Add app passwords feature

src/userdb.js

@@ -15,6 +15,11 @@ exports = module.exports = {
     update: update,
     count: count,
 
+    addAppPassword: addAppPassword,
+    getAppPasswords: getAppPasswords,
+    getAppPassword: getAppPassword,
+    delAppPassword: delAppPassword,
+
     _clear: clear
 };
 
@@ -27,6 +32,8 @@ var assert = require('assert'),
 var USERS_FIELDS = [ 'id', 'username', 'email', 'fallbackEmail', 'password', 'salt', 'createdAt', 'modifiedAt', 'resetToken', 'displayName',
     'twoFactorAuthenticationEnabled', 'twoFactorAuthenticationSecret', 'admin', 'active', 'source' ].join(',');
 
+var APP_PASSWORD_FIELDS = [ 'id', 'name', 'userId', 'identifier', 'hashedPassword', 'creationTime' ].join(',');
+
 function postProcess(result) {
     assert.strictEqual(typeof result, 'object');
 
@@ -197,12 +204,13 @@ function del(userId, callback) {
     var queries = [];
     queries.push({ query: 'DELETE FROM groupMembers WHERE userId = ?', args: [ userId ] });
     queries.push({ query: 'DELETE FROM tokens WHERE identifier = ?', args: [ userId ] });
+    queries.push({ query: 'DELETE FROM appPasswords WHERE userId = ?', args: [ userId ] });
     queries.push({ query: 'DELETE FROM users WHERE id = ?', args: [ userId ] });
 
     database.transaction(queries, function (error, result) {
         if (error && error.code === 'ER_NO_REFERENCED_ROW_2') return callback(new BoxError(BoxError.NOT_FOUND, error));
         if (error) return callback(new BoxError(BoxError.DATABASE_ERROR, error));
-        if (result[2].affectedRows !== 1) return callback(new BoxError(BoxError.NOT_FOUND, 'User not found'));
+        if (result[3].affectedRows !== 1) return callback(new BoxError(BoxError.NOT_FOUND, 'User not found'));
 
         callback(error);
     });
@@ -273,3 +281,53 @@ function count(callback) {
         return callback(null, result[0].total);
     });
 }
+
+function getAppPasswords(userId, callback) {
+    assert.strictEqual(typeof userId, 'string');
+    assert.strictEqual(typeof callback, 'function');
+
+    database.query('SELECT ' + APP_PASSWORD_FIELDS + ' FROM appPasswords WHERE userId = ?', [ userId ], function (error, results) {
+        if (error) return callback(new BoxError(BoxError.DATABASE_ERROR, error));
+
+        callback(null, results);
+    });
+}
+
+function getAppPassword(id, callback) {
+    assert.strictEqual(typeof id, 'string');
+    assert.strictEqual(typeof callback, 'function');
+
+    database.query('SELECT ' + APP_PASSWORD_FIELDS + ' FROM appPasswords WHERE id = ?', [ id ], function (error, results) {
+        if (error) return callback(new BoxError(BoxError.DATABASE_ERROR, error));
+
+        callback(null, results[0]);
+    });
+}
+
+function addAppPassword(id, appPassword, callback) {
+    assert.strictEqual(typeof id, 'string');
+    assert.strictEqual(typeof appPassword, 'object');
+    assert.strictEqual(typeof callback, 'function');
+
+    const query = 'INSERT INTO appPasswords (id, userId, identifier, name, hashedPassword) VALUES (?, ?, ?, ?, ?)';
+    const args = [ id, appPassword.userId, appPassword.identifier, appPassword.name, appPassword.hashedPassword ];
+
+    database.query(query, args, function (error) {
+        if (error) return callback(new BoxError(BoxError.DATABASE_ERROR, error));
+
+        callback(null);
+    });
+}
+
+function delAppPassword(id, callback) {
+    assert.strictEqual(typeof id, 'string');
+    assert.strictEqual(typeof callback, 'function');
+
+    database.query('DELETE FROM appPasswords WHERE id = ?', [ id ], function (error, result) {
+        if (error) return callback(new BoxError(BoxError.DATABASE_ERROR, error));
+        if (result.affectedRows !== 1) return callback(new BoxError(BoxError.NOT_FOUND, 'password not found'));
+
+        return callback(null);
+    });
+}
+