pangolin/server/routers/auth/requestEmailVerificationCode.ts

import { Request, Response, NextFunction } from "express";
import createHttpError from "http-errors";
import HttpCode from "@server/types/HttpCode";
import { response } from "@server/lib";
import { User } from "@server/db/schemas";
import { sendEmailVerificationCode } from "../../auth/sendEmailVerificationCode";
import config from "@server/lib/config";
import logger from "@server/logger";
import { UserType } from "@server/types/UserTypes";

export type RequestEmailVerificationCodeResponse = {
    codeSent: boolean;
};

export async function requestEmailVerificationCode(
    req: Request,
    res: Response,
    next: NextFunction
): Promise<any> {
    if (!config.getRawConfig().flags?.require_email_verification) {
        return next(
            createHttpError(
                HttpCode.BAD_REQUEST,
                "Email verification is not enabled"
            )
        );
    }

    try {
        const user = req.user as User;

        if (user.type !== UserType.Internal) {
            return next(
                createHttpError(
                    HttpCode.BAD_REQUEST,
                    "Email verification is not supported for external users"
                )
            );
        }

        if (user.emailVerified) {
            return next(
                createHttpError(
                    HttpCode.BAD_REQUEST,
                    "Email is already verified"
                )
            );
        }

        await sendEmailVerificationCode(user.email!, user.userId);

        return response<RequestEmailVerificationCodeResponse>(res, {
            data: {
                codeSent: true
            },
            status: HttpCode.OK,
            success: true,
            error: false,
            message: `Email verification code sent to ${user.email}`
        });
    } catch (error) {
        logger.error(error);
        return next(
            createHttpError(
                HttpCode.INTERNAL_SERVER_ERROR,
                "Failed to send email verification code"
            )
        );
    }
}

export default requestEmailVerificationCode;