FunctionProject/api/controllers/users.js

const path = require('path')
const { validationResult } = require('express-validator')
const bcrypt = require('bcryptjs')
const jwt = require('jsonwebtoken')
const ms = require('ms')
const uuid = require('uuid')
const Sequelize = require('sequelize')
const errorHandling = require('../assets/utils/errorHandling')
const { serverError, generalError } = require('../assets/config/errors')
const {
  JWT_SECRET,
  FRONT_END_HOST,
  EMAIL_INFO,
  HOST,
  TOKEN_LIFE
} = require('../assets/config/config')
const transporter = require('../assets/config/transporter')
const { emailUserTemplate } = require('../assets/config/emails')
const Users = require('../models/users')
const Favorites = require('../models/favorites')
const Functions = require('../models/functions')
const Categories = require('../models/categories')
const Comments = require('../models/comments')
const Quotes = require('../models/quotes')
const deleteFilesNameStartWith = require('../assets/utils/deleteFilesNameStartWith')
const getPagesHelper = require('../assets/utils/getPagesHelper')

async function handleEditUser (
  res,
  { name, email, biography, isPublicEmail },
  userId,
  logoName
) {
  const user = await Users.findOne({ where: { id: userId } })
  user.name = name
  if (user.email !== email) {
    const tempToken = uuid.v4()
    user.email = email
    user.isConfirmed = false
    user.tempToken = tempToken
    await transporter.sendMail({
      from: `"FunctionProject" <${EMAIL_INFO.auth.user}>`,
      to: email,
      subject: "FunctionProject - Confirmer l'email",
      html: emailUserTemplate(
        "Veuillez confirmer l'email",
        'Oui, je confirme.',
        `${HOST}/users/confirm-email/${tempToken}`,
        'Si vous avez reçu ce message par erreur, il suffit de le supprimer. Votre email ne serez pas confirmé si vous ne cliquez pas sur le lien de confirmation ci-dessus.'
      )
    })
  }
  if (biography != null) {
    user.biography = biography
  }
  user.isPublicEmail = isPublicEmail
  if (logoName != null && `/images/users/${logoName}` !== user.logo) {
    user.logo = `/images/users/${logoName}`
  }
  await user.save()
  return res
    .status(200)
    .json({
      id: user.id,
      name: user.name,
      email: user.email,
      biography: user.biography,
      logo: user.logo,
      isPublicEmail: user.isPublicEmail,
      isAdmin: user.isAdmin,
      createdAt: user.createdAt
    })
}

exports.getUsers = async (req, res, next) => {
  let { search } = req.query
  try {
    search = search.toLowerCase()
  } catch {}
  const options = {
    where: {
      isConfirmed: true,
      // Recherche
      ...(search != null && {
        name: Sequelize.where(
          Sequelize.fn('LOWER', Sequelize.col('name')),
          'LIKE',
          `%${search}%`
        )
      })
    },
    attributes: {
      exclude: [
        'updatedAt',
        'isAdmin',
        'isConfirmed',
        'password',
        'tempToken',
        'tempExpirationToken',
        'isPublicEmail',
        'email'
      ]
    },
    order: [['createdAt', 'DESC']]
  }
  return await getPagesHelper({ req, res, next }, Users, options)
}

exports.putUser = async (req, res, next) => {
  const { name, email, biography, isPublicEmail } = req.body
  const logo = req.files.logo
  const errors = validationResult(req)
  if (!errors.isEmpty()) {
    return errorHandling(next, {
      message: errors.array()[0].msg,
      statusCode: 400
    })
  }
  if (logo != null) {
    if (
      (!logo || logo.truncated) &&
      (logo.mimetype !== 'image/png' ||
        logo.mimetype !== 'image/jpg' ||
        logo.mimetype !== 'image/jpeg' ||
        logo.mimetype !== 'image/gif')
    ) {
      return errorHandling(next, {
        message:
          'Le profil doit avoir une image valide (PNG, JPG, GIF) et moins de 5mo.',
        statusCode: 400
      })
    }
    const splitedLogoName = logo.name.split('.')
    if (splitedLogoName.length !== 2) return errorHandling(next, serverError)
    const logoName = name + req.userId + '.' + splitedLogoName[1]
    // Supprime les anciens logo
    try {
      deleteFilesNameStartWith(
        `${name + req.userId}`,
        path.join(__dirname, '..', 'assets', 'images', 'users'),
        async () => {
          logo.mv(
            path.join(__dirname, '..', 'assets', 'images', 'users', logoName),
            async error => {
              if (error) return errorHandling(next, serverError)
              return await handleEditUser(
                res,
                { name, email, biography, isPublicEmail },
                req.userId,
                logoName
              )
            }
          )
        }
      )
    } catch (error) {
      console.log(error)
      return errorHandling(next, serverError)
    }
  } else {
    try {
      return await handleEditUser(
        res,
        { name, email, biography, isPublicEmail },
        req.userId,
        null
      )
    } catch (error) {
      console.log(error)
      return errorHandling(next, serverError)
    }
  }
}

exports.register = async (req, res, next) => {
  const { name, email, password } = req.body
  const errors = validationResult(req)
  if (!errors.isEmpty()) {
    return errorHandling(next, {
      message: errors.array()[0].msg,
      statusCode: 400
    })
  }
  try {
    const hashedPassword = await bcrypt.hash(password, 12)
    const tempToken = uuid.v4()
    await Users.create({ email, name, password: hashedPassword, tempToken })
    await transporter.sendMail({
      from: `"FunctionProject" <${EMAIL_INFO.auth.user}>`,
      to: email,
      subject: "FunctionProject - Confirmer l'inscription",
      html: emailUserTemplate(
        "Veuillez confirmer l'inscription",
        "Oui, je m'inscris.",
        `${HOST}/users/confirm-email/${tempToken}`,
        'Si vous avez reçu ce message par erreur, il suffit de le supprimer. Vous ne serez pas inscrit si vous ne cliquez pas sur le lien de confirmation ci-dessus.'
      )
    })
    return res
      .status(201)
      .json({
        result:
          "Vous y êtes presque, veuillez vérifier vos emails pour confirmer l'inscription."
      })
  } catch (error) {
    console.log(error)
    return errorHandling(next, serverError)
  }
}

exports.login = async (req, res, next) => {
  const { email, password } = req.body
  const errors = validationResult(req)
  if (!errors.isEmpty()) {
    return errorHandling(next, {
      message: errors.array()[0].msg,
      statusCode: 400
    })
  }
  try {
    const user = await Users.findOne({ where: { email } })
    if (!user) {
      return errorHandling(next, {
        message: "Le mot de passe ou l'adresse email n'est pas valide.",
        statusCode: 400
      })
    }
    const isEqual = await bcrypt.compare(password, user.password)
    if (!isEqual) {
      return errorHandling(next, {
        message: "Le mot de passe ou l'adresse email n'est pas valide.",
        statusCode: 400
      })
    }
    if (!user.isConfirmed) {
      return errorHandling(next, {
        message:
          'Vous devez valider votre adresse email pour votre première connexion.',
        statusCode: 400
      })
    }
    const token = jwt.sign(
      {
        email: user.email,
        userId: user.id
      },
      JWT_SECRET,
      { expiresIn: TOKEN_LIFE }
    )
    return res
      .status(200)
      .json({
        token,
        id: user.id,
        name: user.name,
        email: user.email,
        biography: user.biography,
        logo: user.logo,
        isPublicEmail: user.isPublicEmail,
        isAdmin: user.isAdmin,
        createdAt: user.createdAt,
        expiresIn: Math.round(ms(TOKEN_LIFE) / 1000)
      })
  } catch (error) {
    console.log(error)
    return errorHandling(next, serverError)
  }
}

exports.confirmEmail = async (req, res, next) => {
  const { tempToken } = req.params
  if (!tempToken) {
    return errorHandling(next, generalError)
  }
  try {
    const user = await Users.findOne({
      where: { tempToken, isConfirmed: false }
    })
    if (!user) {
      return errorHandling(next, {
        message: "Le token n'est pas valide.",
        statusCode: 400
      })
    }
    user.tempToken = null
    user.isConfirmed = true
    await user.save()
    return res.redirect(`${FRONT_END_HOST}/users/login?isConfirmed=true`)
  } catch (error) {
    console.log(error)
    return errorHandling(next, serverError)
  }
}

exports.resetPassword = async (req, res, next) => {
  const { email } = req.body
  const errors = validationResult(req)
  if (!errors.isEmpty()) {
    return errorHandling(next, {
      message: errors.array()[0].msg,
      statusCode: 400
    })
  }
  try {
    const user = await Users.findOne({ where: { email, tempToken: null } })
    if (!user) {
      return errorHandling(next, {
        message:
          "L'adresse email n'existe pas ou une demande est déjà en cours.",
        statusCode: 400
      })
    }
    const tempToken = uuid.v4()
    user.tempExpirationToken = Date.now() + 3600000 // 1 heure
    user.tempToken = tempToken
    await user.save()
    await transporter.sendMail({
      from: `"FunctionProject" <${EMAIL_INFO.auth.user}>`,
      to: email,
      subject: 'FunctionProject - Réinitialisation du mot de passe',
      html: emailUserTemplate(
        'Veuillez confirmer la réinitialisation du mot de passe',
        'Oui, je change mon mot de passe.',
        `${FRONT_END_HOST}/users/newPassword?token=${tempToken}`,
        'Si vous avez reçu ce message par erreur, il suffit de le supprimer. Votre mot de passe ne sera pas réinitialiser si vous ne cliquez pas sur le lien ci-dessus. Par ailleurs, pour la sécurité de votre compte, la réinitialisation du mot de passe est disponible pendant un délai de 1 heure, passez ce temps, la réinitialisation ne sera plus valide.'
      )
    })
    return res
      .status(200)
      .json({
        result:
          'Demande de réinitialisation du mot de passe réussi, veuillez vérifier vos emails!'
      })
  } catch (error) {
    console.log(error)
    return errorHandling(next, serverError)
  }
}

exports.newPassword = async (req, res, next) => {
  const { tempToken, password } = req.body
  const errors = validationResult(req)
  if (!errors.isEmpty()) {
    return errorHandling(next, {
      message: errors.array()[0].msg,
      statusCode: 400
    })
  }
  try {
    const user = await Users.findOne({ where: { tempToken } })
    if (!user && parseInt(user.tempExpirationToken) < Date.now()) {
      return errorHandling(next, {
        message: "Le token n'est pas valide.",
        statusCode: 400
      })
    }
    const hashedPassword = await bcrypt.hash(password, 12)
    user.password = hashedPassword
    user.tempToken = null
    user.tempExpirationToken = null
    await user.save()
    return res
      .status(200)
      .json({ result: 'Le mot de passe a bien été modifié!' })
  } catch (error) {
    console.log(error)
    return errorHandling(next, serverError)
  }
}

exports.getUserInfo = async (req, res, next) => {
  const { name } = req.params
  try {
    const user = await Users.findOne({
      where: { name, isConfirmed: true },
      attributes: {
        exclude: [
          'updatedAt',
          'isAdmin',
          'isConfirmed',
          'password',
          'tempToken',
          'tempExpirationToken'
        ]
      }
    })
    if (!user) {
      return errorHandling(next, {
        message: "L'utilisateur n'existe pas.",
        statusCode: 404
      })
    }
    const favorites = await Favorites.findAll({
      where: { userId: user.id },
      include: [
        {
          model: Functions,
          attributes: {
            exclude: ['updatedAt', 'utilizationForm', 'article', 'isOnline']
          },
          include: { model: Categories, attributes: ['name', 'color'] }
        }
      ],
      order: [['createdAt', 'DESC']],
      limit: 5
    })
    const favoritesArray = favorites.map(favorite => favorite.function)
    const comments = await Comments.findAll({
      where: { userId: user.id },
      include: [
        {
          model: Functions,
          attributes: {
            exclude: ['updatedAt', 'utilizationForm', 'article', 'isOnline']
          }
        }
      ],
      order: [['createdAt', 'DESC']],
      limit: 5
    })
    const commentsArray = comments.map(commentObject => {
      return {
        id: commentObject.id,
        message: commentObject.message,
        createdAt: commentObject.createdAt,
        function: commentObject.function.dataValues
      }
    })
    const quotesArray = await Quotes.findAll({
      where: { userId: user.id, isValidated: 1 },
      attributes: {
        exclude: ['updatedAt', 'createdAt', 'isValidated', 'userId', 'id']
      },
      order: [['createdAt', 'DESC']],
      limit: 5
    })
    const userObject = {
      // Si Public Email
      ...(user.isPublicEmail && { email: user.email }),
      isPublicEmail: user.isPublicEmail,
      name: user.name,
      biography: user.biography,
      logo: user.logo,
      createdAt: user.createdAt,
      favoritesArray,
      commentsArray,
      quotesArray
    }
    return res.status(200).json(userObject)
  } catch (error) {
    console.log(error)
    return errorHandling(next, serverError)
  }
}