NodeBB/src/controllers/accounts.js

"use strict";

var accountsController = {};

var fs = require('fs'),
	path = require('path'),
	winston = require('winston'),
	nconf = require('nconf'),
	async= require('async'),

	user = require('./../user'),
	posts = require('./../posts'),
	topics = require('./../topics'),
	postTools = require('../postTools'),
	utils = require('./../../public/src/utils'),
	meta = require('./../meta'),
	plugins = require('./../plugins'),
	image = require('./../image'),
	file = require('./../file');

function userNotFound(res) {
	return res.render('404', {
		error: 'User not found!'
	});
}

function userNotAllowed(res) {
	return res.render('403', {
		error: 'Not allowed.'
	});
}

function getUserDataByUserSlug(userslug, callerUID, callback) {
	user.getUidByUserslug(userslug, function(err, uid) {
		if(err || !uid) {
			return callback(err || new Error('[[error:invalid-uid]]'));
		}

		async.parallel({
			userData : function(next) {
				user.getUserData(uid, next);
			},
			userSettings : function(next) {
				user.getSettings(uid, next);
			},
			isAdmin : function(next) {
				user.isAdministrator(callerUID, next);
			},
			followStats: function(next) {
				user.getFollowStats(uid, next);
			},
			ips: function(next) {
				user.getIPs(uid, 4, next);
			}
		}, function(err, results) {
			if(err || !results.userData) {
				return callback(err || new Error('[[error:invalid-uid]]'));
			}

			var userData = results.userData;
			var userSettings = results.userSettings;
			var isAdmin = results.isAdmin;
			var self = parseInt(callerUID, 10) === parseInt(userData.uid, 10);

			userData.joindate = utils.toISOString(userData.joindate);
			if(userData.lastonline) {
				userData.lastonline = utils.toISOString(userData.lastonline);
			} else {
				userData.lastonline = userData.joindate;
			}

			if (!userData.birthday) {
				userData.age = '';
			} else {
				userData.age = Math.floor((new Date().getTime() - new Date(userData.birthday).getTime()) / 31536000000);
			}

			if (!(isAdmin || self || (userData.email && userSettings.showemail))) {
				userData.email = "";
			}

			if (self && !userSettings.showemail) {
				userData.emailClass = "";
			} else {
				userData.emailClass = "hide";
			}

			if (isAdmin || self) {
				userData.ips = results.ips;
			}

			userData.websiteName = userData.website.replace('http://', '').replace('https://', '');
			userData.banned = parseInt(userData.banned, 10) === 1;
			userData.uid = userData.uid;
			userData.yourid = callerUID;
			userData.theirid = userData.uid;

			userData.disableSignatures = meta.config.disableSignatures !== undefined && parseInt(meta.config.disableSignatures, 10) === 1;

			userData.followingCount = results.followStats.followingCount;
			userData.followerCount = results.followStats.followerCount;

			callback(null, userData);
		});
	});
}

accountsController.getUserByUID = function(req, res, next) {
	var uid = req.params.uid ? req.params.uid : 0;

	user.getUserData(uid, function(err, userData) {
		res.json(userData);
	});
};

accountsController.getAccount = function(req, res, next) {
	var callerUID = req.user ? parseInt(req.user.uid, 10) : 0;

	getUserDataByUserSlug(req.params.userslug, callerUID, function (err, userData) {
		if(err) {
			return next(err);
		}

		if(!userData) {
			return res.json(404, {
				error: 'User not found!'
			});
		}

		user.isFollowing(callerUID, userData.theirid, function (err, isFollowing) {
			if(err) {
				return next(err);
			}

			posts.getPostsByUid(callerUID, userData.theirid, 0, 9, function (err, userPosts) {
				if(err) {
					return next(err);
				}

				userData.posts = userPosts.posts.filter(function (p) {
					return p && parseInt(p.deleted, 10) !== 1;
				});

				userData.isFollowing = isFollowing;

				if (!userData.profileviews) {
					userData.profileviews = 1;
				}

				if (callerUID !== parseInt(userData.uid, 10) && callerUID) {
					user.incrementUserFieldBy(userData.uid, 'profileviews', 1);
				}

				postTools.parse(userData.signature, function (err, signature) {
					userData.signature = signature;

					res.render('account', userData);
				});
			});
		});
	});
};

accountsController.getFollowing = function(req, res, next) {
	getFollow('following', req, res, next);
};

accountsController.getFollowers = function(req, res, next) {
	getFollow('followers', req, res, next);
};

function getFollow(name, req, res, next) {
	var callerUID = req.user ? parseInt(req.user.uid, 10) : 0;
	var userData;

	async.waterfall([
		function(next) {
			getUserDataByUserSlug(req.params.userslug, callerUID, next);
		},
		function(data, next) {
			userData = data;
			if (!userData) {
				return userNotFound();
			}
			var method = name === 'following' ? 'getFollowing' : 'getFollowers';
			user[method](userData.uid, next);
		}
	], function(err, users) {
		if(err) {
			return next(err);
		}
		userData[name] = users;
		userData[name + 'Count'] = users.length;

		res.render(name, userData);
	});
}

accountsController.getFavourites = function(req, res, next) {
	var callerUID = req.user ? parseInt(req.user.uid, 10) : 0;

	user.getUidByUserslug(req.params.userslug, function (err, uid) {
		if (!uid) {
			return userNotFound();
		}

		if (parseInt(uid, 10) !== callerUID) {
			return userNotAllowed();
		}

		user.getUserFields(uid, ['username', 'userslug'], function (err, userData) {
			if (err) {
				return next(err);
			}

			if (!userData) {
				return userNotFound();
			}

			posts.getFavourites(uid, 0, 9, function (err, favourites) {
				if (err) {
					return next(err);
				}

				userData.theirid = uid;
				userData.yourid = callerUID;
				userData.posts = favourites.posts;
				userData.nextStart = favourites.nextStart;

				res.render('favourites', userData);
			});
		});
	});
};

accountsController.getPosts = function(req, res, next) {
	var callerUID = req.user ? parseInt(req.user.uid, 10) : 0;

	getBaseUser(req.params.userslug, function(err, userData) {
		if (err) {
			return next(err);
		}

		if (!userData) {
			return userNotFound();
		}

		posts.getPostsByUid(callerUID, userData.uid, 0, 19, function (err, userPosts) {
			if (err) {
				return next(err);
			}

			userData.theirid = userData.uid;
			userData.yourid = callerUID;
			userData.posts = userPosts.posts;
			userData.nextStart = userPosts.nextStart;

			res.render('accountposts', userData);
		});
	});
};

accountsController.getTopics = function(req, res, next) {
	var callerUID = req.user ? parseInt(req.user.uid, 10) : 0;

	getBaseUser(req.params.userslug, function(err, userData) {
		if (err) {
			return next(err);
		}

		if (!userData) {
			return userNotFound();
		}

		var set = 'uid:' + userData.uid + ':topics';
		topics.getTopicsFromSet(callerUID, set, 0, 19, function(err, userTopics) {
			if(err) {
				return next(err);
			}

			userData.theirid = userData.uid;
			userData.yourid = callerUID;
			userData.topics = userTopics.topics;
			userData.nextStart = userTopics.nextStart;

			res.render('accounttopics', userData);
		});
	});
};

function getBaseUser(userslug, callback) {
	user.getUidByUserslug(userslug, function (err, uid) {
		if (err || !uid) {
			return callback(err);
		}

		user.getUserFields(uid, ['uid', 'username', 'userslug'], callback);
	});
}

accountsController.accountEdit = function(req, res, next) {
	var callerUID = req.user ? parseInt(req.user.uid, 10) : 0;

	getUserDataByUserSlug(req.params.userslug, callerUID, function (err, userData) {
		if(err) {
			return next(err);
		}

		res.render('accountedit', userData);
	});
};

accountsController.accountSettings = function(req, res, next) {
	var callerUID = req.user ? parseInt(req.user.uid, 10) : 0;

	user.getUidByUserslug(req.params.userslug, function(err, uid) {
		if (err) {
			return next(err);
		}

		if (!uid) {
			return userNotFound();
		}

		if (parseInt(uid, 10) !== callerUID) {
			return userNotAllowed();
		}

		plugins.fireHook('filter:user.settings', [], function(err, settings) {
			if (err) {
				return next(err);
			}

			user.getUserFields(uid, ['username', 'userslug'], function(err, userData) {
				if (err) {
					return next(err);
				}

				if(!userData) {
					return userNotFound();
				}
				userData.yourid = req.user.uid;
				userData.theirid = uid;
				userData.settings = settings;

				res.render('accountsettings', userData);
			});
		});

	});
};

accountsController.uploadPicture = function (req, res, next) {
	var uploadSize = parseInt(meta.config.maximumProfileImageSize, 10) || 256;
	if (req.files.userPhoto.size > uploadSize * 1024) {
		fs.unlink(req.files.userPhoto.path);
		return res.json({
			error: 'Images must be smaller than ' + uploadSize + ' kb!'
		});
	}

	var allowedTypes = ['image/png', 'image/jpeg', 'image/jpg', 'image/gif'];
	if (allowedTypes.indexOf(req.files.userPhoto.type) === -1) {
		fs.unlink(req.files.userPhoto.path);
		return res.json({
			error: 'Allowed image types are png, jpg and gif!'
		});
	}

	var extension = path.extname(req.files.userPhoto.name);
	if (!extension) {
		fs.unlink(req.files.userPhoto.path);
		return res.json({
			error: 'Error uploading file! Error : Invalid extension!'
		});
	}

	var updateUid = req.user.uid;

	async.waterfall([
		function(next) {
			image.resizeImage(req.files.userPhoto.path, extension, 128, 128, next);
		},
		function(next) {
			image.convertImageToPng(req.files.userPhoto.path, extension, next);
		},
		function(next) {
			try {
				var params = JSON.parse(req.body.params);
				if(parseInt(updateUid, 10) === parseInt(params.uid, 10)) {
					return next();
				}

				user.isAdministrator(req.user.uid, function(err, isAdmin) {
					if(err) {
						return next(err);
					}

					if(!isAdmin) {
						return userNotAllowed();
					}
					updateUid = params.uid;
					next();
				});
			} catch(err) {
				next(err);
			}
		}
	], function(err, result) {

		function done(err, image) {
			fs.unlink(req.files.userPhoto.path);
			if(err) {
				return res.json({error: err.message});
			}

			user.setUserField(updateUid, 'uploadedpicture', image.url);
			user.setUserField(updateUid, 'picture', image.url);
			res.json({
				path: image.url
			});
		}

		if(err) {
			fs.unlink(req.files.userPhoto.path);
			return res.json({error:err.message});
		}

		if(plugins.hasListeners('filter:uploadImage')) {
			return plugins.fireHook('filter:uploadImage', req.files.userPhoto, done);
		}

		var convertToPNG = parseInt(meta.config['profile:convertProfileImageToPNG'], 10);
		var filename = updateUid + '-profileimg' + (convertToPNG ? '.png' : extension);

		user.getUserField(updateUid, 'uploadedpicture', function (err, oldpicture) {
			if (!oldpicture) {
				file.saveFileToLocal(filename, req.files.userPhoto.path, done);
				return;
			}

			var absolutePath = path.join(nconf.get('base_dir'), nconf.get('upload_path'), path.basename(oldpicture));

			fs.unlink(absolutePath, function (err) {
				if (err) {
					winston.err(err);
				}

				file.saveFileToLocal(filename, req.files.userPhoto.path, done);
			});
		});
	});
};

accountsController.getNotifications = function(req, res, next) {
	user.notifications.getAll(req.user.uid, null, null, function(err, notifications) {
		res.render('notifications', {
			notifications: notifications
		});
	});
};

module.exports = accountsController;