a9995d7f074be7f96448dbea818611b8c4cb7bf5
1 // AJAX methods to get, create, update or delete a user
3 var router
= require("express").Router();
4 var UserModel
= require('../models/User');
5 var sendEmail
= require('../utils/mailer');
6 var genToken
= require("../utils/tokenGenerator");
7 var access
= require("../utils/access");
8 var params
= require("../config/parameters");
10 router
.get("/whoami", access
.ajax
, (req
,res
) => {
11 const callback
= (user
) => {
19 const anonymous
= {name:"", email:"", id:0, notify:false};
20 if (!req
.cookies
.token
)
21 return callback(anonymous
);
22 UserModel
.getOne("sessionToken", req
.cookies
.token
, function(err
, user
) {
30 router
.get("/users", access
.ajax
, (req
,res
) => {
31 // TODO: list all names + id for users of given ID (query "ids")
34 // to: object user (to who we send an email)
35 function setAndSendLoginToken(subject
, to
, res
)
37 // Set login token and send welcome(back) email with auth link
38 const token
= genToken(params
.token
.length
);
39 UserModel
.setLoginToken(token
, to
.id
, err
=> {
41 return res
.json({errmsg: err
.toString()});
43 "Hello " + to
.name
+ "!\n" +
44 "Access your account here: " +
45 params
.siteURL
+ "/#/authenticate/" + token
+ "\\n" +
46 "Token will expire in " + params
.token
.expire
/(1000*60) + " minutes."
47 sendEmail(params
.mail
.noreply
, to
.email
, subject
, body
, err
=> {
53 router
.post('/register', access
.unlogged
, access
.ajax
, (req
,res
) => {
54 const name
= req
.body
.name
;
55 const email
= req
.body
.email
;
56 const notify
= !!req
.body
.notify
;
57 const error
= UserModel
.checkNameEmail({name: name
, email: email
});
59 return res
.json({errmsg: error
});
60 UserModel
.create(name
, email
, notify
, (err
,uid
) => {
62 return res
.json({errmsg: err
.toString()});
68 setAndSendLoginToken("Welcome to " + params
.siteURL
, user
, res
);
72 router
.get('/sendtoken', access
.unlogged
, access
.ajax
, (req
,res
) => {
73 const nameOrEmail
= decodeURIComponent(req
.query
.nameOrEmail
);
74 const type
= (nameOrEmail
.indexOf('@') >= 0 ? "email" : "name");
75 const error
= UserModel
.checkNameEmail({[type
]: nameOrEmail
});
77 return res
.json({errmsg: error
});
78 UserModel
.getOne(type
, nameOrEmail
, (err
,user
) => {
79 access
.checkRequest(res
, err
, user
, "Unknown user", () => {
80 setAndSendLoginToken("Token for " + params
.siteURL
, user
, res
);
85 router
.get('/authenticate', access
.unlogged
, access
.ajax
, (req
,res
) => {
86 UserModel
.getOne("loginToken", req
.query
.token
, (err
,user
) => {
87 access
.checkRequest(res
, err
, user
, "Invalid token", () => {
88 // If token older than params.tokenExpire, do nothing
89 if (Date
.now() > user
.loginTime
+ params
.token
.expire
)
90 return res
.json({errmsg: "Token expired"});
91 // Generate session token (if not exists) + destroy login token
92 UserModel
.trySetSessionToken(user
.id
, (err
,token
) => {
94 return res
.json({errmsg: err
.toString()});
96 res
.cookie("token", token
, {
98 secure: !!params
.siteURL
.match(/^https/),
99 maxAge: params
.cookieExpire
,
112 router
.put('/update', access
.logged
, access
.ajax
, (req
,res
) => {
113 const name
= req
.body
.name
;
114 const email
= req
.body
.email
;
115 const error
= UserModel
.checkNameEmail({name: name
, email: email
});
117 return res
.json({errmsg: error
});
122 notify: !!req
.body
.notify
,
124 UserModel
.updateSettings(user
, err
=> {
125 res
.json(err
? {errmsg: err
.toString()} : {});
129 router
.get('/logout', access
.logged
, access
.ajax
, (req
,res
) => {
130 res
.clearCookie("token");
134 module
.exports
= router
;