retropilot-server/src/server/controllers/admin.js

import authentication from './authentication';
import { Accounts } from '../../models';

async function isCurrentUserAdmin(hardFail, req) {
  const account = await authentication.getAuthenticatedAccount(req);
  if (!account) {
    return { isAdmin: false, account };
  }
  if (account.admin !== 1) {
    return { isAdmin: false, account };
  }

  return { isAdmin: true, account };
}

async function banAccount(ban, userId) {
  if (!userId || !ban) {
    return { success: false, status: 400, data: { bad_data: true } };
  }

  let cleanBan;
  if (ban === 'true' || ban === 'false') {
    cleanBan = ban === 'true';
  } else {
    return { success: false, status: 400, data: { bad_data: true } };
  }

  await Accounts.update(
    { banned: cleanBan ? 1 : 0 },
    { where: { id: userId } },
  );

  const verify = await Accounts.findOne({ where: { id: userId } });
  if (verify.dataValues && verify.dataValues.banned === cleanBan ? 1 : 0) {
    return { success: true, status: 200, data: { banned: ban } };
  }
  return { success: false, status: 500, data: { banned: false } };
}

export default {
  banAccount,
  isCurrentUserAdmin,
};