RHeactorJS/server

import Promise from 'bluebird'
import {CreateUserCommand} from '../../command/user/create'
import {ValidationFailedError} from '@rheactorjs/errors'
import Joi from 'joi'
import _merge from 'lodash/merge'
import {Pagination} from '../../util/pagination'
import {sendPaginatedListResponse} from '../pagination'
import {URIValue, EmailValue} from '@rheactorjs/value-objects'
import verifySuperUser from '../verify-superuser'

/**
 * @param {express.app} app
 * @param {nconf} config
 * @param {BackendEmitter} emitter
 * @param {UserRepository} userRepo
 * @param tokenAuth
 * @param {JSONLD} jsonld
 * @param {function} sendHttpProblem
 * @param {function} transformer
 */
export default (app, config, emitter, userRepo, tokenAuth, jsonld, sendHttpProblem, transformer) => {
  /**
   * Returns the user account of the authenticated user
   */
  app.get('/api/user/:id', tokenAuth, (req, res) => Promise
    .try(() => {
      if (req.params.id !== req.user) {
        // Admins can fetch all users
        return verifySuperUser(req, userRepo)
      }
    })
    .then(() => userRepo.getById(req.params.id))
    .then(user => res.send(transformer(user)))
    .catch(sendHttpProblem.bind(null, res))
  )

  /**
   * Admins can create activated users, their password is set to 12345678
   */
  app.post('/api/user', tokenAuth, (req, res) => Promise
    .try(() => {
      const schema = Joi.object().keys({
        email: Joi.string().email().required(),
        firstname: Joi.string().trim().required(),
        lastname: Joi.string().trim().required()
      })
      let v = Joi.validate(req.body, schema)
      if (v.error) {
        throw new ValidationFailedError('Validation failed', req.body, v.error)
      }
      return verifySuperUser(req, userRepo)
        .then(() => {
          emitter.emit(new CreateUserCommand(new EmailValue(v.value.email), v.value.firstname, v.value.lastname, '$2a$04$9J9g5cfQKyf1bMCQZg7oGua.CjHe5lfOQs4jW5fwGN/Gm5zTxPqh2', true))
          res.status(202).send()
        })
    })
    .catch(sendHttpProblem.bind(null, res))
  )

  /**
   * Admins can list all users
   *
   * TODO: support search my (partial) name and email
   */
  app.post('/api/search/user', tokenAuth, (req, res) => Promise
    .try(() => {
      const schema = Joi.object().keys({
        offset: Joi.number().min(0),
        email: Joi.string().email()
      })
      const query = _merge(
        {},
        req.body,
        req.query
      )
      const v = Joi.validate(query, schema)
      if (v.error) {
        throw new ValidationFailedError('Validation failed', query, v.error)
      }
      return verifySuperUser(req, userRepo).then(() => query)
        .then(query => {
          const pagination = new Pagination(query.offset)
          if (query.email) {
            return userRepo.findByEmail(new EmailValue(query.email))
              .then(user => pagination.result(user ? [user] : [], user ? 1 : 0, query))
          }
          return userRepo.listAll(pagination)
        })
        .then(paginatedResult => sendPaginatedListResponse(new URIValue(config.get('api_host')), req, res, user => transformer(user), paginatedResult))
        .then(() => res.status(200).send())
    })
    .catch(sendHttpProblem.bind(null, res))
  )
}