAdmin: true,
  51. });
  52. }
  53. let userLanguage = 'en';
  54. if(user && user.profile){
  55. userLanguage = user.profile.language
  56. }
  57. const exporterExcel = new ExporterExcel(boardId, userLanguage);
  58. if (exporterExcel.canExport(user) || impersonateDone) {
  59. if (impersonateDone) {
  60. ImpersonatedUsers.insert({
  61. adminId: adminId,
  62. boardId: boardId,
  63. reason: 'exportExcel',
  64. });
  65. }
  66. exporterExcel.build(res);
  67. } else {
  68. res.end(TAPi18n.__('user-can-not-export-excel'));
  69. }
  70. });
  71. });