summary refs log tree commit diff
path: root/src/api/routes/auth
diff options
context:
space:
mode:
Diffstat (limited to 'src/api/routes/auth')
-rw-r--r--src/api/routes/auth/accountRoutes.js14
-rw-r--r--src/api/routes/auth/adminAccountRoutes.js58
-rw-r--r--src/api/routes/auth/deviceRoutes.js99
-rw-r--r--src/api/routes/auth/index.js1
4 files changed, 105 insertions, 67 deletions
diff --git a/src/api/routes/auth/accountRoutes.js b/src/api/routes/auth/accountRoutes.js

index 34592ed..f0d0102 100644 --- a/src/api/routes/auth/accountRoutes.js +++ b/src/api/routes/auth/accountRoutes.js
@@ -3,6 +3,7 @@ import { AuthDto, RegisterDto } from '#dto/index.js'; import { RouteDescription, RouteMethod } from '#api/RouteDescription.js'; import { WhoAmIDto } from '#dto/auth/WhoAmIDto.js'; import { requireAuth } from '#api/middlewares/index.js'; +import { SafeNSoundError } from '#util/error.js'; /** * @type {RouteDescription} @@ -59,13 +60,17 @@ export const logoutRoute = { path: '/auth/logout', methods: { post: new RouteMethod({ - description: 'Log out from a device (TODO)', + description: 'Log out from a device', exampleHeaders: { Authorization: 'Bearer {{accessToken}}' }, + middlewares: [requireAuth], async method(req, res) { - const data = await AuthDto.create(req.body); - // const loginResult = await deleteDevice(data, ); + const deviceIndex = req.user.devices.findIndex( + device => device.id === req.device._id + ); + req.user.devices.splice(deviceIndex, 1); + await req.user.save(); res.status(204).send(); } }) @@ -102,6 +107,9 @@ export const whoAmI = { methods: { get: new RouteMethod({ description: 'Get current user', + exampleHeaders: { + Authorization: 'Bearer {{accessToken}}' + }, middlewares: [requireAuth], async method(req, res) { const data = await WhoAmIDto.create({ diff --git a/src/api/routes/auth/adminAccountRoutes.js b/src/api/routes/auth/adminAccountRoutes.js deleted file mode 100644
index b485002..0000000 --- a/src/api/routes/auth/adminAccountRoutes.js +++ /dev/null
@@ -1,58 +0,0 @@ -import { - DbUser, - deleteUser, - getUserById, - loginUser, - registerUser, - UserType -} from '#db/index.js'; -import { AuthDto, RegisterDto } from '#dto/index.js'; -import { requireAdmin, requireRole } from '#api/middlewares/index.js'; -import { RouteDescription, RouteMethod } from '#api/RouteDescription.js'; - -/** - * @type {RouteDescription} - */ -export const adminGetUsersRoute = { - path: '/admin/users', - methods: { - get: new RouteMethod({ - description: 'Get all users (raw)', - exampleHeaders: { - Authorization: 'Bearer {{accessToken}}' - }, - middlewares: [requireAdmin], - async method(req, res) { - res.send(DbUser.find({}).exec()); - } - }) - } -}; - -/** - * @type {RouteDescription} - */ -export const adminUserRoute = { - path: '/admin/user/:id', - methods: { - get: new RouteMethod({ - description: 'Get a user (raw)', - exampleHeaders: { - Authorization: 'Bearer {{accessToken}}' - }, - middlewares: [requireAdmin], - async method(req, res) { - const user = await getUserById(req.params.id); - res.send(user); - } - }), - delete: new RouteMethod({ - middlewares: [requireAdmin], - description: 'Delete a user', - async method(req, res) { - await deleteUser(data); - res.status(204).send(); - } - }) - } -}; diff --git a/src/api/routes/auth/deviceRoutes.js b/src/api/routes/auth/deviceRoutes.js
index 551252b..41802b8 100644 --- a/src/api/routes/auth/deviceRoutes.js +++ b/src/api/routes/auth/deviceRoutes.js
@@ -1,7 +1,11 @@ -import { registerUser } from '#db/index.js'; -import { RegisterDto } from '#dto/index.js'; import { requireAuth } from '#api/middlewares/index.js'; import { RouteMethod } from '#api/RouteDescription.js'; +import { SafeNSoundError } from '#util/error.js'; +import Joi from 'joi'; + +const deviceUpdateSchema = Joi.object({ + name: Joi.string().optional().max(100) +}); /** * @type {RouteDescription} @@ -10,12 +14,97 @@ export const getDevicesRoute = { path: '/auth/devices', methods: { get: new RouteMethod({ + exampleHeaders: { + Authorization: 'Bearer {{accessToken}}' + }, middlewares: [requireAuth], description: 'Get all devices registered to the user', async method(req, res) { - const data = await RegisterDto.create(req.body); - const registerResult = await registerUser(data); - res.send(registerResult); + res.send(req.user.devices); + } + }) + } +}; + +/** + * @type {RouteDescription} + */ +export const manageDeviceRoute = { + path: '/auth/devices/:id', + methods: { + get: new RouteMethod({ + exampleHeaders: { + Authorization: 'Bearer {{accessToken}}' + }, + middlewares: [requireAuth], + description: 'Get user device by ID', + async method(req, res) { + const device = req.user.devices.find( + device => device.id === req.params.id + ); + if (!device) { + res.status(404).send( + new SafeNSoundError({ + errCode: 'ENTITY_NOT_FOUND', + message: 'Device not found' + }) + ); + return; + } + res.send(device); + } + }), + delete: new RouteMethod({ + exampleHeaders: { + Authorization: 'Bearer {{accessToken}}' + }, + middlewares: [requireAuth], + description: 'Delete user device by ID', + async method(req, res) { + const deviceIndex = req.user.devices.findIndex( + device => device.id === req.params.id + ); + if (deviceIndex === -1) { + res.status(404).send( + new SafeNSoundError({ + errCode: 'ENTITY_NOT_FOUND', + message: 'Device not found' + }) + ); + return; + } + req.user.devices.splice(deviceIndex, 1); + await req.user.save(); + res.status(204).send(); + } + }), + patch: new RouteMethod({ + exampleHeaders: { + Authorization: 'Bearer {{accessToken}}' + }, + exampleBody: { + name: 'New Device Name' + }, + middlewares: [requireAuth], + description: 'Update user device by ID', + async method(req, res) { + const device = req.user.devices.find( + device => device.id === req.params.id + ); + if (!device) { + res.status(404).send( + new SafeNSoundError({ + errCode: 'ENTITY_NOT_FOUND', + message: 'Device not found' + }) + ); + return; + } + if (req.body.name) { + device.name = req.body.name; + } + await req.user.save(); + res.send(device); } }) } diff --git a/src/api/routes/auth/index.js b/src/api/routes/auth/index.js
index 2d2cc86..e687911 100644 --- a/src/api/routes/auth/index.js +++ b/src/api/routes/auth/index.js
@@ -1,3 +1,2 @@ export * from './accountRoutes.js'; export * from './deviceRoutes.js'; -export * from './adminAccountRoutes.js';