day 11
This commit is contained in:
ryanwong
Executable
+377
@@ -0,0 +1,377 @@
|
||||
/*Powered By: Manaknightdigital Inc. https://manaknightdigital.com/ Year: 2021*/
|
||||
/**
|
||||
* Auth Service
|
||||
* @copyright 2021 Manaknightdigital Inc.
|
||||
* @link https://manaknightdigital.com
|
||||
* @license Proprietary Software licensing
|
||||
* @author Ryan Wong
|
||||
*
|
||||
*/
|
||||
|
||||
const { Op } = require('sequelize')
|
||||
|
||||
const passwordService = require('./PasswordService')
|
||||
const mailService = require('./MailService')
|
||||
const generateCode = require('../utils/generateCode')
|
||||
|
||||
const db = require('../models')
|
||||
|
||||
const errors = {
|
||||
EMAIL_ADDRESS_NOT_FOUND: 'EMAIL_ADDRESS_NOT_FOUND',
|
||||
EMAIL_ADDRESS_ALREADY_EXIST: 'EMAIL_ADDRESS_ALREADY_EXIST',
|
||||
PASSWORD_NOT_MATCH: 'PASSWORD_NOT_MATCH',
|
||||
INVALID_EMAIL_CONFIRMATION_CODE: 'INVALID_EMAIL_CONFIRMATION_CODE',
|
||||
INVALID_EMAIL_OR_PASSWORD: 'INVALID_EMAIL_OR_PASSWORD',
|
||||
ACCOUNT_ALREADY_VERIFIED: 'ACCOUNT_ALREADY_VERIFIED',
|
||||
CODE_DOES_NOT_EXIST: 'CODE_DOES_NOT_EXIST',
|
||||
}
|
||||
|
||||
module.exports = {
|
||||
/**
|
||||
* Register new user with email and password
|
||||
* @name authService.register
|
||||
* @param {String} email user new email address
|
||||
* @param {String} password user new password
|
||||
* @returns {Promise.<{credential:String, user:String}>} payload to generate jwt access and refresh token
|
||||
* @example
|
||||
* const payload = await authService.register(req.body.email, req.body.password)
|
||||
*/
|
||||
register: async function (email, password, role_id, code, user_details = {}) {
|
||||
let User
|
||||
let Credential
|
||||
|
||||
try {
|
||||
const isEmailAddressExist = await db.credential.getByFields({
|
||||
email,
|
||||
})
|
||||
;``
|
||||
|
||||
if (isEmailAddressExist)
|
||||
throw new Error(errors.EMAIL_ADDRESS_ALREADY_EXIST)
|
||||
const codeExists = await db.code.getByFields({
|
||||
code,
|
||||
is_used: { [Op.or]: [0, null] },
|
||||
user_id: { [Op.or]: [0, null] },
|
||||
})
|
||||
if (!codeExists) throw new Error(errors.CODE_DOES_NOT_EXIST)
|
||||
|
||||
const hashedPassword = await passwordService.hash(password)
|
||||
|
||||
User = await db.user.insert(
|
||||
{ ...user_details, role_id },
|
||||
{ returnAllFields: true }
|
||||
)
|
||||
|
||||
Credential = await db.credential.insert(
|
||||
{
|
||||
email: email,
|
||||
password: hashedPassword,
|
||||
user_id: User.id,
|
||||
type: 'n',
|
||||
verify: 0,
|
||||
role_id,
|
||||
status: 1,
|
||||
},
|
||||
{ returnAllFields: true }
|
||||
)
|
||||
await db.code.edit(
|
||||
{ user_id: User.id, is_used: 1, status: 1 },
|
||||
codeExists.id
|
||||
)
|
||||
return { credential: Credential.id, user: User }
|
||||
} catch (error) {
|
||||
if (Credential) {
|
||||
await db.credential.realDelete(Credential.id)
|
||||
}
|
||||
if (User) {
|
||||
await db.user.realDelete(User.id)
|
||||
}
|
||||
|
||||
throw new Error(error.message)
|
||||
}
|
||||
},
|
||||
/**
|
||||
* Login user with email and password
|
||||
* @name authService.login
|
||||
* @param {String} email user email address
|
||||
* @param {String} password user password
|
||||
* @returns {Promise.<{credential:String, user:String}>} payload to generate jwt access and refresh token
|
||||
* @example
|
||||
* const payload = await authService.login(req.body.email, req.body.password)
|
||||
*/
|
||||
login: async function (email, password, role_id) {
|
||||
const isEmailAddressExist = await db.credential.getByFields({
|
||||
email,
|
||||
status: 1,
|
||||
role_id,
|
||||
type: 'n',
|
||||
})
|
||||
|
||||
if (!isEmailAddressExist) throw new Error(errors.EMAIL_ADDRESS_NOT_FOUND)
|
||||
|
||||
const { password: hashedPassword, id, user_id } = isEmailAddressExist
|
||||
|
||||
const user = await db.user.getByFields({
|
||||
id: user_id,
|
||||
status: 1,
|
||||
})
|
||||
|
||||
if (!user) {
|
||||
throw new Error(errors.EMAIL_ADDRESS_NOT_FOUND)
|
||||
}
|
||||
|
||||
const isPasswordMatch = await passwordService.compareHash(
|
||||
password,
|
||||
hashedPassword
|
||||
)
|
||||
|
||||
if (!isPasswordMatch) throw new Error(errors.INVALID_EMAIL_OR_PASSWORD)
|
||||
|
||||
return { credential: id, user }
|
||||
},
|
||||
/**
|
||||
* Send email and save to database
|
||||
* @name authService.forgotPassword
|
||||
* @param {String} email user email address
|
||||
* @return {Promise.<Void>}
|
||||
* @example
|
||||
* await authService.forgotPassword(req.body.email)
|
||||
*/
|
||||
forgotPassword: async function (email) {
|
||||
try {
|
||||
const isEmailAddressExist = await db.credential.getByFields({
|
||||
where: {
|
||||
email: email,
|
||||
},
|
||||
})
|
||||
|
||||
if (!isEmailAddressExist) throw new Error(errors.EMAIL_ADDRESS_NOT_FOUND)
|
||||
|
||||
const { user_id } = isEmailAddressExist
|
||||
|
||||
const getUser = await db.user.getByPk(user_id)
|
||||
|
||||
const verificationCode = generateCode(6)
|
||||
|
||||
mailService.initialize({
|
||||
hostname: process.env.EMAIL_SMTP_SMTP_HOST,
|
||||
port: process.env.EMAIL_SMTP_SMTP_PORT,
|
||||
username: process.env.EMAIL_SMTP_SMTP_USER,
|
||||
password: EMAIL_SMTP_SMTP_PASS,
|
||||
from: process.env.MAIL_FROM,
|
||||
to: email,
|
||||
})
|
||||
|
||||
const mailTemplate = await mailService.template('reset-password')
|
||||
|
||||
const injectedMailTemplate = mailService.inject(
|
||||
{
|
||||
body: mailTemplate.body,
|
||||
subject: mailTemplate.subject,
|
||||
},
|
||||
{
|
||||
username: `${getUser.first_name} ${getUser.last_name}`,
|
||||
verification_code: verificationCode,
|
||||
}
|
||||
)
|
||||
|
||||
await mailService.send(injectedMailTemplate)
|
||||
|
||||
await db.token.insert({ token: verificationCode, user_id })
|
||||
} catch (error) {
|
||||
throw new Error(error)
|
||||
}
|
||||
},
|
||||
/**
|
||||
* Verify forgot password confirmation code
|
||||
* @name authService.verifyForgotPassword
|
||||
* @param {code} code confirmation code
|
||||
* @returns {Promise.<{credential:String, user:String}>} payload to generate jwt access and refresh token
|
||||
* @example
|
||||
* const payload = await authService.verifyForgotPassword(req.body.code)
|
||||
*/
|
||||
verifyForgotPassword: async function (code) {
|
||||
try {
|
||||
const Token = await db.token.findOne({
|
||||
where: {
|
||||
token: code,
|
||||
},
|
||||
})
|
||||
|
||||
const Credential = await db.credential.getByFields({
|
||||
user_id: Token.user_id,
|
||||
})
|
||||
|
||||
return { credential: Credential.id, user: Credential.user_id }
|
||||
} catch (error) {
|
||||
throw new Error(error)
|
||||
}
|
||||
},
|
||||
/**
|
||||
* Reset password
|
||||
* @name authService.resetPassword
|
||||
* @param {String} password user new password
|
||||
* @param {String} credential_id user credential id
|
||||
* @example
|
||||
* await authService.resetPassword(req.body.password, credential_id)
|
||||
*/
|
||||
resetPassword: async function (password, credential_id) {
|
||||
try {
|
||||
const hashedPassword = await passwordService.hash(password)
|
||||
|
||||
await db.credential.edit(
|
||||
{
|
||||
password: hashedPassword,
|
||||
},
|
||||
credential_id
|
||||
)
|
||||
} catch (error) {
|
||||
throw new Error(error)
|
||||
}
|
||||
},
|
||||
/**
|
||||
* Email confirmation
|
||||
* @name authService.emailConfirmation
|
||||
* @param {String} email user email address
|
||||
* @example
|
||||
* await authService.emailConfirmation(email)
|
||||
*/
|
||||
emailConfirmation: async function (email) {
|
||||
try {
|
||||
const isEmailAddressExist = await db.credential.getByFields({
|
||||
where: {
|
||||
email: email,
|
||||
},
|
||||
})
|
||||
|
||||
if (!isEmailAddressExist) throw new Error(errors.EMAIL_ADDRESS_NOT_FOUND)
|
||||
|
||||
const { user_id } = isEmailAddressExist
|
||||
|
||||
const getUser = await db.user.getByPk(user_id)
|
||||
|
||||
const confirmationCode = generateCode(6)
|
||||
|
||||
mailService.initialize({
|
||||
hostname: process.env.EMAIL_SMTP_SMTP_HOST,
|
||||
port: process.env.EMAIL_SMTP_SMTP_PORT,
|
||||
username: process.env.EMAIL_SMTP_SMTP_USER,
|
||||
password: EMAIL_SMTP_SMTP_PASS,
|
||||
from: process.env.MAIL_FROM,
|
||||
to: email,
|
||||
})
|
||||
|
||||
const mailTemplate = await mailService.template('email-confirmation')
|
||||
|
||||
const injectedMailTemplate = mailService.inject(
|
||||
{
|
||||
body: mailTemplate.body,
|
||||
subject: mailTemplate.subject,
|
||||
},
|
||||
{
|
||||
username: `${getUser.first_name} ${getUser.last_name}`,
|
||||
confirmation_code: confirmationCode,
|
||||
}
|
||||
)
|
||||
|
||||
await mailService.send(injectedMailTemplate)
|
||||
|
||||
await db.token.insert({ token: confirmationCode, user_id, type: 6 })
|
||||
} catch (error) {
|
||||
throw new Error(error)
|
||||
}
|
||||
},
|
||||
/**
|
||||
* Verify Email address
|
||||
* @name authService.emailVerify
|
||||
* @param {String} token email confirmation code
|
||||
* @param {string} user_id user id
|
||||
* @example
|
||||
* await authService.emailVerify(email, user_id)
|
||||
*/
|
||||
emailVerify: async function (token, user_id) {
|
||||
try {
|
||||
const isTokenExist = await db.token.getByFields({
|
||||
where: {
|
||||
user_id,
|
||||
token,
|
||||
type: 6,
|
||||
},
|
||||
})
|
||||
|
||||
if (!isTokenExist) throw new Error(errors.INVALID_EMAIL_CONFIRMATION_CODE)
|
||||
|
||||
await db.token.realDelete(isTokenExist.id)
|
||||
} catch (error) {
|
||||
throw new Error(error)
|
||||
}
|
||||
},
|
||||
/**
|
||||
* check if user need to change password before logging in
|
||||
* @name authService.forcePasswordChange
|
||||
* @param {string} user_id user id
|
||||
*/
|
||||
forcePasswordChange: async function (user_id) {
|
||||
try {
|
||||
const { profile_id } = await db.user.getByPk(user_id)
|
||||
const { force_password_change } = await db.profile.getByPk(profile_id)
|
||||
|
||||
if (force_password_change) return true
|
||||
else return false
|
||||
} catch (error) {
|
||||
throw new Error(error)
|
||||
}
|
||||
},
|
||||
verifyAccount: async ({ email, roleId }) => {
|
||||
const credential = await db.credential.getByFields({
|
||||
email,
|
||||
status: 1,
|
||||
role_id: roleId,
|
||||
})
|
||||
|
||||
if (!credential) {
|
||||
throw new Error(errors.EMAIL_ADDRESS_NOT_FOUND)
|
||||
}
|
||||
|
||||
if (
|
||||
credential.type !== 'n' ||
|
||||
(credential.type === 'n' && credential.verify)
|
||||
) {
|
||||
throw new Error(errors.ACCOUNT_ALREADY_VERIFIED)
|
||||
}
|
||||
|
||||
mailService.initialize({
|
||||
hostname: process.env.EMAIL_SMTP_SMTP_HOST,
|
||||
port: process.env.EMAIL_SMTP_SMTP_PORT,
|
||||
username: process.env.EMAIL_SMTP_SMTP_USER,
|
||||
password: process.env.EMAIL_SMTP_SMTP_PASS,
|
||||
from: process.env.MAIL_FROM,
|
||||
to: email,
|
||||
})
|
||||
|
||||
const accountConfirmationMailTemplate = await mailService.template(
|
||||
'verify-account'
|
||||
)
|
||||
|
||||
const token = Buffer.from(JSON.stringify(credential.id))?.toString('base64')
|
||||
|
||||
const BASE_URL = process.env.BASE_URL
|
||||
const link =
|
||||
(BASE_URL?.endsWith('/') ? BASE_URL?.slice(0, -1) : BASE_URL) +
|
||||
'/member/verify-account/' +
|
||||
token
|
||||
|
||||
const accountConfirmationMailTemplateFinal = mailService.inject(
|
||||
{
|
||||
body: accountConfirmationMailTemplate.html,
|
||||
subject: accountConfirmationMailTemplate.subject,
|
||||
},
|
||||
{
|
||||
email,
|
||||
link,
|
||||
}
|
||||
)
|
||||
|
||||
await mailService.send(accountConfirmationMailTemplateFinal)
|
||||
},
|
||||
}
|
||||
Reference in New Issue
Block a user