✨ Add login

Author: AnandChowdhary

src/helpers/mail.ts

@@ -42,7 +42,7 @@ export const mail = async (
   return await sendMail({
     from: SES_EMAIL,
     to: to.toString(),
-    subject: i18n.en.emails[template],
+    subject: i18n.en.emails[template] || "",
     message,
     altText
   });

src/interfaces/enum.ts

@@ -14,6 +14,7 @@ export enum EventType {
   AUTH_LOGIN_BACKUP_CODE = "auth.login_backupCode",
   AUTH_LOGIN_GOOGLE = "auth.login_google",
   AUTH_PASSWORD_CHANGED = "auth.password_changed",
+  AUTH_PASSWORD_RESET_REQUESTED = "auth.passwordReset",
   ORGANIZATION_CREATED = "organization.created",
   ORGANIZATION_UPDATED = "organization.updated",
   ORGANIZATION_DELETED = "organization.deleted",

src/rest/auth.ts

@@ -1,12 +1,7 @@
 import { User } from "../interfaces/tables/user";
 import { createUser, updateUser, getUserByEmail, getUser } from "../crud/user";
 import { InsertResult } from "../interfaces/mysql";
-import {
-  createEmail,
-  updateEmail,
-  getEmail,
-  getUserPrimaryEmail
-} from "../crud/email";
+import { createEmail, updateEmail, getEmail } from "../crud/email";
 import { mail } from "../helpers/mail";
 import {
   emailVerificationToken,
@@ -21,11 +16,22 @@ import { compare } from "bcrypt";
 import { deleteSensitiveInfoUser } from "../helpers/utils";
 import { createMembership } from "../crud/membership";
 
-export const login = async (email: string, password: string) => {
+export const login = async (
+  email: string,
+  password: string,
+  locals: Locals
+) => {
   const user = await getUserByEmail(email, true);
   if (!user.password) throw new Error(ErrorCode.MISSING_PASSWORD);
   const correctPassword = await compare(password, user.password);
   if (correctPassword) {
+    await createEvent(
+      {
+        userId: user.id,
+        type: EventType.AUTH_LOGIN
+      },
+      locals
+    );
     return await loginToken(deleteSensitiveInfoUser(user));
   }
   throw new Error(ErrorCode.INVALID_LOGIN);
@@ -69,11 +75,19 @@ export const sendEmailVerification = async (
   return;
 };
 
-export const sendPasswordReset = async (email: string) => {
+export const sendPasswordReset = async (email: string, locals: Locals) => {
   const user = await getUserByEmail(email);
   if (!user.id) throw new Error(ErrorCode.USER_NOT_FOUND);
   const token = await passwordResetToken(user.id);
-  return await mail(email, "password-reset", { name: user.name, token });
+  await mail(email, "password-reset", { name: user.name, token });
+  await createEvent(
+    {
+      userId: user.id,
+      type: EventType.AUTH_PASSWORD_RESET_REQUESTED
+    },
+    locals
+  );
+  return;
 };
 
 export const verifyEmail = async (token: string, locals: Locals) => {

src/routes/auth.ts

@@ -1,10 +1,36 @@
 import { Request, Response } from "express";
 import { ErrorCode } from "../interfaces/enum";
-import { sendPasswordReset } from "../rest/auth";
+import { sendPasswordReset, login } from "../rest/auth";
+import { verifyToken } from "../helpers/jwt";
+
+export const routeAuthVerifyToken = async (req: Request, res: Response) => {
+  const token =
+    req.body.token || (req.get("Authorization") || "").replace("Bearer ", "");
+  const subject = req.body.subject;
+  if (!token || !subject) throw new Error(ErrorCode.MISSING_FIELD);
+  try {
+    const data = await verifyToken(token, subject);
+    res.json({ verified: true, data });
+  } catch (error) {
+    throw new Error(ErrorCode.INVALID_TOKEN);
+  }
+};
+
+export const routeAuthLogin = async (req: Request, res: Response) => {
+  const email = req.body.email;
+  const password = req.body.password;
+  if (!email || !password) throw new Error(ErrorCode.MISSING_FIELD);
+  try {
+    const token = await login(email, password, res.locals);
+    res.json({ token });
+  } catch (error) {
+    throw new Error(ErrorCode.INVALID_LOGIN);
+  }
+};
 
 export const routeAuthResetPassword = async (req: Request, res: Response) => {
   const email = req.body && req.body.email;
   if (!email) throw new Error(ErrorCode.MISSING_FIELD);
   res.json({ queued: true });
-  return await sendPasswordReset(email);
+  return await sendPasswordReset(email, res.locals);
 };

src/routes/index.ts

@@ -4,7 +4,11 @@ import { routeUserMe, routeUserPut } from "./users";
 import { routeEmailVerify } from "./emails";
 import { routeOrganizationCreate } from "./organizations";
 import { authHandler } from "../helpers/middleware";
-import { routeAuthResetPassword } from "./auth";
+import {
+  routeAuthResetPassword,
+  routeAuthVerifyToken,
+  routeAuthLogin
+} from "./auth";
 
 export const router = (app: Application) => {
   app.get("/", (req, res) => res.json({ hello: "world" }));
@@ -18,6 +22,8 @@ export const router = (app: Application) => {
 };
 
 const routesAuth = (app: Application) => {
+  app.post("/auth/login", asyncHandler(routeAuthLogin));
+  app.post("/auth/verify-token", asyncHandler(routeAuthVerifyToken));
   app.post("/auth/reset-password", asyncHandler(routeAuthResetPassword));
 };