avorty / vulcan-api-js Goto Github PK

import { ForbiddenException, Injectable } from '@nestjs/common';
import { AuthDto } from './dto';
import { DbService } from '../db/db.service';
import bcrypt from 'bcrypt';
import {
  AccountTools,
  Keystore,
  registerAccount,
  VulcanHebe,
} from 'vulcan-api-js';
import { PrismaClientKnownRequestError } from '@prisma/client/runtime';

@Injectable()
export class AuthService {
  constructor(private prisma: DbService) {}
  async signup(dto: AuthDto): Promise<object> {
    const keystore = new Keystore();
    await keystore.init();
    keystore.deviceModel = 'Muj Elektryk';
    const vulcanAccount = await registerAccount(
      keystore,
      dto.token,
      dto.symbol,
      dto.pin,
    );
    const vulcanClient = new VulcanHebe(
      keystore,
      AccountTools.loadFromObject(vulcanAccount),
    );
    await vulcanClient.selectStudent();

    const student = (await vulcanClient.getStudents())[0];
    const lesson = (await vulcanClient.getLessons(new Date('2022-09-02')))[0];
    const classNumber = student.periods.at(-1)?.level;

    const saltRounds = 10;
    let hashedPassword = '';
    bcrypt.genSalt(saltRounds, (err, salt) => {
      bcrypt.hash(dto.password, salt, (err, hash) => {
        hashedPassword = hash;
      });
    });

    try {
      const user = await this.prisma.user.create({
        data: {
          name: student.pupil.firstName,
          username: dto.username,
          surname: student.pupil.surname,
          class_name:
            classNumber && lesson.class?.symbol
              ? classNumber + lesson.class.symbol
              : '',
          passwordHash: hashedPassword,
          loginID: vulcanAccount.loginId,
          email: vulcanAccount.userLogin,
          certificate: keystore.certificate,
          fingerprint: keystore.fingerprint,
          privateKey: keystore.privateKey,
          firebaseToken: keystore.firebaseToken,
        },
      });

      return user;
    } catch (error: any) {
      if (error instanceof PrismaClientKnownRequestError) {
        if (error.code === 'P2002') {
          throw new ForbiddenException('Credentials taken!');
        }
      }
      throw error;
    }
  }
}