Merge branch 'master' into cookie-auth

Author: Alfred-Mutai

departments/department-programs-config.json

@@ -73,10 +73,6 @@
       {
         "uuid": "203571d6-a4f2-4953-9e8b-e1105e2340f5",
         "name": "OTZ PROGRAM"
-      },
-      {
-        "uuid": "4b738a10-b952-4e62-b215-30520fd9e113",
-        "name": "NCD PROGRAM"
       }
     ]
   },
@@ -167,6 +163,10 @@
       {
         "uuid": "6976b7eb-6d66-4aba-bcc0-cd8be80041cd",
         "name": "MENTAL HEALTH PROGRAM"
+      },
+      {
+        "uuid": "4b738a10-b952-4e62-b215-30520fd9e113",
+        "name": "NCD PROGRAM"
       }
     ]
   },

etl-routes.js

@@ -91,6 +91,11 @@ import EmailService from './service/email/email.service.js';
 import OtpService from './service/otp/otp.service.js';
 import OtpStore from './service/otp-store/otp-store.service.js';
 import { LogoService } from './service/logo/logo-service.js';
+import SupersetService from './service/superset/superset.service.js';
+import {
+  loadAndMaplocationUuidToId,
+  getlocationIdFromUuid
+} from './location/location.service.js';
 
 module.exports = (function () {
   var routes = [
@@ -6713,6 +6718,36 @@ module.exports = (function () {
         description: 'Get a users location logo',
         notes: 'Returns the current users location logo'
       }
+    },
+    {
+      method: 'GET',
+      path: '/etl/superset-token',
+      config: {
+        auth: 'simple',
+        handler: async function (request, reply) {
+          const locationUuid = request.query.location_uuid;
+          const supersetService = new SupersetService();
+          try {
+            await loadAndMaplocationUuidToId();
+            const locationId = await getlocationIdFromUuid(locationUuid);
+            const res = await supersetService.getSupersetGuestToken(locationId);
+            reply({
+              access_token: res,
+              code: 200
+            });
+          } catch (err) {
+            return reply
+              .response({
+                success: false,
+                message: err.message
+              })
+              .code(400);
+          }
+        },
+        plugins: {},
+        description: 'Get superset guest token',
+        notes: 'Returns a superset guest token'
+      }
     }
   ];
 

package.json

@@ -33,6 +33,7 @@
     "ampath-json2sql": "github:AMPATH/ampath-json2sql.git#v1.0.12",
     "array-merge-by-key": "1.0.1",
     "async": "^2.6.1",
+    "axios": "^1.13.5",
     "bcryptjs": "^2.4.3",
     "bluebird": "^3.4.0",
     "body-parser": "^1.15.1",

service/superset/superset.service.js

@@ -0,0 +1,64 @@
+import axios from 'axios';
+
+var config = require('../../conf/config.json');
+
+class SupersetService {
+  constructor() {
+    this.secretKey = config.superset.GUEST_TOKEN_JWT_SECRET;
+    this.dashboardId = config.superset.DASHBOARD_ID;
+    this.supersetUrl = config.superset.SUPERSET_URL;
+    this.username = config.superset.SUPERSET_USERNAME;
+    this.password = config.superset.SUPERSET_PASSWORD;
+  }
+
+  async getAccessToken() {
+    const response = await axios.post(
+      `${this.supersetUrl}/api/v1/security/login`,
+      {
+        username: this.username,
+        password: this.password,
+        provider: 'db',
+        refresh: true
+      },
+      {
+        headers: {
+          'Content-Type': 'application/json'
+        }
+      }
+    );
+
+    return response.data.access_token;
+  }
+
+  async getSupersetGuestToken(locationId) {
+    const token = await this.getAccessToken();
+
+    const response = await axios.post(
+      `${this.supersetUrl}/api/v1/security/guest_token`,
+      {
+        user: {
+          first_name: 'ampath',
+          last_name: 'ampath',
+          username: 'admin'
+        },
+        resources: [{ type: 'dashboard', id: this.dashboardId }],
+        rls: [
+          {
+            clause: `location_id = ${locationId}`
+          }
+        ],
+        aud: 'superset',
+        type: 'guest'
+      },
+      {
+        headers: {
+          Authorization: `Bearer ${token}`,
+          'Content-Type': 'application/json'
+        }
+      }
+    );
+    return response.data.token;
+  }
+}
+
+module.exports = SupersetService;