mirror of
https://github.com/ClaytonWWilson/CS307-Team24.git
synced 2025-12-16 02:08:47 +00:00
420 lines
12 KiB
JavaScript
420 lines
12 KiB
JavaScript
/* eslint-disable promise/catch-or-return */
|
||
const { admin, db } = require("../util/admin");
|
||
const config = require("../util/config");
|
||
const { validateUpdateProfileInfo } = require("../util/validator");
|
||
|
||
const firebase = require("firebase");
|
||
firebase.initializeApp(config);
|
||
|
||
exports.signup = (req, res) => {
|
||
const newUser = {
|
||
email: req.body.email,
|
||
handle: req.body.handle,
|
||
password: req.body.password,
|
||
confirmPassword: req.body.confirmPassword,
|
||
createdAt: new Date().toISOString()
|
||
};
|
||
|
||
let errors = {};
|
||
|
||
const emailRegEx = /^(([^<>()[\]\\.,;:\s@"]+(\.[^<>()[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/;
|
||
|
||
// Email check
|
||
if (newUser.email.trim() === "") {
|
||
errors.email = "Email must not be blank.";
|
||
} else if (!newUser.email.match(emailRegEx)) {
|
||
errors.email = "Email is invalid.";
|
||
}
|
||
|
||
// handle check
|
||
if (newUser.handle.trim() === "") {
|
||
errors.handle = "Username must not be blank.";
|
||
} else if (newUser.handle.length < 4 || newUser.handle.length > 30) {
|
||
errors.handle = "Username must be between 4-30 characters long.";
|
||
}
|
||
|
||
// Password check
|
||
if (newUser.password.trim() === "") {
|
||
errors.password = "Password must not be blank.";
|
||
} else if (newUser.password.length < 8 || newUser.password.length > 20) {
|
||
errors.password = "Password must be between 8-20 characters long.";
|
||
}
|
||
|
||
// Confirm password check
|
||
if (newUser.confirmPassword !== newUser.password) {
|
||
errors.confirmPassword = "Passwords must match.";
|
||
}
|
||
|
||
// Overall check
|
||
if (Object.keys(errors).length > 0) {
|
||
return res.status(400).json(errors);
|
||
}
|
||
|
||
let token, userId;
|
||
|
||
db.doc(`/users/${newUser.handle}`)
|
||
.get()
|
||
.then(doc => {
|
||
if (doc.exists) {
|
||
return res
|
||
.status(400)
|
||
.json({ handle: "This username is already taken." });
|
||
}
|
||
return firebase
|
||
.auth()
|
||
.createUserWithEmailAndPassword(newUser.email, newUser.password);
|
||
})
|
||
.then(data => {
|
||
userId = data.user.uid;
|
||
return data.user.getIdToken();
|
||
})
|
||
.then(idToken => {
|
||
token = idToken;
|
||
const defaultImageUrl = `https://firebasestorage.googleapis.com/v0/b/${config.storageBucket}/o/no-img.png?alt=media`;
|
||
const userCred = {
|
||
email: newUser.email,
|
||
handle: newUser.handle,
|
||
createdAt: newUser.createdAt,
|
||
userId,
|
||
followedTopics: [],
|
||
imageUrl: defaultImageUrl,
|
||
verified: false
|
||
};
|
||
return db.doc(`/users/${newUser.handle}`).set(userCred);
|
||
})
|
||
.then(() => {
|
||
return res.status(201).json({ token });
|
||
})
|
||
.catch(err => {
|
||
console.error(err);
|
||
if (err.code === "auth/email-already-in-use") {
|
||
return res.status(500).json({ email: "This email is already taken." });
|
||
}
|
||
return res.status(500).json({ error: err.code });
|
||
});
|
||
};
|
||
|
||
exports.login = (req, res) => {
|
||
const user = {
|
||
email: req.body.email,
|
||
password: req.body.password
|
||
};
|
||
|
||
// Auth validation
|
||
let errors = {};
|
||
|
||
const emailRegEx = /^(([^<>()[\]\\.,;:\s@"]+(\.[^<>()[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/;
|
||
|
||
// Checks if email/username field is empty
|
||
if (user.email.trim() === "") {
|
||
errors.email = "Email must not be blank.";
|
||
}
|
||
|
||
// Checks if password field is empty
|
||
if (user.password.trim() === "") {
|
||
errors.password = "Password must not be blank.";
|
||
}
|
||
|
||
// Checks if any of the above two errors were found
|
||
if (Object.keys(errors).length > 0) {
|
||
return res.status(400).json(errors);
|
||
}
|
||
|
||
// Email/username field is username since it's not in email format
|
||
if (!user.email.match(emailRegEx)) {
|
||
var userDoc = db.collection("users").doc(`${user.email}`);
|
||
userDoc
|
||
.get()
|
||
.then(function(doc) {
|
||
if (doc.exists) {
|
||
user.email = doc.data().email;
|
||
} else {
|
||
return res
|
||
.status(403)
|
||
.json({ general: "Invalid credentials. Please try again." });
|
||
}
|
||
return;
|
||
})
|
||
.then(function() {
|
||
firebase
|
||
.auth()
|
||
.signInWithEmailAndPassword(user.email, user.password)
|
||
.then(data => {
|
||
return data.user.getIdToken();
|
||
})
|
||
.then(token => {
|
||
return res.status(200).json({ token });
|
||
})
|
||
.catch(err => {
|
||
console.error(err);
|
||
if (
|
||
err.code === "auth/user-not-found" ||
|
||
err.code === "auth/invalid-email" ||
|
||
err.code === "auth/wrong-password"
|
||
) {
|
||
return res
|
||
.status(403)
|
||
.json({ general: "Invalid credentials. Please try again." });
|
||
}
|
||
return res.status(500).json({ error: err.code });
|
||
});
|
||
return;
|
||
})
|
||
.catch(function(err) {
|
||
if (!doc.exists) {
|
||
return res
|
||
.status(403)
|
||
.json({ general: "Invalid credentials. Please try again." });
|
||
}
|
||
return res.status(500).send(err);
|
||
});
|
||
}
|
||
// Email/username field is username
|
||
else {
|
||
firebase
|
||
.auth()
|
||
.signInWithEmailAndPassword(user.email, user.password)
|
||
.then(data => {
|
||
return data.user.getIdToken();
|
||
})
|
||
.then(token => {
|
||
return res.status(200).json({ token });
|
||
})
|
||
.catch(err => {
|
||
console.error(err);
|
||
if (
|
||
err.code === "auth/user-not-found" ||
|
||
err.code === "auth/invalid-email" ||
|
||
err.code === "auth/wrong-password"
|
||
) {
|
||
return res
|
||
.status(403)
|
||
.json({ general: "Invalid credentials. Please try again." });
|
||
}
|
||
return res.status(500).json({ error: err.code });
|
||
});
|
||
}
|
||
};
|
||
|
||
//Deletes user account and all associated data
|
||
exports.deleteUser = (req, res) => {
|
||
// Get the profile image filename
|
||
// `https://firebasestorage.googleapis.com/v0/b/${config.storageBucket}/o/${imageFileName}?alt=media`
|
||
let imageFileName;
|
||
req.userData.imageUrl ?
|
||
imageFileName = req.userData.imageUrl.split('/o/')[1].split('?alt=')[0] :
|
||
imageFileName = 'no-img.png'
|
||
|
||
const userId = req.userData.userId;
|
||
let errors = {};
|
||
|
||
function thenFunction(data) {
|
||
console.log(`${data} data for ${req.userData.handle} has been deleted.`);
|
||
}
|
||
|
||
function catchFunction(data, err) {
|
||
console.error(err);
|
||
errors[data] = err;
|
||
}
|
||
|
||
// Deletes user from authentication
|
||
let auth = admin.auth().deleteUser(userId);
|
||
|
||
// Deletes database data
|
||
let data = db.collection("users").doc(`${req.user.handle}`).delete();
|
||
|
||
// Deletes any custom profile image
|
||
let image;
|
||
if (imageFileName !== 'no-img.png') {
|
||
image = admin.storage().bucket().file(imageFileName).delete()
|
||
} else {
|
||
image = Promise.resolve();
|
||
}
|
||
|
||
// Deletes all users posts
|
||
let posts = db.collection("posts")
|
||
.where("userHandle", "==", req.user.handle)
|
||
.get()
|
||
.then((query) => {
|
||
query.forEach((snap) => {
|
||
snap.ref.delete();
|
||
});
|
||
return;
|
||
})
|
||
|
||
let promises = [
|
||
auth
|
||
.then(thenFunction('auth'))
|
||
.catch((err) => catchFunction('auth', err)),
|
||
data
|
||
.then(thenFunction('data'))
|
||
.catch((err) => catchFunction('data', err)),
|
||
image
|
||
.then(thenFunction('image'))
|
||
.catch((err) => catchFunction('image', err)),
|
||
posts
|
||
.then(thenFunction('posts'))
|
||
.catch((err) => catchFunction('image', err))
|
||
];
|
||
|
||
|
||
// Wait for all promises to resolve
|
||
let waitPromise = Promise.all(promises);
|
||
|
||
waitPromise.then(() => {
|
||
if (Object.keys(errors) > 0) {
|
||
return res.status(500).json(errors);
|
||
} else {
|
||
return res.status(200).json({message: `All data for ${req.userData.handle} has been deleted.`});
|
||
}
|
||
})
|
||
.catch((err) => {
|
||
return res.status(500).json({error: err});
|
||
})
|
||
};
|
||
|
||
// Returns all data in the database for the user who is currently signed in
|
||
exports.getProfileInfo = (req, res) => {
|
||
db.collection("users")
|
||
.doc(req.user.handle)
|
||
.get()
|
||
.then(data => {
|
||
return res.status(200).json(data.data());
|
||
})
|
||
.catch(err => {
|
||
console.error(err);
|
||
return res.status(500).json(err);
|
||
});
|
||
};
|
||
|
||
// Updates the data in the database of the user who is currently logged in
|
||
exports.updateProfileInfo = (req, res) => {
|
||
// Data validation
|
||
const { valid, errors, profileData } = validateUpdateProfileInfo(req);
|
||
if (!valid) return res.status(400).json(errors);
|
||
|
||
// Update the database entry for this user
|
||
db.collection("users")
|
||
.doc(req.user.handle)
|
||
.set(profileData, { merge: true })
|
||
.then(() => {
|
||
console.log(`${req.user.handle}'s profile info has been updated.`);
|
||
return res.status(201).json({
|
||
general: `${req.user.handle}'s profile info has been updated.`
|
||
});
|
||
})
|
||
.catch(err => {
|
||
console.error(err);
|
||
return res.status(500).json({
|
||
error: "Error updating profile data"
|
||
});
|
||
});
|
||
};
|
||
|
||
exports.getUserDetails = (req, res) => {
|
||
let userData = {};
|
||
db.doc(`/users/${req.body.handle}`)
|
||
.get()
|
||
.then(doc => {
|
||
if (doc.exists) {
|
||
userData = doc.data();
|
||
return res.status(200).json({ userData });
|
||
} else {
|
||
return res.status(400).json({ error: "User not found." });
|
||
}
|
||
})
|
||
.catch(err => {
|
||
console.error(err);
|
||
return res.status(500).json({ error: err.code });
|
||
});
|
||
};
|
||
|
||
exports.getAuthenticatedUser = (req, res) => {
|
||
let credentials = {};
|
||
db.doc(`/users/${req.user.handle}`)
|
||
.get()
|
||
.then(doc => {
|
||
if (doc.exists) {
|
||
credentials = doc.data();
|
||
return res.status(200).json({ credentials });
|
||
} else {
|
||
return res.status(400).json({ error: "User not found." });
|
||
}
|
||
})
|
||
.catch(err => {
|
||
console.error(err);
|
||
return res.status(500).json({ error: err.code });
|
||
});
|
||
};
|
||
|
||
// Verifies the user sent to the request
|
||
// Must be run by the Admin user
|
||
exports.verifyUser = (req, res) => {
|
||
if (req.userData.handle !== "Admin") {
|
||
return res.status(403).json({error: "This must be done as Admin"});
|
||
}
|
||
|
||
db.doc(`/users/${req.body.user}`)
|
||
.get()
|
||
.then((doc) => {
|
||
if (doc.exists) {
|
||
let verifiedUser = doc.data();
|
||
verifiedUser.verified = true;
|
||
return db.doc(`/users/${req.body.user}`).set(verifiedUser, {merge: true});
|
||
} else {
|
||
return res.status(400).json({error: `User ${req.body.user} was not found`});
|
||
}
|
||
})
|
||
.then(() => {
|
||
return res.status(201).json({message: `${req.body.user} is now verified`});
|
||
})
|
||
.catch((err) => {
|
||
console.error(err);
|
||
return res.status(500).json({error: err.code});
|
||
});
|
||
}
|
||
|
||
// Unverifies the user sent to the request
|
||
// Must be run by admin
|
||
exports.unverifyUser = (req, res) => {
|
||
if (req.userData.handle !== "Admin") {
|
||
return res.status(403).json({error: "This must be done as Admin"});
|
||
}
|
||
|
||
db.doc(`/users/${req.body.user}`)
|
||
.get()
|
||
.then((doc) => {
|
||
if (doc.exists) {
|
||
let unverifiedUser = doc.data();
|
||
unverifiedUser.verified = false;
|
||
return db.doc(`/users/${req.body.user}`).set(unverifiedUser, {merge: true});
|
||
} else {
|
||
return res.status(400).json({error: `User ${req.body.user} was not found`});
|
||
}
|
||
})
|
||
.then(() => {
|
||
return res.status(201).json({message: `${req.body.user} is no longer verified`});
|
||
})
|
||
.catch((err) => {
|
||
console.error(err);
|
||
return res.status(500).json({error: err.code});
|
||
});
|
||
}
|
||
exports.getUserHandles = (req, res) => {
|
||
admin
|
||
.firestore()
|
||
.collection("users")
|
||
.get()
|
||
.then(data => {
|
||
let users = [];
|
||
data.forEach(function(doc) {
|
||
users.push(doc.data().handle);
|
||
});
|
||
return res.status(200).json(users);
|
||
})
|
||
.catch(err => {
|
||
console.error(err);
|
||
return res.status(500).json({ error: "Failed to get all user handles." });
|
||
});
|
||
};
|