const vnModel = require('vn-loopback/common/models/vn-model'); const LoopBackContext = require('loopback-context'); const {Email} = require('vn-print'); module.exports = function(Self) { vnModel(Self); require('../methods/vn-user/sign-in')(Self); require('../methods/vn-user/acl')(Self); require('../methods/vn-user/recover-password')(Self); require('../methods/vn-user/validate-token')(Self); require('../methods/vn-user/privileges')(Self); require('../methods/vn-user/validate-auth')(Self); require('../methods/vn-user/renew-token')(Self); Self.definition.settings.acls = Self.definition.settings.acls.filter(acl => acl.property !== 'create'); // Validations Self.validatesFormatOf('email', { message: 'Invalid email', allowNull: true, allowBlank: false, with: /^[\w|.|-]+@[\w|-]+(\.[\w|-]+)*(,[\w|.|-]+@[\w|-]+(\.[\w|-]+)*)*$/ }); Self.validatesUniquenessOf('name', { message: `A client with that Web User name already exists` }); Self.remoteMethod('getCurrentUserData', { description: 'Gets the current user data', accepts: [ { arg: 'ctx', type: 'Object', http: {source: 'context'} } ], returns: { type: 'Object', root: true }, http: { verb: 'GET', path: '/getCurrentUserData' } }); Self.getCurrentUserData = async function(ctx) { let userId = ctx.req.accessToken.userId; return await Self.findById(userId, { fields: ['id', 'name', 'nickname'] }); }; /** * Checks if user has a role. * * @param {Integer} userId The user id * @param {String} name The role name * @param {Object} options Options * @return {Boolean} %true if user has the role, %false otherwise */ Self.hasRole = async function(userId, name, options) { const roles = await Self.getRoles(userId, options); return roles.some(role => role == name); }; /** * Get all user roles. * * @param {Integer} userId The user id * @param {Object} options Options * @return {Object} User role list */ Self.getRoles = async(userId, options) => { const result = await Self.rawSql( `SELECT r.name FROM account.user u JOIN account.roleRole rr ON rr.role = u.role JOIN account.role r ON r.id = rr.inheritsFrom WHERE u.id = ?`, [userId], options); const roles = []; for (const role of result) roles.push(role.name); return roles; }; Self.on('resetPasswordRequest', async function(info) { const loopBackContext = LoopBackContext.getCurrentContext(); const httpCtx = {req: loopBackContext.active}; const httpRequest = httpCtx.req.http.req; const headers = httpRequest.headers; const origin = headers.origin; const defaultHash = '/reset-password?access_token=$token$'; const recoverHashes = { hedera: 'verificationToken=$token$' }; const app = info.options?.app; let recoverHash = app ? recoverHashes[app] : defaultHash; recoverHash = recoverHash.replace('$token$', info.accessToken.id); const user = await Self.app.models.VnUser.findById(info.user.id); const params = { recipient: info.email, lang: user.lang, url: origin + '/#!' + recoverHash }; const options = Object.assign({}, info.options); for (const param in options) params[param] = options[param]; const email = new Email(options.emailTemplate, params); return email.send(); }); Self.validateLogin = async function(user, password) { let loginInfo = Object.assign({password}, Self.userUses(user)); token = await Self.login(loginInfo, 'user'); const userToken = await token.user.get(); try { await Self.app.models.Account.sync(userToken.name, password); } catch (err) { console.warn(err); } return {token: token.id, ttl: token.ttl}; }; Self.userUses = function(user) { return user.indexOf('@') !== -1 ? {email: user} : {username: user}; }; const _setPassword = Self.prototype.setPassword; Self.prototype.setPassword = async function(newPassword, options, cb) { if (cb === undefined && typeof options === 'function') { cb = options; options = undefined; } const myOptions = {}; let tx; if (typeof options == 'object') Object.assign(myOptions, options); if (!myOptions.transaction) { tx = await Self.beginTransaction({}); myOptions.transaction = tx; } options = myOptions; try { await Self.rawSql(`CALL account.user_checkPassword(?)`, [newPassword], options); await _setPassword.call(this, newPassword, options); await this.updateAttribute('passExpired', null, options); await Self.app.models.Account.sync(this.name, newPassword, null, options); tx && await tx.commit(); cb && cb(); } catch (err) { tx && await tx.rollback(); if (cb) cb(err); else throw err; } }; Self.sharedClass._methods.find(method => method.name == 'changePassword').ctor.settings.acls = Self.sharedClass._methods.find(method => method.name == 'changePassword').ctor.settings.acls .filter(acl => acl.property != 'changePassword'); // FIXME: https://redmine.verdnatura.es/issues/5761 // Self.afterRemote('prototype.patchAttributes', async(ctx, instance) => { // if (!ctx.args || !ctx.args.data.email) return; // const loopBackContext = LoopBackContext.getCurrentContext(); // const httpCtx = {req: loopBackContext.active}; // const httpRequest = httpCtx.req.http.req; // const headers = httpRequest.headers; // const origin = headers.origin; // const url = origin.split(':'); // class Mailer { // async send(verifyOptions, cb) { // const params = { // url: verifyOptions.verifyHref, // recipient: verifyOptions.to, // lang: ctx.req.getLocale() // }; // const email = new Email('email-verify', params); // email.send(); // cb(null, verifyOptions.to); // } // } // const options = { // type: 'email', // to: instance.email, // from: {}, // redirect: `${origin}/#!/account/${instance.id}/basic-data?emailConfirmed`, // template: false, // mailer: new Mailer, // host: url[1].split('/')[2], // port: url[2], // protocol: url[0], // user: Self // }; // await instance.verify(options); // }); };