-var db = require("../utils/database");
-var genToken = require("../utils/tokenGenerator");
-var params = require("../config/parameters");
-var sendEmail = require('../utils/mailer');
+const db = require("../utils/database");
+const genToken = require("../utils/tokenGenerator");
+const params = require("../config/parameters");
+const sendEmail = require('../utils/mailer');
/*
* Structure:
{
checkNameEmail: function(o)
{
- if (typeof o.name === "string")
- {
- if (o.name.length == 0)
- return "Empty name";
- if (!o.name.match(/^[\w]+$/))
- return "Bad characters in name";
- }
- if (typeof o.email === "string")
- {
- if (o.email.length == 0)
- return "Empty email";
- if (!o.email.match(/^[\w.+-]+@[\w.+-]+$/))
- return "Bad characters in email";
- }
- return ""; //NOTE: not required, but more consistent... (?!)
+ return (
+ (!o.name || o.name.match(/^[\w-]+$/)) &&
+ (!o.email || o.email.match(/^[\w.+-]+@[\w.+-]+$/))
+ );
},
- // NOTE: parameters are already cleaned (in controller), thus no sanitization here
- create: function(name, email, notify, callback)
+ create: function(name, email, notify, cb)
{
db.serialize(function() {
- const insertQuery =
+ const query =
"INSERT INTO Users " +
"(name, email, notify, created) VALUES " +
- "('" + name + "', '" + email + "', " + notify + "," + Date.now() + ")";
- db.run(insertQuery, err => {
- if (!!err)
- return callback(err);
- db.get("SELECT last_insert_rowid() AS rowid", callback);
+ "('" + name + "','" + email + "'," + notify + "," + Date.now() + ")";
+ db.run(query, function(err) {
+ cb(err, {uid: this.lastID});
});
});
},
- // Find one user (by id, name, email, or token)
+ // Find one user by id, name, email, or token
getOne: function(by, value, cb)
{
const delimiter = (typeof value === "string" ? "'" : "");
/////////
// MODIFY
- setLoginToken: function(token, uid, cb)
+ setLoginToken: function(token, uid)
{
db.serialize(function() {
const query =
"UPDATE Users " +
- "SET loginToken = '" + token + "', loginTime = " + Date.now() + " " +
+ "SET loginToken = '" + token + "',loginTime = " + Date.now() + " " +
"WHERE id = " + uid;
- db.run(query, cb);
+ db.run(query);
});
},
// TODO: option would be to reset all tokens periodically, e.g. every 3 months
trySetSessionToken: function(uid, cb)
{
- // Also empty the login token to invalidate future attempts
db.serialize(function() {
- const querySessionToken =
+ let query =
"SELECT sessionToken " +
"FROM Users " +
"WHERE id = " + uid;
- db.get(querySessionToken, (err,ret) => {
- if (!!err)
- return cb(err);
+ db.get(query, (err,ret) => {
const token = ret.sessionToken || genToken(params.token.length);
- const queryUpdate =
+ query =
"UPDATE Users " +
+ // Also empty the login token to invalidate future attempts
"SET loginToken = NULL" +
(!ret.sessionToken ? (", sessionToken = '" + token + "'") : "") + " " +
"WHERE id = " + uid;
- db.run(queryUpdate);
- cb(null, token);
+ db.run(query);
+ cb(token);
});
});
},
- updateSettings: function(user, cb)
+ updateSettings: function(user)
{
db.serialize(function() {
const query =
", email = '" + user.email + "'" +
", notify = " + user.notify + " " +
"WHERE id = " + user.id;
- db.run(query, cb);
+ db.run(query);
});
},
notify: function(user, message)
{
const subject = "vchess.club - notification";
- const body = "Hello " + user.name + "!\n" + message;
+ const body = "Hello " + user.name + "!" + `
+` + message;
sendEmail(params.mail.noreply, user.email, subject, body);
},
tryNotify: function(id, message)
{
UserModel.getOne("id", id, (err,user) => {
- if (!err || !user.notify)
- return; //NOTE: error is ignored here
- UserModel.notify(user, message);
+ if (!err && user.notify)
+ UserModel.notify(user, message);
});
},
const day = 86400000;
db.serialize(function() {
const query =
- "SELECT id, sessionToken, created " +
+ "SELECT id, sessionToken, created, name, email " +
"FROM Users";
db.all(query, (err, users) => {
users.forEach(u => {
- // Remove unlogged users for >1 day
+ // Remove unlogged users for > 24h
if (!u.sessionToken && tsNow - u.created > day)
+ {
+ notify(
+ u,
+ "Your account has been deleted because " +
+ "you didn't log in for 24h after registration"
+ );
db.run("DELETE FROM Users WHERE id = " + u.id);
+ }
});
});
});