First pass at API

server/api/__snapshots__/shares.test.js.snap

@@ -0,0 +1,19 @@
+// Jest Snapshot v1, https://goo.gl/fbAQLP
+
+exports[`#shares.create should require authentication 1`] = `
+Object {
+  "error": "authentication_required",
+  "message": "Authentication required",
+  "ok": false,
+  "status": 401,
+}
+`;
+
+exports[`#shares.list should require authentication 1`] = `
+Object {
+  "error": "authentication_required",
+  "message": "Authentication required",
+  "ok": false,
+  "status": 401,
+}
+`;

server/api/index.js

@@ -12,6 +12,7 @@ import documents from './documents';
 import views from './views';
 import hooks from './hooks';
 import apiKeys from './apiKeys';
+import shares from './shares';
 import team from './team';
 import integrations from './integrations';
 
@@ -74,6 +75,7 @@ router.use('/', documents.routes());
 router.use('/', views.routes());
 router.use('/', hooks.routes());
 router.use('/', apiKeys.routes());
+router.use('/', shares.routes());
 router.use('/', team.routes());
 router.use('/', integrations.routes());
 

server/api/shares.js

@@ -0,0 +1,64 @@
+// @flow
+import Router from 'koa-router';
+import auth from './middlewares/authentication';
+import pagination from './middlewares/pagination';
+import { presentShare } from '../presenters';
+import { Document, User, Share } from '../models';
+import policy from '../policies';
+
+const { authorize } = policy;
+const router = new Router();
+
+router.post('shares.list', auth(), pagination(), async ctx => {
+  let { sort = 'updatedAt', direction } = ctx.body;
+  if (direction !== 'ASC') direction = 'DESC';
+
+  const user = ctx.state.user;
+  const shares = await Share.findAll({
+    where: { teamId: user.teamId },
+    order: [[sort, direction]],
+    include: [
+      {
+        model: Document,
+        required: true,
+        as: 'document',
+      },
+      {
+        model: User,
+        required: true,
+        as: 'user',
+      },
+    ],
+    offset: ctx.state.pagination.offset,
+    limit: ctx.state.pagination.limit,
+  });
+
+  const data = await Promise.all(shares.map(share => presentShare(ctx, share)));
+
+  ctx.body = {
+    data,
+  };
+});
+
+router.post('shares.create', auth(), async ctx => {
+  const { id } = ctx.body;
+  ctx.assertPresent(id, 'id is required');
+
+  const user = ctx.state.user;
+  const document = await Document.findById(id);
+  authorize(user, 'share', document);
+
+  const share = await Share.create({
+    documentId: document.id,
+    userId: user.id,
+    teamId: user.teamId,
+  });
+  share.user = user;
+  share.document = document;
+
+  ctx.body = {
+    data: presentShare(ctx, share),
+  };
+});
+
+export default router;

server/api/shares.test.js

@@ -0,0 +1,61 @@
+/* eslint-disable flowtype/require-valid-file-annotation */
+import TestServer from 'fetch-test-server';
+import app from '..';
+import { flushdb, seed } from '../test/support';
+import { buildUser } from '../test/factories';
+
+const server = new TestServer(app.callback());
+
+beforeEach(flushdb);
+afterAll(server.close);
+
+describe('#shares.list', async () => {
+  it('should return a list of shares', async () => {
+    const { user } = await seed();
+    const res = await server.post('/api/shares.list', {
+      body: { token: user.getJwtToken() },
+    });
+    expect(res.status).toEqual(200);
+  });
+
+  it('should require authentication', async () => {
+    const res = await server.post('/api/shares.list');
+    const body = await res.json();
+
+    expect(res.status).toEqual(401);
+    expect(body).toMatchSnapshot();
+  });
+});
+
+describe('#shares.create', async () => {
+  it('should allow creating a share record for document', async () => {
+    const { user, document } = await seed();
+    const res = await server.post('/api/shares.create', {
+      body: { token: user.getJwtToken(), id: document.id },
+    });
+    const body = await res.json();
+
+    expect(res.status).toEqual(200);
+    expect(body.data.documentTitle).toBe(document.title);
+  });
+
+  it('should require authentication', async () => {
+    const { document } = await seed();
+    const res = await server.post('/api/shares.create', {
+      body: { id: document.id },
+    });
+    const body = await res.json();
+
+    expect(res.status).toEqual(401);
+    expect(body).toMatchSnapshot();
+  });
+
+  it('should require authorization', async () => {
+    const { document } = await seed();
+    const user = await buildUser();
+    const res = await server.post('/api/shares.create', {
+      body: { token: user.getJwtToken(), id: document.id },
+    });
+    expect(res.status).toEqual(403);
+  });
+});