src/invite.js


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45

const { db } = require("./db");

const validateInviteToken = async (req, res, next) => {
	const isFirstUser = db.query("SELECT 1 FROM users LIMIT 1").get() === null;

	if (isFirstUser) {
		req.isFirstUser = true;
		next();
		return;
	}

	const token = req.query.token;

	if (!token) {
		return res.render("register", {
			message: "this instance requires an invite",
			isDisabled: true,
		});
	}

	const invite = db
		.query("SELECT * FROM invites WHERE token = $token")
		.get({ token });

	if (!invite) {
		return res.render("register", {
			message: "this invite token is invalid",
			isDisabled: true,
		});
	}

	if (invite.usedAt) {
		return res.render("register", {
			message: "this invite has been claimed",
			isDisabled: true,
		});
	}

	req.invite = invite;
	next();
};

module.exports = {
	validateInviteToken,
};