me.js 8.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263
  1. module.exports = function(crowi, app) {
  2. 'use strict';
  3. var debug = require('debug')('crowi:routes:me')
  4. , fs = require('fs')
  5. , models = crowi.models
  6. , config = crowi.getConfig()
  7. , Page = models.Page
  8. , User = models.User
  9. , Revision = models.Revision
  10. //, pluginService = require('../service/plugin')
  11. , actions = {}
  12. , api = {}
  13. ;
  14. actions.api = api;
  15. api.uploadPicture = function (req, res) {
  16. var fileUploader = require('../util/fileUploader')(crowi, app);
  17. //var storagePlugin = new pluginService('storage');
  18. //var storage = require('../service/storage').StorageService(config);
  19. var tmpFile = req.file || null;
  20. if (!tmpFile) {
  21. return res.json({
  22. 'status': false,
  23. 'message': 'File type error.'
  24. });
  25. }
  26. var tmpPath = tmpFile.path;
  27. var filePath = User.createUserPictureFilePath(req.user, tmpFile.filename + tmpFile.originalname);
  28. var acceptableFileType = /image\/.+/;
  29. if (!tmpFile.mimetype.match(acceptableFileType)) {
  30. return res.json({
  31. 'status': false,
  32. 'message': 'File type error. Only image files is allowed to set as user picture.',
  33. });
  34. }
  35. //debug('tmpFile Is', tmpFile, tmpFile.constructor, tmpFile.prototype);
  36. //var imageUrl = storage.writeSync(storage.tofs(tmpFile), filePath, {mime: tmpFile.mimetype});
  37. //return return res.json({
  38. // 'status': true,
  39. // 'url': imageUrl,
  40. // 'message': '',
  41. //});
  42. var tmpFileStream = fs.createReadStream(tmpPath, {flags: 'r', encoding: null, fd: null, mode: '0666', autoClose: true });
  43. fileUploader.uploadFile(filePath, tmpFile.mimetype, tmpFileStream, {})
  44. .then(function(data) {
  45. var imageUrl = fileUploader.generateUrl(filePath);
  46. req.user.updateImage(imageUrl, function(err, data) {
  47. fs.unlink(tmpPath, function (err) {
  48. // エラー自体は無視
  49. if (err) {
  50. debug('Error while deleting tmp file.', err);
  51. }
  52. return res.json({
  53. 'status': true,
  54. 'url': imageUrl,
  55. 'message': '',
  56. });
  57. });
  58. });
  59. }).catch(function (err) {
  60. debug('Uploading error', err);
  61. return res.json({
  62. 'status': false,
  63. 'message': 'Error while uploading to ',
  64. });
  65. });
  66. };
  67. actions.index = function(req, res) {
  68. var userForm = req.body.userForm;
  69. var userData = req.user;
  70. if (req.method == 'POST' && req.form.isValid) {
  71. var name = userForm.name;
  72. var email = userForm.email;
  73. var lang= userForm.lang;
  74. if (!User.isEmailValid(email)) {
  75. req.form.errors.push('You can\'t update to that email address');
  76. return res.render('me/index', {});
  77. }
  78. userData.update(name, email, lang, function(err, userData) {
  79. if (err) {
  80. for (var e in err.errors) {
  81. if (err.errors.hasOwnProperty(e)) {
  82. req.form.errors.push(err.errors[e].message);
  83. }
  84. }
  85. return res.render('me/index', {});
  86. }
  87. req.i18n.changeLanguage(lang);
  88. req.flash('successMessage', req.t('Updated'));
  89. return res.redirect('/me');
  90. });
  91. } else { // method GET
  92. /// そのうちこのコードはいらなくなるはず
  93. if (!userData.isEmailSet()) {
  94. req.flash('warningMessage', 'メールアドレスが設定されている必要があります');
  95. }
  96. return res.render('me/index', {
  97. });
  98. }
  99. };
  100. actions.password = function(req, res) {
  101. var passwordForm = req.body.mePassword;
  102. var userData = req.user;
  103. // パスワードを設定する前に、emailが設定されている必要がある (schemaを途中で変更したため、最初の方の人は登録されていないかもしれないため)
  104. // そのうちこのコードはいらなくなるはず
  105. if (!userData.isEmailSet()) {
  106. return res.redirect('/me');
  107. }
  108. if (req.method == 'POST' && req.form.isValid) {
  109. var newPassword = passwordForm.newPassword;
  110. var newPasswordConfirm = passwordForm.newPasswordConfirm;
  111. var oldPassword = passwordForm.oldPassword;
  112. if (userData.isPasswordSet() && !userData.isPasswordValid(oldPassword)) {
  113. req.form.errors.push('Wrong current password');
  114. return res.render('me/password', {
  115. });
  116. }
  117. // check password confirm
  118. if (newPassword != newPasswordConfirm) {
  119. req.form.errors.push('Failed to verify passwords');
  120. } else {
  121. userData.updatePassword(newPassword, function(err, userData) {
  122. if (err) {
  123. for (var e in err.errors) {
  124. if (err.errors.hasOwnProperty(e)) {
  125. req.form.errors.push(err.errors[e].message);
  126. }
  127. }
  128. return res.render('me/password', {});
  129. }
  130. req.flash('successMessage', 'Password updated');
  131. return res.redirect('/me/password');
  132. });
  133. }
  134. } else { // method GET
  135. return res.render('me/password', {
  136. });
  137. }
  138. };
  139. actions.apiToken = function(req, res) {
  140. var apiTokenForm = req.body.apiTokenForm;
  141. var userData = req.user;
  142. if (req.method == 'POST' && req.form.isValid) {
  143. userData.updateApiToken()
  144. .then(function(userData) {
  145. req.flash('successMessage', 'API Token updated');
  146. return res.redirect('/me/apiToken');
  147. })
  148. .catch(function(err) {
  149. //req.flash('successMessage',);
  150. req.form.errors.push('Failed to update API Token');
  151. return res.render('me/api_token', {
  152. });
  153. });
  154. } else {
  155. return res.render('me/api_token', {
  156. });
  157. }
  158. };
  159. actions.updates = function(req, res) {
  160. res.render('me/update', {
  161. });
  162. };
  163. actions.deletePicture = function(req, res) {
  164. // TODO: S3 からの削除
  165. req.user.deleteImage(function(err, data) {
  166. req.flash('successMessage', 'Deleted profile picture');
  167. res.redirect('/me');
  168. });
  169. };
  170. actions.authGoogle = function(req, res) {
  171. var googleAuth = require('../util/googleAuth')(config);
  172. var userData = req.user;
  173. var toDisconnect = req.body.disconnectGoogle ? true : false;
  174. var toConnect = req.body.connectGoogle ? true : false;
  175. if (toDisconnect) {
  176. userData.deleteGoogleId(function(err, userData) {
  177. req.flash('successMessage', 'Disconnected from Google account');
  178. return res.redirect('/me');
  179. });
  180. } else if (toConnect) {
  181. googleAuth.createAuthUrl(req, function(err, redirectUrl) {
  182. if (err) {
  183. // TODO
  184. }
  185. req.session.googleCallbackAction = '/me/auth/google/callback';
  186. return res.redirect(redirectUrl);
  187. });
  188. } else {
  189. return res.redirect('/me');
  190. }
  191. };
  192. actions.authGoogleCallback = function(req, res) {
  193. var googleAuth = require('../util/googleAuth')(config);
  194. var userData = req.user;
  195. googleAuth.handleCallback(req, function(err, tokenInfo) {
  196. if (err) {
  197. req.flash('warningMessage.auth.google', err.message); // FIXME: show library error message directly
  198. return res.redirect('/me'); // TODO Handling
  199. }
  200. var googleId = tokenInfo.user_id;
  201. var googleEmail = tokenInfo.email;
  202. if (!User.isEmailValid(googleEmail)) {
  203. req.flash('warningMessage.auth.google', 'You can\'t connect with this Google\'s account');
  204. return res.redirect('/me');
  205. }
  206. User.findUserByGoogleId(googleId, function(err, googleUser) {
  207. if (!err && googleUser) {
  208. req.flash('warningMessage.auth.google', 'This Google\'s account is connected by another user');
  209. return res.redirect('/me');
  210. } else {
  211. userData.updateGoogleId(googleId, function(err, userData) {
  212. if (err) {
  213. debug('Failed to updateGoogleId', err);
  214. req.flash('warningMessage.auth.google', 'Failed to connect Google Account');
  215. return res.redirect('/me');
  216. }
  217. // TODO if err
  218. req.flash('successMessage', 'Connected with Google');
  219. return res.redirect('/me');
  220. });
  221. }
  222. });
  223. });
  224. };
  225. return actions;
  226. };