@semapps/auth 0.4.0-alpha.31 → 0.4.0-alpha.32

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@semapps/auth",
-  "version": "0.4.0-alpha.31",
+  "version": "0.4.0-alpha.32",
   "description": "Authentification module for SemApps",
   "license": "Apache-2.0",
   "author": "Virtual Assembly",
   "dependencies": {
-    "@semapps/mime-types": "0.4.0-alpha.31",
-    "@semapps/triplestore": "0.4.0-alpha.31",
+    "@semapps/mime-types": "0.4.0-alpha.32",
+    "@semapps/triplestore": "0.4.0-alpha.32",
     "bcrypt": "^5.0.1",
     "express-session": "^1.17.0",
     "jsonwebtoken": "^8.5.1",
@@ -24,5 +24,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "fc094ef265de0ab29c2a32ffb6018f508dae4972"
+  "gitHead": "67a882b414a80501533025843d2982a7da0afac2"
 }

package/services/account.js

@@ -134,6 +134,45 @@ module.exports = {
       });
 
       return resetPasswordToken;
+    },
+    async findSettingsByWebId(ctx) {
+      const { webId } = ctx.meta;
+      const account = await ctx.call('auth.account.findByWebId', { webId });
+
+      return {
+        email: account['email'],
+        preferredLocale: account['preferredLocale']
+      };
+    },
+    async updateAccountSettings(ctx) {
+      const { currentPassword, email, newPassword } = ctx.params;
+      const { webId } = ctx.meta;
+      const account = await ctx.call('auth.account.findByWebId', { webId });
+      const passwordMatch = await this.comparePassword(currentPassword, account.hashedPassword);
+      let params = {};
+
+      if (!passwordMatch) {
+        throw new Error('auth.account.invalid_password');
+      }
+
+      if (newPassword) {
+        const hashedPassword = await this.hashPassword(newPassword);
+        params = { ...params, hashedPassword };
+      }
+
+      if (email !== account['email']) {
+        const existing = await ctx.call('auth.account.findByEmail', { email });
+        if (existing) {
+          throw new Error('email.already.exists');
+        }
+
+        params = { ...params, email };
+      }
+
+      return await this._update(ctx, {
+        '@id': account['@id'],
+        ...params
+      });
     }
   },
   methods: {

package/services/auth.local.js

@@ -149,11 +149,22 @@ const AuthLocalService = {
         }
       };
 
+      const accountSettingsRoute = {
+        path: '/auth/account',
+        aliases: {
+          'GET /': 'auth.account.findSettingsByWebId',
+          'POST /': 'auth.account.updateAccountSettings'
+        },
+        authorization: true
+      };
+
+      const routes = [loginRoute, resetPasswordRoute, setNewPasswordRoute, accountSettingsRoute];
+
       if (this.settings.registrationAllowed) {
-        return [loginRoute, signupRoute, resetPasswordRoute, setNewPasswordRoute];
-      } else {
-        return [loginRoute, resetPasswordRoute, setNewPasswordRoute];
+        return [...routes, signupRoute];
       }
+
+      return routes;
     }
   }
 };