@laboratory-one/api-components 0.0.17 → 0.0.19

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@laboratory-one/api-components",
-  "version": "0.0.17",
+  "version": "0.0.19",
   "description": "API components for Laboratory One",
   "author": "Laboratory One",
   "private": false,

package/src/auth/auth.service.ts

@@ -46,6 +46,32 @@ export class AuthService {
     }
   }
 
+  async phoneLoginOrCreate(
+    phoneNumber: string,
+  ): Promise<stytch.OTPsSmsLoginOrCreateResponse> {
+    this.logger.debug('phoneLoginOrCreate');
+
+    return await this.authClient.otps.sms.loginOrCreate({
+      phone_number: phoneNumber,
+      expiration_minutes: 5,
+    });
+  }
+
+  async phoneAuthenticate({
+    methodId,
+    code,
+  }: {
+    methodId: string;
+    code: string;
+  }): Promise<stytch.OTPsAuthenticateResponse> {
+    this.logger.debug('phoneAuthenticate');
+
+    return await this.authClient.otps.authenticate({
+      method_id: methodId,
+      code,
+    });
+  }
+
   async delete(externalId: string): Promise<void> {
     this.logger.debug('delete');
 

package/src/push/push.service.ts

@@ -12,6 +12,29 @@ export class PushService {
     });
   }
 
+  createMessage({
+    body,
+    pushToken,
+    data,
+  }: {
+    body: string;
+    pushToken: string;
+    data?: Record<string, unknown>;
+  }): ExpoPushMessage | undefined {
+    this.logger.debug('createMessage');
+
+    if (!Expo.isExpoPushToken(pushToken)) {
+      return;
+    }
+
+    return {
+      to: pushToken,
+      sound: 'default',
+      body,
+      data,
+    };
+  }
+
   createMessages({
     body,
     pushTokens,

package/src/user/dtos/delete-user.request.dto.ts

@@ -4,5 +4,5 @@ import { ApiProperty } from '@nestjs/swagger';
 export class DeleteUserRequestDto {
   @IsString()
   @ApiProperty()
-  email: string;
+  phoneNumber: string;
 }

package/src/user/dtos/index.ts

@@ -3,3 +3,6 @@ export * from './register.request.dto';
 export * from './register.response.dto';
 export * from './update-user.request.dto';
 export * from './delete-user.request.dto';
+export * from './phone-login.request.dto';
+export * from './phone-login-verify.request.dto';
+export * from './phone-login.response.dto';

package/src/user/dtos/phone-login-verify.request.dto.ts

@@ -0,0 +1,16 @@
+import { IsString } from 'class-validator';
+import { ApiProperty } from '@nestjs/swagger';
+
+export class PhoneLoginVerifyRequestDto {
+  @IsString()
+  @ApiProperty()
+  code: string;
+
+  @IsString()
+  @ApiProperty()
+  methodId: string;
+
+  @IsString()
+  @ApiProperty()
+  phoneNumber: string;
+}

package/src/user/dtos/phone-login.request.dto.ts

@@ -0,0 +1,8 @@
+import { IsString } from 'class-validator';
+import { ApiProperty } from '@nestjs/swagger';
+
+export class PhoneLoginRequestDto {
+  @IsString()
+  @ApiProperty()
+  phoneNumber: string;
+}

package/src/user/dtos/phone-login.response.dto.ts

@@ -0,0 +1,12 @@
+import { IsString } from 'class-validator';
+import { ApiProperty } from '@nestjs/swagger';
+
+export class PhoneLoginResponseDto {
+  @IsString()
+  @ApiProperty()
+  methodId: string;
+
+  @IsString()
+  @ApiProperty()
+  phoneNumber: string;
+}

package/src/user/dtos/update-user.request.dto.ts

@@ -21,4 +21,9 @@ export class UpdateUserRequestDto {
   @IsNumber()
   @ApiProperty()
   tz?: number | undefined;
+
+  @IsOptional()
+  @IsString()
+  @ApiProperty()
+  email?: string | undefined;
 }

package/src/user/schemas/index.ts

@@ -1,3 +1,5 @@
 export * from './signup.schema';
 export * from './delete-user.schema';
 export * from './update-user.schema';
+export * from './phone-login.schema';
+export * from './phone-login-verify.schema';

package/src/user/schemas/phone-login-verify.schema.ts

@@ -0,0 +1,9 @@
+import { z } from 'zod';
+
+import { schemaPatterns } from '../../utils';
+
+export const phoneLoginVerifySchema = z.object({
+  code: schemaPatterns.code,
+  phoneNumber: schemaPatterns.phoneNumber,
+  methodId: schemaPatterns.methodId,
+});

package/src/user/schemas/phone-login.schema.ts

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+
+import { schemaPatterns } from '../../utils';
+
+export const phoneLoginSchema = z.object({
+  phoneNumber: schemaPatterns.phoneNumber,
+});

package/src/user/schemas/update-user.schema.ts

@@ -8,5 +8,6 @@ export const updateUserSchema = z
     fullName: schemaPatterns.fullName,
     pushToken: schemaPatterns.pushToken,
     tz: schemaPatterns.tz,
+    email: schemaPatterns.email,
   })
   .partial();

package/src/user/user.controller.ts

@@ -8,17 +8,24 @@ import {
 } from '@nestjs/common';
 import { JwtService } from '@nestjs/jwt';
 import { ApiResponse, ApiTags } from '@nestjs/swagger';
-import { OnboardingStatus, User } from '@prisma/client';
+import { OnboardingStatus, User, UserStatus } from '@prisma/client';
 import { ExpoPushMessage } from 'expo-server-sdk';
 import * as stytch from 'stytch';
+import { ZodObject } from 'zod';
 
-import { AuthService } from '../auth/auth.service';
+import { AuthService } from '../auth';
 import { UserService } from './user.service';
-import { GetUserResponseDto } from './dtos/get-user.response.dto';
-import { UpdateUserRequestDto } from './dtos/update-user.request.dto';
-import { RegisterResponseDto } from './dtos/register.response.dto';
-import { RegisterRequestDto } from './dtos/register.request.dto';
-import { PushService } from '../push/push.service';
+import {
+  GetUserResponseDto,
+  UpdateUserRequestDto,
+  RegisterResponseDto,
+  DeleteUserRequestDto,
+  PhoneLoginRequestDto,
+  PhoneLoginResponseDto,
+  PhoneLoginVerifyRequestDto,
+  RegisterRequestDto,
+} from './dtos';
+import { PushService } from '../push';
 import {
   cleanPhoneNumber,
   cleanString,
@@ -28,6 +35,11 @@ import {
 } from '../utils';
 import { AuthGuard } from '../guard';
 import * as types from '../types';
+import {
+  deleteUserSchema,
+  phoneLoginSchema,
+  phoneLoginVerifySchema,
+} from './schemas';
 
 @ApiTags('User')
 @Controller('user')
@@ -39,6 +51,89 @@ export class UserController {
     private jwtService: JwtService,
   ) {}
 
+  @Post('phone-login')
+  @ApiResponse({
+    status: 200,
+    description: 'loginOrCreate successful',
+    type: PhoneLoginResponseDto,
+  })
+  async phoneLogin(
+    @Body() dto: PhoneLoginRequestDto,
+  ): Promise<PhoneLoginResponseDto> {
+    try {
+      const parsedDto: PhoneLoginRequestDto = phoneLoginSchema.parse(
+        dto,
+      ) as PhoneLoginRequestDto;
+
+      const phoneNumber: string = cleanPhoneNumber(parsedDto.phoneNumber);
+
+      const user: User = await this.userService.findOneByPhoneNumber(
+        parsedDto.phoneNumber,
+      );
+
+      if (!user) {
+        const newUser: User = await this.userService.create({
+          phoneNumber,
+        });
+
+        if (!newUser) {
+          handleError('Error creating user');
+        }
+
+        // this is where you can do other user setup
+      }
+
+      const res: stytch.OTPsSmsLoginOrCreateResponse =
+        await this.authService.phoneLoginOrCreate(phoneNumber);
+
+      return {
+        methodId: res.phone_id,
+        phoneNumber,
+      };
+    } catch (error) {
+      handleError(error);
+    }
+  }
+
+  @Post('phone-login-verify')
+  @ApiResponse({
+    status: 200,
+    description: 'loginOrCreate successful',
+    type: RegisterResponseDto,
+  })
+  async phoneLoginVerify(
+    @Body() dto: PhoneLoginVerifyRequestDto,
+  ): Promise<RegisterResponseDto> {
+    try {
+      const parsedDto: PhoneLoginVerifyRequestDto =
+        phoneLoginVerifySchema.parse(dto) as PhoneLoginVerifyRequestDto;
+
+      const res: stytch.OTPsAuthenticateResponse =
+        await this.authService.phoneAuthenticate({
+          methodId: parsedDto.methodId,
+          code: parsedDto.code,
+        });
+
+      const user: User = await this.userService.findOneByPhoneNumber(
+        parsedDto.phoneNumber,
+      );
+
+      await this.userService.update(user.id, {
+        externalId: res.user_id,
+      });
+
+      const payload = { userId: user.id };
+      const token: string = await this.jwtService.signAsync(payload);
+
+      return {
+        ...user,
+        token,
+      };
+    } catch (error) {
+      handleError(error);
+    }
+  }
+
   @Post('signup')
   @ApiResponse({
     status: 200,
@@ -59,6 +154,7 @@ export class UserController {
     }
 
     const user: User = await this.userService.create({
+      phoneNumber: res.user_id, // use phone number as placeholder
       email: cleanedDTO.email,
       externalId: res.user_id,
     });
@@ -191,4 +287,43 @@ export class UserController {
       handleError(error);
     }
   }
+
+  @UseGuards(AuthGuard)
+  @Post('delete')
+  @ApiResponse({
+    status: 200,
+    description: 'delete user successful',
+    type: GetUserResponseDto,
+  })
+  async delete(
+    @Request() req: types.reqType,
+    @Body() dto: DeleteUserRequestDto,
+  ): Promise<void> {
+    try {
+      const parsedDto: DeleteUserRequestDto = (
+        deleteUserSchema as ZodObject<any>
+      ).parse(dto) as DeleteUserRequestDto;
+
+      const user: User = await this.userService.findOneByUserId(
+        req.user.userId,
+      );
+
+      if (!user) {
+        handleError('User not found');
+      }
+
+      if (parsedDto.phoneNumber !== user.phoneNumber) {
+        handleError('Invalid email');
+      }
+
+      await this.authService.delete(user.externalId);
+      await this.userService.update(req.user.userId, {
+        status: UserStatus.DELETED,
+        email: user.externalId,
+        phoneNumber: user.externalId,
+      });
+    } catch (error) {
+      handleError(error);
+    }
+  }
 }

package/src/user/user.service.ts

@@ -25,6 +25,14 @@ export class UserService {
     });
   }
 
+  async findOneByPhoneNumber(phoneNumber: string): Promise<User> {
+    this.logger.debug('findOneByPhoneNumber');
+
+    return this.prisma.user.findUnique({
+      where: { phoneNumber },
+    });
+  }
+
   async findOneByUserId(userId: string): Promise<User> {
     this.logger.debug('findOneByUserId');
 

package/src/utils/schema.util.ts

@@ -8,4 +8,6 @@ export const schemaPatterns = {
   pushToken: z.string().min(1).max(500).trim(),
   tz: z.number().int().min(-10000).max(10000),
   date: z.string().date(),
+  code: z.string().length(6).trim(),
+  methodId: z.string().min(1).max(500).trim(),
 };