1 files changed, 63 insertions, 13 deletions

diff --git a/src/db/user.ts b/src/db/user.ts
index 9152383..4e5a76c 100644
--- a/src/db/user.ts
+++ b/src/db/user.ts
@@ -3,6 +3,7 @@ import { hash, compare, genSalt } from "https://deno.land/x/bcrypt/mod.ts";
 
 class User {
     private controller: DBController;
+
     constructor() {
         this.controller = new DBController();
     }
@@ -17,7 +18,7 @@ class User {
     async createUser(email: string, username: string, password: string, isAdmin = false): Promise<boolean> {
         const salt = await genSalt(12);
         const passwordHash = await hash(password, salt);
-        const verification = this.generateId();
+        const verification = User.generateId();
         try {
             await this.controller.execute(
                 "INSERT INTO users (email, username, password, verification, is_admin) VALUE (?, ?, ?, ?, ?)",
@@ -35,21 +36,22 @@ class User {
      * @param plainTextPassword
      */
     async login(username: string, plainTextPassword: string): Promise<loginData> {
-        const { uid, password, verification, darkTheme } = (
-            await this.controller.query(
-                "SELECT id as uid, password, verification, dark_theme as darkTheme FROM users WHERE username = ?",
-                [username]
-            )
-        )[0];
-        if (compare(plainTextPassword, password)) {
+        try {
+            const { uid, password, verification, darkTheme } = (
+                await this.controller.query(
+                    "SELECT id uid, password, verification, dark_theme darkTheme FROM users WHERE username = ?",
+                    [username]
+                )
+            )[0];  // Will throw an error if user does not exist => good to go?
+            if (!compare(plainTextPassword, password)) return { success: false };
             return {
                 success: true,
                 uid,
                 darkTheme,
                 verification,
             };
-        } else {
-            return { success: false };
+        } catch (e) {
+            throw e;
         }
     }
 
@@ -59,15 +61,16 @@ class User {
      * @param uid
      * @param userVerification
      */
-    async getUserByVerificationId(uid: number, userVerification: string): Promise<userData | undefined> {
+    async getUserByVerificationId(uid?: number, userVerification?: string): Promise<userData | undefined> {
         try {
+            if (!uid || !userVerification || uid < 1 || userVerification.length !== 64) throw new TypeError("Wrong parameters");
             const user = (
                 await this.controller.query(
                     "SELECT id, email, username, verification, dark_theme darkTheme, is_admin isAdmin FROM users WHERE id = ? AND verification = ?",
                     [uid, userVerification]
                 )
             )[0];
-            if (user) return user as userData;
+            return user as userData;
         } catch (e) {
             throw e;
         }
@@ -86,6 +89,20 @@ class User {
     }
 
     /**
+     * Gets user theme
+     * @param uid
+     */
+    async getUserTheme(uid: number): Promise<boolean> {
+        try {
+            const users = await this.controller.query("SELECT dark_theme FROM users WHERE id = ?", [uid]);
+            if (users.length > 0) return users[0].dark_theme;
+            return true;
+        } catch (e) {
+            throw e;
+        }
+    }
+
+    /**
      * Sets admin status of a user
      * @param uid
      * @param isAdmin
@@ -99,12 +116,45 @@ class User {
     }
 
     /**
+     *
+     * @param {number} uid
+     * @returns {Promise<boolean>}
+     */
+    async isAdmin(uid: number): Promise<boolean> {
+        try {
+            const user = (await this.controller.query("SELECT is_admin FROM users WHERE id = ?", [uid]))[0];
+            return user.is_admin;
+        } catch (e) {
+            throw e;
+        }
+    }
+
+    /**
+     *
+     * @param {number} uid
+     * @param {string} currentPassword
+     * @param {string} newPassword
+     * @returns {Promise<void>}
+     */
+    async changePassword(uid: number, currentPassword: string, newPassword: string) {
+        try {
+            const userPassword = (await this.controller.query("SELECT password FROM users WHERE id = ?", [uid]))[0];
+            if (!compare(currentPassword, userPassword)) throw new Error("Passwords do not match");
+            const salt = await genSalt(12);
+            const passwordHash = await hash(newPassword, salt);
+            await this.controller.execute("UPDATE users SET password = ? WHERE id = ?", [passwordHash, uid]);
+        } catch (e) {
+            throw e;
+        }
+    }
+
+    /**
      * Generate random id
      * @param len
      * @private
      */
     // TODO: Improve
-    private generateId(len = 64): string {
+    static generateId(len = 64): string {
         const values = new Uint8Array(len / 2);
         crypto.getRandomValues(values);
         return Array.from(values, (dec) => ("0" + dec.toString(36)).substr(-2)).join("");