register.js

import { authRegisterPost } from '@rctf/api-types/routes'
import { makeFastifyRoute } from '../helpers'
import { v4 as uuidv4 } from 'uuid'
import emailValidator from 'email-validator'
import * as cache from '../../cache'
import * as util from '../../util'
import * as auth from '../../auth'
import config from '../../config/server'
import { getUserByNameOrEmail } from '../../database/users'
import { sendVerification } from '../../email'

export default makeFastifyRoute(authRegisterPost, async ({ req, res }) => {
  if (!config.registrationsEnabled) {
    return res.badRegistrationsDisabled()
  }

  let email
  let ctftimeId
  if (req.body.ctftimeToken !== undefined) {
    const ctftimeData = await auth.token.getData(
      auth.token.tokenKinds.ctftimeAuth,
      req.body.ctftimeToken
    )
    if (ctftimeData === null) {
      return res.badCtftimeToken()
    }
    ctftimeId = ctftimeData.ctftimeId
  } else {
    email = util.normalize.normalizeEmail(req.body.email)
    if (!emailValidator.validate(email)) {
      return res.badEmail()
    }
  }

  const name = util.normalize.normalizeName(req.body.name)
  if (!util.validate.validateName(name)) {
    return res.badName()
  }

  if (!config.email) {
    const division = config.defaultDivision || Object.keys(config.divisions)[0]
    return auth.register.register(
      {
        division,
        email,
        name,
        ctftimeId,
      },
      res
    )
  }

  const division = config.divisionACLs
    ? util.restrict.allowedDivisions(email)[0]
    : config.defaultDivision || Object.keys(config.divisions)[0]
  if (division === undefined) {
    return res.badCompetitionNotAllowed()
  }

  if (req.body.ctftimeToken !== undefined) {
    return auth.register.register(
      {
        division,
        name,
        ctftimeId,
      },
      res
    )
  }

  const conflictRes = await getUserByNameOrEmail({ name, email })
  if (conflictRes) {
    if (conflictRes.email === email) {
      return res.badKnownEmail()
    }
    return res.badKnownName()
  }

  const verifyUuid = uuidv4()
  await cache.login.makeLogin({ id: verifyUuid })
  const verifyToken = await auth.token.getToken(auth.token.tokenKinds.verify, {
    verifyId: verifyUuid,
    kind: 'register',
    email,
    name,
    division,
  })

  await sendVerification({
    email,
    kind: 'register',
    token: verifyToken,
  })

  return res.goodVerifySent()
})