Add user accept invite

src/routes/users.ts

@@ -15,20 +15,6 @@ router.post(
 	})
 );
 
-const inviteSchema = Joi.object({
-	email: Joi.string().email().required(),
-	role: Joi.string().uuid({ version: 'uuidv4' }).required(),
-});
-
-router.post(
-	'/invite',
-	asyncHandler(async (req, res) => {
-		await inviteSchema.validateAsync(req.body);
-		await UsersService.inviteUser(req.body.email, req.body.role);
-		res.end();
-	})
-);
-
 router.get(
 	'/',
 	sanitizeQuery,
@@ -65,4 +51,32 @@ router.delete(
 	})
 );
 
+const inviteSchema = Joi.object({
+	email: Joi.string().email().required(),
+	role: Joi.string().uuid({ version: 'uuidv4' }).required(),
+});
+
+router.post(
+	'/invite',
+	asyncHandler(async (req, res) => {
+		await inviteSchema.validateAsync(req.body);
+		await UsersService.inviteUser(req.body.email, req.body.role);
+		res.end();
+	})
+);
+
+const acceptInviteSchema = Joi.object({
+	token: Joi.string().required(),
+	password: Joi.string().required(),
+});
+
+router.post(
+	'/invite/accept',
+	asyncHandler(async (req, res) => {
+		await acceptInviteSchema.validateAsync(req.body);
+		await UsersService.acceptInvite(req.body.token, req.body.password);
+		res.end();
+	})
+);
+
 export default router;

src/services/users.ts

@@ -2,6 +2,9 @@ import { Query } from '../types/query';
 import * as ItemsService from './items';
 import jwt from 'jsonwebtoken';
 import { sendInviteMail } from '../mail';
+import database from '../database';
+import APIError, { ErrorCode } from '../error';
+import bcrypt from 'bcrypt';
 
 export const createUser = async (data: Record<string, any>, query?: Query) => {
 	return await ItemsService.createItem('directus_users', data, query);
@@ -32,3 +35,26 @@ export const inviteUser = async (email: string, role: string) => {
 
 	await sendInviteMail(email, acceptURL);
 };
+
+export const acceptInvite = async (token: string, password: string) => {
+	const { email } = jwt.verify(token, process.env.SECRET) as Record<string, any>;
+	const user = await database
+		.select('id', 'status')
+		.from('directus_users')
+		.where({ email })
+		.first();
+
+	if (!user) {
+		throw new APIError(ErrorCode.USER_NOT_FOUND, `Email address ${email} hasn't been invited.`);
+	}
+
+	if (user.status !== 'invited') {
+		throw new APIError(ErrorCode.USER_NOT_FOUND, `Email address ${email} hasn't been invited.`);
+	}
+
+	const passwordHashed = await bcrypt.hash(password, Number(process.env.SALT_ROUNDS));
+
+	await database('directus_users')
+		.update({ password: passwordHashed, status: 'active' })
+		.where({ id: user.id });
+};