@getjones/test-infra 5.2.14 → 5.2.16

package/src/saas/internal-api/users/api/users.service.js

@@ -1,363 +1,363 @@
-const { InviteUserModel, SignupUserModel, EditUserInvitationModel, EditUserProfileModel } = require('../models/users.model');
-const { validateType } = require('../../../../common/validations/typeValidations');
-const { getEnv, getSystemUserIdentity } = require('../../../../env');
-const { credentials } = getEnv();
-const userAPI = require('./users.api');
-const dbEmailsService = require('../../dbEmails/api/db.emails.service');
-const util = require('../utils/util');
-const httpResponseStatusCodes = require('../../../../common/httpResponseStatusCodes.json');
-const { NotificationSettingsModel } = require('../models/notification.settings.model');
-const CreateInnerSystemAccountModel = require('../models/create.inner.system.user.model');
-const CreateInnerSystemUserModel = require('../models/create.inner.system.user.model');
-
-const { internalApiUserRoles: userRoles } = require('../../../../common/consts/userRoles');
-
-const inviteUser = async (invitedUserModels, context, { disableSendMail } = {}) => {
-	return userAPI.invite(invitedUserModels, context, { disableSendMail });
-};
-
-const signupUser = (signupUserModel, context) => {
-	validateType(signupUserModel, SignupUserModel);
-	return userAPI.signupUser(signupUserModel, context);
-};
-
-const editUserRole = async (userId, data, context) => {
-	return userAPI.editUserRole(userId, data, context);
-};
-
-const editUserInvitationByModel = async (editUserInvitationModel, context) => {
-	validateType(editUserInvitationModel, EditUserInvitationModel);
-	return userAPI.invite([editUserInvitationModel], context);
-};
-
-const editUserInvitation = async (userId, userEmail, role, projectsIds, context, { hasCompleteAccessPermission } = {}) => {
-	const editUserInvitationModel = new EditUserInvitationModel(userId, userEmail, role, projectsIds, hasCompleteAccessPermission);
-
-	const response = await editUserInvitationByModel(editUserInvitationModel, context);
-
-	if (response.status !== httpResponseStatusCodes.NO_CONTENT) {
-		throw new Error('Failed to edit user invitation');
-	}
-
-	return response;
-};
-
-const getUsersByProjectId = async (projectId, context) => {
-	return userAPI.getUsersByProjectId(projectId, context);
-};
-
-const getUserByEmail = async (email, context) => {
-	return userAPI.getUserByEmail(email, context);
-};
-
-const getUserByEmailForAutoReplyEmails = async (email, { expectError } = {}) => {
-	const response = await userAPI.getUserByEmailForAutoReplyEmails(email);
-
-	if (response.status !== httpResponseStatusCodes.OK && !expectError) {
-		throw new Error(`Failed to get user by email ${email}. Status: ${response.status}`);
-	}
-
-	return response;
-};
-
-const getTeamMemberByEmail = async (email, accountId, context) => {
-	const response = await userAPI.getTeamMemberByEmail(email, accountId, context);
-
-	if (response.status !== httpResponseStatusCodes.OK) {
-		throw new Error(`Failed to get user by email ${email}`);
-	}
-
-	return response.data;
-};
-
-const getEnabledAndDisabledByEmail = async (email, context) => {
-	const response = await userAPI.getEnabledAndDisabledByEmail(email, context);
-
-	if (response.status !== httpResponseStatusCodes.OK) {
-		throw new Error(`Failed to get user by email ${email}`);
-	}
-
-	return response.data;
-};
-
-const getOrCreateUser = async (email, role, projectsIds, context, { fullName = role, password = credentials.strongPassword, expectError, hasCompleteAccessPermission } = {}) => {
-	let userResponse = await getUserByEmail(email, context);
-
-	if (userResponse.data !== '' && userResponse.status === httpResponseStatusCodes.OK) {
-		const { projectPermissions } = userResponse.data;
-		const projectPermissionsIds = projectPermissions.map(projectPermission => projectPermission.projectId);
-
-		projectsIds = projectsIds.filter(projectId => !projectPermissionsIds.includes(projectId));
-
-		if (userResponse.data && userResponse.data.id && userResponse.data.isVerified && !projectsIds.length) {
-			return userResponse.data;
-		}
-	}
-
-	const inviteUserModel = new InviteUserModel(email, role, projectsIds, hasCompleteAccessPermission);
-	const inviteResponse = await inviteUser([inviteUserModel], context);
-
-	if (inviteResponse.status !== httpResponseStatusCodes.NO_CONTENT && !expectError) {
-		throw new Error(`Failed to invite user with email: ${email}\n${inviteResponse}`);
-	} else if (expectError) {
-		return inviteResponse;
-	}
-
-	userResponse = await getUserByEmail(email, context);
-
-	//Already signup user
-	if (userResponse.data.isVerified) {
-		return userResponse.data;
-	}
-
-	const signupUserModel = await util.getSignupUserModel(email, role, fullName, password, context);
-	const signupResponse = await signupUser(signupUserModel, context);
-
-	if (signupResponse.status !== httpResponseStatusCodes.OK) {
-		throw new Error(`Failed to signup user with email: ${email}\n${signupResponse}`);
-	}
-
-	userResponse = await getUserByEmail(email, context);
-	return userResponse.data;
-};
-
-const deleteUser = (userId, context) => {
-	return userAPI.deleteUser(userId, context);
-};
-
-const editUserProjects = async (accountId, userId, addedProjectIds, removedProjectIds, context, { hasCompleteAccessPermission } = {}) => {
-	return userAPI.editUserProjects(accountId, userId, addedProjectIds, removedProjectIds, context, { hasCompleteAccessPermission });
-};
-
-const deleteAllTeamMembersFromProjects = async (projectsIds, context) => {
-	for (const projectId of projectsIds) {
-		await deleteAllTeamMembersFromProject(projectId, context);
-	}
-};
-
-const deleteAllTeamMembersFromProject = async (projectId, context) => {
-	let { data: users } = await getUsersByProjectId(projectId, context);
-	users = users.filter(user => user.role !== userRoles.admin);
-
-	for (const user of users) {
-		await deleteUser(user.id, context);
-		await removeAllUserTraceFromDb(user.id, context);
-	}
-};
-
-const removeAllUserTraceFromDb = (userId, context) => {
-	return userAPI.removeAllUserTraceFromDb(userId, context);
-};
-
-const deleteUserByEmail = async (userEmail, context) => {
-	const { data: user } = await getUserByEmail(userEmail, context);
-	return user ? deleteUser(user.id, context) : null;
-};
-
-const reinviteUser = (userId, context) => {
-	return userAPI.reinviteUser(userId, context);
-};
-
-const editUserEmailNotificationsSettings = (notificationSettingsModel, context) => {
-	validateType(notificationSettingsModel, NotificationSettingsModel);
-	return userAPI.editUserEmailNotificationsSettings(notificationSettingsModel, context);
-};
-
-const createInnerSystemUser = async (createInnerSystemUserModel, icsContext) => {
-	validateType(createInnerSystemUserModel, CreateInnerSystemAccountModel);
-	const response = await userAPI.createInnerSystemUser(createInnerSystemUserModel, icsContext);
-
-	if (response.status !== httpResponseStatusCodes.OK) {
-		throw Error(`Create inner system account failed\n${response}`);
-	}
-
-	return response.data;
-};
-
-const getInnerSystemUsersPerRole = async icsContext => {
-	const roles = `${userRoles.ics},${userRoles.auditor},${userRoles.operator}`;
-	const response = await userAPI.getInnerSystemUsersPerRole(roles, icsContext);
-
-	if (response.status !== httpResponseStatusCodes.OK) {
-		throw Error(`Get inner system accounts failed\n${response}`);
-	}
-
-	return response.data;
-};
-
-const deactivateInnerSystemUser = async (userId, icsContext, { expectError } = {}) => {
-	const response = await userAPI.deactivateInnerSystemUser(userId, icsContext);
-
-	if (!expectError && response.status !== httpResponseStatusCodes.OK && response.status !== httpResponseStatusCodes.NO_CONTENT) {
-		throw Error(`Failed to deactivate user ${userId}. Status code: ${response.status}`);
-	}
-
-	return response;
-};
-
-const activateInnerSystemUser = async (userId, icsContext, { expectError } = {}) => {
-	const response = await userAPI.activateInnerSystemUser(userId, icsContext);
-
-	if (!expectError && response.status !== httpResponseStatusCodes.OK && response.status !== httpResponseStatusCodes.NO_CONTENT) {
-		throw Error(`Failed to activate user ${userId}. Status code: ${response.status}`);
-	}
-
-	return response;
-};
-
-const getOrCreateInnerSystemUser = async (innerSystemCreateAccountModel, role, icsContext) => {
-	const accountEmail = innerSystemCreateAccountModel.email;
-	const account = await getInnerSystemUserByEmail(accountEmail, role, icsContext);
-
-	if (account) {
-		return account;
-	}
-
-	await createInnerSystemUser(innerSystemCreateAccountModel, icsContext);
-	return getInnerSystemUserByEmail(accountEmail, role, icsContext);
-};
-
-const getOrCreateInnerSystemUserByUser = async (user, role, icsContext) => {
-	const createInnerSystemUserModel = new CreateInnerSystemUserModel(user);
-	return getOrCreateInnerSystemUser(createInnerSystemUserModel, role, icsContext);
-};
-
-const getInnerSystemUserByEmail = async (accountEmail, role, icsContext) => {
-	const accountsPerRole = await getInnerSystemUsersPerRole(icsContext);
-	const accountsOfRole = accountsPerRole[role];
-	const account = accountsOfRole.find(({ email }) => email === accountEmail);
-
-	return account;
-};
-
-const requestPasswordReset = userEmail => {
-	return userAPI.requestPasswordReset(userEmail);
-};
-
-const extractResetTokenFromEmail = async email => {
-	// The reset link is https://<clientDomain>/app/#/resetPassword?data=<token>. The `?data=`
-	// sits inside the URL *fragment* (after the `#`), so URL/searchParams parsing returns nothing —
-	// a regex over the raw body is required. regexVerification returns the last capture group.
-	const rawToken = await dbEmailsService.getLastMessage({
-		recipients: { from: credentials.superUser, to: [email] },
-		textInSubject: 'Reset Password',
-		regex: /resetPassword\?data=([^"'&\s<]+)/,
-		returnType: 'url'
-	});
-
-	if (!rawToken) {
-		throw Error(`No reset link found in the reset-password mail for ${email}`);
-	}
-
-	return decodeURIComponent(rawToken);
-};
-
-// Clears the recipient's existing reset mails *before* requesting, so the extracted token is
-// guaranteed to come from this request's mail — not a stale leftover (whose token is already
-// invalidated server-side, which would flake verifyResetLink/resetPassword). Clearing after the
-// request is unsafe: the new mail may already have arrived and would be deleted too.
-const requestPasswordResetAndGetToken = async email => {
-	await dbEmailsService.deleteAllMessagesByRecipient({ from: credentials.superUser, to: [email] });
-	await requestPasswordReset(email);
-
-	return extractResetTokenFromEmail(email);
-};
-
-const verifyResetLink = async (rawToken, { expectError = false } = {}) => {
-	const response = await userAPI.verifyResetLink(rawToken);
-
-	if (!expectError && response.status !== httpResponseStatusCodes.OK) {
-		throw Error(`Failed to verify reset link. Status code: ${response.status}`);
-	}
-
-	return response;
-};
-
-const backdateResetTokens = async (email, offsetInMinutes, context) => {
-	const response = await userAPI.backdateResetTokens(email, offsetInMinutes, context);
-
-	if (response.status !== httpResponseStatusCodes.OK) {
-		throw Error(`Failed to backdate reset tokens for ${email}. Status code: ${response.status}`);
-	}
-
-	return response;
-};
-
-const getResetTokens = async (email, context) => {
-	const response = await userAPI.getResetTokens(email, context);
-
-	if (response.status !== httpResponseStatusCodes.OK) {
-		throw Error(`Failed to get reset tokens for ${email}. Status code: ${response.status}`);
-	}
-
-	return response.data;
-};
-
-const editUserProfile = async (email, fullName, userContext) => {
-	const systemUserContext = await getSystemUserIdentity(credentials.superUser).cookie;
-	const { data: user } = await getUserByEmail(email, systemUserContext);
-
-	const editUserProfileModel = new EditUserProfileModel(user.id, email, user.role, fullName);
-
-	const response = await userAPI.editUserProfile(editUserProfileModel, userContext);
-
-	if (response.status !== httpResponseStatusCodes.OK) {
-		throw Error(`Failed to edit user id: [${user.id}] profile\n${response}`);
-	}
-
-	return getUserByEmail(email, systemUserContext);
-};
-
-const editUserSettings = async (email, config, userContext) => {
-	const systemUserContext = await getSystemUserIdentity(credentials.superUser).cookie;
-	const { data: user } = await getUserByEmail(email, systemUserContext);
-
-	const settingModel = util.getSettingsModel(config);
-	const response = await userAPI.editUserEmailNotificationsSettings(settingModel, userContext);
-
-	if (response.status !== httpResponseStatusCodes.OK) {
-		throw Error(`Failed to edit user id: [${user.id}] settings\n${response}`);
-	}
-
-	return getUserByEmail(email, systemUserContext);
-};
-
-const getUserListByRecordId = async (recordId, context, { searchTerm } = {}) => {
-	return userAPI.getUserListByRecordId(recordId, context, { searchTerm });
-};
-
-module.exports = {
-	inviteUser,
-	signupUser,
-	getTeamMemberByEmail,
-	getUsersByProjectId,
-	getUserByEmail,
-	getUserByEmailForAutoReplyEmails,
-	getEnabledAndDisabledByEmail,
-	getOrCreateUser,
-	deleteUser,
-	editUserProjects,
-	deleteAllTeamMembersFromProjects,
-	deleteUserByEmail,
-	removeAllUserTraceFromDb,
-	editUserRole,
-	editUserInvitation,
-	editUserInvitationByModel,
-	reinviteUser,
-	editUserEmailNotificationsSettings,
-	requestPasswordReset,
-	extractResetTokenFromEmail,
-	requestPasswordResetAndGetToken,
-	verifyResetLink,
-	backdateResetTokens,
-	getResetTokens,
-	getOrCreateInnerSystemUser,
-	getOrCreateInnerSystemUserByUser,
-	getInnerSystemUsersPerRole,
-	deactivateInnerSystemUser,
-	activateInnerSystemUser,
-	editUserProfile,
-	editUserSettings,
-	getInnerSystemUserByEmail,
-	getUserListByRecordId
-};
+const { InviteUserModel, SignupUserModel, EditUserInvitationModel, EditUserProfileModel } = require('../models/users.model');
+const { validateType } = require('../../../../common/validations/typeValidations');
+const { getEnv, getSystemUserIdentity } = require('../../../../env');
+const { credentials } = getEnv();
+const userAPI = require('./users.api');
+const dbEmailsService = require('../../dbEmails/api/db.emails.service');
+const util = require('../utils/util');
+const httpResponseStatusCodes = require('../../../../common/httpResponseStatusCodes.json');
+const { NotificationSettingsModel } = require('../models/notification.settings.model');
+const CreateInnerSystemAccountModel = require('../models/create.inner.system.user.model');
+const CreateInnerSystemUserModel = require('../models/create.inner.system.user.model');
+
+const { internalApiUserRoles: userRoles } = require('../../../../common/consts/userRoles');
+
+const inviteUser = async (invitedUserModels, context, { disableSendMail } = {}) => {
+	return userAPI.invite(invitedUserModels, context, { disableSendMail });
+};
+
+const signupUser = (signupUserModel, context) => {
+	validateType(signupUserModel, SignupUserModel);
+	return userAPI.signupUser(signupUserModel, context);
+};
+
+const editUserRole = async (userId, data, context) => {
+	return userAPI.editUserRole(userId, data, context);
+};
+
+const editUserInvitationByModel = async (editUserInvitationModel, context) => {
+	validateType(editUserInvitationModel, EditUserInvitationModel);
+	return userAPI.invite([editUserInvitationModel], context);
+};
+
+const editUserInvitation = async (userId, userEmail, role, projectsIds, context, { hasCompleteAccessPermission } = {}) => {
+	const editUserInvitationModel = new EditUserInvitationModel(userId, userEmail, role, projectsIds, hasCompleteAccessPermission);
+
+	const response = await editUserInvitationByModel(editUserInvitationModel, context);
+
+	if (response.status !== httpResponseStatusCodes.NO_CONTENT) {
+		throw new Error('Failed to edit user invitation');
+	}
+
+	return response;
+};
+
+const getUsersByProjectId = async (projectId, context) => {
+	return userAPI.getUsersByProjectId(projectId, context);
+};
+
+const getUserByEmail = async (email, context) => {
+	return userAPI.getUserByEmail(email, context);
+};
+
+const getUserByEmailForAutoReplyEmails = async (email, { expectError } = {}) => {
+	const response = await userAPI.getUserByEmailForAutoReplyEmails(email);
+
+	if (response.status !== httpResponseStatusCodes.OK && !expectError) {
+		throw new Error(`Failed to get user by email ${email}. Status: ${response.status}`);
+	}
+
+	return response;
+};
+
+const getTeamMemberByEmail = async (email, accountId, context) => {
+	const response = await userAPI.getTeamMemberByEmail(email, accountId, context);
+
+	if (response.status !== httpResponseStatusCodes.OK) {
+		throw new Error(`Failed to get user by email ${email}`);
+	}
+
+	return response.data;
+};
+
+const getEnabledAndDisabledByEmail = async (email, context) => {
+	const response = await userAPI.getEnabledAndDisabledByEmail(email, context);
+
+	if (response.status !== httpResponseStatusCodes.OK) {
+		throw new Error(`Failed to get user by email ${email}`);
+	}
+
+	return response.data;
+};
+
+const getOrCreateUser = async (email, role, projectsIds, context, { fullName = role, password = credentials.strongPassword, expectError, hasCompleteAccessPermission } = {}) => {
+	let userResponse = await getUserByEmail(email, context);
+
+	if (userResponse.data !== '' && userResponse.status === httpResponseStatusCodes.OK) {
+		const { projectPermissions } = userResponse.data;
+		const projectPermissionsIds = projectPermissions.map(projectPermission => projectPermission.projectId);
+
+		projectsIds = projectsIds.filter(projectId => !projectPermissionsIds.includes(projectId));
+
+		if (userResponse.data && userResponse.data.id && userResponse.data.isVerified && !projectsIds.length) {
+			return userResponse.data;
+		}
+	}
+
+	const inviteUserModel = new InviteUserModel(email, role, projectsIds, hasCompleteAccessPermission);
+	const inviteResponse = await inviteUser([inviteUserModel], context);
+
+	if (inviteResponse.status !== httpResponseStatusCodes.NO_CONTENT && !expectError) {
+		throw new Error(`Failed to invite user with email: ${email}\n${inviteResponse}`);
+	} else if (expectError) {
+		return inviteResponse;
+	}
+
+	userResponse = await getUserByEmail(email, context);
+
+	//Already signup user
+	if (userResponse.data.isVerified) {
+		return userResponse.data;
+	}
+
+	const signupUserModel = await util.getSignupUserModel(email, role, fullName, password, context);
+	const signupResponse = await signupUser(signupUserModel, context);
+
+	if (signupResponse.status !== httpResponseStatusCodes.OK) {
+		throw new Error(`Failed to signup user with email: ${email}\n${signupResponse}`);
+	}
+
+	userResponse = await getUserByEmail(email, context);
+	return userResponse.data;
+};
+
+const deleteUser = (userId, context) => {
+	return userAPI.deleteUser(userId, context);
+};
+
+const editUserProjects = async (accountId, userId, addedProjectIds, removedProjectIds, context, { hasCompleteAccessPermission } = {}) => {
+	return userAPI.editUserProjects(accountId, userId, addedProjectIds, removedProjectIds, context, { hasCompleteAccessPermission });
+};
+
+const deleteAllTeamMembersFromProjects = async (projectsIds, context) => {
+	for (const projectId of projectsIds) {
+		await deleteAllTeamMembersFromProject(projectId, context);
+	}
+};
+
+const deleteAllTeamMembersFromProject = async (projectId, context) => {
+	let { data: users } = await getUsersByProjectId(projectId, context);
+	users = users.filter(user => user.role !== userRoles.admin);
+
+	for (const user of users) {
+		await deleteUser(user.id, context);
+		await removeAllUserTraceFromDb(user.id, context);
+	}
+};
+
+const removeAllUserTraceFromDb = (userId, context) => {
+	return userAPI.removeAllUserTraceFromDb(userId, context);
+};
+
+const deleteUserByEmail = async (userEmail, context) => {
+	const { data: user } = await getUserByEmail(userEmail, context);
+	return user ? deleteUser(user.id, context) : null;
+};
+
+const reinviteUser = (userId, context) => {
+	return userAPI.reinviteUser(userId, context);
+};
+
+const editUserEmailNotificationsSettings = (notificationSettingsModel, context) => {
+	validateType(notificationSettingsModel, NotificationSettingsModel);
+	return userAPI.editUserEmailNotificationsSettings(notificationSettingsModel, context);
+};
+
+const createInnerSystemUser = async (createInnerSystemUserModel, icsContext) => {
+	validateType(createInnerSystemUserModel, CreateInnerSystemAccountModel);
+	const response = await userAPI.createInnerSystemUser(createInnerSystemUserModel, icsContext);
+
+	if (response.status !== httpResponseStatusCodes.OK) {
+		throw Error(`Create inner system account failed\n${response}`);
+	}
+
+	return response.data;
+};
+
+const getInnerSystemUsersPerRole = async icsContext => {
+	const roles = `${userRoles.ics},${userRoles.auditor},${userRoles.operator}`;
+	const response = await userAPI.getInnerSystemUsersPerRole(roles, icsContext);
+
+	if (response.status !== httpResponseStatusCodes.OK) {
+		throw Error(`Get inner system accounts failed\n${response}`);
+	}
+
+	return response.data;
+};
+
+const deactivateInnerSystemUser = async (userId, icsContext, { expectError } = {}) => {
+	const response = await userAPI.deactivateInnerSystemUser(userId, icsContext);
+
+	if (!expectError && response.status !== httpResponseStatusCodes.OK && response.status !== httpResponseStatusCodes.NO_CONTENT) {
+		throw Error(`Failed to deactivate user ${userId}. Status code: ${response.status}`);
+	}
+
+	return response;
+};
+
+const activateInnerSystemUser = async (userId, icsContext, { expectError } = {}) => {
+	const response = await userAPI.activateInnerSystemUser(userId, icsContext);
+
+	if (!expectError && response.status !== httpResponseStatusCodes.OK && response.status !== httpResponseStatusCodes.NO_CONTENT) {
+		throw Error(`Failed to activate user ${userId}. Status code: ${response.status}`);
+	}
+
+	return response;
+};
+
+const getOrCreateInnerSystemUser = async (innerSystemCreateAccountModel, role, icsContext) => {
+	const accountEmail = innerSystemCreateAccountModel.email;
+	const account = await getInnerSystemUserByEmail(accountEmail, role, icsContext);
+
+	if (account) {
+		return account;
+	}
+
+	await createInnerSystemUser(innerSystemCreateAccountModel, icsContext);
+	return getInnerSystemUserByEmail(accountEmail, role, icsContext);
+};
+
+const getOrCreateInnerSystemUserByUser = async (user, role, icsContext) => {
+	const createInnerSystemUserModel = new CreateInnerSystemUserModel(user);
+	return getOrCreateInnerSystemUser(createInnerSystemUserModel, role, icsContext);
+};
+
+const getInnerSystemUserByEmail = async (accountEmail, role, icsContext) => {
+	const accountsPerRole = await getInnerSystemUsersPerRole(icsContext);
+	const accountsOfRole = accountsPerRole[role];
+	const account = accountsOfRole.find(({ email }) => email === accountEmail);
+
+	return account;
+};
+
+const requestPasswordReset = userEmail => {
+	return userAPI.requestPasswordReset(userEmail);
+};
+
+const extractResetTokenFromEmail = async email => {
+	// The reset link is https://<clientDomain>/app/#/resetPassword?data=<token>. The `?data=`
+	// sits inside the URL *fragment* (after the `#`), so URL/searchParams parsing returns nothing —
+	// a regex over the raw body is required. regexVerification returns the last capture group.
+	const rawToken = await dbEmailsService.getLastMessage({
+		recipients: { from: credentials.superUser, to: [email] },
+		textInSubject: 'Reset Password',
+		regex: /resetPassword\?data=([^"'&\s<]+)/,
+		returnType: 'url'
+	});
+
+	if (!rawToken) {
+		throw Error(`No reset link found in the reset-password mail for ${email}`);
+	}
+
+	return decodeURIComponent(rawToken);
+};
+
+// Clears the recipient's existing reset mails *before* requesting, so the extracted token is
+// guaranteed to come from this request's mail — not a stale leftover (whose token is already
+// invalidated server-side, which would flake verifyResetLink/resetPassword). Clearing after the
+// request is unsafe: the new mail may already have arrived and would be deleted too.
+const requestPasswordResetAndGetToken = async email => {
+	await dbEmailsService.deleteAllMessagesByRecipient({ from: credentials.superUser, to: [email] });
+	await requestPasswordReset(email);
+
+	return extractResetTokenFromEmail(email);
+};
+
+const verifyResetLink = async (rawToken, { expectError = false } = {}) => {
+	const response = await userAPI.verifyResetLink(rawToken);
+
+	if (!expectError && response.status !== httpResponseStatusCodes.OK) {
+		throw Error(`Failed to verify reset link. Status code: ${response.status}`);
+	}
+
+	return response;
+};
+
+const backdateResetTokens = async (email, offsetInMinutes, context) => {
+	const response = await userAPI.backdateResetTokens(email, offsetInMinutes, context);
+
+	if (response.status !== httpResponseStatusCodes.OK) {
+		throw Error(`Failed to backdate reset tokens for ${email}. Status code: ${response.status}`);
+	}
+
+	return response;
+};
+
+const getResetTokens = async (email, context) => {
+	const response = await userAPI.getResetTokens(email, context);
+
+	if (response.status !== httpResponseStatusCodes.OK) {
+		throw Error(`Failed to get reset tokens for ${email}. Status code: ${response.status}`);
+	}
+
+	return response.data;
+};
+
+const editUserProfile = async (email, fullName, userContext) => {
+	const systemUserContext = await getSystemUserIdentity(credentials.superUser).cookie;
+	const { data: user } = await getUserByEmail(email, systemUserContext);
+
+	const editUserProfileModel = new EditUserProfileModel(user.id, email, user.role, fullName);
+
+	const response = await userAPI.editUserProfile(editUserProfileModel, userContext);
+
+	if (response.status !== httpResponseStatusCodes.OK) {
+		throw Error(`Failed to edit user id: [${user.id}] profile\n${response}`);
+	}
+
+	return getUserByEmail(email, systemUserContext);
+};
+
+const editUserSettings = async (email, config, userContext) => {
+	const systemUserContext = await getSystemUserIdentity(credentials.superUser).cookie;
+	const { data: user } = await getUserByEmail(email, systemUserContext);
+
+	const settingModel = util.getSettingsModel(config);
+	const response = await userAPI.editUserEmailNotificationsSettings(settingModel, userContext);
+
+	if (response.status !== httpResponseStatusCodes.OK) {
+		throw Error(`Failed to edit user id: [${user.id}] settings\n${response}`);
+	}
+
+	return getUserByEmail(email, systemUserContext);
+};
+
+const getUserListByRecordId = async (recordId, context, { searchTerm } = {}) => {
+	return userAPI.getUserListByRecordId(recordId, context, { searchTerm });
+};
+
+module.exports = {
+	inviteUser,
+	signupUser,
+	getTeamMemberByEmail,
+	getUsersByProjectId,
+	getUserByEmail,
+	getUserByEmailForAutoReplyEmails,
+	getEnabledAndDisabledByEmail,
+	getOrCreateUser,
+	deleteUser,
+	editUserProjects,
+	deleteAllTeamMembersFromProjects,
+	deleteUserByEmail,
+	removeAllUserTraceFromDb,
+	editUserRole,
+	editUserInvitation,
+	editUserInvitationByModel,
+	reinviteUser,
+	editUserEmailNotificationsSettings,
+	requestPasswordReset,
+	extractResetTokenFromEmail,
+	requestPasswordResetAndGetToken,
+	verifyResetLink,
+	backdateResetTokens,
+	getResetTokens,
+	getOrCreateInnerSystemUser,
+	getOrCreateInnerSystemUserByUser,
+	getInnerSystemUsersPerRole,
+	deactivateInnerSystemUser,
+	activateInnerSystemUser,
+	editUserProfile,
+	editUserSettings,
+	getInnerSystemUserByEmail,
+	getUserListByRecordId
+};