server/controllers/api/users.js

   1 'use strict'
   2
   3 const each = require('async/each')
   4 const express = require('express')
   5 const waterfall = require('async/waterfall')
   6
   7 const constants = require('../../initializers/constants')
   8 const db = require('../../initializers/database')
   9 const friends = require('../../lib/friends')
  10 const logger = require('../../helpers/logger')
  11 const middlewares = require('../../middlewares')
  12 const admin = middlewares.admin
  13 const oAuth = middlewares.oauth
  14 const pagination = middlewares.pagination
  15 const sort = middlewares.sort
  16 const validatorsPagination = middlewares.validators.pagination
  17 const validatorsSort = middlewares.validators.sort
  18 const validatorsUsers = middlewares.validators.users
  19
  20 const router = express.Router()
  21
  22 router.get('/me', oAuth.authenticate, getUserInformation)
  23
  24 router.get('/',
  25   validatorsPagination.pagination,
  26   validatorsSort.usersSort,
  27   sort.setUsersSort,
  28   pagination.setPagination,
  29   listUsers
  30 )
  31
  32 router.post('/',
  33   oAuth.authenticate,
  34   admin.ensureIsAdmin,
  35   validatorsUsers.usersAdd,
  36   createUser
  37 )
  38
  39 router.put('/:id',
  40   oAuth.authenticate,
  41   validatorsUsers.usersUpdate,
  42   updateUser
  43 )
  44
  45 router.delete('/:id',
  46   oAuth.authenticate,
  47   admin.ensureIsAdmin,
  48   validatorsUsers.usersRemove,
  49   removeUser
  50 )
  51
  52 router.post('/token', oAuth.token, success)
  53 // TODO: Once https://github.com/oauthjs/node-oauth2-server/pull/289 is merged, implement revoke token route
  54
  55 // ---------------------------------------------------------------------------
  56
  57 module.exports = router
  58
  59 // ---------------------------------------------------------------------------
  60
  61 function createUser (req, res, next) {
  62   const user = db.User.build({
  63     username: req.body.username,
  64     password: req.body.password,
  65     role: constants.USER_ROLES.USER
  66   })
  67
  68   user.save().asCallback(function (err, createdUser) {
  69     if (err) return next(err)
  70
  71     return res.type('json').status(204).end()
  72   })
  73 }
  74
  75 function getUserInformation (req, res, next) {
  76   db.User.loadByUsername(res.locals.oauth.token.user.username, function (err, user) {
  77     if (err) return next(err)
  78
  79     return res.json(user.toFormatedJSON())
  80   })
  81 }
  82
  83 function listUsers (req, res, next) {
  84   db.User.listForApi(req.query.start, req.query.count, req.query.sort, function (err, usersList, usersTotal) {
  85     if (err) return next(err)
  86
  87     res.json(getFormatedUsers(usersList, usersTotal))
  88   })
  89 }
  90
  91 function removeUser (req, res, next) {
  92   waterfall([
  93     function getUser (callback) {
  94       db.User.loadById(req.params.id, callback)
  95     },
  96
  97     // TODO: use foreignkey?
  98     function getVideos (user, callback) {
  99       db.Video.listOwnedByAuthor(user.username, function (err, videos) {
 100         return callback(err, user, videos)
 101       })
 102     },
 103
 104     function removeVideosFromDB (user, videos, callback) {
 105       each(videos, function (video, callbackEach) {
 106         video.destroy().asCallback(callbackEach)
 107       }, function (err) {
 108         return callback(err, user, videos)
 109       })
 110     },
 111
 112     function sendInformationToFriends (user, videos, callback) {
 113       videos.forEach(function (video) {
 114         const params = {
 115           name: video.name,
 116           remoteId: video.id
 117         }
 118
 119         friends.removeVideoToFriends(params)
 120       })
 121
 122       return callback(null, user)
 123     },
 124
 125     function removeUserFromDB (user, callback) {
 126       user.destroy().asCallback(callback)
 127     }
 128   ], function andFinally (err) {
 129     if (err) {
 130       logger.error('Errors when removed the user.', { error: err })
 131       return next(err)
 132     }
 133
 134     return res.sendStatus(204)
 135   })
 136 }
 137
 138 function updateUser (req, res, next) {
 139   db.User.loadByUsername(res.locals.oauth.token.user.username, function (err, user) {
 140     if (err) return next(err)
 141
 142     user.password = req.body.password
 143     user.save().asCallback(function (err) {
 144       if (err) return next(err)
 145
 146       return res.sendStatus(204)
 147     })
 148   })
 149 }
 150
 151 function success (req, res, next) {
 152   res.end()
 153 }
 154
 155 // ---------------------------------------------------------------------------
 156
 157 function getFormatedUsers (users, usersTotal) {
 158   const formatedUsers = []
 159
 160   users.forEach(function (user) {
 161     formatedUsers.push(user.toFormatedJSON())
 162   })
 163
 164   return {
 165     total: usersTotal,
 166     data: formatedUsers
 167   }
 168 }