weseek__growi/packages/core/src/models/serializers/user-serializer.ts

import { Document } from 'mongoose';

import { isPopulated, isRef, type Ref } from '../../interfaces/common';
import type { IUser } from '../../interfaces/user';

export type IUserSerializedSecurely<U extends IUser> = Omit<
  U,
  'password' | 'apiToken' | 'email'
> & { email?: string };

export const omitInsecureAttributes = <U extends IUser>(
  user: U,
): IUserSerializedSecurely<U> => {
  const leanDoc = user instanceof Document ? user.toObject<U>() : user;

  const {
    // eslint-disable-next-line @typescript-eslint/no-unused-vars
    password,
    apiToken,
    email,
    ...rest
  } = leanDoc;

  const secureUser: IUserSerializedSecurely<U> = rest;

  // omit email
  if (secureUser.isEmailPublished) {
    secureUser.email = email;
  }

  return secureUser;
};

export function serializeUserSecurely<U extends IUser>(
  user?: U,
): IUserSerializedSecurely<U>;
export function serializeUserSecurely<U extends IUser>(
  user?: Ref<U>,
): Ref<IUserSerializedSecurely<U>>;
export function serializeUserSecurely<U extends IUser>(
  user?: U | Ref<U>,
): undefined | IUserSerializedSecurely<U> | Ref<IUserSerializedSecurely<U>> {
  if (user == null) return user;

  if (isRef(user) && !isPopulated(user)) return user;

  return omitInsecureAttributes(user);
}