'use strict';

var _promise = require('babel-runtime/core-js/promise');

var _promise2 = _interopRequireDefault(_promise);

var _regenerator = require('babel-runtime/regenerator');

var _regenerator2 = _interopRequireDefault(_regenerator);

var _asyncToGenerator2 = require('babel-runtime/helpers/asyncToGenerator');

var _asyncToGenerator3 = _interopRequireDefault(_asyncToGenerator2);

var _getPrototypeOf = require('babel-runtime/core-js/object/get-prototype-of');

var _getPrototypeOf2 = _interopRequireDefault(_getPrototypeOf);

var _classCallCheck2 = require('babel-runtime/helpers/classCallCheck');

var _classCallCheck3 = _interopRequireDefault(_classCallCheck2);

var _createClass2 = require('babel-runtime/helpers/createClass');

var _createClass3 = _interopRequireDefault(_createClass2);

var _possibleConstructorReturn2 = require('babel-runtime/helpers/possibleConstructorReturn');

var _possibleConstructorReturn3 = _interopRequireDefault(_possibleConstructorReturn2);

var _inherits2 = require('babel-runtime/helpers/inherits');

var _inherits3 = _interopRequireDefault(_inherits2);

var _user = require('../models/user.js');

var _user2 = _interopRequireDefault(_user);

var _yapi = require('../yapi.js');

var _yapi2 = _interopRequireDefault(_yapi);

var _base = require('./base.js');

var _base2 = _interopRequireDefault(_base);

var _request2 = require('request');

var _request3 = _interopRequireDefault(_request2);

var _commons = require('../utils/commons.js');

var _commons2 = _interopRequireDefault(_commons);

var _interface = require('../models/interface.js');

var _interface2 = _interopRequireDefault(_interface);

var _group = require('../models/group.js');

var _group2 = _interopRequireDefault(_group);

var _project = require('../models/project.js');

var _project2 = _interopRequireDefault(_project);

var _avatar = require('../models/avatar.js');

var _avatar2 = _interopRequireDefault(_avatar);

function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }

var jwt = require('jsonwebtoken');

var userController = function (_baseController) {
    (0, _inherits3.default)(userController, _baseController);

    function userController(ctx) {
        (0, _classCallCheck3.default)(this, userController);

        var _this = (0, _possibleConstructorReturn3.default)(this, (userController.__proto__ || (0, _getPrototypeOf2.default)(userController)).call(this, ctx));

        _this.Model = _yapi2.default.getInst(_user2.default);
        return _this;
    }
    /**
     * 用户登录接口
     * @interface /user/login
     * @method POST
     * @category user
     * @foldnumber 10
     * @param {String} email email名称，不能为空
     * @param  {String} password 密码，不能为空
     * @returns {Object} 
     * @example ./api/user/login.json
     */


    (0, _createClass3.default)(userController, [{
        key: 'login',
        value: function () {
            var _ref = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee(ctx) {
                var userInst, email, password, result;
                return _regenerator2.default.wrap(function _callee$(_context) {
                    while (1) {
                        switch (_context.prev = _context.next) {
                            case 0:
                                //登录
                                userInst = _yapi2.default.getInst(_user2.default); //创建user实体

                                email = ctx.request.body.email;
                                password = ctx.request.body.password;

                                if (email) {
                                    _context.next = 5;
                                    break;
                                }

                                return _context.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 400, 'email不能为空'));

                            case 5:
                                if (password) {
                                    _context.next = 7;
                                    break;
                                }

                                return _context.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 400, '密码不能为空'));

                            case 7:
                                _context.next = 9;
                                return userInst.findByEmail(email);

                            case 9:
                                result = _context.sent;

                                if (result) {
                                    _context.next = 14;
                                    break;
                                }

                                return _context.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 404, '该用户不存在'));

                            case 14:
                                if (!(_yapi2.default.commons.generatePassword(password, result.passsalt) === result.password)) {
                                    _context.next = 19;
                                    break;
                                }

                                this.setLoginCookie(result._id, result.passsalt);

                                return _context.abrupt('return', ctx.body = _yapi2.default.commons.resReturn({
                                    username: result.username,
                                    role: result.role,
                                    uid: result._id,
                                    email: result.email,
                                    add_time: result.add_time,
                                    up_time: result.up_time,
                                    server_ip: _yapi2.default.WEBCONFIG.server_ip,
                                    type: 'site'
                                }, 0, 'logout success...'));

                            case 19:
                                return _context.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 405, '密码错误'));

                            case 20:
                            case 'end':
                                return _context.stop();
                        }
                    }
                }, _callee, this);
            }));

            function login(_x) {
                return _ref.apply(this, arguments);
            }

            return login;
        }()

        /**
         * 退出登录接口
         * @interface /user/logout
         * @method GET
         * @category user
         * @foldnumber 10
         * @returns {Object} 
         * @example ./api/user/logout.json
         */

    }, {
        key: 'logout',
        value: function () {
            var _ref2 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee2(ctx) {
                return _regenerator2.default.wrap(function _callee2$(_context2) {
                    while (1) {
                        switch (_context2.prev = _context2.next) {
                            case 0:
                                ctx.cookies.set('_yapi_token', null);
                                ctx.cookies.set('_yapi_uid', null);
                                ctx.body = _yapi2.default.commons.resReturn('ok');

                            case 3:
                            case 'end':
                                return _context2.stop();
                        }
                    }
                }, _callee2, this);
            }));

            function logout(_x2) {
                return _ref2.apply(this, arguments);
            }

            return logout;
        }()

        /**
         *  第三方登录需要提供一个request方法和 token字段，暂时只支持qunar第三方
         * @return {email: String, username: String}
         */

    }, {
        key: 'thirdQunarLogin',
        value: function thirdQunarLogin() {
            return {
                request: function request(token) {
                    return new _promise2.default(function (resolve, reject) {
                        (0, _request3.default)('http://qsso.corp.qunar.com/api/verifytoken.php?token=' + token, function (error, response, body) {
                            if (!error && response.statusCode == 200) {
                                var result = JSON.parse(body);
                                if (result && result.ret === true) {
                                    var ret = {
                                        email: result.userId + '@qunar.com',
                                        username: result.data.userInfo.name
                                    };
                                    resolve(ret);
                                } else {
                                    reject(result);
                                }
                            }
                            reject(error);
                        });
                    });
                },
                tokenField: 'token'
            };
        }
    }, {
        key: 'loginByToken',
        value: function () {
            var _ref3 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee3(ctx) {
                var config, token, ret, login;
                return _regenerator2.default.wrap(function _callee3$(_context3) {
                    while (1) {
                        switch (_context3.prev = _context3.next) {
                            case 0:
                                config = this.thirdQunarLogin();
                                token = ctx.request.body[config.tokenField] || ctx.request.query[config.tokenField];
                                _context3.prev = 2;
                                _context3.next = 5;
                                return config.request(token);

                            case 5:
                                ret = _context3.sent;
                                _context3.next = 8;
                                return this.handleThirdLogin(ret.email, ret.username);

                            case 8:
                                login = _context3.sent;


                                if (login === true) {
                                    _yapi2.default.commons.log('login success');
                                    ctx.redirect('/');
                                }
                                _context3.next = 16;
                                break;

                            case 12:
                                _context3.prev = 12;
                                _context3.t0 = _context3['catch'](2);

                                _yapi2.default.commons.log(_context3.t0.message, 'error');
                                ctx.redirect('/');

                            case 16:
                            case 'end':
                                return _context3.stop();
                        }
                    }
                }, _callee3, this, [[2, 12]]);
            }));

            function loginByToken(_x3) {
                return _ref3.apply(this, arguments);
            }

            return loginByToken;
        }()
    }, {
        key: 'handleThirdLogin',
        value: function () {
            var _ref4 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee4(email, username) {
                var user, data, passsalt, userInst;
                return _regenerator2.default.wrap(function _callee4$(_context4) {
                    while (1) {
                        switch (_context4.prev = _context4.next) {
                            case 0:
                                user = void 0, data = void 0, passsalt = void 0;
                                userInst = _yapi2.default.getInst(_user2.default);
                                _context4.prev = 2;
                                _context4.next = 5;
                                return userInst.findByEmail(email);

                            case 5:
                                user = _context4.sent;

                                if (!(!user || !user._id)) {
                                    _context4.next = 13;
                                    break;
                                }

                                passsalt = _yapi2.default.commons.randStr();
                                data = {
                                    username: username,
                                    password: _yapi2.default.commons.generatePassword(passsalt, passsalt),
                                    email: email,
                                    passsalt: passsalt,
                                    role: 'member',
                                    add_time: _yapi2.default.commons.time(),
                                    up_time: _yapi2.default.commons.time(),
                                    type: 'third'
                                };
                                _context4.next = 11;
                                return userInst.save(data);

                            case 11:
                                user = _context4.sent;

                                _yapi2.default.commons.sendMail({
                                    to: email,
                                    contents: '<h3>\u4EB2\u7231\u7684\u7528\u6237\uFF1A</h3><p>\u60A8\u597D\uFF0C\u611F\u8C22\u4F7F\u7528YApi\u5E73\u53F0.</p>'
                                });

                            case 13:

                                this.setLoginCookie(user._id, user.passsalt);
                                return _context4.abrupt('return', true);

                            case 17:
                                _context4.prev = 17;
                                _context4.t0 = _context4['catch'](2);

                                console.error('third_login:', _context4.t0.message); // eslint-disable-line
                                return _context4.abrupt('return', false);

                            case 21:
                            case 'end':
                                return _context4.stop();
                        }
                    }
                }, _callee4, this, [[2, 17]]);
            }));

            function handleThirdLogin(_x4, _x5) {
                return _ref4.apply(this, arguments);
            }

            return handleThirdLogin;
        }()

        /**
         * 修改用户密码
         * @interface /user/change_password
         * @method POST
         * @category user
         * @param {Number} uid 用户ID
         * @param {Number} [old_password] 旧密码, 非admin用户必须传
         * @param {Number} password 新密码
         * @return {Object}
         * @example ./api/user/change_password.json
         */

    }, {
        key: 'changePassword',
        value: function () {
            var _ref5 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee5(ctx) {
                var params, userInst, user, passsalt, data, result;
                return _regenerator2.default.wrap(function _callee5$(_context5) {
                    while (1) {
                        switch (_context5.prev = _context5.next) {
                            case 0:
                                params = ctx.request.body;
                                userInst = _yapi2.default.getInst(_user2.default);

                                if (params.uid) {
                                    _context5.next = 4;
                                    break;
                                }

                                return _context5.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 400, 'uid不能为空'));

                            case 4:
                                if (params.password) {
                                    _context5.next = 6;
                                    break;
                                }

                                return _context5.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 400, '密码不能为空'));

                            case 6:
                                if (!(this.getRole() !== 'admin' && params.uid != this.getUid())) {
                                    _context5.next = 8;
                                    break;
                                }

                                return _context5.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 402, '没有权限'));

                            case 8:
                                if (!(this.getRole() !== 'admin')) {
                                    _context5.next = 16;
                                    break;
                                }

                                if (params.old_password) {
                                    _context5.next = 11;
                                    break;
                                }

                                return _context5.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 400, '旧密码不能为空'));

                            case 11:
                                _context5.next = 13;
                                return userInst.findById(params.uid);

                            case 13:
                                user = _context5.sent;

                                if (!(_yapi2.default.commons.generatePassword(params.old_password, user.passsalt) !== user.password)) {
                                    _context5.next = 16;
                                    break;
                                }

                                return _context5.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 402, '旧密码错误'));

                            case 16:
                                passsalt = _yapi2.default.commons.randStr();
                                data = {
                                    up_time: _yapi2.default.commons.time(),
                                    password: _yapi2.default.commons.generatePassword(params.password, passsalt),
                                    passsalt: passsalt
                                };
                                _context5.prev = 18;
                                _context5.next = 21;
                                return userInst.update(params.uid, data);

                            case 21:
                                result = _context5.sent;

                                ctx.body = _yapi2.default.commons.resReturn(result);
                                _context5.next = 28;
                                break;

                            case 25:
                                _context5.prev = 25;
                                _context5.t0 = _context5['catch'](18);

                                ctx.body = _yapi2.default.commons.resReturn(null, 401, _context5.t0.message);

                            case 28:
                            case 'end':
                                return _context5.stop();
                        }
                    }
                }, _callee5, this, [[18, 25]]);
            }));

            function changePassword(_x6) {
                return _ref5.apply(this, arguments);
            }

            return changePassword;
        }()
    }, {
        key: 'setLoginCookie',
        value: function setLoginCookie(uid, passsalt) {
            var token = jwt.sign({ uid: uid }, passsalt, { expiresIn: '7 days' });

            this.ctx.cookies.set('_yapi_token', token, {
                expires: _yapi2.default.commons.expireDate(7),
                httpOnly: true
            });
            this.ctx.cookies.set('_yapi_uid', uid, {
                expires: _yapi2.default.commons.expireDate(7),
                httpOnly: true
            });
        }

        /**
         * 用户注册接口
         * @interface /user/reg
         * @method POST
         * @category user
         * @foldnumber 10
         * @param {String} email email名称，不能为空
         * @param  {String} password 密码，不能为空
         * @param {String} [username] 用户名
         * @returns {Object} 
         * @example ./api/user/login.json
         */

    }, {
        key: 'reg',
        value: function () {
            var _ref6 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee6(ctx) {
                var userInst, params, checkRepeat, passsalt, data, user;
                return _regenerator2.default.wrap(function _callee6$(_context6) {
                    while (1) {
                        switch (_context6.prev = _context6.next) {
                            case 0:
                                //注册
                                userInst = _yapi2.default.getInst(_user2.default);
                                params = ctx.request.body; //获取请求的参数,检查是否存在用户名和密码

                                params = _yapi2.default.commons.handleParams(params, {
                                    username: 'string',
                                    password: 'string',
                                    email: 'string'
                                });

                                if (params.email) {
                                    _context6.next = 5;
                                    break;
                                }

                                return _context6.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 400, '邮箱不能为空'));

                            case 5:
                                if (params.password) {
                                    _context6.next = 7;
                                    break;
                                }

                                return _context6.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 400, '密码不能为空'));

                            case 7:
                                _context6.next = 9;
                                return userInst.checkRepeat(params.email);

                            case 9:
                                checkRepeat = _context6.sent;

                                if (!(checkRepeat > 0)) {
                                    _context6.next = 12;
                                    break;
                                }

                                return _context6.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 401, '该email已经注册'));

                            case 12:
                                passsalt = _yapi2.default.commons.randStr();
                                data = {
                                    username: params.username,
                                    password: _yapi2.default.commons.generatePassword(params.password, passsalt), //加密
                                    email: params.email,
                                    passsalt: passsalt,
                                    role: 'member',
                                    add_time: _yapi2.default.commons.time(),
                                    up_time: _yapi2.default.commons.time(),
                                    type: "site"
                                };


                                if (!data.username) {
                                    data.username = data.email.substr(0, data.email.indexOf('@'));
                                }

                                _context6.prev = 15;
                                _context6.next = 18;
                                return userInst.save(data);

                            case 18:
                                user = _context6.sent;


                                this.setLoginCookie(user._id, user.passsalt);
                                ctx.body = _yapi2.default.commons.resReturn({
                                    uid: user._id,
                                    email: user.email,
                                    username: user.username,
                                    add_time: user.add_time,
                                    up_time: user.up_time,
                                    role: 'member'
                                });
                                _yapi2.default.commons.sendMail({
                                    to: user.email,
                                    contents: '<h3>\u4EB2\u7231\u7684\u7528\u6237\uFF1A</h3><p>\u60A8\u597D\uFF0C\u611F\u8C22\u4F7F\u7528YApi,\u60A8\u7684\u8D26\u53F7 ' + params.email + ' \u5DF2\u7ECF\u6CE8\u518C\u6210\u529F</p>'
                                });
                                _context6.next = 27;
                                break;

                            case 24:
                                _context6.prev = 24;
                                _context6.t0 = _context6['catch'](15);

                                ctx.body = _yapi2.default.commons.resReturn(null, 401, _context6.t0.message);

                            case 27:
                            case 'end':
                                return _context6.stop();
                        }
                    }
                }, _callee6, this, [[15, 24]]);
            }));

            function reg(_x7) {
                return _ref6.apply(this, arguments);
            }

            return reg;
        }()

        /**
         * 获取用户列表
         * @interface /user/list
         * @method GET
         * @category user
         * @foldnumber 10
         * @param {Number} [page] 分页页码
         * @param {Number} [limit] 分页大小,默认为10条
         * @returns {Object} 
         * @example 
         */

    }, {
        key: 'list',
        value: function () {
            var _ref7 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee7(ctx) {
                var page, limit, userInst, user, count;
                return _regenerator2.default.wrap(function _callee7$(_context7) {
                    while (1) {
                        switch (_context7.prev = _context7.next) {
                            case 0:
                                page = ctx.request.query.page || 1, limit = ctx.request.query.limit || 10;
                                userInst = _yapi2.default.getInst(_user2.default);
                                _context7.prev = 2;
                                _context7.next = 5;
                                return userInst.listWithPaging(page, limit);

                            case 5:
                                user = _context7.sent;
                                _context7.next = 8;
                                return userInst.listCount();

                            case 8:
                                count = _context7.sent;
                                return _context7.abrupt('return', ctx.body = _yapi2.default.commons.resReturn({
                                    total: Math.ceil(count / limit),
                                    list: user
                                }));

                            case 12:
                                _context7.prev = 12;
                                _context7.t0 = _context7['catch'](2);
                                return _context7.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 402, _context7.t0.message));

                            case 15:
                            case 'end':
                                return _context7.stop();
                        }
                    }
                }, _callee7, this, [[2, 12]]);
            }));

            function list(_x8) {
                return _ref7.apply(this, arguments);
            }

            return list;
        }()

        /**
         * 获取用户个人信息
         * @interface /user/find
         * @method GET
         * @param id 用户uid
         * @category user
         * @foldnumber 10
         * @returns {Object} 
         * @example 
         */

    }, {
        key: 'findById',
        value: function () {
            var _ref8 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee8(ctx) {
                var userInst, id, result;
                return _regenerator2.default.wrap(function _callee8$(_context8) {
                    while (1) {
                        switch (_context8.prev = _context8.next) {
                            case 0:
                                _context8.prev = 0;
                                userInst = _yapi2.default.getInst(_user2.default);
                                id = ctx.request.query.id;

                                if (id) {
                                    _context8.next = 5;
                                    break;
                                }

                                return _context8.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 400, 'uid不能为空'));

                            case 5:
                                _context8.next = 7;
                                return userInst.findById(id);

                            case 7:
                                result = _context8.sent;

                                if (result) {
                                    _context8.next = 10;
                                    break;
                                }

                                return _context8.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 402, '不存在的用户'));

                            case 10:
                                return _context8.abrupt('return', ctx.body = _yapi2.default.commons.resReturn({
                                    uid: result._id,
                                    username: result.username,
                                    email: result.email,
                                    role: result.role,
                                    add_time: result.add_time,
                                    up_time: result.up_time
                                }));

                            case 13:
                                _context8.prev = 13;
                                _context8.t0 = _context8['catch'](0);
                                return _context8.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 402, _context8.t0.message));

                            case 16:
                            case 'end':
                                return _context8.stop();
                        }
                    }
                }, _callee8, this, [[0, 13]]);
            }));

            function findById(_x9) {
                return _ref8.apply(this, arguments);
            }

            return findById;
        }()

        /**
         * 删除用户,只有admin用户才有此权限
         * @interface /user/del
         * @method POST
         * @param id 用户uid
         * @category user
         * @foldnumber 10
         * @returns {Object} 
         * @example 
         */

    }, {
        key: 'del',
        value: function () {
            var _ref9 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee9(ctx) {
                var userInst, id, result;
                return _regenerator2.default.wrap(function _callee9$(_context9) {
                    while (1) {
                        switch (_context9.prev = _context9.next) {
                            case 0:
                                _context9.prev = 0;

                                if (!(this.getRole() !== 'admin')) {
                                    _context9.next = 3;
                                    break;
                                }

                                return _context9.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 402, 'Without permission.'));

                            case 3:
                                userInst = _yapi2.default.getInst(_user2.default);
                                id = ctx.request.body.id;

                                if (id) {
                                    _context9.next = 7;
                                    break;
                                }

                                return _context9.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 400, 'uid不能为空'));

                            case 7:
                                _context9.next = 9;
                                return userInst.del(id);

                            case 9:
                                result = _context9.sent;


                                ctx.body = _yapi2.default.commons.resReturn(result);
                                _context9.next = 16;
                                break;

                            case 13:
                                _context9.prev = 13;
                                _context9.t0 = _context9['catch'](0);

                                ctx.body = _yapi2.default.commons.resReturn(null, 402, _context9.t0.message);

                            case 16:
                            case 'end':
                                return _context9.stop();
                        }
                    }
                }, _callee9, this, [[0, 13]]);
            }));

            function del(_x10) {
                return _ref9.apply(this, arguments);
            }

            return del;
        }()

        /**
         * 更新用户个人信息
         * @interface /user/update
         * @method POST
         * @param uid  用户uid
         * @param [role] 用户角色,只有管理员有权限修改
         * @param [username] String
         * @param [email] String
         * @category user
         * @foldnumber 10
         * @returns {Object} 
         * @example 
         */

    }, {
        key: 'update',
        value: function () {
            var _ref10 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee10(ctx) {
                var params, userInst, id, data, checkRepeat, result;
                return _regenerator2.default.wrap(function _callee10$(_context10) {
                    while (1) {
                        switch (_context10.prev = _context10.next) {
                            case 0:
                                _context10.prev = 0;
                                params = ctx.request.body;


                                params = _yapi2.default.commons.handleParams(params, {
                                    username: 'string',
                                    email: 'string'
                                });

                                if (!(this.getRole() !== 'admin' && params.uid != this.getUid())) {
                                    _context10.next = 5;
                                    break;
                                }

                                return _context10.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 401, '没有权限'));

                            case 5:
                                userInst = _yapi2.default.getInst(_user2.default);
                                id = params.uid;

                                if (id) {
                                    _context10.next = 9;
                                    break;
                                }

                                return _context10.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 400, 'uid不能为空'));

                            case 9:
                                data = {
                                    up_time: _yapi2.default.commons.time()
                                };


                                params.username && (data.username = params.username);
                                params.email && (data.email = params.email);

                                if (!data.email) {
                                    _context10.next = 18;
                                    break;
                                }

                                _context10.next = 15;
                                return userInst.checkRepeat(data.email);

                            case 15:
                                checkRepeat = _context10.sent;

                                if (!(checkRepeat > 0)) {
                                    _context10.next = 18;
                                    break;
                                }

                                return _context10.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 401, '该email已经注册'));

                            case 18:
                                _context10.next = 20;
                                return userInst.update(id, data);

                            case 20:
                                result = _context10.sent;


                                ctx.body = _yapi2.default.commons.resReturn(result);
                                _context10.next = 27;
                                break;

                            case 24:
                                _context10.prev = 24;
                                _context10.t0 = _context10['catch'](0);

                                ctx.body = _yapi2.default.commons.resReturn(null, 402, _context10.t0.message);

                            case 27:
                            case 'end':
                                return _context10.stop();
                        }
                    }
                }, _callee10, this, [[0, 24]]);
            }));

            function update(_x11) {
                return _ref10.apply(this, arguments);
            }

            return update;
        }()

        /**
         * 上传用户头像
         * @interface /user/upload_avatar
         * @method POST 
         * @param {*} basecode  base64编码，通过h5 api传给后端
         * @category user
         * @returns {Object} 
         * @example 
         */

    }, {
        key: 'uploadAvatar',
        value: function () {
            var _ref11 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee11(ctx) {
                var basecode, pngPrefix, jpegPrefix, type, strLength, avatarInst, result;
                return _regenerator2.default.wrap(function _callee11$(_context11) {
                    while (1) {
                        switch (_context11.prev = _context11.next) {
                            case 0:
                                _context11.prev = 0;
                                basecode = ctx.request.body.basecode;

                                if (basecode) {
                                    _context11.next = 4;
                                    break;
                                }

                                return _context11.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 400, 'basecode不能为空'));

                            case 4:
                                pngPrefix = 'data:image/png;base64,';
                                jpegPrefix = 'data:image/jpeg;base64,';
                                type = void 0;

                                if (!(basecode.substr(0, pngPrefix.length) === pngPrefix)) {
                                    _context11.next = 12;
                                    break;
                                }

                                basecode = basecode.substr(pngPrefix.length);
                                type = 'image/png';
                                _context11.next = 18;
                                break;

                            case 12:
                                if (!(basecode.substr(0, jpegPrefix.length) === jpegPrefix)) {
                                    _context11.next = 17;
                                    break;
                                }

                                basecode = basecode.substr(jpegPrefix.length);
                                type = 'image/jpeg';
                                _context11.next = 18;
                                break;

                            case 17:
                                return _context11.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 400, '仅支持jpeg和png格式的图片'));

                            case 18:
                                strLength = basecode.length;

                                if (!(parseInt(strLength - strLength / 8 * 2) > 200000)) {
                                    _context11.next = 21;
                                    break;
                                }

                                return _context11.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 400, '图片大小不能超过200kb'));

                            case 21:
                                avatarInst = _yapi2.default.getInst(_avatar2.default);
                                _context11.next = 24;
                                return avatarInst.up(this.getUid(), basecode, type);

                            case 24:
                                result = _context11.sent;

                                ctx.body = _yapi2.default.commons.resReturn(result);

                                _context11.next = 31;
                                break;

                            case 28:
                                _context11.prev = 28;
                                _context11.t0 = _context11['catch'](0);

                                ctx.body = _yapi2.default.commons.resReturn(null, 401, _context11.t0.message);

                            case 31:
                            case 'end':
                                return _context11.stop();
                        }
                    }
                }, _callee11, this, [[0, 28]]);
            }));

            function uploadAvatar(_x12) {
                return _ref11.apply(this, arguments);
            }

            return uploadAvatar;
        }()

        /**
        * 根据用户uid头像
        * @interface /user/avatar
        * @method GET 
        * @param {*} uid  
        * @category user
        * @returns {Object} 
        * @example 
        */

    }, {
        key: 'avatar',
        value: function () {
            var _ref12 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee12(ctx) {
                var uid, avatarInst, data, dataBuffer, type;
                return _regenerator2.default.wrap(function _callee12$(_context12) {
                    while (1) {
                        switch (_context12.prev = _context12.next) {
                            case 0:
                                _context12.prev = 0;
                                uid = ctx.query.uid ? ctx.query.uid : this.getUid();
                                avatarInst = _yapi2.default.getInst(_avatar2.default);
                                _context12.next = 5;
                                return avatarInst.get(uid);

                            case 5:
                                data = _context12.sent;
                                dataBuffer = void 0, type = void 0;

                                if (!data || !data.basecode) {
                                    dataBuffer = _yapi2.default.fs.readFileSync(_yapi2.default.path.join(_yapi2.default.WEBROOT, 'static/image/avatar.png'));
                                    type = 'image/png';
                                } else {
                                    type = data.type;
                                    dataBuffer = new Buffer(data.basecode, 'base64');
                                }

                                ctx.set('Content-type', type);
                                ctx.body = dataBuffer;
                                _context12.next = 15;
                                break;

                            case 12:
                                _context12.prev = 12;
                                _context12.t0 = _context12['catch'](0);

                                ctx.body = 'error:' + _context12.t0.message;

                            case 15:
                            case 'end':
                                return _context12.stop();
                        }
                    }
                }, _callee12, this, [[0, 12]]);
            }));

            function avatar(_x13) {
                return _ref12.apply(this, arguments);
            }

            return avatar;
        }()

        /**
         * 模糊搜索用户名或者email
         * @interface /user/search
         * @method GET
         * @category user
         * @foldnumber 10
         * @param {String} q
         * @return {Object}
         * @example ./api/user/search.json
        */

    }, {
        key: 'search',
        value: function () {
            var _ref13 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee13(ctx) {
                var q, queryList, rules, filteredRes;
                return _regenerator2.default.wrap(function _callee13$(_context13) {
                    while (1) {
                        switch (_context13.prev = _context13.next) {
                            case 0:
                                q = ctx.request.query.q;

                                if (q) {
                                    _context13.next = 3;
                                    break;
                                }

                                return _context13.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(void 0, 400, 'No keyword.'));

                            case 3:
                                if (_yapi2.default.commons.validateSearchKeyword(q)) {
                                    _context13.next = 5;
                                    break;
                                }

                                return _context13.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(void 0, 400, 'Bad query.'));

                            case 5:
                                _context13.next = 7;
                                return this.Model.search(q);

                            case 7:
                                queryList = _context13.sent;
                                rules = [{
                                    key: '_id',
                                    alias: 'uid'
                                }, 'username', 'email', 'role', {
                                    key: 'add_time',
                                    alias: 'addTime'
                                }, {
                                    key: 'up_time',
                                    alias: 'upTime'
                                }];
                                filteredRes = _commons2.default.filterRes(queryList, rules);
                                return _context13.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(filteredRes, 0, 'ok'));

                            case 11:
                            case 'end':
                                return _context13.stop();
                        }
                    }
                }, _callee13, this);
            }));

            function search(_x14) {
                return _ref13.apply(this, arguments);
            }

            return search;
        }()

        /**
         * 根据路由id初始化项目数据
         * @interface /user/project
         * @method GET
         * @category user
         * @foldnumber 10
         * @param {String} type 可选group|interface|project
         * @param {Number} id   
         * @return {Object}
         * @example 
        */

    }, {
        key: 'project',
        value: function () {
            var _ref14 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee14(ctx) {
                var _ctx$request$query, id, type, result, interfaceInst, interfaceData, projectInst, projectData, ownerAuth, devAuth, groupInst, groupData, _ownerAuth, _devAuth;

                return _regenerator2.default.wrap(function _callee14$(_context14) {
                    while (1) {
                        switch (_context14.prev = _context14.next) {
                            case 0:
                                _ctx$request$query = ctx.request.query, id = _ctx$request$query.id, type = _ctx$request$query.type;
                                result = {};
                                _context14.prev = 2;

                                if (!(type === 'interface')) {
                                    _context14.next = 11;
                                    break;
                                }

                                interfaceInst = _yapi2.default.getInst(_interface2.default);
                                _context14.next = 7;
                                return interfaceInst.get(id);

                            case 7:
                                interfaceData = _context14.sent;

                                result.interface = interfaceData;
                                type = 'project';
                                id = interfaceData.project_id;

                            case 11:
                                if (!(type === 'project')) {
                                    _context14.next = 31;
                                    break;
                                }

                                projectInst = _yapi2.default.getInst(_project2.default);
                                _context14.next = 15;
                                return projectInst.get(id);

                            case 15:
                                projectData = _context14.sent;

                                result.project = projectData.toObject();
                                _context14.next = 19;
                                return this.checkAuth(id, 'project', 'danger');

                            case 19:
                                ownerAuth = _context14.sent;
                                devAuth = void 0;

                                if (!ownerAuth) {
                                    _context14.next = 25;
                                    break;
                                }

                                result.project.role = 'owner';
                                _context14.next = 29;
                                break;

                            case 25:
                                _context14.next = 27;
                                return this.checkAuth(id, 'project', 'site');

                            case 27:
                                devAuth = _context14.sent;

                                if (devAuth) {
                                    result.project.role = 'dev';
                                } else {
                                    result.project.role = 'member';
                                }

                            case 29:
                                type = 'group';
                                id = projectData.group_id;

                            case 31:
                                if (!(type === 'group')) {
                                    _context14.next = 49;
                                    break;
                                }

                                groupInst = _yapi2.default.getInst(_group2.default);
                                _context14.next = 35;
                                return groupInst.get(id);

                            case 35:
                                groupData = _context14.sent;

                                result.group = groupData.toObject();
                                _context14.next = 39;
                                return this.checkAuth(id, 'group', 'danger');

                            case 39:
                                _ownerAuth = _context14.sent;
                                _devAuth = void 0;

                                if (!_ownerAuth) {
                                    _context14.next = 45;
                                    break;
                                }

                                result.group.role = 'owner';
                                _context14.next = 49;
                                break;

                            case 45:
                                _context14.next = 47;
                                return this.checkAuth(id, 'group', 'site');

                            case 47:
                                _devAuth = _context14.sent;

                                if (_devAuth) {
                                    result.group.role = 'dev';
                                } else {
                                    result.group.role = 'member';
                                }

                            case 49:
                                return _context14.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(result));

                            case 52:
                                _context14.prev = 52;
                                _context14.t0 = _context14['catch'](2);
                                return _context14.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(result, 422, _context14.t0.message));

                            case 55:
                            case 'end':
                                return _context14.stop();
                        }
                    }
                }, _callee14, this, [[2, 52]]);
            }));

            function project(_x15) {
                return _ref14.apply(this, arguments);
            }

            return project;
        }()
    }]);
    return userController;
}(_base2.default);

module.exports = userController;