RHeactorJS/server

import Promise from 'bluebird'
import ActivateUserCommand from '../../command/user/activate'
import {isAccountActivationToken} from '../../util/tokens'
import {AccessDeniedError} from '@rheactorjs/errors'
import {checkVersionImmutable} from '../check-version'

/**
 * Manages reset-password requests.
 *
 * If a user is not found, the response is delayed for 1000ms
 *
 * @param {express.app} app
 * @param {nconf} config
 * @param {BackendEmitter} emitter
 * @param {UserRepository} userRepository
 * @param {express.Middleware} tokenAuth
 * @param {function} sendHttpProblem
 */
export default function (app, config, emitter, userRepository, tokenAuth, sendHttpProblem) {
  app.post('/api/activate-account', tokenAuth, function (req, res) {
    Promise
      .try(() => {
        if (!isAccountActivationToken(req.authInfo)) {
          throw new AccessDeniedError(req.url, 'Not an account activation token')
        }
        return userRepository.getById(req.user)
          .then((user) => {
            checkVersionImmutable(req.authInfo.payload['meta'].version, user)
            return emitter.emit(new ActivateUserCommand(user, user))
          })
      })
      .then(() => {
        return res
          .status(204)
          .send()
      })
      .catch(sendHttpProblem.bind(null, res))
  })
}