X-Git-Url: https://git.auder.net/?a=blobdiff_plain;f=server%2Froutes%2Fusers.js;h=163dc30132977dcf1f5c43b533cc5e0a9acd33cc;hb=f21cd6d9c23da37d729f20ea4c08e56b1a7b10a1;hp=d633d8117c4b5e311cdf99618758ab9c0ca2d5af;hpb=deca03e8aeb7cac9c19b0d43b4642b27299695b5;p=vchess.git diff --git a/server/routes/users.js b/server/routes/users.js index d633d811..163dc301 100644 --- a/server/routes/users.js +++ b/server/routes/users.js @@ -22,11 +22,20 @@ router.get("/whoami", access.ajax, (req,res) => { UserModel.getOne("sessionToken", req.cookies.token, function(err, user) { if (!!err || !user) callback(anonymous); - else (!!user) + else callback(user); }); }); +router.get("/users", access.ajax, (req,res) => { + const ids = req.query["ids"]; + UserModel.getByIds(ids, (err,users) => { + if (!!err) + return res.json({errmsg: err.toString()}); + return res.json({users:users}); + }); +}); + // to: object user (to who we send an email) function setAndSendLoginToken(subject, to, res) { @@ -36,7 +45,7 @@ function setAndSendLoginToken(subject, to, res) if (!!err) return res.json({errmsg: err.toString()}); const body = - "Hello " + to.name + "!\n" + + "Hello " + to.name + "!\\n" + "Access your account here: " + params.siteURL + "/#/authenticate/" + token + "\\n" + "Token will expire in " + params.token.expire/(1000*60) + " minutes." @@ -81,7 +90,7 @@ router.get('/sendtoken', access.unlogged, access.ajax, (req,res) => { router.get('/authenticate', access.unlogged, access.ajax, (req,res) => { UserModel.getOne("loginToken", req.query.token, (err,user) => { access.checkRequest(res, err, user, "Invalid token", () => { - // If token older than params.tokenExpire, do nothing + // If token older than params.tokenExpire, do nothing if (Date.now() > user.loginTime + params.token.expire) return res.json({errmsg: "Token expired"}); // Generate session token (if not exists) + destroy login token