Add updatable profile

server/api/auth/password.post.ts

@@ -0,0 +1,44 @@
+import { hash, verify } from 'argon2';
+import { useValidatedBody, z } from 'h3-zod';
+import prisma from '~~/lib/prisma';
+
+export default defineEventHandler(async (event) => {
+  const { user } = await requireUserSession(event);
+
+  const { old, password } = await useValidatedBody(
+    event,
+    z.object({
+      password: z.string().min(8),
+      old: z.string().min(8)
+    })
+  );
+
+  const dbUser = await prisma.user.findUniqueOrThrow({
+    where: {
+      deletedAt: null,
+      id: user.id
+    },
+    select: {
+      id: true,
+      password: true
+    }
+  });
+  if (!(await verify(dbUser.password, old))) {
+    throw createError({ status: 404, statusText: 'Not found!' });
+  }
+
+  const passwordHash = await hash(password);
+
+  await prisma.user.update({
+    where: {
+      id: user.id
+    },
+    data: {
+      password: passwordHash
+    }
+  });
+
+  console.warn(`Successful changed password for user ${user.id}`);
+
+  return { ok: true };
+});

server/api/auth/profile.get.ts

@@ -0,0 +1,42 @@
+import prisma from '~~/lib/prisma';
+
+export default defineEventHandler(async (event) => {
+  const user = await requireUserSession(event);
+
+  return prisma.user.findUnique({
+    where: { id: user.user.id },
+    select: {
+      name: true,
+      email: true,
+      uploadedFiles: {
+        select: {
+          url: true,
+          createdAt: true,
+          answer: {
+            select: {
+              id: true,
+              quest: {
+                select: {
+                  id: true,
+                  title: true,
+                  hunt: {
+                    select: {
+                      id: true,
+                      name: true
+                    }
+                  }
+                }
+              }
+            }
+          }
+        },
+
+        where: {
+          NOT: {
+            answerId: null
+          }
+        }
+      }
+    }
+  });
+});

server/api/auth/profile.post.ts

@@ -0,0 +1,38 @@
+import { useValidatedBody, z } from 'h3-zod';
+import prisma from '~~/lib/prisma';
+
+export default defineEventHandler(async (event) => {
+  const user = await requireUserSession(event);
+
+  const data = await useValidatedBody(
+    event,
+    z.object({
+      name: z.string().min(3).max(256).trim(),
+      email: z.email().max(256).trim()
+    })
+  );
+
+  try {
+    const dbUser = await prisma.user.update({
+      where: {
+        id: user.user.id
+      },
+      data,
+      select: {
+        id: true,
+        name: true,
+        role: true
+      }
+    });
+    await setUserSession(event, {
+      user: dbUser,
+      loggedInAt: user.loggedInAt
+    });
+  } catch (error) {
+    throw createError({
+      status: 409,
+      statusText: 'User with that email already exists!'
+    });
+  }
+  return { ok: true };
+});