auth.service.ts
3.23 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
import {
BadRequestException,
Injectable,
NotFoundException,
} from '@nestjs/common';
import { PrismaService } from 'nestjs-prisma';
import { JwtService } from '@nestjs/jwt';
import { User } from '@prisma/client';
import * as bcrypt from 'bcrypt';
@Injectable()
export class AuthService {
constructor(
private readonly prisma: PrismaService,
private readonly jwtService: JwtService,
) {}
async createUser(name: string, email: string, password: string) {
const hashedPassword = await bcrypt.hash(password, 10);
const user = await this.prisma.user.create({
data: {
name,
email,
password: hashedPassword,
},
});
return this.generateTokens(user);
}
async login(email: string, password: string) {
const user = await this.prisma.user.findUnique({ where: { email } });
if (!user) {
throw new NotFoundException('No user found');
}
const passwordMatch = await bcrypt.compare(password, user.password);
if (!passwordMatch) {
throw new BadRequestException('Wrong password');
}
return this.generateTokens(user);
}
validateUser(userId: string): Promise<User> {
return this.prisma.user.findUnique({ where: { id: userId } });
}
getUserFromToken(token: string) {
const id = this.jwtService.decode(token)['id'];
return this.prisma.user.findUnique({ where: { id: id } });
}
generateTokens(user: User) {
const payload = {
id: user.id,
name: user.name,
email: user.email,
};
return {
access_token: this.jwtService.sign(payload),
};
}
async refreshTokens(token: string) {
const _user = await this.getUserFromToken(token);
const user = {
id: _user.id,
name: _user.name,
email: _user.email,
password: _user.password,
role: _user.role,
};
return this.generateTokens(user);
}
async deleteUser(userId: string) {
return this.prisma.user.delete({ where: { id: userId } });
}
async updateUser(token: string, name: string, email: string) {
return this.prisma.user.update({
where: { id: (await this.getUserFromToken(token)).id },
data: {
name,
email,
},
});
}
async updatePassword(token: string, password: string) {
const hashedPassword = await bcrypt.hash(password, 10);
return this.prisma.user.update({
where: { id: (await this.getUserFromToken(token)).id },
data: {
password: hashedPassword,
},
});
}
async AmIAdmin(token: string) {
const user = await this.prisma.user.findUnique({
where: { id: (await this.getUserFromToken(token)).id },
});
if (user.role === 'ADMIN') {
return true;
} else {
return false;
}
}
async _changeUserPassword(
token: string,
userId: string,
name?: string,
email?: string,
password?: string,
) {
if (this.AmIAdmin(token)) {
const hashedPassword = await bcrypt.hash(password, 10);
return this.prisma.user.update({
where: { id: userId },
data: {
name: name,
email: email,
password: hashedPassword,
},
});
} else {
throw new BadRequestException('You are not admin');
}
}
// return the newly saved user
}