v3: misc fixes

website/server/controllers/top-level/email.js

@@ -0,0 +1,54 @@
+import { model as User } from '../../models/user';
+import { model as EmailUnsubscription } from '../../models/emailUnsubscription';
+import { decrypt } from '../../libs/api-v3/encryption';
+import {
+  NotFound,
+} from '../../libs/api-v3/errors';
+
+let api = {};
+
+/**
+ * @api {get} /api/v3/email/unsubscribe Unsubscribe an email or user from email notifications
+ * @apiDescription Does not require authentication
+ * @apiVersion 3.0.0
+ * @apiName UnsubscribeEmail
+ * @apiGroup Unsubscribe
+ * @apiDescription This is a GET method so that you can put the unsubscribe link in emails.
+ *
+ * @apiParam {String} code Query parameter - An unsubscription code
+ *
+ * @apiSuccess {String} An html success message
+ */
+api.unsubscribe = {
+  method: 'GET',
+  url: '/email/unsubscribe',
+  async handler (req, res) {
+    req.checkQuery({
+      code: {
+        notEmpty: {errorMessage: res.t('missingUnsubscriptionCode')},
+      },
+    });
+    let validationErrors = req.validationErrors();
+    if (validationErrors) throw validationErrors;
+
+    let data = JSON.parse(decrypt(req.query.code));
+
+    if (data._id) {
+      let userUpdated = await User.update(
+        {_id: data._id},
+        { $set: {'preferences.emailNotifications.unsubscribeFromAll': true}}
+      );
+
+      if (userUpdated.nModified !== 1) throw new NotFound(res.t('userNotFound'));
+
+      res.send(`<h1>${res.t('unsubscribedSuccessfully')}</h1> ${res.t('unsubscribedTextUsers')}`);
+    } else {
+      let unsubscribedEmail = await EmailUnsubscription.findOne({email: data.email.toLowerCase()});
+      let okResponse = `<h1>${res.t('unsubscribedSuccessfully')}</h1> ${res.t('unsubscribedTextOthers')}`;
+      if (!unsubscribedEmail) await EmailUnsubscription.create({email: data.email.toLowerCase()});
+      res.send(okResponse);
+    }
+  },
+};
+
+module.exports = api;