handle idCardPhoto image upload

lamassu-default.json

@@ -12,5 +12,6 @@
   },
   "strike": {
     "baseUrl": "https://api.strike.acinq.co/api/"
-  }
+  },
+  "idPhotoCardDir": "/opt/lamassu-server/idphotocard"
 }

lib/customers.js

@@ -1,14 +1,22 @@
 const uuid = require('uuid')
 const Pgp = require('pg-promise')()
 const _ = require('lodash/fp')
+const crypto = require('crypto')
+const makeDir = require('make-dir')
+const path = require('path')
+const fs = require('fs')
+const util = require('util')
 
 const db = require('./db')
 const BN = require('./bn')
 const anonymous = require('../lib/constants').anonymousCustomer
 const complianceOverrides = require('./compliance_overrides')
 const users = require('./users')
+const options = require('./options')
+const writeFile = util.promisify(fs.writeFile)
 
 const NUM_RESULTS = 20
+const idPhotoCardBasedir = _.get('idPhotoCardDir', options)
 
 /**
  * Add new customer
@@ -332,4 +340,59 @@ function batch () {
     }, customers)))
 }
 
-module.exports = {add, get, batch, getById, update}
+/**
+ * @param {String} id customer id
+ * @param {Object} patch customer update record
+ * @returns {Promise<Object>} new patch to be applied
+ */
+function updatePhotoCard (id, patch) {
+  return Promise.resolve(patch)
+    .then(patch => {
+      // Base64 encoded image /9j/4AAQSkZJRgABAQAAAQ..
+      let imageData = _.get('idCardPhotoData', patch)
+
+      if (_.isEmpty(imageData)) {
+        return patch
+      }
+
+      // remove idCardPhotoData from the update record
+      const newPatch = _.omit('idCardPhotoData', patch)
+
+      // decode the base64 string to binary data
+      imageData = Buffer.from(imageData, 'base64')
+
+      // workout the image hash
+      // i.e. 240e85ff2e4bb931f235985dd0134e459239496d2b5af6c5665168d38ef89b50
+      const hash = crypto
+        .createHash('sha256')
+        .update(imageData)
+        .digest('hex')
+
+      // workout the image folder
+      // i.e. 24/0e/85
+      const rpath = _.join(path.sep, _.map(_.wrap(_.join, ''), _.take(3, _.chunk(2, _.split('', hash)))))
+
+      // i.e. ../<lamassu-server-home>/idphotocard/24/0e/85
+      const dirname = path.join(idPhotoCardBasedir, rpath)
+
+      // create the directory tree if needed
+      _.attempt(() => makeDir.sync(dirname))
+
+      // i.e. ../<lamassu-server-home>/idphotocard/24/0e/85/240e85ff2e4bb931f235985dd01....jpg
+      const filename = path.join(dirname, hash + '.jpg')
+
+      // update db record patch
+      // i.e. {
+      //   "idCardPhotoPath": "24/0e/85/240e85ff2e4bb931f235985dd01....jpg",
+      //   "idCardPhotoAt": "now()"
+      // }
+      newPatch.idCardPhotoPath = path.join(rpath, hash + '.jpg')
+      newPatch.idCardPhotoAt = 'now()'
+
+      // write image file
+      return writeFile(filename, imageData)
+        .then(() => newPatch)
+    })
+}
+
+module.exports = {add, get, batch, getById, update, updatePhotoCard}

lib/routes.js

@@ -216,6 +216,7 @@ function updateCustomer (req, res, next) {
       const mergedCustomer = _.merge(customer, patch)
       return compliance.validationPatch(req.deviceId, config, mergedCustomer)
         .then(_.merge(patch))
+        .then(newPatch => customers.updatePhotoCard(id, newPatch))
         .then(newPatch => customers.update(id, newPatch))
     })
     .then(customer => respond(req, res, {customer}))
@@ -328,7 +329,7 @@ const app = express()
 const localApp = express()
 
 app.use(helmet({noCache: true}))
-app.use(bodyParser.json())
+app.use(bodyParser.json({limit: '2mb'}))
 app.use(morgan('dev', {skip, stream: logger.stream}))
 
 // These two have their own authorization