1 files changed, 63 insertions, 0 deletions
diff --git a/gn3/api/metadata.py b/gn3/api/metadata.py
index a6a88fc..91aca70 100644
--- a/gn3/api/metadata.py
+++ b/gn3/api/metadata.py
@@ -1,11 +1,16 @@
 """API for fetching metadata using an API"""
+import time
+
 from string import Template
 from pathlib import Path
 
+from authlib.jose import jwt
+
 from flask import Blueprint
 from flask import request
 from flask import current_app
 
+from gn3.auth.authorisation.errors import AuthorisationError
 from gn3.db.datasets import (retrieve_metadata,
                              save_metadata,
                              get_history)
@@ -284,6 +289,64 @@ def view_history(id_):
     return history
 
 
+@metadata.route("/datasets/edit", methods=["POST"])
+def edit_dataset():
+    """Edit a given dataset"""
+    # Fetch the public key
+    key = ""
+    with open(
+            current_app.config.get("AUTH_SERVER_SSL_PUBLIC_KEY"), "rb"
+    ) as _f:
+        key = _f.read()
+
+    # Decode the token
+    payload = jwt.decode(
+        request.headers.get("Authorization").split()[-1],  # the jwt token
+        key  # the auth-server public key
+    )
+
+    # Validation:
+    if payload.get("exp") - int(time.time()) > 300:
+        raise AuthorisationError("Expired Token")
+    if "group:resource:edit-resource" not in payload.get("roles", []):
+        raise AuthorisationError("Insufficient Edit Privileges")
+    gn_docs = Path(current_app.config["DATA_DIR"], "gn-docs")
+    # This maps the form elements to the actual path in the git
+    # repository
+    map_ = {
+        "description": "summary.rtf",
+        "tissueInfo": "tissue.rtf",
+        "specifics": "specifics.rtf",
+        "caseInfo": "cases.rtf",
+        "platformInfo": "platform.rtf",
+        "processingInfo": "processing.rtf",
+        "notes": "notes.rtf",
+        "experimentDesignInfo": "experiment-design.rtf",
+        "acknowledgement": "acknowledgement.rtf",
+        "citation": "citation.rtf",
+        "experimentType": "experiment-type.rtf",
+        "contributors": "contributors.rtf"
+    }
+    output = Path(
+        gn_docs,
+        "general/datasets/",
+        request.form.get("id").split("/")[-1],
+        f"{map_.get(request.form.get('section'))}"
+    )
+    match request.form.get("type"):
+        case "dcat:Dataset":
+            author = f"{payload.get('account-name')} <{payload.get('email')}>"
+            return save_metadata(
+                git_dir=gn_docs,
+                output=output,
+                author=author,
+                content=request.form.get("editor"),
+                msg=request.form.get("edit-summary")
+            ).either(
+                lambda error: ({"error": error}, 500),
+                lambda x: ("Edit successfull", 201)
+            )
+
 @metadata.route("/datasets/search/<term>", methods=["GET"])
 def search_datasets(term):
     """Search datasets"""