138 lines
3.7 KiB
JavaScript
138 lines
3.7 KiB
JavaScript
const User = require("../models/user.model");
|
|
const bcrypt = require("bcryptjs");
|
|
const { sendError } = require("../utils/http");
|
|
const { logError } = require("../utils/logger");
|
|
|
|
exports.test = async (req, res) => {
|
|
res.json({ message: "User route is working" });
|
|
};
|
|
|
|
exports.getAllUsers = async (req, res) => {
|
|
const users = await User.getAllUsers();
|
|
res.json(users);
|
|
};
|
|
|
|
|
|
exports.updateUserRole = async (req, res) => {
|
|
try {
|
|
const { id, role } = req.body;
|
|
if (!Object.values(User.ROLES).includes(role))
|
|
return sendError(res, 400, "Invalid role");
|
|
|
|
const updated = await User.updateUserRole(id, role);
|
|
if (!updated)
|
|
return sendError(res, 404, "User not found");
|
|
|
|
res.json({ message: "Role updated", id, role });
|
|
} catch (err) {
|
|
logError(req, "users.updateUserRole", err);
|
|
sendError(res, 500, "Failed to update role");
|
|
}
|
|
};
|
|
|
|
exports.deleteUser = async (req, res) => {
|
|
try {
|
|
const { id } = req.params;
|
|
|
|
const deleted = await User.deleteUser(id);
|
|
if (!deleted)
|
|
return sendError(res, 404, "User not found");
|
|
|
|
|
|
res.json({ message: "User deleted", id });
|
|
} catch (err) {
|
|
logError(req, "users.deleteUser", err);
|
|
sendError(res, 500, "Failed to delete user");
|
|
}
|
|
};
|
|
|
|
exports.checkIfUserExists = async (req, res) => {
|
|
const { username } = req.query;
|
|
const exists = await User.checkIfUserExists(username);
|
|
res.json(exists);
|
|
};
|
|
|
|
exports.getCurrentUser = async (req, res) => {
|
|
try {
|
|
const userId = req.user.id;
|
|
const user = await User.getUserById(userId);
|
|
|
|
if (!user) {
|
|
return sendError(res, 404, "User not found");
|
|
}
|
|
|
|
res.json(user);
|
|
} catch (err) {
|
|
logError(req, "users.getCurrentUser", err);
|
|
sendError(res, 500, "Failed to get user profile");
|
|
}
|
|
};
|
|
|
|
exports.updateCurrentUser = async (req, res) => {
|
|
try {
|
|
const userId = req.user.id;
|
|
const { display_name } = req.body;
|
|
|
|
if (!display_name || display_name.trim().length === 0) {
|
|
return sendError(res, 400, "Display name is required");
|
|
}
|
|
|
|
if (display_name.length > 100) {
|
|
return sendError(res, 400, "Display name must be 100 characters or less");
|
|
}
|
|
|
|
const updated = await User.updateUserProfile(userId, { display_name: display_name.trim() });
|
|
|
|
if (!updated) {
|
|
return sendError(res, 404, "User not found");
|
|
}
|
|
|
|
res.json({ message: "Profile updated successfully", user: updated });
|
|
} catch (err) {
|
|
logError(req, "users.updateCurrentUser", err);
|
|
sendError(res, 500, "Failed to update profile");
|
|
}
|
|
};
|
|
|
|
exports.changePassword = async (req, res) => {
|
|
try {
|
|
const userId = req.user.id;
|
|
const { current_password, new_password } = req.body;
|
|
|
|
// Validation
|
|
if (!current_password || !new_password) {
|
|
return sendError(res, 400, "Current password and new password are required");
|
|
}
|
|
|
|
if (new_password.length < 6) {
|
|
return sendError(res, 400, "New password must be at least 6 characters");
|
|
}
|
|
|
|
// Get current password hash
|
|
const currentHash = await User.getUserPasswordHash(userId);
|
|
|
|
if (!currentHash) {
|
|
return sendError(res, 404, "User not found");
|
|
}
|
|
|
|
// Verify current password
|
|
const isValidPassword = await bcrypt.compare(current_password, currentHash);
|
|
|
|
if (!isValidPassword) {
|
|
return sendError(res, 401, "Current password is incorrect");
|
|
}
|
|
|
|
// Hash new password
|
|
const salt = await bcrypt.genSalt(10);
|
|
const hashedPassword = await bcrypt.hash(new_password, salt);
|
|
|
|
// Update password
|
|
await User.updateUserPassword(userId, hashedPassword);
|
|
|
|
res.json({ message: "Password changed successfully" });
|
|
} catch (err) {
|
|
logError(req, "users.changePassword", err);
|
|
sendError(res, 500, "Failed to change password");
|
|
}
|
|
};
|