janishutz/libreevent
1
0
Fork 0
mirror of https://github.com/janishutz/libreevent.git synced 2025-11-25 21:34:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

sign up almost fully working

Browse Source
This commit is contained in:
Janis Hutz
2023-08-05 11:52:29 +02:00
parent d9adc91256
commit f9e6b8fc17
10 changed files with 379 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

46
src/server/backend/userRoutes.js
View File

@@ -18,6 +18,7 @@ const bodyParser = require( 'body-parser' );
let responseObjects = {};
let authOk = {};
let mailTokens = {};
module.exports = ( app, settings ) => {
app.get( '/user/details', ( request, response ) => {
@@ -134,21 +135,23 @@ module.exports = ( app, settings ) => {
app.get( '/user/logout', ( request, response ) => {
request.session.loggedInUser = false;
request.session.username = '';
response.send( 'logoutOk' );
} );
app.post( '/user/signup', bodyParser.json(), ( request, response ) => {
// TODO: Make sure that user does not exist yet first and if user
// exists, send back info that it is that way
// TODO: check for 2fa
// TODO: Send mail to confirm email address
if ( request.body.password && request.body.password === request.body.password2 && request.body.firstName && request.body.name && request.body.country && request.body.mail ) {
db.checkDataAvailability( 'users', 'email', request.body.mail ).then( status => {
if ( status ) {
response.send( 'exists' );
} else {
db.writeDataSimple( 'users', 'email', request.body.mail, { 'pass': pwdmanager.hashPassword( request.body.password ), 'first_name': request.body.firstName, 'name': request.body.name, 'two_fa': String( request.body.twoFA ), 'user_data': { 'country': request.body.country } } ).then( () => {
response.send( 'ok' );
pwdmanager.hashPassword( request.body.password ).then( hash => {
db.writeDataSimple( 'users', 'email', request.body.mail, { 'email': request.body.mail, 'pass': hash, 'first_name': request.body.firstName, 'name': request.body.name, 'two_fa': 'disabled', 'user_data': JSON.stringify( { 'country': request.body.country } ) } ).then( () => {
request.session.loggedInUser = true;
request.session.username = request.body.mail;
response.send( 'ok' );
} );
} );
}
} );
@@ -156,4 +159,37 @@ module.exports = ( app, settings ) => {
response.status( 400 ).send( 'incomplete' );
}
} );
app.get( '/user/signup/confirm', ( request, response ) => {
if ( Object.keys( mailTokens ).includes( request.query.token ) ) {
request.session.username = mailTokens[ request.query.token ];
db.writeDataSimple( 'users', 'email', request.session.username, { 'mail_confirmed': 'true' } );
delete mailTokens[ request.query.token ];
if ( settings.twoFA === 'allow' ) {
response.sendFile( path.join( __dirname + '/../ui/en/signup/allowTwoFA.html' ) );
} else if ( settings.twoFA === 'enforce' ) {
response.sendFile( path.join( __dirname + '/../ui/en/signup/enforceTwoFA.html' ) );
} else {
response.sendFile( path.join( __dirname + '/../ui/en/signup/disallowTwoFA.html' ) );
}
} else {
response.sendFile( path.join( __dirname + '/../ui/en/signup/invalid.html' ) );
}
} );
app.post( '/user/settings/:setting', bodyParser.json(), ( request, response ) => {
let call = request.params.setting;
if ( request.session.username ) {
if ( call === '2fa' ) {
db.writeDataSimple( 'users', 'email', request.session.username, { 'two_fa': request.body.twoFA } );
response.send( 'ok' );
}
} else {
response.send( 'unauthorised' );
}
} );
app.get( '/settings/2fa', ( request, response ) => {
response.send( settings.twoFA );
} );
};