view devices for profile

server/routers/external.ts

@@ -758,11 +758,24 @@ authenticated.delete(
 //     createNewt
 // );
 
+// only for logged in user
 authenticated.put(
     "/olm",
     olm.createOlm
 );
 
+// only for logged in user
+authenticated.get(
+    "/olms",
+    olm.listOlms
+);
+
+// only for logged in user
+authenticated.delete(
+    "/olm/:olmId",
+    olm.deleteOlm
+);
+
 authenticated.put(
     "/idp/oidc",
     verifyUserIsServerAdmin,

server/routers/olm/deleteOlm.ts

@@ -0,0 +1,112 @@
+import { NextFunction, Request, Response } from "express";
+import { db } from "@server/db";
+import { olms, clients, clientSites } from "@server/db";
+import { eq } from "drizzle-orm";
+import HttpCode from "@server/types/HttpCode";
+import createHttpError from "http-errors";
+import response from "@server/lib/response";
+import { z } from "zod";
+import { fromError } from "zod-validation-error";
+import logger from "@server/logger";
+
+const deleteOlmParamsSchema = z
+    .object({
+        olmId: z.string()
+    })
+    .strict();
+
+export async function deleteOlm(
+    req: Request,
+    res: Response,
+    next: NextFunction
+): Promise<any> {
+    try {
+        const userId = req.user?.userId;
+
+        if (!userId) {
+            return next(
+                createHttpError(HttpCode.UNAUTHORIZED, "User not authenticated")
+            );
+        }
+
+        const parsedParams = deleteOlmParamsSchema.safeParse(req.params);
+        if (!parsedParams.success) {
+            return next(
+                createHttpError(
+                    HttpCode.BAD_REQUEST,
+                    fromError(parsedParams.error).toString()
+                )
+            );
+        }
+
+        const { olmId } = parsedParams.data;
+
+        // Verify the OLM belongs to the current user
+        const [existingOlm] = await db
+            .select()
+            .from(olms)
+            .where(eq(olms.olmId, olmId))
+            .limit(1);
+
+        if (!existingOlm) {
+            return next(
+                createHttpError(
+                    HttpCode.NOT_FOUND,
+                    `Olm with ID ${olmId} not found`
+                )
+            );
+        }
+
+        if (existingOlm.userId !== userId) {
+            return next(
+                createHttpError(
+                    HttpCode.FORBIDDEN,
+                    "You do not have permission to delete this device"
+                )
+            );
+        }
+
+        // Delete associated clients and the OLM in a transaction
+        await db.transaction(async (trx) => {
+            // Find all clients associated with this OLM
+            const associatedClients = await trx
+                .select({ clientId: clients.clientId })
+                .from(clients)
+                .where(eq(clients.olmId, olmId));
+
+            // Delete client-site associations for each associated client
+            for (const client of associatedClients) {
+                await trx
+                    .delete(clientSites)
+                    .where(eq(clientSites.clientId, client.clientId));
+            }
+
+            // Delete all associated clients
+            if (associatedClients.length > 0) {
+                await trx
+                    .delete(clients)
+                    .where(eq(clients.olmId, olmId));
+            }
+
+            // Finally, delete the OLM itself
+            await trx.delete(olms).where(eq(olms.olmId, olmId));
+        });
+
+        return response(res, {
+            data: null,
+            success: true,
+            error: false,
+            message: "Device deleted successfully",
+            status: HttpCode.OK
+        });
+    } catch (error) {
+        logger.error(error);
+        return next(
+            createHttpError(
+                HttpCode.INTERNAL_SERVER_ERROR,
+                "Failed to delete device"
+            )
+        );
+    }
+}
+

server/routers/olm/index.ts

@@ -2,4 +2,6 @@ export * from "./handleOlmRegisterMessage";
 export * from "./getOlmToken";
 export * from "./createOlm";
 export * from "./handleOlmRelayMessage";
-export * from "./handleOlmPingMessage";
+export * from "./handleOlmPingMessage";
+export * from "./listOlms";
+export * from "./deleteOlm";

server/routers/olm/listOlms.ts

@@ -0,0 +1,117 @@
+import { NextFunction, Request, Response } from "express";
+import { db } from "@server/db";
+import { olms } from "@server/db";
+import { eq, count, desc } from "drizzle-orm";
+import HttpCode from "@server/types/HttpCode";
+import createHttpError from "http-errors";
+import response from "@server/lib/response";
+import { z } from "zod";
+import { fromError } from "zod-validation-error";
+import logger from "@server/logger";
+
+const listOlmsSchema = z.object({
+    limit: z
+        .string()
+        .optional()
+        .default("1000")
+        .transform(Number)
+        .pipe(z.number().int().positive()),
+    offset: z
+        .string()
+        .optional()
+        .default("0")
+        .transform(Number)
+        .pipe(z.number().int().nonnegative())
+});
+
+export type ListOlmsResponse = {
+    olms: Array<{
+        olmId: string;
+        dateCreated: string;
+        version: string | null;
+        name: string | null;
+        clientId: number | null;
+        userId: string | null;
+    }>;
+    pagination: {
+        total: number;
+        limit: number;
+        offset: number;
+    };
+};
+
+export async function listOlms(
+    req: Request,
+    res: Response,
+    next: NextFunction
+): Promise<any> {
+    try {
+        const userId = req.user?.userId;
+
+        if (!userId) {
+            return next(
+                createHttpError(HttpCode.UNAUTHORIZED, "User not authenticated")
+            );
+        }
+
+        const parsedQuery = listOlmsSchema.safeParse(req.query);
+        if (!parsedQuery.success) {
+            return next(
+                createHttpError(
+                    HttpCode.BAD_REQUEST,
+                    fromError(parsedQuery.error).toString()
+                )
+            );
+        }
+
+        const { limit, offset } = parsedQuery.data;
+
+        // Get total count
+        const [totalCountResult] = await db
+            .select({ count: count() })
+            .from(olms)
+            .where(eq(olms.userId, userId));
+
+        const total = totalCountResult?.count || 0;
+
+        // Get OLMs for the current user
+        const userOlms = await db
+            .select({
+                olmId: olms.olmId,
+                dateCreated: olms.dateCreated,
+                version: olms.version,
+                name: olms.name,
+                clientId: olms.clientId,
+                userId: olms.userId
+            })
+            .from(olms)
+            .where(eq(olms.userId, userId))
+            .orderBy(desc(olms.dateCreated))
+            .limit(limit)
+            .offset(offset);
+
+        return response<ListOlmsResponse>(res, {
+            data: {
+                olms: userOlms,
+                pagination: {
+                    total,
+                    limit,
+                    offset
+                }
+            },
+            success: true,
+            error: false,
+            message: "OLMs retrieved successfully",
+            status: HttpCode.OK
+        });
+    } catch (error) {
+        logger.error(error);
+        return next(
+            createHttpError(
+                HttpCode.INTERNAL_SERVER_ERROR,
+                "Failed to list OLMs"
+            )
+        );
+    }
+}
+