This repository has been archived on 2022-11-26. You can view files and clone it, but cannot push or open issues or pull requests.
IcyNet.eu/server/api/index.js

132 lines
3.8 KiB
JavaScript

import path from 'path'
import cprog from 'child_process'
import config from '../../scripts/load-config'
import database from '../../scripts/load-database'
import models from './models'
import crypto from 'crypto'
const emailRe = /^(([^<>()[\]\\.,;:\s@"]+(\.[^<>()[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/
function bcryptTask (data) {
return new Promise((resolve, reject) => {
let proc = cprog.fork(path.join(__dirname, '../../scripts', 'bcrypt.js'))
let done = false
proc.send(data.task + ' ' + JSON.stringify(data))
proc.on('message', (chunk) => {
if (chunk == null) return reject(new Error('No response'))
let line = chunk.toString().trim()
done = true
if (line === 'error') {
return reject(new Error(line))
}
if (line === 'true' || line === 'false') {
return resolve(line === 'true')
}
resolve(line)
})
proc.on('exit', () => {
if (!done) {
reject(new Error('No response'))
}
})
})
}
const API = {
User: {
get: async function (identifier) {
let scope = 'id'
if (typeof identifier === 'string') {
scope = 'username'
if (identifier.indexOf('@') !== -1) {
scope = 'email'
}
} else if (typeof identifier === 'object') {
if (identifier.id != null) {
identifier = identifier.id
} else if (identifier.username) {
scope = 'username'
identifier = identifier.username
} else {
return null
}
}
let user = await models.User.query().where(scope, identifier)
if (!user.length) return null
return user[0]
},
ensureObject: async function (user) {
if (!typeof user === 'object') {
return await API.User.get(user)
}
if (user.id) {
return user
}
return null
},
Login: {
password: async function (user, password) {
user = await API.User.ensureObject(user)
if (!user.password) return false
return bcryptTask({task: 'compare', password: password, hash: user.password})
},
activationToken: async function (token) {
let getToken = await models.Token.query().where('token', token)
if (!getToken || !getToken.length) return false
let user = await API.User.get(getToken[0].user_id)
if (!user) return false
await models.User.query().patchAndFetchById(user.id, {activated: 1})
await models.Token.query().delete().where('id', getToken[0].id)
return true
}
},
Register: {
hashPassword: async function (password) {
return bcryptTask({task: 'hash', password: password})
},
validateEmail: (email) => {
return emailRe.test(email)
},
newAccount: async function (regdata) {
let data = Object.assign(regdata, {
created_at: new Date()
})
let userTest = await API.User.get(regdata.username)
if (userTest) {
return {error: 'This username is already taken!'}
}
let emailTest = await API.User.get(regdata.email)
if (emailTest) {
return {error: 'This email address is already registered!'}
}
// Create user
let user = await models.User.query().insert(data)
// Activation token
let activationToken = crypto.randomBytes(16).toString('hex')
await models.Token.query().insert({
expires_at: new Date(Date.now() + 86400000), // 1 day
token: activationToken,
user_id: user.id,
type: 1
})
// TODO: Send email
console.log(activationToken)
return {error: null, user: user}
}
}
}
}
module.exports = API