el.xwx.moe/lib/api/controllers/users/userId/updateUserById.ts

import { prisma } from "@/lib/api/db";
import { AccountSettings } from "@/types/global";
import bcrypt from "bcrypt";
import removeFile from "@/lib/api/storage/removeFile";
import createFile from "@/lib/api/storage/createFile";
import updateCustomerEmail from "@/lib/api/updateCustomerEmail";
import createFolder from "@/lib/api/storage/createFolder";

const emailEnabled =
  process.env.EMAIL_FROM && process.env.EMAIL_SERVER ? true : false;

export default async function updateUserById(
  userId: number,
  data: AccountSettings
) {
  const ssoUser = await prisma.account.findFirst({
    where: {
      userId: userId,
    },
  });
  const user = await prisma.user.findUnique({
    where: {
      id: userId,
    },
  });

  if (ssoUser) {
    // deny changes to SSO-defined properties
    if (data.email !== user?.email) {
      return {
        response: "SSO users cannot change their email.",
        status: 400,
      };
    }
    if (data.newPassword) {
      return {
        response: "SSO Users cannot change their password.",
        status: 400,
      };
    }
    if (data.name !== user?.name) {
      return {
        response: "SSO Users cannot change their name.",
        status: 400,
      };
    }
    if (data.username !== user?.username) {
      return {
        response: "SSO Users cannot change their username.",
        status: 400,
      };
    }
    if (data.image?.startsWith("data:image/jpeg;base64")) {
      return {
        response: "SSO Users cannot change their avatar.",
        status: 400,
      };
    }
  } else {
    // verify only for non-SSO users
    // SSO users cannot change their email, password, name, username, or avatar
    if (emailEnabled && !data.email)
      return {
        response: "Email invalid.",
        status: 400,
      };
    else if (!data.username)
      return {
        response: "Username invalid.",
        status: 400,
      };
    if (data.newPassword && data.newPassword?.length < 8)
      return {
        response: "Password must be at least 8 characters.",
        status: 400,
      };
    // Check email (if enabled)
    const checkEmail =
      /^(([^<>()[\]\.,;:\s@\"]+(\.[^<>()[\]\.,;:\s@\"]+)*)|(\".+\"))@(([^<>()[\]\.,;:\s@\"]+\.)+[^<>()[\]\.,;:\s@\"]{2,})$/i;
    if (emailEnabled && !checkEmail.test(data.email?.toLowerCase() || ""))
      return {
        response: "Please enter a valid email.",
        status: 400,
      };

    const checkUsername = RegExp("^[a-z0-9_-]{3,31}$");

    if (!checkUsername.test(data.username.toLowerCase()))
      return {
        response:
          "Username has to be between 3-30 characters, no spaces and special characters are allowed.",
        status: 400,
      };

    const userIsTaken = await prisma.user.findFirst({
      where: {
        id: { not: userId },
        OR: emailEnabled
          ? [
              {
                username: data.username.toLowerCase(),
              },
              {
                email: data.email?.toLowerCase(),
              },
            ]
          : [
              {
                username: data.username.toLowerCase(),
              },
            ],
      },
    });

    if (userIsTaken) {
      if (data.email?.toLowerCase().trim() === userIsTaken.email?.trim())
        return {
          response: "Email is taken.",
          status: 400,
        };
      else if (
        data.username?.toLowerCase().trim() === userIsTaken.username?.trim()
      )
        return {
          response: "Username is taken.",
          status: 400,
        };

      return {
        response: "Username/Email is taken.",
        status: 400,
      };
    }

    // Avatar Settings

    if (data.image?.startsWith("data:image/jpeg;base64")) {
      if (data.image.length < 1572864) {
        try {
          const base64Data = data.image.replace(
            /^data:image\/jpeg;base64,/,
            ""
          );

          createFolder({ filePath: `uploads/avatar` });

          await createFile({
            filePath: `uploads/avatar/${userId}.jpg`,
            data: base64Data,
            isBase64: true,
          });
        } catch (err) {
          console.log("Error saving image:", err);
        }
      } else {
        console.log("A file larger than 1.5MB was uploaded.");
        return {
          response: "A file larger than 1.5MB was uploaded.",
          status: 400,
        };
      }
    } else if (data.image == "") {
      removeFile({ filePath: `uploads/avatar/${userId}.jpg` });
    }
  }

  const previousEmail = (
    await prisma.user.findUnique({ where: { id: userId } })
  )?.email;

  // Other settings

  const saltRounds = 10;
  const newHashedPassword = bcrypt.hashSync(data.newPassword || "", saltRounds);

  const updatedUser = await prisma.user.update({
    where: {
      id: userId,
    },
    data: {
      name: data.name,
      username: data.username?.toLowerCase().trim(),
      email: data.email?.toLowerCase().trim(),
      isPrivate: data.isPrivate,
      image: data.image ? `uploads/avatar/${userId}.jpg` : "",
      archiveAsScreenshot: data.archiveAsScreenshot,
      archiveAsPDF: data.archiveAsPDF,
      archiveAsWaybackMachine: data.archiveAsWaybackMachine,
      linksRouteTo: data.linksRouteTo,
      password:
        data.newPassword && data.newPassword !== ""
          ? newHashedPassword
          : undefined,
    },
    include: {
      whitelistedUsers: true,
      subscriptions: true,
    },
  });

  const { whitelistedUsers, password, subscriptions, ...userInfo } =
    updatedUser;

  // If user.whitelistedUsers is not provided, we will assume the whitelistedUsers should be removed
  const newWhitelistedUsernames: string[] = data.whitelistedUsers || [];

  // Get the current whitelisted usernames
  const currentWhitelistedUsernames: string[] = whitelistedUsers.map(
    (data) => data.username
  );

  // Find the usernames to be deleted (present in current but not in new)
  const usernamesToDelete: string[] = currentWhitelistedUsernames.filter(
    (username) => !newWhitelistedUsernames.includes(username)
  );

  // Find the usernames to be created (present in new but not in current)
  const usernamesToCreate: string[] = newWhitelistedUsernames.filter(
    (username) =>
      !currentWhitelistedUsernames.includes(username) && username.trim() !== ""
  );

  // Delete whitelistedUsers that are not present in the new list
  await prisma.whitelistedUser.deleteMany({
    where: {
      userId: userId,
      username: {
        in: usernamesToDelete,
      },
    },
  });

  // Create new whitelistedUsers that are not in the current list, no create many ;(
  for (const username of usernamesToCreate) {
    await prisma.whitelistedUser.create({
      data: {
        username,
        userId: userId,
      },
    });
  }

  const STRIPE_SECRET_KEY = process.env.STRIPE_SECRET_KEY;

  if (STRIPE_SECRET_KEY && emailEnabled && previousEmail !== data.email)
    await updateCustomerEmail(
      STRIPE_SECRET_KEY,
      previousEmail as string,
      data.email as string
    );

  const response: Omit<AccountSettings, "password"> = {
    ...userInfo,
    whitelistedUsers: newWhitelistedUsernames,
    image: userInfo.image ? `${userInfo.image}?${Date.now()}` : "",
    subscription: { active: subscriptions?.active },
  };

  return { response, status: 200 };
}