1 import * as express from 'express'
2 import { waterfall } from 'async'
4 import { database as db } from '../../initializers/database'
5 import { CONFIG, USER_ROLES } from '../../initializers'
6 import { logger, getFormatedObjects } from '../../helpers'
13 usersVideoRatingValidator,
19 } from '../../middlewares'
21 const usersRouter = express.Router()
23 usersRouter.get('/me',
28 usersRouter.get('/me/videos/:videoId/rating',
30 usersVideoRatingValidator,
49 usersRouter.post('/register',
50 ensureRegistrationEnabled,
55 usersRouter.put('/:id',
61 usersRouter.delete('/:id',
68 usersRouter.post('/token', token, success)
69 // TODO: Once https://github.com/oauthjs/node-oauth2-server/pull/289 is merged, implement revoke token route
71 // ---------------------------------------------------------------------------
77 // ---------------------------------------------------------------------------
79 function ensureRegistrationEnabled (req: express.Request, res: express.Response, next: express.NextFunction) {
80 const registrationEnabled = CONFIG.SIGNUP.ENABLED
82 if (registrationEnabled === true) {
86 return res.status(400).send('User registration is not enabled.')
89 function createUser (req: express.Request, res: express.Response, next: express.NextFunction) {
90 const user = db.User.build({
91 username: req.body.username,
92 password: req.body.password,
93 email: req.body.email,
98 user.save().asCallback(function (err) {
99 if (err) return next(err)
101 return res.type('json').status(204).end()
105 function getUserInformation (req: express.Request, res: express.Response, next: express.NextFunction) {
106 db.User.loadByUsername(res.locals.oauth.token.user.username, function (err, user) {
107 if (err) return next(err)
109 return res.json(user.toFormatedJSON())
113 function getUserVideoRating (req: express.Request, res: express.Response, next: express.NextFunction) {
114 const videoId = '' + req.params.videoId
115 const userId = +res.locals.oauth.token.User.id
117 db.UserVideoRate.load(userId, videoId, null, function (err, ratingObj) {
118 if (err) return next(err)
120 const rating = ratingObj ? ratingObj.type : 'none'
129 function listUsers (req: express.Request, res: express.Response, next: express.NextFunction) {
130 db.User.listForApi(req.query.start, req.query.count, req.query.sort, function (err, usersList, usersTotal) {
131 if (err) return next(err)
133 res.json(getFormatedObjects(usersList, usersTotal))
137 function removeUser (req: express.Request, res: express.Response, next: express.NextFunction) {
139 function loadUser (callback) {
140 db.User.loadById(req.params.id, callback)
143 function deleteUser (user, callback) {
144 user.destroy().asCallback(callback)
146 ], function andFinally (err) {
148 logger.error('Errors when removed the user.', { error: err })
152 return res.sendStatus(204)
156 function updateUser (req: express.Request, res: express.Response, next: express.NextFunction) {
157 db.User.loadByUsername(res.locals.oauth.token.user.username, function (err, user) {
158 if (err) return next(err)
160 if (req.body.password) user.password = req.body.password
161 if (req.body.displayNSFW !== undefined) user.displayNSFW = req.body.displayNSFW
163 user.save().asCallback(function (err) {
164 if (err) return next(err)
166 return res.sendStatus(204)
171 function success (req: express.Request, res: express.Response, next: express.NextFunction) {