Changeset 6d882b1 in Klonkt

Timestamp:

06/20/2026 01:24:26 AM (3 months ago)

Author:

roboburr <roboburr@…>

Branches:

main

Children:

dfc5379

Parents:

11ba289

Message:

feat(account): email address editable

Profile form gets an email field; POST /account/profile validates format +
uniqueness (no other account with that address) and updates email + session.

Co-Authored-By: Claude <noreply@…>

Location:

src

Files:

• routes/account.js (modified) (1 diff)
• views/pages/account.ejs (modified) (1 diff)

src/routes/account.js

@@ -108 +108 @@
 router.post('/profile', requireAuth, (req, res) => {
   const bio = (req.body.bio || '').toString().slice(0, 500).trim();
+
+  // E-mail (optioneel mee te wijzigen). Validatie: geldig formaat + niet al door
+  // een ander account in gebruik. E-mail is het login-/reset-anker, dus uniek.
+  const email = (req.body.email || '').toString().trim();
+  if (email) {
+    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email) || email.length > 254) {
+      return res.redirect('/account?error=' + encodeURIComponent('Voer een geldig e-mailadres in.'));
+    }
+    const taken = db.prepare('SELECT 1 FROM users WHERE LOWER(email) = LOWER(?) AND id != ?')
+      .get(email, req.session.user.id);
+    if (taken) {
+      return res.redirect('/account?error=' + encodeURIComponent('Dit e-mailadres is al in gebruik.'));
+    }
+    db.prepare('UPDATE users SET email = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?')
+      .run(email, req.session.user.id);
+    req.session.user.email = email; // sessie bijwerken zodat de UI klopt
+  }
+
   db.prepare('UPDATE users SET bio = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?')
     .run(bio || null, req.session.user.id);
-  res.redirect('/account?success=' + encodeURIComponent('Profile updated'));
+  res.redirect('/account?success=' + encodeURIComponent('Profiel bijgewerkt'));
 });
 

src/views/pages/account.ejs

@@ -69 +69 @@
       <form action="/account/profile" method="post" class="ax-form ax-form-bio">
         <label class="ax-field">
+          <span>E-mailadres</span>
+          <input type="email" name="email" value="<%= account.email || '' %>" maxlength="254" autocomplete="email" placeholder="jij@email.nl">
+        </label>
+        <label class="ax-field">
           <span>Bio</span>
           <textarea name="bio" rows="3" maxlength="500" placeholder="Een korte regel over jezelf"><%= account.bio || '' %></textarea>
         </label>
         <div class="ax-form-actions">
-          <button type="submit" class="ax-btn ax-btn-primary">Bio opslaan</button>
+          <button type="submit" class="ax-btn ax-btn-primary">Opslaan</button>
         </div>
       </form>