maglev/dist/controllers/password.js

Preconfigured NodeJS framework

'use strict';

Object.defineProperty(exports, "__esModule", {
  value: true
});
exports.tokenToUser = tokenToUser;
exports.change = change;
exports.generateForgotToken = generateForgotToken;
exports.forgot = forgot;

var _jsonwebtoken = require('jsonwebtoken');

var _jsonwebtoken2 = _interopRequireDefault(_jsonwebtoken);

var _async = require('async');

var _async2 = _interopRequireDefault(_async);

var _webError = require('web-error');

var _webError2 = _interopRequireDefault(_webError);

var _okay = require('okay');

var _okay2 = _interopRequireDefault(_okay);

function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }

function tokenToUser(req, res, next, id) {
  var User = req.models.User;
  var options = req.server.options;

  if (!id) {
    return next(new _webError2.default(400, 'Token is undefined'));
  }

  _jsonwebtoken2.default.verify(id, options.mail.token.secret, (0, _okay2.default)(next, function (data) {
    if (!data.user) {
      return next(new _webError2.default(400, 'Unknown user'));
    }

    User.findById(id, (0, _okay2.default)(next, function (user) {
      if (!user) {
        return next(new _webError2.default(404));
      }

      req.objects.user = user;
      next();
    }));
  }));
}

/**
 * Change user password
 */
function change(req, res, next) {
  var user = req.objects.user;

  if (!user) {
    return next(new _webError2.default(404));
  }

  if (!req.body.password) {
    return next(new _webError2.default(400, 'Parameter password is missing'));
  }

  if (!user.hasPassword()) {
    user.setPassword(req.body.password, (0, _okay2.default)(next, function () {
      res.status(204).end();
    }));
  } else {
    if (!req.body.password_old) {
      return next(new _webError2.default(400, 'Parameter password_old is missing'));
    }

    user.comparePassword(req.body.password_old, (0, _okay2.default)(next, function (isMatch) {
      if (!isMatch) {
        return next(new _webError2.default(400, 'Password is not match with actual password'));
      }

      user.setPassword(req.body.password, (0, _okay2.default)(next, function () {
        res.status(204).end();
      }));
    }));
  }
}

function generateForgotToken(user, tokenSecret) {
  var expiresInMinutes = arguments.length <= 2 || arguments[2] === undefined ? 60 * 24 : arguments[2];

  if (!tokenSecret) {
    throw new Error('Token secret is undefined');
  }

  var data = {
    user: user._id
  };

  return _jsonwebtoken2.default.sign(data, tokenSecret, { expiresInMinutes: expiresInMinutes });
}

function forgot(req, res, next) {
  var User = req.models.User;
  var server = req.server;
  var options = server.options;
  var mail = server.mail;

  if (!req.body.username) {
    return next(new _webError2.default(400, 'Parameter username is missing'));
  }

  User.findByUsername(req.body.username, false, (0, _okay2.default)(next, function (user) {
    if (!user) {
      return next(new _webError2.default(404));
    }

    if (!user.hasEmail()) {
      return next(new _webError2.default(401, 'User has no email'));
    }

    // generate token
    var token = generateForgotToken(user, options.mail.token.secret, options.mail.token.expiration);

    // render mails
    var data = {
      user: user,
      from: options.mail.default.from,
      to: user.email,
      subject: 'Password Assistance',
      token: token
    };

    _async2.default.series({
      html: function html(callback) {
        res.render('mail/forgot', data, callback);
      },
      text: function text(callback) {
        res.render('mail/forgot_plain', data, callback);
      }
    }, (0, _okay2.default)(next, function (result) {
      var mailOptions = {
        from: options.mail.default.from,
        to: user.email,
        subject: 'Password Assistance',
        html: result.html,
        text: result.text
      };

      mail.sendMail(mailOptions, (0, _okay2.default)(next, function () {
        return res.status(204).end();
      }));
    }));
  }));
}