aboutsummaryrefslogtreecommitdiff
path: root/src/server/ApiManagers/UserManager.ts
blob: 53e55c1c36afc2b0a618e22551a8da704fd65fd0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
import ApiManager, { Registration } from './ApiManager';
import { Method } from '../RouteManager';
import { Database } from '../database';
import { msToTime } from '../ActionUtilities';
import * as bcrypt from 'bcrypt-nodejs';
import { Opt } from '../../fields/Doc';
import { WebSocket } from '../websocket';

export const timeMap: { [id: string]: number } = {};
interface ActivityUnit {
    user: string;
    duration: number;
}

export default class UserManager extends ApiManager {
    protected initialize(register: Registration): void {
        register({
            method: Method.GET,
            subscription: '/getUsers',
            secureHandler: async ({ res }) => {
                const cursor = await Database.Instance.query({}, { email: 1, linkDatabaseId: 1, sharingDocumentId: 1 }, 'users');
                const results = await cursor.toArray();
                res.send(results.map((user: any) => ({ email: user.email, linkDatabaseId: user.linkDatabaseId, sharingDocumentId: user.sharingDocumentId })));
            },
        });

        register({
            method: Method.POST,
            subscription: '/setCacheDocumentIds',
            secureHandler: async ({ user, req, res }) => {
                const result: any = {};
                user.cacheDocumentIds = req.body.cacheDocumentIds;
                user.save(err => {
                    if (err) {
                        result.error = [{ msg: 'Error while caching documents' }];
                    }
                });

                // Database.Instance.update(id, { "$set": { "fields.cacheDocumentIds": cacheDocumentIds } }, e => {
                //     console.log(e);
                // });
                res.send(result);
            },
        });

        register({
            method: Method.GET,
            subscription: '/getUserDocumentIds',
            secureHandler: ({ res, user }) => res.send({ userDocumentId: user.userDocumentId, linkDatabaseId: user.linkDatabaseId, sharingDocumentId: user.sharingDocumentId }),
            publicHandler: ({ res }) => res.send({ userDocumentId: '__guest__', linkDatabaseId: 3, sharingDocumentId: 2 }),
        });

        register({
            method: Method.GET,
            subscription: '/getSharingDocumentId',
            secureHandler: ({ res, user }) => res.send(user.sharingDocumentId),
            publicHandler: ({ res }) => res.send(2),
        });

        register({
            method: Method.GET,
            subscription: '/getLinkDatabaseId',
            secureHandler: ({ res, user }) => res.send(user.linkDatabaseId),
            publicHandler: ({ res }) => res.send(3),
        });

        register({
            method: Method.GET,
            subscription: '/getCurrentUser',
            secureHandler: ({ res, user: { _id, email, cacheDocumentIds } }) => res.send(JSON.stringify({ id: _id, email, cacheDocumentIds })),
            publicHandler: ({ res }) => res.send(JSON.stringify({ id: '__guest__', email: 'guest' })),
        });

        register({
            method: Method.POST,
            subscription: '/internalResetPassword',
            secureHandler: async ({ user, req, res }) => {
                const result: any = {};
                const { curr_pass, new_pass, new_confirm } = req.body;
                // perhaps should assert whether curr password is entered correctly
                const validated = await new Promise<Opt<boolean>>(resolve => {
                    bcrypt.compare(curr_pass, user.password, (err, passwords_match) => {
                        if (err || !passwords_match) {
                            result.error = [{ msg: 'Incorrect current password' }];
                            res.send(result);
                            resolve(undefined);
                        } else {
                            resolve(passwords_match);
                        }
                    });
                });

                if (validated === undefined) {
                    return;
                }

                req.assert('new_pass', 'Password must be at least 4 characters long').len({ min: 4 });
                req.assert('new_confirm', 'Passwords do not match').equals(new_pass);
                if (curr_pass === new_pass) {
                    result.error = [{ msg: 'Current and new password are the same' }];
                }
                // was there error in validating new passwords?
                if (req.validationErrors()) {
                    // was there error?
                    result.error = req.validationErrors();
                }

                // will only change password if there are no errors.
                if (!result.error) {
                    user.password = new_pass;
                    user.passwordResetToken = undefined;
                    user.passwordResetExpires = undefined;
                }

                user.save(err => {
                    if (err) {
                        result.error = [{ msg: 'Error while saving new password' }];
                    }
                });

                res.send(result);
            },
        });

        register({
            method: Method.GET,
            subscription: '/activity',
            secureHandler: ({ res }) => {
                const now = Date.now();

                const activeTimes: ActivityUnit[] = [];
                const inactiveTimes: ActivityUnit[] = [];

                for (const user in timeMap) {
                    const time = timeMap[user];
                    const socketPair = Array.from(WebSocket.socketMap).find(pair => pair[1] === user);
                    if (socketPair && !socketPair[0].disconnected) {
                        const duration = now - time;
                        const target = duration / 1000 < 60 * 5 ? activeTimes : inactiveTimes;
                        target.push({ user, duration });
                    }
                }

                const process = (target: { user: string; duration: number }[]) => {
                    const comparator = (first: ActivityUnit, second: ActivityUnit) => first.duration - second.duration;
                    const sorted = target.sort(comparator);
                    return sorted.map(({ user, duration }) => `${user} (${msToTime(duration)})`);
                };

                res.render('user_activity.pug', {
                    title: 'User Activity',
                    active: process(activeTimes),
                    inactive: process(inactiveTimes),
                });
            },
        });
    }
}