116 lines
3.0 KiB
TypeScript
116 lines
3.0 KiB
TypeScript
import { z, createRoute, OpenAPIHono } from "@hono/zod-openapi";
|
|
import { registerUser } from "../../controllers/register.js";
|
|
import { authMiddleware } from "../../middleware/authMiddleware.js";
|
|
import hasCorrectRole from "../../middleware/roleCheck.js";
|
|
|
|
const app = new OpenAPIHono();
|
|
|
|
const UserSchema = z.object({
|
|
username: z
|
|
.string()
|
|
.regex(/^[a-zA-Z0-9_]{3,30}$/)
|
|
.openapi({ example: "smith034" }),
|
|
email: z.string().email().openapi({ example: "smith@example.com" }),
|
|
password: z
|
|
.string()
|
|
.min(6, { message: "Passwords must be longer than 3 characters" })
|
|
.regex(/[A-Z]/, {
|
|
message: "Password must contain at least one uppercase letter",
|
|
})
|
|
.regex(/[\W_]/, {
|
|
message: "Password must contain at least one special character",
|
|
})
|
|
.openapi({ example: "Password1!" }),
|
|
});
|
|
|
|
type User = z.infer<typeof UserSchema>;
|
|
|
|
const responseSchema = z.object({
|
|
success: z.boolean().optional().openapi({ example: true }),
|
|
message: z.string().optional().openapi({ example: "User Created" }),
|
|
});
|
|
|
|
app.openapi(
|
|
createRoute({
|
|
tags: ["Auth:admin"],
|
|
summary: "Creates user",
|
|
method: "post",
|
|
path: "/",
|
|
middleware: [
|
|
authMiddleware,
|
|
hasCorrectRole(["admin", "systemAdmin"], "admin"),
|
|
],
|
|
request: {
|
|
body: {
|
|
content: {
|
|
"application/json": { schema: UserSchema },
|
|
},
|
|
},
|
|
},
|
|
responses: {
|
|
200: {
|
|
content: { "application/json": { schema: responseSchema } },
|
|
description: "Retrieve the user",
|
|
},
|
|
400: {
|
|
content: {
|
|
"application/json": {
|
|
schema: z.object({
|
|
success: z.boolean().openapi({ example: false }),
|
|
message: z
|
|
.string()
|
|
.openapi({ example: "Invalid credentials passed" }),
|
|
}),
|
|
},
|
|
},
|
|
description: "Retrieve the user",
|
|
},
|
|
},
|
|
}),
|
|
async (c) => {
|
|
// apit hit
|
|
//apiHit(c, {endpoint: "api/auth/register"});
|
|
let { username, email, password } = await c.req.json();
|
|
|
|
if (!username || !email || !password) {
|
|
return c.json({ success: false, message: "Credentials missing" }, 400);
|
|
}
|
|
|
|
// some usernames that should be ignored
|
|
const badActors = ["admin", "root"];
|
|
if (badActors.includes(username)) {
|
|
return c.json(
|
|
{
|
|
success: false,
|
|
message: `${username} is not a valid name to be registerd please try again`,
|
|
},
|
|
400
|
|
);
|
|
}
|
|
|
|
try {
|
|
const register = await registerUser(username, password, email);
|
|
|
|
return c.json(
|
|
{
|
|
success: register.success,
|
|
message: register.message,
|
|
user: register?.user,
|
|
},
|
|
200
|
|
);
|
|
} catch (error) {
|
|
console.log(error);
|
|
return c.json(
|
|
{
|
|
success: false,
|
|
message: `${username} already exists please login or reset password, if you feel this is an error please contact your admin.`,
|
|
},
|
|
400
|
|
);
|
|
}
|
|
}
|
|
);
|
|
|
|
export default app;
|