Delete User Functionality Completed!!

backend/middleware/fetchuser.js

@@ -3,7 +3,7 @@ const dotenv = require('dotenv');
 
 dotenv.config();
 
-const JWT_SECRET = process.env.JWT_SECRET;
+const JWT_SECRET = "isadvn2hjk23h4h&%@(jhhj";
 
 const fetchuser = async (req, res, next) => {
     const token = await req.header('auth-token');

backend/routes/auth.js

@@ -2,6 +2,8 @@ const express = require('express');
 const router = express.Router();
 const dotenv = require('dotenv');
 const UserSchema = require('../models/User');
+const NoteSchema = require('../models/Notes');
+const daSchema = require('../models/DeleteAccount');
 const { body, validationResult } = require('express-validator');
 var bcrypt = require('bcryptjs');
 var jwt = require('jsonwebtoken');
@@ -485,11 +487,6 @@ router.put('/login/changepassword',
 // Route 10: Deleting a user's account: DELETE: http://localhost:8181/api/auth/deleteaccount. Login Required
 router.delete('/deleteaccount', fetchuser, async (req, res) => {
 
-    const errors = validationResult(req);
-    if (!errors.isEmpty()) {
-        return res.status(400).json({ errors: errors.array() });
-    }
-
     try {
         const theUser = await UserSchema.findById(req.user.id);
         if (!theUser) {
@@ -499,7 +496,7 @@ router.delete('/deleteaccount', fetchuser, async (req, res) => {
         const daToken = uuidv4();
 
         // Pushing the token with email in the DB
-        fpSchema.create({
+        await daSchema.create({
             email: theUser.email,
             token: daToken
         });
@@ -540,4 +537,76 @@ router.delete('/deleteaccount', fetchuser, async (req, res) => {
 
 
 
+
+
+
+
+
+
+
+
+// Route 11: Getting a specific daEntry: GET: http://localhost:8181/api/auth/getdatoken. Login Required
+router.get('/getdatoken/:id', fetchuser, async (req, res) => {
+    try {
+        const token = await daSchema.findOne({ token: req.params.id });
+        const theUser = await UserSchema.findById(req.user.id);
+
+        if (!token) {
+            return res.status(404).json({ error: "No such token found" });
+        }
+        if (theUser.email !== token.email) {
+            return res.status(403).json({ error: "You cannot access some other person's token" });
+        }
+
+        res.status(200).json(token);
+
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({ error: "Internal Server Error" });
+    }
+
+
+});
+
+
+
+
+
+
+
+
+
+
+
+// Route 12: Deleting the user permanently: GET: http://localhost:8181/api/auth/deletepermanently/:id. Login Required
+router.delete('/permanentlydelete/:id/:email', async (req, res) => {
+    try {
+        const token = await daSchema.findOne({ token: req.params.id });
+        const theUser = await UserSchema.findOne({ email: req.params.email });
+
+        let checkHash = await bcrypt.compare(req.body.password, theUser.password);
+        if (!checkHash) {
+            return res.status(403).json({ error: "Wrong Password!" });
+        }
+
+        if (!token) {
+            return res.status(404).json({ error: "No such token found" });
+        }
+        if (theUser.email !== token.email) {
+            return res.status(403).json({ error: "You cannot access some other person's token" });
+        }
+
+        await NoteSchema.deleteMany({ authorId: theUser.id });
+        await theUser.delete();
+
+        res.status(200).json({ success: "The user has been deleted successfully!!" });
+
+    } catch (error) {
+        console.error(error);
+        return res.status(500).json({ error: "Internal Server Error" });
+    }
+});
+
+
+
 module.exports = router;

frontend/src/App.js

@@ -14,6 +14,7 @@ import ErrorPage from './components/Error/ErrorPage';
 import AOS from "aos";
 import "aos/dist/aos.css";
 import { useEffect } from 'react';
+import Deleteaccount from './components/DeleteAccount/Deleteaccount';
 
 function App() {
   useEffect(() => {
@@ -36,6 +37,7 @@ function App() {
         <Route path="/bin" element={<RecycleBin />} />
         <Route path="/myaccount" element={<Account />} />
         <Route path='*' element={<ErrorPage />} />
+        <Route path='/deleteacocunt/:email/:token' element={<Deleteaccount />} />
       </Routes>
     </Router>
   );

frontend/src/components/Account/Account.js

@@ -79,8 +79,8 @@ const Account = () => {
 
   const deleteAccount = async () => {
     if (window.confirm("Are you sure you want to delete your account?")) {
-      const authtoken = localStorage.getItem('auth-token');
-      const response = await fetch('http://locahost:8181/api/auth/deleteaccount', {
+      const authtoken = sessionStorage.getItem('auth-token');
+      const response = await fetch('http://localhost:8181/api/auth/deleteaccount', {
         method: "DELETE",
         headers: {
           'Content-Type': 'application/json',

frontend/src/components/DeleteAccount/Deleteaccount.js

@@ -0,0 +1,82 @@
+import React, { useEffect, useState } from 'react'
+import { Helmet } from 'react-helmet';
+import { Link, useNavigate, useParams } from 'react-router-dom';
+import { ToastContainer, toast } from "react-toastify";
+import "react-toastify/dist/ReactToastify.css";
+
+const Deleteaccount = () => {
+    const [password, setPassword] = useState("");
+    const [isLoading, setIsLoading] = useState(false);
+
+    const { token, email } = useParams();
+
+    const navigate = useNavigate();
+
+    useEffect(() => {
+
+    }, []);
+
+
+    const deletePermanently = async (e) => {
+        e.preventDefault();
+
+        const response = await fetch(`http://localhost:8181/api/auth/permanentlydelete/${token}/${email}`, {
+            method: "DELETE",
+            headers: {
+                'Content-Type': 'application/json'
+            }, body: JSON.stringify({ password: password })
+        });
+        const json = await response.json();
+        if (json.success) {
+            localStorage.removeItem('auth-token');
+            toast.success(json.success);
+            setTimeout(() => {
+                navigate('/login');
+            }, 2000);
+        }
+        else {
+            toast.error(json.error);
+        }
+    }
+  return (
+    <>
+    {/* <form onSubmit={deletePermanently}>
+        <input value={password} onChange={(e) => setPassword(e.target.value)} type="password" />
+        <button>Delete Permanently</button>
+    </form>
+        <ToastContainer
+          toastStyle={{ backgroundColor: "#202d40", color: "white" }}
+    /> */}
+
+    <div>
+      <Helmet>
+        <title>Noteslify | Delete Account</title>
+        <meta name="description" content="Noteslify. Reset Your Password From Here." />
+      </Helmet>
+      <div className="form-wrapper">
+        <h1>Delete User?</h1>
+        <br></br>
+        <p>Please confirm your password to delete your account permanently</p>
+        <br></br>
+        <form onSubmit={deletePermanently}>
+          <div className="form-item">
+            <label for="password"></label>
+            <input type="password" name="password" value={password} onChange={(e) => setPassword(e.target.value)} required="required" placeholder="Confirm Password"></input>
+          </div>
+          <div className="button-panel">
+            {!isLoading && <input type="submit" className="button" title="Sign In" value="Delete User"></input>}
+            {isLoading && <button style={{backgroundColor: '#15203a', cursor: 'not-allowed'}} disabled={true} className="button" value=""><span className="loader"></span></button>}
+          </div>
+        </form>
+        <div className="form-footer">
+          <p>Remember Your Password? <Link to="/login">Login</Link></p>
+        </div>
+      </div>
+      <ToastContainer toastStyle={{ backgroundColor: "#202d40", color: 'white' }} />
+    </div>
+
+    </>
+  )
+}
+
+export default Deleteaccount