138 lines
3.9 KiB
JavaScript
138 lines
3.9 KiB
JavaScript
const User = require("../models/user.model");
|
|
const bcrypt = require("bcryptjs");
|
|
|
|
exports.test = async (req, res) => {
|
|
console.log("User route is working");
|
|
res.json({ message: "User route is working" });
|
|
};
|
|
|
|
exports.getAllUsers = async (req, res) => {
|
|
console.log(req);
|
|
const users = await User.getAllUsers();
|
|
res.json(users);
|
|
};
|
|
|
|
|
|
exports.updateUserRole = async (req, res) => {
|
|
try {
|
|
const { id, role } = req.body;
|
|
|
|
console.log(`Updating user ${id} to role ${role}`);
|
|
if (!Object.values(User.ROLES).includes(role))
|
|
return res.status(400).json({ error: "Invalid role" });
|
|
|
|
const updated = await User.updateUserRole(id, role);
|
|
if (!updated)
|
|
return res.status(404).json({ error: "User not found" });
|
|
|
|
res.json({ message: "Role updated", id, role });
|
|
} catch (err) {
|
|
res.status(500).json({ error: "Failed to update role" });
|
|
}
|
|
};
|
|
|
|
exports.deleteUser = async (req, res) => {
|
|
try {
|
|
const { id } = req.params;
|
|
|
|
const deleted = await User.deleteUser(id);
|
|
if (!deleted)
|
|
return res.status(404).json({ error: "User not found" });
|
|
|
|
|
|
res.json({ message: "User deleted", id });
|
|
} catch (err) {
|
|
res.status(500).json({ error: "Failed to delete user" });
|
|
}
|
|
};
|
|
|
|
exports.checkIfUserExists = async (req, res) => {
|
|
const { username } = req.query;
|
|
const exists = await User.checkIfUserExists(username);
|
|
res.json(exists);
|
|
};
|
|
|
|
exports.getCurrentUser = async (req, res) => {
|
|
try {
|
|
const userId = req.user.id;
|
|
const user = await User.getUserById(userId);
|
|
|
|
if (!user) {
|
|
return res.status(404).json({ error: "User not found" });
|
|
}
|
|
|
|
res.json(user);
|
|
} catch (err) {
|
|
console.error("Error getting current user:", err);
|
|
res.status(500).json({ error: "Failed to get user profile" });
|
|
}
|
|
};
|
|
|
|
exports.updateCurrentUser = async (req, res) => {
|
|
try {
|
|
const userId = req.user.id;
|
|
const { display_name } = req.body;
|
|
|
|
if (!display_name || display_name.trim().length === 0) {
|
|
return res.status(400).json({ error: "Display name is required" });
|
|
}
|
|
|
|
if (display_name.length > 100) {
|
|
return res.status(400).json({ error: "Display name must be 100 characters or less" });
|
|
}
|
|
|
|
const updated = await User.updateUserProfile(userId, { display_name: display_name.trim() });
|
|
|
|
if (!updated) {
|
|
return res.status(404).json({ error: "User not found" });
|
|
}
|
|
|
|
res.json({ message: "Profile updated successfully", user: updated });
|
|
} catch (err) {
|
|
console.error("Error updating user profile:", err);
|
|
res.status(500).json({ error: "Failed to update profile" });
|
|
}
|
|
};
|
|
|
|
exports.changePassword = async (req, res) => {
|
|
try {
|
|
const userId = req.user.id;
|
|
const { current_password, new_password } = req.body;
|
|
|
|
// Validation
|
|
if (!current_password || !new_password) {
|
|
return res.status(400).json({ error: "Current password and new password are required" });
|
|
}
|
|
|
|
if (new_password.length < 6) {
|
|
return res.status(400).json({ error: "New password must be at least 6 characters" });
|
|
}
|
|
|
|
// Get current password hash
|
|
const currentHash = await User.getUserPasswordHash(userId);
|
|
|
|
if (!currentHash) {
|
|
return res.status(404).json({ error: "User not found" });
|
|
}
|
|
|
|
// Verify current password
|
|
const isValidPassword = await bcrypt.compare(current_password, currentHash);
|
|
|
|
if (!isValidPassword) {
|
|
return res.status(401).json({ error: "Current password is incorrect" });
|
|
}
|
|
|
|
// Hash new password
|
|
const salt = await bcrypt.genSalt(10);
|
|
const hashedPassword = await bcrypt.hash(new_password, salt);
|
|
|
|
// Update password
|
|
await User.updateUserPassword(userId, hashedPassword);
|
|
|
|
res.json({ message: "Password changed successfully" });
|
|
} catch (err) {
|
|
console.error("Error changing password:", err);
|
|
res.status(500).json({ error: "Failed to change password" });
|
|
}
|
|
};
|