mirror of
https://github.com/overleaf/overleaf.git
synced 2024-11-07 20:31:06 -05:00
238 lines
8.4 KiB
CoffeeScript
238 lines
8.4 KiB
CoffeeScript
|
User = require('../models/User').User
|
||
|
|
sanitize = require('validator').sanitize
|
||
|
|
fs = require('fs')
|
||
|
|
_ = require('underscore')
|
||
|
|
emailer = require('../managers/EmailManager')
|
||
|
|
logger = require('logger-sharelatex')
|
||
|
|
Security = require('../managers/SecurityManager')
|
||
|
|
Settings = require('settings-sharelatex')
|
||
|
|
newsLetterManager = require('../managers/NewsletterManager')
|
||
|
|
dropboxHandler = require('../Features/Dropbox/DropboxHandler')
|
||
|
|
userRegistrationHandler = require('../Features/User/UserRegistrationHandler')
|
||
|
|
metrics = require('../infrastructure/Metrics')
|
||
|
|
AnalyticsManager = require('../Features/Analytics/AnalyticsManager')
|
||
|
|
ReferalAllocator = require('../Features/Referal/ReferalAllocator')
|
||
|
|
AuthenticationManager = require("../Features/Authentication/AuthenticationManager")
|
||
|
|
AuthenticationController = require("../Features/Authentication/AuthenticationController")
|
||
|
|
SubscriptionLocator = require("../Features/Subscription/SubscriptionLocator")
|
||
|
|
UserDeleter = require("../Features/User/UserDeleter")
|
||
|
|
Url = require("url")
|
||
|
|
|
||
|
|
module.exports =
|
||
|
|
|
||
|
|
registerForm : (req, res)->
|
||
|
|
|
||
|
|
sharedProjectData =
|
||
|
|
project_name:req.query.project_name
|
||
|
|
user_first_name:req.query.user_first_name
|
||
|
|
|
||
|
|
newTemplateData = {}
|
||
|
|
if req.session.templateData?
|
||
|
|
newTemplateData.templateName = req.session.templateData.templateName
|
||
|
|
|
||
|
|
res.render 'user/register',
|
||
|
|
title: 'Register'
|
||
|
|
redir: req.query.redir
|
||
|
|
sharedProjectData: sharedProjectData
|
||
|
|
newTemplateData: newTemplateData
|
||
|
|
new_email:req.query.new_email || ""
|
||
|
|
|
||
|
|
|
||
|
|
loginForm : (req, res)->
|
||
|
|
res.render 'user/login',
|
||
|
|
title: 'Login',
|
||
|
|
redir: req.query.redir
|
||
|
|
|
||
|
|
apiRegister : (req, res, next = (error) ->)->
|
||
|
|
logger.log email: req.body.email, "attempted register"
|
||
|
|
redir = Url.parse(req.body.redir or "/project").path
|
||
|
|
userRegistrationHandler.validateRegisterRequest req, (err, data)->
|
||
|
|
if err?
|
||
|
|
logger.log validation_error: err, "user validation error"
|
||
|
|
metrics.inc "user.register.validation-error"
|
||
|
|
res.send message:
|
||
|
|
text:err
|
||
|
|
type:'error'
|
||
|
|
else
|
||
|
|
User.findOne {email:data.email}, (err, foundUser)->
|
||
|
|
if foundUser? && foundUser.holdingAccount == false
|
||
|
|
AuthenticationController.login req, res
|
||
|
|
logger.log email: data.email, "email already registered"
|
||
|
|
metrics.inc "user.register.already-registered"
|
||
|
|
return AuthenticationController.login req, res
|
||
|
|
else if foundUser? && foundUser.holdingAccount == true #someone put them in as a collaberator
|
||
|
|
user = foundUser
|
||
|
|
user.holdingAccount == false
|
||
|
|
else
|
||
|
|
user = new User email: data.email
|
||
|
|
d = new Date()
|
||
|
|
user.first_name = data.first_name
|
||
|
|
user.last_name = data.last_name
|
||
|
|
user.signUpDate = new Date()
|
||
|
|
metrics.inc "user.register.success"
|
||
|
|
user.save (err)->
|
||
|
|
req.session.user = user
|
||
|
|
req.session.justRegistered = true
|
||
|
|
logger.log user: user, "registered"
|
||
|
|
AuthenticationManager.setUserPassword user._id, data.password, (error) ->
|
||
|
|
return next(error) if error?
|
||
|
|
res.send
|
||
|
|
redir:redir
|
||
|
|
id:user._id.toString()
|
||
|
|
first_name: user.first_name
|
||
|
|
last_name: user.last_name
|
||
|
|
email: user.email
|
||
|
|
created: Date.now()
|
||
|
|
#things that can be fired and forgot.
|
||
|
|
newsLetterManager.subscribe user
|
||
|
|
ReferalAllocator.allocate req.session.referal_id, user._id, req.session.referal_source, req.session.referal_medium
|
||
|
|
|
||
|
|
requestPasswordReset : (req, res)->
|
||
|
|
res.render 'user/passwordReset',
|
||
|
|
title: 'Password Reset',
|
||
|
|
|
||
|
|
doRequestPasswordReset : (req, res, next = (error) ->)->
|
||
|
|
email = sanitize(req.body.email).xss()
|
||
|
|
email = sanitize(email).trim()
|
||
|
|
email = email.toLowerCase()
|
||
|
|
logger.log email: email, "password reset requested"
|
||
|
|
User.findOne {'email':email}, (err, user)->
|
||
|
|
if(user?)
|
||
|
|
randomPassword = generateRandomString 12
|
||
|
|
AuthenticationManager.setUserPassword user._id, randomPassword, (error) ->
|
||
|
|
return next(error) if error?
|
||
|
|
emailOptions =
|
||
|
|
receiver : user.email
|
||
|
|
subject : "Password Reset - ShareLatex.com"
|
||
|
|
heading : "Password Reset"
|
||
|
|
message : " Your password has been reset, the new password is <p> #{randomPassword}
|
||
|
|
<p> please login <a href=#{Settings.siteUrl}/user/settings>click here</a>
|
||
|
|
"
|
||
|
|
emailer.sendEmail emailOptions
|
||
|
|
metrics.inc "user.password-reset"
|
||
|
|
res.send message:
|
||
|
|
text:'An email with your new password has been sent to you'
|
||
|
|
type:'success'
|
||
|
|
else
|
||
|
|
res.send message:
|
||
|
|
text:'This email address has not been registered with us'
|
||
|
|
type:'failure'
|
||
|
|
logger.info email: email, "no user found with email"
|
||
|
|
|
||
|
|
logout : (req, res)->
|
||
|
|
metrics.inc "user.logout"
|
||
|
|
if req.session? && req.session.user?
|
||
|
|
logger.log user: req.session.user, "logging out"
|
||
|
|
req.session.destroy (err)->
|
||
|
|
if err
|
||
|
|
logger.err err: err, 'error destorying session'
|
||
|
|
res.redirect '/login'
|
||
|
|
|
||
|
|
settings : (req, res)->
|
||
|
|
logger.log user: req.session.user, "loading settings page"
|
||
|
|
User.findById req.session.user._id, (err, user)->
|
||
|
|
dropboxHandler.getUserRegistrationStatus user._id, (err, status)->
|
||
|
|
userIsRegisteredWithDropbox = !err? and status.registered
|
||
|
|
res.render 'user/settings',
|
||
|
|
title:'Your settings',
|
||
|
|
userCanSeeDropbox: user.featureSwitches.dropbox
|
||
|
|
userHasDropboxFeature: user.features.dropbox
|
||
|
|
userIsRegisteredWithDropbox: userIsRegisteredWithDropbox
|
||
|
|
user: user,
|
||
|
|
themes: THEME_LIST,
|
||
|
|
editors: ['default','vim','emacs'],
|
||
|
|
fontSizes: ['10','11','12','13','14','16','20','24']
|
||
|
|
languages: Settings.languages,
|
||
|
|
accountSettingsTabActive: true
|
||
|
|
|
||
|
|
unsubscribe: (req, res)->
|
||
|
|
User.findById req.session.user._id, (err, user)->
|
||
|
|
newsLetterManager.unsubscribe user, ->
|
||
|
|
res.send()
|
||
|
|
|
||
|
|
apiUpdate : (req, res)->
|
||
|
|
logger.log user: req.session.user, "updating account settings"
|
||
|
|
metrics.inc "user.settings-update"
|
||
|
|
User.findById req.session.user._id, (err, user)->
|
||
|
|
if(user)
|
||
|
|
user.first_name = sanitize(req.body.first_name).xss().trim()
|
||
|
|
user.last_name = sanitize(req.body.last_name).xss().trim()
|
||
|
|
user.ace.mode = sanitize(req.body.mode).xss().trim()
|
||
|
|
user.ace.theme = sanitize(req.body.theme).xss().trim()
|
||
|
|
user.ace.fontSize = sanitize(req.body.fontSize).xss().trim()
|
||
|
|
user.ace.autoComplete = req.body.autoComplete == "true"
|
||
|
|
user.ace.spellCheckLanguage = req.body.spellCheckLanguage
|
||
|
|
user.ace.pdfViewer = req.body.pdfViewer
|
||
|
|
user.save()
|
||
|
|
res.send {}
|
||
|
|
|
||
|
|
changePassword : (req, res, next = (error) ->)->
|
||
|
|
metrics.inc "user.password-change"
|
||
|
|
oldPass = req.body.currentPassword
|
||
|
|
AuthenticationManager.authenticate _id: req.session.user._id, oldPass, (err, user)->
|
||
|
|
if(user)
|
||
|
|
logger.log user: req.session.user, "changing password"
|
||
|
|
newPassword1 = req.body.newPassword1
|
||
|
|
newPassword2 = req.body.newPassword2
|
||
|
|
if newPassword1 != newPassword2
|
||
|
|
logger.log user: user, "passwords do not match"
|
||
|
|
res.send
|
||
|
|
message:
|
||
|
|
type:'error'
|
||
|
|
text:'Your passwords do not match'
|
||
|
|
else
|
||
|
|
logger.log user: user, "password changed"
|
||
|
|
AuthenticationManager.setUserPassword user._id, newPassword1, (error) ->
|
||
|
|
return next(error) if error?
|
||
|
|
res.send
|
||
|
|
message:
|
||
|
|
type:'success'
|
||
|
|
text:'Your password has been changed'
|
||
|
|
else
|
||
|
|
logger.log user: user, "current password wrong"
|
||
|
|
res.send
|
||
|
|
message:
|
||
|
|
type:'error'
|
||
|
|
text:'Your old password is wrong'
|
||
|
|
|
||
|
|
redirectUserToDropboxAuth: (req, res)->
|
||
|
|
user_id = req.session.user._id
|
||
|
|
dropboxHandler.getDropboxRegisterUrl user_id, (err, url)->
|
||
|
|
logger.log url:url, "redirecting user for dropbox auth"
|
||
|
|
res.redirect url
|
||
|
|
|
||
|
|
completeDropboxRegistration: (req, res)->
|
||
|
|
user_id = req.session.user._id
|
||
|
|
dropboxHandler.completeRegistration user_id, (err, success)->
|
||
|
|
res.redirect('/user/settings#dropboxSettings')
|
||
|
|
|
||
|
|
unlinkDropbox: (req, res)->
|
||
|
|
user_id = req.session.user._id
|
||
|
|
dropboxHandler.unlinkAccount user_id, (err, success)->
|
||
|
|
res.redirect('/user/settings#dropboxSettings')
|
||
|
|
|
||
|
|
deleteUser: (req, res)->
|
||
|
|
user_id = req.session.user._id
|
||
|
|
UserDeleter.deleteUser user_id, (err)->
|
||
|
|
if !err?
|
||
|
|
req.session.destroy()
|
||
|
|
res.send(200)
|
||
|
|
|
||
|
|
|
||
|
|
generateRandomString = (len)->
|
||
|
|
chars = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXTZabcdefghiklmnopqrstuvwxyz"
|
||
|
|
randomString = ''
|
||
|
|
count = 0
|
||
|
|
while count++ < len
|
||
|
|
rnum = Math.floor(Math.random() * chars.length)
|
||
|
|
randomString += chars.substring(rnum,rnum+1)
|
||
|
|
return randomString
|
||
|
|
|
||
|
|
THEME_LIST = []
|
||
|
|
do generateThemeList = () ->
|
||
|
|
files = fs.readdirSync __dirname + '/../../../public/js/ace/theme'
|
||
|
|
for file in files
|
||
|
|
if file.slice(-2) == "js"
|
||
|
|
cleanName = file.slice(0,-3)
|
||
|
|
THEME_LIST.push name: cleanName
|