Sathira Sri Sathara
9d3d431416
- Added account types and privileged account types constants. - Created admin user controller for updating user security fields. - Developed role assignment controller for managing user roles. - Implemented validation middleware for request schemas. - Defined user role and auth session models for database interactions. - Created services for authentication, email notifications, and OTP handling. - Developed OAuth service for Google and Apple authentication. - Added JWT utility functions for token generation and verification. - Implemented comprehensive tests for authentication, session management, and password policies. - Created migration for updating user schema and adding new tables for auth sessions and user identities.
54 lines
1.6 KiB
JavaScript
54 lines
1.6 KiB
JavaScript
/**
|
|
* Copyright (c) 2026 Niolla
|
|
* All rights reserved.
|
|
*
|
|
* This source code is proprietary and confidential.
|
|
* Unauthorized copying, modification, distribution, or use
|
|
* of this file, via any medium, is strictly prohibited.
|
|
*/
|
|
|
|
// app/routes/profile.routes.js
|
|
|
|
const express = require("express");
|
|
const router = express.Router();
|
|
const profileController = require("../controllers/profile.controller.js");
|
|
const authController = require("../controllers/auth.controller.js");
|
|
const { authenticate } = require("../middleware/auth.middleware");
|
|
|
|
const {
|
|
authorizedAccountType,
|
|
checkPermission,
|
|
} = require("../middleware/permission.middleware");
|
|
const PERMISSIONS = require("../constants/permissions");
|
|
const { sensitiveLimiter } = require("../middleware/rateLimit.middleware");
|
|
const validate = require("../middleware/validate.middleware");
|
|
const schemas = require("../validation/auth.schemas");
|
|
const { requireOwnership } = require("../middleware/permission.middleware");
|
|
|
|
router.post("/req-reset-password", sensitiveLimiter, validate(schemas.forgot), authController.forgotPassword);
|
|
|
|
router.post("/reset-password", sensitiveLimiter, validate(schemas.reset), authController.resetPassword);
|
|
|
|
router.post(
|
|
"/change-password",
|
|
authenticate,
|
|
validate(schemas.change),
|
|
authController.changePassword,
|
|
);
|
|
|
|
router.get(
|
|
"/avatar/:userId",
|
|
authenticate,
|
|
requireOwnership("userId"),
|
|
profileController.getProfileAvatar,
|
|
);
|
|
|
|
router.get(
|
|
"/background/:userId",
|
|
authenticate,
|
|
requireOwnership("userId"),
|
|
profileController.getProfileBackgroundImage,
|
|
);
|
|
|
|
module.exports = router;
|