### Users Controller
phone = require 'phone'
validator = require 'validator'
tokenGenerator = require 'random-token'
module.exports = (app) ->
return {
#### create_new_user
Creates a new user
create_new_user: (req, res, next) ->
query = {}
for key, value of app.models.users.attributes
query[key] = req.body.user[key] if req.body.user.hasOwnProperty key
app.models.users.create query, (err, model) ->
if err
res.status(500).json { error: err }
else
req.user = model
next()
#### validate_new_user
Validates a new email address via `POST`
validate_new_user: (req, res, next) ->
req.body.user.verified = false
req.body.user.admin = true if not (req.body.user.admin or app.isSetup())
if req.body.user.id
isEmail = validator.isEmail req.body.user.id
isPhone = phone req.body.user.id
if isEmail?
app.log "Email detected"
if (app.isSetup() and app.config.app_auth_type is ('email' or 'two-factor')) or (not app.isSetup() and req.body.config.app_auth_type is ('email' or 'two-factor'))
req.body.user.email = req.body.user.id
else
res.status(500).json { error: "User ID/Auth Type mismatch" }
else if isPhone?
app.log "Phone number detected"
if (app.isSetup() and app.config.app_auth_type is 'phone') or (not app.isSetup() and req.body.config.app_auth_type is 'phone')
req.body.user.id = isPhone[0]
req.body.user.phone = isPhone[0]
req.body.user.country = isPhone[1]
else
app.error "User ID/Auth Type mismatch"
res.status(500).json { error: "User ID/Auth Type mismatch" }
else
app.error "User ID/Auth Type mismatch"
res.status(500).json { error: "User ID/Auth Type mismatch" }
# Make sure the user doesn't already exist
query = { id: req.body.user.id }
app.models.users.findOne query, (err, user) ->
if user and Object.keys(user).length
app.error "User already exists"
res.status(500).json { error: "User already exists" }
else
# Make sure the password is valid
app.dialog "New user #{req.body.user.id} valid."
if req.body.user.email and req.body.user.password and req.body.user.password_confirm
if (req.body.user.password is req.body.user.password_confirm) and req.body.user.password.match /^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])(?=.*?[#?!@$%^&*-]).{8,}$/
app.dialog "Password valid."
next()
else
app.error "Password Not Valid, must be at least 8 characters long, have one lower case letter, one upper case letter, one digit, one special character, and no spaces."
res.status(500).json { error: "Password Not Valid, must be at least 8 characters long, have one lower case letter, one upper case letter, one digit, one special character, and no spaces." }
else if req.body.user.phone and req.body.user.country
app.dialog "New user #{req.body.user.id} valid."
next()
else
res.status(500).json { error: "Not Valid" }
#### send_verify_sms
Sends a verification SMS via `POST`
send_verify_sms: (req, res, next) ->
if req.body.user.phone? and app.sms?
req.body.user.phone_token = tokenGenerator.create('0123456789')(6)
app.sms.messages.create { to: req.body.user.id, from: app.phone_number, body: "Your #{app.config.app_name} auth token is #{req.body.user.phone_token}" }, (err, message) ->
if err
res.status(500).json { error: err }
else
next()
else if app.config.app_auth_type is 'email'
next()
else
res.status(500).json { error: "Not Valid or Not Configured" }
#### send_verify_email
Sends a verification email via `POST`
send_verify_email: (req, res, next) ->
if app.postman? and req.body.user.email
req.body.user.token = tokenGenerator 24
mail = {
from: "#{app.config.app_name} <#{app.config.app_email}>"
to: req.body.user.email
subject: "Hello #{req.body.user.first_name}"
text: "Thanks for signing up for #{app.config.app_name}"
html: "Thanks for signing up for #{app.config.app_name}
Click here to validate your account and finish setting up your app, #{app.config.app_name}.
"
}
app.postman.sendMail mail, (err, result) ->
if err
app.error err
res.status(500).json { error: err }
else
app.dialog "Verify Email sent to #{req.body.user.email}."
next()
else if app.config.app_auth_type is 'phone'
next()
else
res.error "App Email Not Valid or Not Configured"
res.status(500).json { error: "App Email Not Valid or Not Configured" }
#### verify_token
Verifies a token sent via a `GET` to `/verify/:token` or a `POST` to `/verify` with `user.phone_token`
verify_token: (req, res, next) ->
if req.params.token?
app.log "Verifying Token #{req.params.token}"
query = { token: req.params.token }
replacement = { verified: true }
app.models.users.update query, replacement, (err, user) ->
if err
next err
else
next()
else if req.body.user.id and req.body.user.phone_token
query = { phone_token: req.body.user.token }
replacement = { verified: true }
app.models.users.update query, replacement, (err, user) ->
if err
res.status(500).json { error: err }
else
res.json { status: "ok" }, 200
#### email_login
Logs a user in with email/password.
email_login: (req, res, next) ->
if req.body.user.id and ((app.config.app_auth_type is 'email' or 'two-factor') and req.body.user.password)
app.models.users.findOne { id: req.body.user.id }, (err, user) ->
if err
res.status(500).json { error: err }
else if user and user.login req.body.user.password
next()
else if not user
res.status(500).json { error: "User Doesn't Exist" }
else if not user.login req.body.user.password
res.status(500).json { error: "Invalid Credentials" }
else if app.config.app_auth_type is 'email' or 'two-factor'
res.status(500).json { error: "Invalid Credentials"}
else
next()
#### phone_login
Logs a user in with phone/token.
phone_login: (req, res, next) ->
if req.body.user.id and ((app.config.app_auth_type is 'phone' or 'two-factor') and req.body.user.phone_token)
app.models.users.findOne { id: req.body.user.id }, (err, user) ->
if err
res.status(500).json { error: err }
else if user and user.phoneLogin req.body.user.phone_token
next()
else if not user
res.status(500).json { error: "User Doesn't Exist" }
else if not user.login req.body.user.token
res.status(500).json { error: "Invalid Credentials" }
else if app.config.app_auth_type is 'phone' or 'two-factor'
res.status(500).json { error: "Invalid Credentials"}
else
next()
}