mirror of
https://github.com/HabitRPG/habitica.git
synced 2025-12-16 22:27:26 +01:00
87 lines
2.5 KiB
JavaScript
87 lines
2.5 KiB
JavaScript
import {
|
|
authWithHeaders,
|
|
} from '../../middlewares/auth';
|
|
import * as authLib from '../../libs/auth';
|
|
import { model as User } from '../../models/user';
|
|
import { verifyUsername } from '../../libs/user/validation';
|
|
|
|
const api = {};
|
|
|
|
api.verifyUsername = {
|
|
method: 'POST',
|
|
url: '/user/auth/verify-username',
|
|
middlewares: [authWithHeaders({
|
|
optional: true,
|
|
})],
|
|
async handler (req, res) {
|
|
req.checkBody({
|
|
username: {
|
|
notEmpty: { errorMessage: res.t('missingUsername') },
|
|
},
|
|
});
|
|
|
|
const validationErrors = req.validationErrors();
|
|
if (validationErrors) throw validationErrors;
|
|
|
|
const { user } = res.locals;
|
|
const chosenUsername = req.body.username;
|
|
|
|
const issues = verifyUsername(chosenUsername, res);
|
|
|
|
if (issues.length < 1) {
|
|
const existingUser = await User.findOne({
|
|
'auth.local.lowerCaseUsername': chosenUsername.toLowerCase(),
|
|
}, { auth: 1 }).exec();
|
|
|
|
if (existingUser) {
|
|
if (!user || existingUser._id !== user._id) issues.push(res.t('usernameTaken'));
|
|
}
|
|
}
|
|
|
|
if (issues.length > 0) {
|
|
res.respond(200, { isUsable: false, issues });
|
|
} else {
|
|
res.respond(200, { isUsable: true });
|
|
}
|
|
},
|
|
};
|
|
|
|
/*
|
|
* NOTE most user routes are still in the v3 controller
|
|
* here there are only routes that had to be split from the v3 version because of
|
|
* some breaking change (for example because their returned the entire user object).
|
|
*/
|
|
|
|
/* NOTE this route has also an API v3 version */
|
|
|
|
/**
|
|
* @apiIgnore
|
|
* @api {post} /api/v4/user/auth/local/register Register
|
|
* @apiDescription Register a new user with email, login name, and password
|
|
* or attach local auth to a social user
|
|
* @apiName UserRegisterLocal
|
|
* @apiGroup User
|
|
*
|
|
* @apiParam (Body) {String} username Login name of the new user.
|
|
* Must be 1-36 characters, containing only
|
|
* a-z, 0-9, hyphens (-), or underscores (_).
|
|
* @apiParam (Body) {String} email Email address of the new user
|
|
* @apiParam (Body) {String} password Password for the new user
|
|
* @apiParam (Body) {String} confirmPassword Password confirmation
|
|
*
|
|
* @apiSuccess {Object} data The user object, if local auth was just
|
|
* attached to a social user then only user.auth.local
|
|
*/
|
|
api.registerLocal = {
|
|
method: 'POST',
|
|
middlewares: [authWithHeaders({
|
|
optional: true,
|
|
})],
|
|
url: '/user/auth/local/register',
|
|
async handler (req, res) {
|
|
await authLib.registerLocal(req, res, { isV3: false });
|
|
},
|
|
};
|
|
|
|
export default api;
|