This repository has been archived on 2024-08-20. You can view files and clone it, but cannot push or open issues or pull requests.
Biblio/api/controllers/userController.js

86 lines
2.2 KiB
JavaScript

'use strict';
const mongoose = require('mongoose'),
User = mongoose.model('User'),
bcrypt = require('bcrypt');
const saltRounds = 10; // TODO make this configurable.
exports.list_all = function(req, res) {
User.find({}, function(err, users) {
if (err) res.status(400).send(err);
else res.json(users);
});
};
exports.create = function(req, res) {
User.findOne({
"username": req.body.username
}, function(err, user) {
if (err) res.status(400).send(err);
else if (user) res.status(400).send("User with that username already exists.");
else { // user doesn't exist, allow creation of new one
const user = new User(req.body);
bcrypt.hash(user.password, saltRounds, function(err, hash) {
if (err) res.status(500).send(err);
else {
user.password = hash;
user.save(function(err, user) {
if (err) res.status(400).send(err);
else res.json(user);
});
}
});
}
});
};
exports.get = function(req, res) {
User.findById(req.params.userId, function(error, user) {
if (error) res.status(400).send(error);
else res.json(user);
});
};
exports.update = function(req, res) {
function updateUser(newUser) {
User.findOneAndUpdate({
_id: req.params.userId
}, req.body, {
new: true,
useFindAndModify: false
}, function(error, user) {
if (error) res.status(400).send(error);
res.json(user);
});
}
if (req.body.password) {
req.body.password = bcrypt.hash(req.body.password, saltRounds).then(hash => {
req.body.password = hash;
updateUser(req.body);
});
} else {
updateUser(req.body);
}
};
exports.delete = function(req, res) {
User.findById(req.params.userId, function(error, user) {
if (error) {
res.status(400).send(error);
} else if (user.loaning.length > 0) {
res.status(403).json({
message: 'User ' + user.username + ' must return books before deletion.'
})
} else {
User.deleteOne({
_id: req.params.userId
}, function(error) {
if (error) res.status(400).send(error);
else res.json({
message: 'User deleted.'
});
});
}
});
};