Add changing email for users

pkg/user/update_email.go

@@ -0,0 +1,79 @@
+// Vikunja is a to-do list application to facilitate your life.
+// Copyright 2018-2020 Vikunja and contributors. All rights reserved.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU General Public License for more details.
+//
+// You should have received a copy of the GNU General Public License
+// along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+package user
+
+import (
+	"code.vikunja.io/api/pkg/config"
+	"code.vikunja.io/api/pkg/mail"
+	"code.vikunja.io/api/pkg/utils"
+)
+
+// EmailUpdate is the data structure to update a user's email address
+type EmailUpdate struct {
+	User *User `json:"-"`
+	// The new email address. Needs to be a valid email address.
+	NewEmail string `json:"new_email" valid:"email,length(0|250),required"`
+	// The password of the user for confirmation.
+	Password string `json:"password"`
+}
+
+// UpdateEmail lets a user update their email address
+func UpdateEmail(update *EmailUpdate) (err error) {
+
+	// Check the email is not already used
+	user := &User{}
+	has, err := x.Where("email = ?", update.NewEmail).Get(user)
+	if err != nil {
+		return
+	}
+
+	if has {
+		return ErrUserEmailExists{UserID: user.ID, Email: update.NewEmail}
+	}
+
+	// Set the user as unconfirmed and the new email address
+	update.User, err = GetUserWithEmail(&User{ID: update.User.ID})
+	if err != nil {
+		return
+	}
+
+	update.User.IsActive = false
+	update.User.Email = update.NewEmail
+	update.User.EmailConfirmToken = utils.MakeRandomString(64)
+	_, err = x.
+		Where("id = ?", update.User.ID).
+		Cols("email", "is_active", "email_confirm_token").
+		Update(update.User)
+	if err != nil {
+		return
+	}
+
+	// Send the confirmation mail
+	if !config.MailerEnabled.GetBool() {
+		return
+	}
+
+	// Send the user a mail with a link to confirm the mail
+	data := map[string]interface{}{
+		"User":  update.User,
+		"IsNew": false,
+	}
+
+	mail.SendMailWithTemplate(update.User.Email, update.User.Username+", please confirm your email address at Vikunja", "confirm-email", data)
+
+	return
+}

pkg/user/user.go

@@ -252,7 +252,7 @@ func CreateUser(user *User) (newUser *User, err error) {
 		// The new user should not be activated until it confirms his mail address
 		newUser.IsActive = false
 		// Generate a confirm token
-		newUser.EmailConfirmToken = utils.MakeRandomString(400)
+		newUser.EmailConfirmToken = utils.MakeRandomString(60)
 	}
 
 	// Insert it
@@ -277,7 +277,8 @@ func CreateUser(user *User) (newUser *User, err error) {
 
 	// Send the user a mail with a link to confirm the mail
 	data := map[string]interface{}{
-		"User": newUserOut,
+		"User":  newUserOut,
+		"IsNew": true,
 	}
 
 	mail.SendMailWithTemplate(user.Email, newUserOut.Username+" + Vikunja = <3", "confirm-email", data)