+ No worries, we'll send you reset instructions. +
++ We have sent a password reset link to {email} +
+ + Back to Login + +Please enter your access details.
++ Unfortunately, the page you requested does not exist or has been removed. +
+ + Back to main + +Are you sure you want to log out?
+Create an account to get started
++ You can now log in with your new password. + Redirecting to login page... +
+ + Go to Login + ++ Your new password must be different to previously used passwords. +
+Hello! Your email address on [Name] has been successfully changed. Wasn't that you? If you didn't change your address, your account may have been hacked. Please follow this link immediately to undo the changes and protect your profile: ${href}
+ `; + + return send({ + email, + subject: 'Security Alert: Your email has been changed.', + html, + }); +} + +export const emailService = { + sendActivationEmail, + send, + sendResetEmail, + sendSecurityEmail, +}; diff --git a/server/src/services/jwt.service.js b/server/src/services/jwt.service.js new file mode 100644 index 00000000..a8af7710 --- /dev/null +++ b/server/src/services/jwt.service.js @@ -0,0 +1,40 @@ +import jwt from 'jsonwebtoken'; + +function signAccessToken(user) { + const token = jwt.sign(user, process.env.JWT_KEY, { + expiresIn: '900s', + }); + + return token; +} + +function verifyAccessToken(token) { + try { + return jwt.verify(token, process.env.JWT_KEY); + } catch (e) { + return null; + } +} + +function signRefreshToken(user) { + const token = jwt.sign(user, process.env.JWT_REFRESH_KEY, { + expiresIn: '30d', + }); + + return token; +} + +function verifyRefreshToken(token) { + try { + return jwt.verify(token, process.env.JWT_REFRESH_KEY); + } catch (error) { + return null; + } +} + +export const jwtService = { + signAccessToken, + verifyAccessToken, + signRefreshToken, + verifyRefreshToken, +}; diff --git a/server/src/services/token.service.js b/server/src/services/token.service.js new file mode 100644 index 00000000..e080e224 --- /dev/null +++ b/server/src/services/token.service.js @@ -0,0 +1,29 @@ +import { Token } from '../models/token.js'; + +async function save(userId, newToken) { + const token = await Token.findOne({ where: { userId } }); + + if (!token) { + await Token.create({ userId, refreshToken: newToken }); + + return; + } + + token.refreshToken = newToken; + + await token.save(); +} + +function getByToken(refreshToken) { + return Token.findOne({ where: { refreshToken } }); +} + +function remove(userId) { + return Token.update({ refreshToken: null }, { where: { userId } }); +} + +export const tokenService = { + save, + getByToken, + remove, +}; diff --git a/server/src/services/user.service.js b/server/src/services/user.service.js new file mode 100644 index 00000000..059a639f --- /dev/null +++ b/server/src/services/user.service.js @@ -0,0 +1,107 @@ +import { Op } from 'sequelize'; +import { ApiError } from '../exceptions/api.error.js'; +import { Token } from '../models/token.js'; +import { User } from '../models/user.js'; +import { emailService } from './email.service.js'; +import { v4 as uuidv4 } from 'uuid'; + +function normalize({ id, name, email }) { + return { + id, + name, + email, + }; +} + +function findById(userId) { + return User.findOne({ where: { id: userId } }); +} + +function findByEmail(email) { + return User.findOne({ where: { email } }); +} + +function getAll() { + return User.findAll(); +} + +async function register(name, email, password) { + const activationToken = uuidv4(); + + const existUser = await findByEmail(email); + + if (existUser) { + throw ApiError.badRequest('User already exist'); + } + + await User.create({ name, email, password, activationToken }); + await emailService.sendActivationEmail(email, activationToken); +} + +async function changeName(email, newName) { + const [_, updatedUser] = await User.update( + { name: newName }, + { where: { email }, returning: true, plain: true }, + ); + + return updatedUser; +} + +async function changePassword(email, newPassword) { + await User.update({ password: newPassword }, { where: { email } }); +} + +async function changeEmail(userId, newEmail, token) { + const [_, updatedUser] = await User.update( + { email: newEmail, activationToken: token }, + { where: { id: userId }, returning: true, plain: true }, + ); + + return updatedUser; +} + +async function forgotPassword(user, email) { + const resetToken = uuidv4(); + + const existingToken = await Token.findOne({ + where: { + userId: user.id, + }, + }); + + if (existingToken) { + existingToken.resetToken = resetToken; + await existingToken.save(); + } else { + await user.createToken({ + resetToken, + }); + } + + await emailService.sendResetEmail(email, resetToken); +} + +async function securityEmail( + userId, + securityToken, + oldEmail, + securityExpiresAt, +) { + await Token.update( + { securityToken, oldEmail, securityExpiresAt }, + { where: { userId } }, + ); +} + +export const userService = { + normalize, + findById, + findByEmail, + register, + getAll, + changeName, + changePassword, + changeEmail, + forgotPassword, + securityEmail, +}; diff --git a/server/src/utils/catchError.js b/server/src/utils/catchError.js new file mode 100644 index 00000000..0e1e7d8f --- /dev/null +++ b/server/src/utils/catchError.js @@ -0,0 +1,9 @@ +export const catchError = (action) => { + return async function (req, res, next) { + try { + await action(req, res, next); + } catch (error) { + next(error); + } + }; +}; diff --git a/server/src/utils/db.js b/server/src/utils/db.js new file mode 100644 index 00000000..1be0c452 --- /dev/null +++ b/server/src/utils/db.js @@ -0,0 +1,9 @@ +import { Sequelize } from 'sequelize'; + +export const client = new Sequelize({ + host: process.env.DB_HOST, + username: process.env.DB_USER, + password: process.env.DB_PASSWORD, + database: process.env.DB_DATABASE, + dialect: 'postgres', +}); diff --git a/server/src/utils/validation.js b/server/src/utils/validation.js new file mode 100644 index 00000000..e701ce65 --- /dev/null +++ b/server/src/utils/validation.js @@ -0,0 +1,33 @@ +export function validateEmail(value) { + if (!value) { + return 'Email is required'; + } + + const emailPattern = /^[\w.+-]+@([\w-]+\.){1,3}[\w-]{2,}$/; + + if (!emailPattern.test(value)) { + return 'Email is not valid'; + } +} + +export function validatePassword(value) { + const result = []; + + if (!value || value.length < 8) { + result.push('At least 8 characters'); + } + + if (!/[A-Z]/.test(value)) { + result.push('Capital letter'); + } + + if (!/[0-9]/.test(value)) { + result.push('There must be at least one digit'); + } + + if (!/[!@#$%^&*]/.test(value)) { + result.push('There must be one special character'); + } + + return result.join('. '); +} diff --git a/src/index.js b/src/index.js deleted file mode 100644 index ad9a93a7..00000000 --- a/src/index.js +++ /dev/null @@ -1 +0,0 @@ -'use strict';