"use strict";

Object.defineProperty(exports, "__esModule", {
  value: true
});
exports.registerPrivilegesRoute = registerPrivilegesRoute;
var _has_privilege_factory = require("../../../common/privilege/has_privilege_factory");
var _constants = require("../../../common/constants");
/*
 * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
 * or more contributor license agreements. Licensed under the Elastic License
 * 2.0; you may not use this file except in compliance with the Elastic License
 * 2.0.
 */

function registerPrivilegesRoute({
  router,
  license
}) {
  router.versioned.get({
    path: (0, _constants.addInternalBasePath)('privileges'),
    access: 'internal'
  }).addVersion({
    version: '1',
    validate: false
  }, license.guardApiRoute(async (ctx, req, res) => {
    if (license.getStatus().isSecurityEnabled === false) {
      // If security isn't enabled, let the user use app.
      return res.ok({
        body: (0, _has_privilege_factory.getPrivilegesAndCapabilities)({}, true, true)
      });
    }
    const esClient = (await ctx.core).elasticsearch.client;
    const esClusterPrivilegesReq = esClient.asCurrentUser.security.hasPrivileges({
      body: {
        cluster: _constants.APP_CLUSTER_PRIVILEGES
      }
    });
    const [esClusterPrivileges, userPrivileges] = await Promise.all([
    // Get cluster privileges
    esClusterPrivilegesReq,
    // // Get all index privileges the user has
    esClient.asCurrentUser.security.getUserPrivileges()]);
    const {
      has_all_requested: hasAllPrivileges,
      cluster
    } = esClusterPrivileges;
    const {
      indices
    } = userPrivileges;

    // Check if they have all the required index privileges for at least one index
    const hasOneIndexWithAllPrivileges = indices.find(({
      privileges
    }) => {
      if (privileges.includes('all')) {
        return true;
      }
      const indexHasAllPrivileges = _constants.APP_INDEX_PRIVILEGES.every(privilege => privileges.includes(privilege));
      return indexHasAllPrivileges;
    }) !== undefined;
    return res.ok({
      body: (0, _has_privilege_factory.getPrivilegesAndCapabilities)(cluster, hasOneIndexWithAllPrivileges, hasAllPrivileges)
    });
  }));
}