talk/routes/api/users/index.js

const express = require('express');
const router = express.Router();
const UsersService = require('../../../services/users');
const SettingsService = require('../../../services/settings');
const CommentsService = require('../../../services/comments');
const mailer = require('../../../services/mailer');
const authorization = require('../../../middleware/authorization');

router.get('/', authorization.needed('ADMIN'), (req, res, next) => {
  const {
    value = '',
    field = 'created_at',
    page = 1,
    asc = 'false',
    limit = 50 // Total Per Page
  } = req.query;

  Promise.all([
    UsersService
      .search(value)
      .sort({[field]: (asc === 'true') ? 1 : -1})
      .skip((page - 1) * limit)
      .limit(limit),
    UsersService.count()
  ])
  .then(([result, count]) => {
    res.json({
      result,
      limit: Number(limit),
      count,
      page: Number(page),
      totalPages: Math.ceil(count / (limit === 0 ? 1 : limit))
    });
  })
  .catch(next);
});

router.post('/:user_id/role', authorization.needed('ADMIN'), (req, res, next) => {
  UsersService
    .addRoleToUser(req.params.user_id, req.body.role)
    .then(() => {
      res.status(204).end();
    })
    .catch(next);
});

router.post('/:user_id/status', authorization.needed('ADMIN'), (req, res, next) => {
  UsersService
    .setStatus(req.params.user_id, req.body.status)
    .then((status) => {
      res.status(201).json(status);

      if (status === 'BANNED' && req.body.comment_id) {
        return CommentsService.pushStatus(req.body.comment_id, 'rejected', req.params.user_id);
      }
    })
    .catch(next);
});

// /**
//  * SendEmailConfirmation sends a confirmation email to the user.
//  * @param {Request} req  express request object
//  * @param {String} email user email address
//  */

/**
 * SendEmailConfirmation sends a confirmation email to the user.
 * @param {ExpressApp} app     the instance of the express app
 * @param {String}     userID  the id for the user to send the email to
 * @param {String}     email   the email for the user to send the email to
 */
const SendEmailConfirmation = (app, userID, email) => UsersService
  .createEmailConfirmToken(userID, email)
  .then((token) => {
    return mailer.sendSimple({
      app,                                 // needed to render the templates.
      template: 'email/email-confirm',              // needed to know which template to render!
      locals: {                                     // specifies the template locals.
        token,
        rootURL: process.env.TALK_ROOT_URL,
        email
      },
      subject: 'Email Confirmation',
      to: email
    });
  });

router.post('/', (req, res, next) => {
  const {
    email,
    password,
    displayName
  } = req.body;

  UsersService
    .createLocalUser(email, password, displayName)
    .then((user) => {

      // Get the settings from the database to find out if we need to send an
      // email confirmation. The Front end will know about the
      // requireEmailConfirmation as it's included in the settings get endpoint.
      return SettingsService.retrieve().then(({requireEmailConfirmation = false}) => {

        if (requireEmailConfirmation) {

          SendEmailConfirmation(req.app, user.id, email)
            .then(() => {

              // Then send back the user.
              res.status(201).json(user);
            });
        } else {

          // We don't need to confirm the email, let's just send back the user!
          res.status(201).json(user);
        }
      });
    })
    .catch(err => {
      next(err);
    });
});

router.post('/:user_id/actions', authorization.needed(), (req, res, next) => {

  const {
    action_type,
    metadata
  } = req.body;

  UsersService
    .addAction(req.params.user_id, req.user.id, action_type, metadata)
    .then((action) => {
      res.status(201).json(action);
    })
    .catch((err) => {
      next(err);
    });
});

router.post('/:user_id/email/confirm', authorization.needed('ADMIN'), (req, res, next) => {
  const {
    user_id
  } = req.params;

  UsersService
    .findById(user_id)
    .then((user) => {
      if (!user) {
        res.status(404).end();
        return;
      }

      // Find the first local profile.
      let localProfile = user.profiles.find((profile) => profile.provider === 'local');

      // If there was no local profile for the user, error out.
      if (!localProfile) {
        res.status(404).end();
        return;
      }

      // Send the email to the first local profile that was found.
      return SendEmailConfirmation(req.app, user.id, localProfile.id)
        .then(() => {
          res.status(204).end();
        });
    })
    .catch((err) => {
      next(err);
    });
});

module.exports = router;