kalisio/kdk

import {
  serialize, updateAbilities, populatePreviousObject, hashPassword, disallowRegistration, allowLocalAuthentication,
  discardAuthenticationProviders, enforcePasswordPolicy, storePreviousPassword, sendNewSubscriptionEmail
} from '../../hooks/index.js'
import commonHooks from 'feathers-hooks-common'
 
export default {
  before: {
    all: [],
    find: [],
    get: [],
    create: [
      commonHooks.when(disallowRegistration, commonHooks.disallow('external')),
      // Initialize a profile from base user information
      serialize([
        { source: 'name', target: 'profile.name', delete: true },
        { source: 'email', target: 'profile.description' }
      ], { throwOnNotFound: true }),
      commonHooks.when(allowLocalAuthentication,
        serialize([
          // Enforcing password policy requires both the clear and hashed password,
          // Keep track of clear password here since hashPassword() remove it
FIXME found
          // FIXME: for testing purpose we create users without a password for now
          // should it be fixed for safety ?
          { source: 'password', target: 'clearPassword' }
        ], { throwOnNotFound: false }),
        hashPassword('password'),
        enforcePasswordPolicy({ userAsItem: true }),
        // Now we have enforced password policy remove the clear password
        // (we only store hashed password for safety)
        commonHooks.discard('clearPassword')
      )
    ],
    // when changing password store previous one for password policy
    update: [
      commonHooks.when(hook => hook.data.password && hook.app.getPasswordPolicy,
        populatePreviousObject, storePreviousPassword({ userAsItem: true }))
    ],
    patch: [
      commonHooks.when(hook => hook.data.password && hook.app.getPasswordPolicy,
        populatePreviousObject, storePreviousPassword({ userAsItem: true }))
    ],
    remove: []
  },
 
  after: {
    all: [
      commonHooks.when(hook => hook.params.provider,
        commonHooks.discard('password'),
        commonHooks.discard('previousPasswords'),
        discardAuthenticationProviders)
      // Hide profile for external user as it may contain personal information
      // However, this causes an issue: https://github.com/feathersjs-ecosystem/feathers-reactive/issues/214
      // So let the application decide what to do
      // commonHooks.when(isNotMe, commonHooks.discard('profile'))
    ],
    find: [],
    get: [],
    create: [updateAbilities()],
    update: [],
    patch: [sendNewSubscriptionEmail],
    remove: []
  },
 
  error: {
    all: [],
    find: [],
    get: [],
    create: [],
    update: [],
    patch: [],
    remove: []
  }
}