From 8d472d3d451f189ae87563b1dd26e4924502be80 Mon Sep 17 00:00:00 2001
From: Jesse Wierzbinski <contact@cpluspatch.com>
Date: Tue, 12 Sep 2023 19:53:58 -1000
Subject: [PATCH] Implement basic user registration

---
 server/api/v1/accounts/index.ts | 133 ++++++++++++++++++++++++++++++++
 1 file changed, 133 insertions(+)
 create mode 100644 server/api/v1/accounts/index.ts

diff --git a/server/api/v1/accounts/index.ts b/server/api/v1/accounts/index.ts
new file mode 100644
index 00000000..8e8e3719
--- /dev/null
+++ b/server/api/v1/accounts/index.ts
@@ -0,0 +1,133 @@
+import { getConfig } from "@config";
+import { User } from "~database/entities/User";
+
+/**
+ * Creates a new user
+ */
+export default async (req: Request): Promise<Response> => {
+	// TODO: Add Authorization check
+
+	const body: {
+		username: string;
+		email: string;
+		password: string;
+		agreement: boolean;
+		locale: string;
+		reason: string;
+	} = await req.json();
+
+	const config = getConfig();
+
+	const errors: {
+		details: Record<
+			string,
+			{
+				error:
+					| "ERR_BLANK"
+					| "ERR_INVALID"
+					| "ERR_TOO_LONG"
+					| "ERR_TOO_SHORT"
+					| "ERR_BLOCKED"
+					| "ERR_TAKEN"
+					| "ERR_RESERVED"
+					| "ERR_ACCEPTED"
+					| "ERR_INCLUSION";
+				description: string;
+			}[]
+		>;
+	} = {
+		details: {
+			password: [],
+			username: [],
+			email: [],
+			agreement: [],
+			locale: [],
+			reason: [],
+		},
+	};
+
+	// Check if fields are blank
+	["username", "email", "password", "agreement", "locale", "reason"].forEach(
+		value => {
+			// @ts-expect-error Value is always valid
+			if (!body[value])
+				errors.details[value].push({
+					error: "ERR_BLANK",
+					description: `can't be blank`,
+				});
+		}
+	);
+
+	config.validation.max_username_size;
+
+	// Check if username is valid
+	if (!body.username.match(/^[a-zA-Z0-9_]+$/))
+		errors.details.username.push({
+			error: "ERR_INVALID",
+			description: `must only contain letters, numbers, and underscores`,
+		});
+
+	// Check if username is too long
+	if (body.username.length > config.validation.max_username_size)
+		errors.details.username.push({
+			error: "ERR_TOO_LONG",
+			description: `is too long (maximum is ${config.validation.max_username_size} characters)`,
+		});
+
+	// Check if username is too short
+	if (body.username.length < 3)
+		errors.details.username.push({
+			error: "ERR_TOO_SHORT",
+			description: `is too short (minimum is 3 characters)`,
+		});
+
+	// Check if username is reserved
+	if (config.validation.username_blacklist.includes(body.username))
+		errors.details.username.push({
+			error: "ERR_RESERVED",
+			description: `is reserved`,
+		});
+
+	// Check if username is taken
+	if (await User.findOne({ where: { username: body.username } }))
+		errors.details.username.push({
+			error: "ERR_TAKEN",
+			description: `is already taken`,
+		});
+
+	// Check if email is valid
+	if (
+		!body.email.match(
+			/^(([^<>()[\]\\.,;:\s@"]+(\.[^<>()[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/
+		)
+	)
+		errors.details.email.push({
+			error: "ERR_INVALID",
+			description: `must be a valid email address`,
+		});
+
+	// Check if email is blocked
+	if (config.validation.email_blacklist.includes(body.email))
+		errors.details.email.push({
+			error: "ERR_BLOCKED",
+			description: `is blocked`,
+		});
+
+	// Check if agreement is accepted
+	if (!body.agreement)
+		errors.details.agreement.push({
+			error: "ERR_ACCEPTED",
+			description: `must be accepted`,
+		});
+
+	// TODO: Check if locale is valid
+
+	const newUser = new User();
+
+	newUser.username = body.username;
+	newUser.email = body.email;
+	newUser.password = await Bun.password.hash(body.password);
+
+	// TODO: Return access token
+	return new Response();
+};