EMI-Backend/routes/profile.js

var express = require('express')
var router = express.Router()

const DB = require("../mongoDB.js");
const Profile = require("../def/profile.js");
const Notifications = require("./../notifications.js");
const { getSessionId, getUserId, getProfileId } = require("./../utils/sessionUtils.js");

DB.getDB.then((DB) => {

    const profileBelongsToUser = async (profileid, userid) => {
        const profile = await DB.getProfileCache(profileid);
        if (!profile) return false;
        return profile.userid === String(userid);
    }

    router.get("/mine", async (req, res) => {
        let userid = getUserId(req);
        let profiles = await DB.getUserProfiles(userid);
        return res.json({
            status: "ok",
            profiles
        });
    });

    router.get("/new", async (req, res) => { //Deprecated please use route post("/")
        let profile = {
            userid: getUserId(req),
            ...req.query.content
        };
        let profileObj = new Profile(profile);
        let r = await DB.newProfile(profileObj);
        return res.json({
            status: "ok",
            ...profileObj.toObj()
        });
    });

    router.post("/", async (req, res) => {
        let profile = {
            userid: getUserId(req),
            ...req.body.content
        };
        try {
            let profileObj = new Profile(profile);
            let r = await DB.newProfile(profileObj);
            return res.json({
                status: "ok",
                ...profileObj.toObj()
            });
        } catch (error) {
            console.error("Error creating profile", error);
            return res.json({
                status: error,
            });
        }

    });

    router.post("/invite", async (req, res) => {
        try {
            const userid = getUserId(req);
            let { name, email } = req.body; // Destructuring for clarity
            // Validate required fields
            if (!name || !email) {
                return res.status(400).json({ status: "Name and email are required" });
            }
            // Validate email format
            email = email.trim().toLowerCase()
            const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
            if (!emailRegex.test(email)) {
                return res.status(400).json({ status: "Invalid email format" });
            }
            // Create new invitation, this returns a string if failed
            let r = await DB.newInvitation(userid, name, email);
            if (r instanceof String) {
                // Handle failure response from DB.newInvitation
                return res.status(400).json({
                    status: r,
                    message: `Failed to send invitation: ${r}`
                });
            }
            // Handle response from DB.newInvitation
            // Send email invitation
            let senderProfile = await DB.getProfile(getProfileId(req));
            Notifications.youHaveAnInvitation(name, email, senderProfile);
            return res.status(200).json({
                status: "ok",
                message: `Invitation sent to ${name} (${email})`
            });
        } catch (error) {
            console.error("Error during invitation process:", error);
            return res.status(500).json({ status: "error", message: "Something went wrong, please try again later" });
        }
    });

    router.get("/invite/:email", async (req, res) => {
        const userid = getUserId(req);
        const email = req.params.email;
        //validate email?
        if (!email) return res.json({ status: "provide valid email" });
        let r = await DB.getInvitation(email);
        if (!r) return res.json({ status: "no invitation found with that email" });
        let isUserAlreadyRegistered = await DB.getUser(email);
        if (isUserAlreadyRegistered && isUserAlreadyRegistered._id) return res.json({ status: "This user is already registered" });
        return res.json({ status: "ok", ...r });
    });

    router.get("/groups", async (req, res) => {
        let groups = await DB.getGroups();
        return res.json({
            status: "ok",
            groups
        });
    });

    router.get("/groups/following", async (req, res) => {
        const profileId = getProfileId(req);
        let groups = await DB.getFollowingGroups(profileId);
        return res.json({
            status: "ok",
            groups
        });
    });

    router.post("/groups", async (req, res) => {
        let profile = {
            userid: getUserId(req),
            isGroup: true,
            ...req.body
        };
        let profileObj = new Profile(profile);
        DB.newProfile(profileObj)
        return res.json({
            status: "ok",
            ...profileObj.toObj()
        });
    });

    router.get("/courses", async (req, res) => {
        let groups = await DB.getCourses();
        return res.json({
            status: "ok",
            groups
        });
    });

    router.post("/groups/accept", async (req, res) => {
        //This function should be called to accept the join request
        //of an user that attempt to join a private group.
        const groupid = getProfileId(req); //It needs to have this profile context
        const groupidBody = req.body.groupid ? DB.ObjectID(req.body.groupid) : undefined;
        if (groupidBody && groupid != groupidBody && !DB.isOwnerOfGroup(groupid, groupidBody)) {
            return res.json({
                status: "Only group owner can accept new subscribers"
            });
        }
        const profileAcepted = DB.ObjectID(req.body.profileid);
        DB.acceptGroupJoinReq(profileAcepted, groupidBody || groupid);
        //Send Notification to accepted user
        Notifications.yourGroupRequestAccepted(profileAcepted, groupidBody || groupid)
        return res.json({
            status: "ok"
        });
    });

    router.post("/groups/reject", async (req, res) => {
        //This function should be called to reject the join request
        //of an user that attempt to join a private group.
        const groupid = getProfileId(req); //It needs to have this profile context
        const groupidBody = req.body.groupid ? DB.ObjectID(req.body.groupid) : undefined;
        if (groupidBody && groupid != groupidBody && !DB.isOwnerOfGroup(groupid, groupidBody)) {
            return res.json({
                status: "Only group owner can reject new subscribers"
            });
        }
        const profileAcepted = DB.ObjectID(req.body.profileid);
        DB.rejectGroupJoinReq(profileAcepted, groupidBody || groupid);
        //Add Notification to rejected user
        //Notifications.yourGroupHasARequest(profileAcepted, groupidBody || groupid)
        return res.json({
            status: "ok"
        });
    });

    router.get("/groups/search", async (req, res) => {
        let query = req.query.query;
        let coursesB = req.query.courses ? true : false;
        let groups = await DB.searchGroups(query, coursesB);
        return res.json({
            status: "ok",
            groups
        });
    });

    router.get("/groups/:id", async (req, res) => {
        const groupid = req.params.id;
        let groups = await DB.getGroup(groupid);
        return res.json({
            status: "ok",
            groups
        });
    });

    router.get("/groups/:id/subscribe", async (req, res) => {
        const groupid = req.params.id;
        const profileid = getProfileId(req);
        const isPrivate = await DB.isGroupPrivate(groupid);
        DB.subscribeToGroup(profileid, groupid, isPrivate);
        //Add notification to group owner
        if (isPrivate) Notifications.yourGroupHasARequest(profileid, groupid)
        return res.json({
            status: "ok"
        });
    });

    router.get("/groups/:id/unsubscribe", async (req, res) => {
        const groupid = req.params.id;
        const profileid = getProfileId(req);
        DB.unsubscribeToGroup(profileid, groupid);
        //Add notification to group owner
        return res.json({
            status: "ok"
        });
    });

    router.get("/search", async (req, res) => {
        let query = req.query.query;
        let profiles = await DB.searchProfile(query);
        return res.json({
            status: "ok",
            profiles
        });
    });

    router.post("/setData", (req, res) => {
        const key = req.body.key;
        const value = req.body.value;
        const profileid = getProfileId(req);
        DB.setData(profileid, key, value);
        return res.json({
            status: "ok",
        });
    });

    router.post("/myProfile", async (req, res) => {
        let profile = {
            userid: getUserId(req),
            profile: req.body.profile,
            data: req.body.data
        };
        let profileObj = new Profile(profile); //validates profile
        DB.updateProfile(getProfileId(req), profileObj);
        return res.json({
            status: "ok"
        });
    });

    router.get("/:id", async (req, res) => {
        let profileId = req.params.id;
        let profile = await DB.getProfile(profileId);
        return res.json({
            status: "ok",
            ...profile
        });
    });

    router.delete("/:id", async (req, res) => {
        const profileId = req.params.id;
        const userid = getUserId(req);
        if (!await profileBelongsToUser(profileId, userid))
            return res.json({
                status: "This profile is not yours."
            });
        await DB.removeProfile(profileId);
        return res.json({
            status: "ok"
        });
    });

    router.get("/:id/follow", async (req, res) => {
        let followProfileId = req.params.id;
        const profileid = getProfileId(req);
        DB.followProfile(profileid, followProfileId);
        //Add notification to user
        return res.json({
            status: "ok"
        });
    });

    router.get("/:id/unfollow", async (req, res) => {
        let followProfileId = req.params.id;
        const profileid = getProfileId(req);
        DB.unfollowProfile(profileid, followProfileId);
        //Add notification to user
        return res.json({
            status: "ok"
        });
    });

});

module.exports = router