retropilot-server/controllers/users.js

import crypto from 'crypto';
import log4js from 'log4js';
import orm from '../models/index.model';

const logger = log4js.getLogger('default');
export async function getAccountFromId(id) {
  return orm.models.accounts.findByPk(id);
}

export async function getAccountFromEmail(email) {
  if (!email) return null;

  const account = orm.models.accounts.findOne({ where: { email } });

  if (account.dataValues) return account.dataValues;
  return null;
}

export async function createBaseAccount() {
  await orm.models.accounts.create({
    id: 0,
    email: 'dummy@retropilot.org',
    password: '123123',
    created: Date.now(),
    last_ping: Date.now(),
    email_verify_token: 'notokenplease',
  });

  return { success: true, status: 200 };
}

export async function _dirtyCreateAccount(email, password, created, admin) {
  logger.log('creating acount: ', email, password, created, admin);
  return orm.models.accounts.create({
    email, password, created, admin,
  });
}

export async function createAccount(email, password) {
  if (!email || !password) {
    return { success: false, status: 400, data: { missingData: true } };
  }
  if (!process.env.ALLOW_REGISTRATION) {
    return { success: false, status: 403, data: { registerEnabled: false } };
  }

  const emailToken = crypto.createHmac('sha256', process.env.APP_SALT).update(email.trim()).digest('hex');
  password = crypto.createHash('sha256').update(password + process.env.APP_SALT).digest('hex');

  const account = await orm.models.accounts.findOne({ where: { email } });
  if (account != null && account.dataValues != null) {
    return { success: true, status: 409, data: { alreadyRegistered: true } };
  }

  await orm.models.accounts.create({
    email,
    password,
    created: Date.now(),
    last_ping: Date.now(),
    email_verify_token: emailToken,
  });

  const didAccountRegister = await orm.models.accounts.findOne({ where: { email } });

  if (didAccountRegister != null && didAccountRegister.dataValues != null) {
    return { success: true, status: 200 };
  }

  // TODO: better error
  return { success: false, status: 500, data: {} };
}

export async function verifyEmailToken(token) {
  if (!token) {
    return { success: false, status: 400, data: { missingToken: true } };
  }

  const account = await orm.models.accounts.findOne(
    { where: { email_verify_token: token } },
  );

  if (account === null) {
    return { success: false, status: 404, data: { badToken: true } };
  }
  if (account.verified === 1) {
    return { success: true, status: 409, data: { alreadyVerified: true } };
  }

  await orm.models.accounts.update(
    { verified: true },
    { where: { id: account.id } },
  );

  return { success: true, status: 200, data: { successfullyVerified: true } };
}

export async function getAllUsers() {
  return orm.models.accounts.findAll({ attributes: ['id', 'last_ping', 'created', 'admin', 'banned'] });
}

export default {
  createAccount,
  createBaseAccount,
  verifyEmailToken,
  getAccountFromId,
  getAllUsers,
  getAccountFromEmail,
  _dirtyCreateAccount,
};