126 lines
4.5 KiB
TypeScript
126 lines
4.5 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
import prisma from '@/lib/prisma';
|
|
import bcrypt from 'bcryptjs';
|
|
import crypto from 'crypto';
|
|
|
|
import { verifyCsrfToken, verifyOrigin } from '@/lib/csrf';
|
|
|
|
export async function POST(request: NextRequest) {
|
|
// CSRF Protection
|
|
const isOriginValid = verifyOrigin(request);
|
|
const isCsrfValid = await verifyCsrfToken(request);
|
|
|
|
if (!isOriginValid || !isCsrfValid) {
|
|
return NextResponse.json(
|
|
{ error: 'Protection CSRF : Requête invalide' },
|
|
{ status: 403 }
|
|
);
|
|
}
|
|
|
|
try {
|
|
const rawBody = await request.json();
|
|
const name = rawBody.name;
|
|
const email = rawBody.email?.toLowerCase().trim();
|
|
const password = rawBody.password;
|
|
|
|
// Basic validation
|
|
if (!name || !email || !password) {
|
|
return NextResponse.json(
|
|
{ error: 'Tous les champs sont obligatoires' },
|
|
{ status: 400 }
|
|
);
|
|
}
|
|
|
|
if (password.length < 6) {
|
|
return NextResponse.json(
|
|
{ error: 'Le mot de passe doit contenir au moins 6 caractères' },
|
|
{ status: 400 }
|
|
);
|
|
}
|
|
|
|
// Check if user already exists
|
|
const existingUser = await prisma.user.findUnique({
|
|
where: { email }
|
|
});
|
|
|
|
if (existingUser) {
|
|
return NextResponse.json(
|
|
{ error: 'Un utilisateur avec cet email existe déjà' },
|
|
{ status: 400 }
|
|
);
|
|
}
|
|
|
|
// Hash password with 10 rounds to match seed and system verification standards
|
|
const hashedPassword = await bcrypt.hash(password, 10);
|
|
|
|
// Generate verification token
|
|
const verificationToken = crypto.randomBytes(32).toString('hex');
|
|
|
|
// Create user
|
|
const user = await prisma.user.create({
|
|
data: {
|
|
name,
|
|
email,
|
|
password: hashedPassword,
|
|
role: 'VISITOR', // Default role
|
|
verificationToken,
|
|
emailVerified: process.env.NODE_ENV !== 'production', // Auto-vérifié en développement
|
|
}
|
|
});
|
|
|
|
// Send verification email
|
|
try {
|
|
const settings = await prisma.siteSetting.findUnique({
|
|
where: { id: 'singleton' }
|
|
});
|
|
|
|
const siteName = settings?.siteName || 'Afrohub';
|
|
const subject = settings?.verifyEmailSubject || 'Vérification de votre compte - Afrohub';
|
|
const verifyUrl = `${process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000'}/api/auth/verify?token=${verificationToken}`;
|
|
|
|
let html = settings?.verifyEmailTemplate || `
|
|
<div style="font-family: sans-serif; max-width: 600px; margin: 0 auto; padding: 20px; border: 1px solid #e5e7eb; border-radius: 8px;">
|
|
<h2 style="color: #0d9488; text-align: center;">${siteName}</h2>
|
|
<p>Bonjour ${name},</p>
|
|
<p>Merci de vous être inscrit sur ${siteName}. Veuillez vérifier votre adresse email en cliquant sur le bouton ci-dessous :</p>
|
|
<div style="text-align: center; margin: 30px 0;">
|
|
<a href="${verifyUrl}" style="background-color: #0d9488; color: white; padding: 12px 24px; text-decoration: none; border-radius: 6px; font-weight: bold;">Vérifier mon compte</a>
|
|
</div>
|
|
</div>
|
|
`;
|
|
|
|
// Replace placeholders
|
|
html = html
|
|
.replace(/{name}/g, name)
|
|
.replace(/{verifyUrl}/g, verifyUrl)
|
|
.replace(/{siteName}/g, siteName);
|
|
|
|
const { sendEmail } = await import('@/lib/mail');
|
|
await sendEmail({
|
|
to: email,
|
|
subject,
|
|
html,
|
|
});
|
|
} catch (mailError) {
|
|
console.error('Failed to send verification email:', mailError);
|
|
// We don't fail registration if mail fails, but maybe we should?
|
|
// For now, just log it.
|
|
}
|
|
|
|
// Omit password from response
|
|
const { password: _, ...userWithoutPassword } = user;
|
|
|
|
return NextResponse.json(
|
|
{ message: 'Compte créé avec succès', user: userWithoutPassword },
|
|
{ status: 201 }
|
|
);
|
|
|
|
} catch (error) {
|
|
console.error('Registration error:', error);
|
|
return NextResponse.json(
|
|
{ error: 'Une erreur est survenue lors de l\'inscription' },
|
|
{ status: 500 }
|
|
);
|
|
}
|
|
}
|