create-hokage-js-app/templates/normalcss/js-template/api/src/services/auth.service.js

🔥 Best CLI tool to create a MERN stack template. Quick, clean, and customizable.

import User from "../models/user.model.js";
import { TokenService } from "../utils/Jwt.js";
import { AppError } from "../utils/AppError.js";
import { DTO } from "../utils/Dto.js";

export class AuthService {
    static async #generateAuthTokens(user) {
        const accessToken = TokenService.generateAccessToken(
            user._id.toString()
        );
        const refreshToken = TokenService.generateRefreshToken(
            user._id.toString()
        );

        user.refreshToken = refreshToken;
        await user.save({ validateBeforeSave: false });

        return {
            accessToken,
            refreshToken,
        };
    }

    static async register(data) {
        const { email, name, password } = data;

        const existingUser = await User.findOne({ email });
        if (existingUser) {
            throw new AppError("Email already in use", 400);
        }

        const user = new User({ email, password, name });
        await user.save();

        const tokens = await this.#generateAuthTokens(user);
        return {
            ...tokens,
            user: DTO.userDto(user),
        };
    }

    static async login(data) {
        const { email, password } = data;

        const user = await User.findOne({ email }).select('+password +refreshToken');

        if (!user) {
            throw new AppError("Invalid email or password", 401);
        }

        if (!user.password || typeof user.password !== 'string') {
            throw new AppError("Authentication error - invalid password storage", 500);
        }

        try {
            const isPasswordValid = await user.verifyPassword(password);
            if (!isPasswordValid) {
                throw new AppError("Invalid email or password", 401);
            }
        } catch (err) {
            if (err.message.includes('pchstr must be a non-empty string')) {
                throw new AppError("Authentication system error - please contact support", 500);
            }
            throw err;
        }

        const tokens = await this.#generateAuthTokens(user);
        return {
            ...tokens,
            user: DTO.userDto(user),
        };
    }

    static async logout(_id) {
        await User.findByIdAndUpdate({ _id }, { refreshToken: null })
        return true
    }
}