n8n/packages/cli/src/environments/variables/variables.controller.ee.ts

import express from 'express';
import { Container } from 'typedi';

import * as ResponseHelper from '@/ResponseHelper';
import type { VariablesRequest } from '@/requests';
import {
	VariablesLicenseError,
	EEVariablesService,
	VariablesValidationError,
} from './variables.service.ee';
import { isVariablesEnabled } from './enviromentHelpers';
import { Logger } from '@/Logger';

export const EEVariablesController = express.Router();

EEVariablesController.use((req, res, next) => {
	if (!isVariablesEnabled()) {
		next('router');
		return;
	}

	next();
});

EEVariablesController.post(
	'/',
	ResponseHelper.send(async (req: VariablesRequest.Create) => {
		if (req.user.globalRole.name !== 'owner') {
			Container.get(Logger).info(
				'Attempt to update a variable blocked due to lack of permissions',
				{
					userId: req.user.id,
				},
			);
			throw new ResponseHelper.AuthError('Unauthorized');
		}
		const variable = req.body;
		delete variable.id;
		try {
			return await Container.get(EEVariablesService).create(variable);
		} catch (error) {
			if (error instanceof VariablesLicenseError) {
				throw new ResponseHelper.BadRequestError(error.message);
			} else if (error instanceof VariablesValidationError) {
				throw new ResponseHelper.BadRequestError(error.message);
			}
			throw error;
		}
	}),
);

EEVariablesController.patch(
	'/:id(\\w+)',
	ResponseHelper.send(async (req: VariablesRequest.Update) => {
		const id = req.params.id;
		if (req.user.globalRole.name !== 'owner') {
			Container.get(Logger).info(
				'Attempt to update a variable blocked due to lack of permissions',
				{
					id,
					userId: req.user.id,
				},
			);
			throw new ResponseHelper.AuthError('Unauthorized');
		}
		const variable = req.body;
		delete variable.id;
		try {
			return await Container.get(EEVariablesService).update(id, variable);
		} catch (error) {
			if (error instanceof VariablesLicenseError) {
				throw new ResponseHelper.BadRequestError(error.message);
			} else if (error instanceof VariablesValidationError) {
				throw new ResponseHelper.BadRequestError(error.message);
			}
			throw error;
		}
	}),
);