130 lines
No EOL
3.8 KiB
TypeScript
130 lines
No EOL
3.8 KiB
TypeScript
import { Router } from "express";
|
|
import { UserHandler } from "../handlers/UserHandler.js";
|
|
import { CreateUserRequest } from "../dtos/CreateUserRequest.js";
|
|
import { UserRepository } from "../repositories/UserRepository.js";
|
|
import { UserDtoEntityMapper } from "../mappers/UserDtoEntityMapper.js";
|
|
import { asyncHandler } from "../utils/asyncHandler.js";
|
|
import { CreateUserResponse } from "../dtos/CreateUserResponse.js";
|
|
import { UserDto } from "../dtos/UserDto.js";
|
|
import {
|
|
requireAdmin,
|
|
requireAdminOrOwner,
|
|
requireAdminOrSelf
|
|
} from "../middleware/authorizationMiddleware.js";
|
|
import { UserListResponse } from "../dtos/UserListResponse.js";
|
|
import { HttpStatusCode } from "../apiHelpers/HttpStatusCodes.js";
|
|
import { InternalServerError, NotFoundError } from "../errors/httpErrors.js";
|
|
import { ChangeUserPasswordRequest } from "../dtos/ChangeUserPasswordRequest.js";
|
|
|
|
export const userBasicRoute = "/user";
|
|
|
|
/**
|
|
* Handles all user related routes
|
|
*/
|
|
const router = Router();
|
|
|
|
// Inject repo + mapper here
|
|
const handler = new UserHandler(new UserRepository(), new UserDtoEntityMapper());
|
|
|
|
/**
|
|
* Create a new user (admin only)
|
|
* Consumes CreateUserRequest
|
|
* Responds with UserDto
|
|
*/
|
|
router.post(
|
|
"/create",
|
|
requireAdmin,
|
|
asyncHandler(async (req, res) => {
|
|
const request: CreateUserRequest = req.body;
|
|
const user: UserDto = await handler.createUser(request);
|
|
const response: CreateUserResponse = { userData: user };
|
|
res.status(HttpStatusCode.CREATED).json(response);
|
|
})
|
|
);
|
|
|
|
/**
|
|
* Update existing user
|
|
* Consumes UserDto
|
|
* Responds with UserDto
|
|
* Does not allow for password change. Use change-password instead
|
|
*
|
|
* Users can update their own data, admins can update any user
|
|
*/
|
|
router.post(
|
|
"/update",
|
|
requireAdminOrSelf, // Checks req.body.id or req.body.userId
|
|
asyncHandler(async (req, res) => {
|
|
const dto: UserDto = req.body;
|
|
const response = await handler.updateUserData(dto);
|
|
res.status(HttpStatusCode.OK).json(response);
|
|
})
|
|
);
|
|
|
|
/**
|
|
* Update password of existing user
|
|
* Consumes ChangeUserPasswordRequest
|
|
* Responds with code 200 indicating success
|
|
*
|
|
* Users can change their own password, admins can change any password
|
|
*/
|
|
router.post(
|
|
"/change-password",
|
|
requireAdminOrOwner(req => req.body.userId),
|
|
asyncHandler(async (req, res) => {
|
|
const requestData: ChangeUserPasswordRequest = req.body;
|
|
const success = await handler.changePassword(requestData);
|
|
if (!success) {
|
|
throw new InternalServerError("Failed to change password");
|
|
}
|
|
res.status(HttpStatusCode.OK).json({ message: "Password changed successfully" });
|
|
})
|
|
);
|
|
|
|
/**
|
|
* Get all users (admin only)
|
|
* Responds with array of UserDto
|
|
*/
|
|
router.get(
|
|
"/all",
|
|
requireAdmin,
|
|
asyncHandler(async (req, res) => {
|
|
const users = await handler.getAllUsers();
|
|
const response: UserListResponse = { valueList: users };
|
|
res.status(HttpStatusCode.OK).json(response);
|
|
})
|
|
);
|
|
|
|
/**
|
|
* Get user data for current user
|
|
* Responds with UserDto
|
|
*/
|
|
router.get(
|
|
"/me",
|
|
asyncHandler(async (req, res) => {
|
|
const id = req.currentUser?.id;
|
|
if (id) {
|
|
const responseDto = await handler.getUserById(id);
|
|
res.status(HttpStatusCode.OK).json(responseDto);
|
|
} else {
|
|
throw new NotFoundError("There is no user id for current session!");
|
|
}
|
|
})
|
|
);
|
|
|
|
/**
|
|
* Get specific user by ID
|
|
* Responds with UserDto
|
|
*
|
|
* Users can get their own data, admins can get any user's data
|
|
*/
|
|
router.get(
|
|
"/:userId",
|
|
requireAdminOrOwner(req => req.params.userId),
|
|
asyncHandler(async (req, res) => {
|
|
const userId = req.params.userId;
|
|
const responseDto = await handler.getUserById(userId);
|
|
res.status(HttpStatusCode.OK).json(responseDto);
|
|
})
|
|
);
|
|
|
|
export default router; |