nfp_sites/api/authentication/routes.mjs

import Staff from '../staff/model.mjs'
import Jwt from '../jwt.mjs'
import * as google from './google.mjs'
import * as security from './security.mjs'
import AuthHelper from './helper.mjs'

export default class AuthRoutes {
  constructor(opts = {}) {
    Object.assign(this, {
      helper: opts.helper || new AuthHelper(),
      Staff: opts.Staff || Staff,
      jwt: opts.jwt || new Jwt(),
      google: opts.google || google,
      security: opts.security || security,
    })
  }

  /*
   * POST /api/login - Authenticate a user using social login
   *
   * @body {string} token - The google token to authenticate
   * @returns
   *
   * { token: 'Authentication token' }
   */
  async login(ctx) {
    let output = await google.getProfile(ctx.request.body.token)

    if (output.email_verified !== 'true') ctx.throw(422, 'Email was not verified with google')
    if (!output.email) ctx.throw(422, 'Email was missing from google response')

    let level = 1
    let staff = await this.Staff
      .query({ where: { email: output.email }})
      .fetch({ require: false })

    if (staff && staff.id && staff.get('level')) {
      level = staff.get('level')
    }

    ctx.body = { token: this.jwt.createToken(staff.id, output.email, level) }
  }

  /*
   * POST /api/login/user - Authenticate a user using password login
   *
   * @body {string} username - Username
   * @body {string} password - Password
   * @returns
   *
   * { token: 'Authentication token' }
   */
  async loginUser(ctx) {
    this.security.isValidLogin(ctx, ctx.request.body)

    let token = await this.helper.loginStaff(ctx)

    ctx.body = { token }
  }
}