weseek__growi/apps/app/src/server/routes/apiv3/security-settings/checkSetupStrategiesHasAdmin.ts

import mongoose from 'mongoose';

import type { IExternalAuthProviderType } from '~/interfaces/external-auth-provider';

interface AggregateResult {
  count: number;
}

const checkLocalStrategyHasAdmin = async(): Promise<boolean> => {
  const User = mongoose.model('User') as any;

  const localAdmins: AggregateResult[] = await User.aggregate([
    {
      $match: {
        admin: true,
        status: User.STATUS_ACTIVE,
        password: { $exists: true },
      },
    },
    { $count: 'count' },
  ]).exec();

  return localAdmins.length > 0 && localAdmins[0].count > 0;
};

const checkExternalStrategiesHasAdmin = async(setupExternalStrategies: IExternalAuthProviderType[]): Promise<boolean> => {
  const User = mongoose.model('User') as any;

  const externalAdmins: AggregateResult[] = await User.aggregate([
    { $match: { admin: true, status: User.STATUS_ACTIVE } },
    {
      $lookup: {
        from: 'externalaccounts',
        localField: '_id',
        foreignField: 'user',
        as: 'externalAccounts',
      },
    },
    {
      $match: {
        'externalAccounts.providerType': { $in: setupExternalStrategies },
      },
    },
    { $count: 'count' },
  ]).exec();

  return externalAdmins.length > 0 && externalAdmins[0].count > 0;
};

export const checkSetupStrategiesHasAdmin = async(setupStrategies: (IExternalAuthProviderType | 'local')[]): Promise<boolean> => {
  if (setupStrategies.includes('local')) {
    const isLocalStrategyHasAdmin = await checkLocalStrategyHasAdmin();
    if (isLocalStrategyHasAdmin) {
      return true;
    }
  }

  const setupExternalStrategies = setupStrategies.filter(strategy => strategy !== 'local') as IExternalAuthProviderType[];
  if (setupExternalStrategies.length === 0) {
    return false;
  }

  const isExternalStrategiesHasAdmin = await checkExternalStrategiesHasAdmin(setupExternalStrategies);

  return isExternalStrategiesHasAdmin;
};