Merge pull request #11 from CS3219-AY2425S1/PEER-204-Endpoint-For-Registration

PEER-204 Endpoint for Registration

Author: sembcorpp

backend/user/src/controllers/auth/auth-controller.ts

@@ -0,0 +1,62 @@
+import type { Request, Response } from 'express';
+import { StatusCodes } from 'http-status-codes';
+import { loginService } from '@/services/auth/auth-logic';
+import type { ILoginPayload } from '@/services/auth/types';
+import { registerService } from '@/services/registration/register-logic';
+import type { IRegisterPayload } from '@/services/registration/register-inputs';
+
+export async function login(req: Request, res: Response) {
+  const { username, password }: Partial<ILoginPayload> = req.body;
+  if (!username || !password) {
+    return res.status(StatusCodes.UNPROCESSABLE_ENTITY).json('Malformed Request');
+  }
+  const { code, data, error } = await loginService({ username, password });
+  if (error || code !== StatusCodes.OK || !data) {
+    const sanitizedErr = error?.message ?? 'An error occurred.';
+    return res.status(code).json(sanitizedErr);
+  }
+  return res
+    .status(StatusCodes.OK)
+    .cookie('jwtToken', data.cookie, { httpOnly: true })
+    .json(data.user);
+}
+
+export async function logout(_req: Request, res: Response) {
+  return res
+    .clearCookie('jwtToken', {
+      secure: true,
+      sameSite: 'none',
+    })
+    .status(StatusCodes.OK)
+    .json('User has been logged out.');
+}
+
+export async function register(req: Request, res: Response) {
+  //Extract the registration data from the request body
+  const { email, username, password, firstName, lastName }: Partial<IRegisterPayload> = req.body;
+
+  //Validate input
+  if (!username || !password || !email || !firstName || !lastName) {
+    return res.status(StatusCodes.UNPROCESSABLE_ENTITY).json('Malformed Request');
+  }
+
+  //Call the registration service
+  const { code, data, error } = await registerService({
+    email,
+    username,
+    firstName,
+    lastName,
+    password,
+  });
+
+  //Handle errors
+  if (error || code !== StatusCodes.CREATED || !data) {
+    const sanitizedErr = error?.message ?? 'An error occurred during registration.';
+    return res.status(code).json(sanitizedErr);
+  }
+
+  return res.status(StatusCodes.CREATED).json({
+    message: 'User registered successfully',
+    user: data.user, // Return user data if needed
+  });
+}

backend/user/src/controllers/auth/index.ts

@@ -1,13 +1,14 @@
 import express from 'express';
 
-import { login, logout } from '@/controllers/auth';
+import { login, logout } from '@/controllers/auth/auth-controller';
 import { limiter } from '@/lib/ratelimit';
+import { register } from '@/controllers/auth/auth-controller';
 
 const router = express.Router();
 
 router.post('/login', login);
 router.post('/logout', logout);
-
+router.post('/register', register);
 router.use(limiter);
 
 export default router;

backend/user/src/routes/auth.ts

@@ -0,0 +1,7 @@
+export type IRegisterPayload = {
+  email: string;
+  username: string;
+  firstName: string;
+  lastName: string;
+  password: string;
+};

backend/user/src/services/auth/index.ts renamed to backend/user/src/services/auth/auth-logic.ts

@@ -0,0 +1,59 @@
+import { or, eq, getTableColumns } from 'drizzle-orm';
+import { StatusCodes } from 'http-status-codes';
+import bcrypt from 'bcrypt';
+import { db, users } from '@/lib/db';
+import type { IRegisterPayload } from './register-inputs';
+
+const _getSchema = () => {
+  const { id, email, username, firstName, lastName } = getTableColumns(users);
+  return {
+    id,
+    email,
+    username,
+    firstName,
+    lastName,
+  };
+};
+
+export const registerService = async (payload: IRegisterPayload) => {
+  const { email, username, firstName, lastName, password } = payload;
+
+  //check if user already exists (by username or email)
+  const existingUsers = await db
+    .select(_getSchema())
+    .from(users)
+    .where(or(eq(users.username, username), eq(users.email, email)))
+    .limit(1);
+
+  if (existingUsers.length > 0) {
+    return {
+      code: StatusCodes.CONFLICT,
+      error: {
+        message: 'User with this username or email already exists',
+      },
+    };
+  }
+
+  //hash the password
+  const hashedPassword = bcrypt.hashSync(password, 10); // Use bcrypt to hash the password
+
+  //insert new user into the database
+  const [newUser] = await db
+    .insert(users)
+    .values({
+      email,
+      username,
+      firstName,
+      lastName,
+      password: hashedPassword, //store the hashed password
+    })
+    .returning(_getSchema());
+
+  // return success response with the JWT token
+  return {
+    code: StatusCodes.CREATED,
+    data: {
+      user: newUser,
+    },
+  };
+};