fix: check for allowed channels before joining

Author: coderbyheart

src/Chat/SlashCommands.tsx

@@ -8,6 +8,9 @@ import {
 	VerifyTokenQueryResult,
 	VerifyTokenVariables,
 } from '../graphql/verifyTokenQuery'
+import * as TE from 'fp-ts/lib/TaskEither'
+import { verifyToken } from './Twilio/api'
+import { pipe } from 'fp-ts/lib/pipeable'
 
 export enum SlashCommand {
 	HELP = 'help',
@@ -43,32 +46,70 @@ export const SlashCommandHandler = ({
 	onChangeNick: (nick: string) => void
 	token: string
 }) => (cmd: SlashCommand, arg?: string) => {
+	const showMessage = (message: string | React.ReactNode) =>
+		updateMessages(prevMessages => ({
+			...prevMessages,
+			messages: [
+				...prevMessages.messages,
+				{
+					sid: v4(),
+					status: {
+						message,
+						timestamp: new Date(),
+					},
+				},
+			],
+		}))
+
 	switch (cmd) {
 		case SlashCommand.HELP:
-			updateMessages(prevMessages => ({
-				...prevMessages,
-				messages: [
-					...prevMessages.messages,
-					{
-						sid: v4(),
-						status: {
-							message: (
-								<p>
-									/me: show information about you
-									<br />
-									/join <code>&lt;channel&gt;</code>: join another channel
-									<br />
-									/nick <code>&lt;nickname&gt;</code>: set your nickname
-								</p>
-							),
-							timestamp: new Date(),
-						},
-					},
-				],
-			}))
+			showMessage(
+				<p>
+					/me: show information about you
+					<br />
+					/join <code>&lt;channel&gt;</code>: join another channel
+					<br />
+					/nick <code>&lt;nickname&gt;</code>: set your nickname
+				</p>,
+			)
 			break
 		case SlashCommand.JOIN:
-			onSwitchChannel(arg as string)
+			console.log(token)
+			if (!arg || !arg.length) {
+				showMessage(
+					<p>
+						You must provide a channel name, e.g.:{' '}
+						<code>/join some-channel</code>!
+					</p>,
+				)
+				return
+			}
+			showMessage(
+				<p>
+					Joining <code>{arg}</code>...
+				</p>,
+			)
+			pipe(
+				verifyToken({ apollo, token }),
+				TE.map(({ contexts }) => {
+					if (!contexts.includes(arg)) {
+						showMessage(
+							<p>
+								You are not allowed to join the channel <code>{arg}</code>.
+								<br />
+								These are the cannels join can join: {contexts.join(', ')}
+							</p>,
+						)
+						return
+					}
+					onSwitchChannel(arg)
+				}),
+				TE.mapLeft(err => {
+					showMessage(`Failed to verify token: ${err.message}`)
+				}),
+			)().catch(err => {
+				console.error(err)
+			})
 			break
 		case SlashCommand.NICK:
 			onChangeNick(arg as string)
@@ -81,52 +122,18 @@ export const SlashCommandHandler = ({
 				})
 				.then(({ data }) => {
 					if (!data) {
-						updateMessages(prevMessages => ({
-							...prevMessages,
-							messages: [
-								...prevMessages.messages,
-								{
-									sid: v4(),
-									status: {
-										message: `Failed to verify token!`,
-										timestamp: new Date(),
-									},
-								},
-							],
-						}))
+						showMessage(`Failed to verify token!`)
 					} else {
 						const { identity, contexts } = data.verifyToken
-						updateMessages(prevMessages => ({
-							...prevMessages,
-							messages: [
-								...prevMessages.messages,
-								{
-									sid: v4(),
-									status: {
-										message: `Hey ${identity}, you are allowed to access these channels: ${contexts.join(
-											',',
-										)}.`,
-										timestamp: new Date(),
-									},
-								},
-							],
-						}))
+						showMessage(
+							`Hey ${identity}, you are allowed to access these channels: ${contexts.join(
+								',',
+							)}.`,
+						)
 					}
 				})
 				.catch(err => {
-					updateMessages(prevMessages => ({
-						...prevMessages,
-						messages: [
-							...prevMessages.messages,
-							{
-								sid: v4(),
-								status: {
-									message: `Failed to verify token: ${err.message}`,
-									timestamp: new Date(),
-								},
-							},
-						],
-					}))
+					showMessage(`Failed to verify token: ${err.message}`)
 				})
 	}
 }

src/Chat/Twilio/api.ts

@@ -13,6 +13,11 @@ import { pipe } from 'fp-ts/lib/pipeable'
 import { Option, fromNullable } from 'fp-ts/lib/Option'
 import { Paginator } from 'twilio-chat/lib/interfaces/paginator'
 import { getOrElse } from '../../fp-ts.util'
+import {
+	VerifyTokenQueryResult,
+	VerifyTokenVariables,
+	verifyTokenQuery,
+} from '../../graphql/verifyTokenQuery'
 
 type ErrorInfo = {
 	type: string
@@ -49,6 +54,34 @@ const createChatToken = ({
 		}),
 	)
 
+export const verifyToken = ({
+	apollo,
+	token,
+}: {
+	token: string
+	apollo: ApolloClient<NormalizedCacheObject>
+}) =>
+	tryCatch<ErrorInfo, { identity: string; contexts: string[] }>(
+		async () =>
+			apollo
+				.query<VerifyTokenQueryResult, VerifyTokenVariables>({
+					query: verifyTokenQuery,
+					variables: { token },
+				})
+				.then(({ data }) => {
+					if (!data) {
+						throw new Error('No response received!')
+					} else {
+						const { identity, contexts } = data.verifyToken
+						return { identity, contexts }
+					}
+				}),
+		reason => ({
+			type: 'TokenError',
+			message: `Failed to verify token: ${(reason as Error).message}`,
+		}),
+	)
+
 const createClient = (chatToken: string) =>
 	tryCatch<ErrorInfo, Client>(
 		async () => Client.create(chatToken),