Changeset 6d882b1 in Klonkt for src/routes/account.js

Timestamp:

06/20/2026 01:24:26 AM (3 months ago)

Author:

roboburr <roboburr@…>

Branches:

main

Children:

dfc5379

Parents:

11ba289

Message:

feat(account): email address editable

Profile form gets an email field; POST /account/profile validates format +
uniqueness (no other account with that address) and updates email + session.

Co-Authored-By: Claude <noreply@…>

File:

• src/routes/account.js (modified) (1 diff)

src/routes/account.js

@@ -108 +108 @@
 router.post('/profile', requireAuth, (req, res) => {
   const bio = (req.body.bio || '').toString().slice(0, 500).trim();
+
+  // E-mail (optioneel mee te wijzigen). Validatie: geldig formaat + niet al door
+  // een ander account in gebruik. E-mail is het login-/reset-anker, dus uniek.
+  const email = (req.body.email || '').toString().trim();
+  if (email) {
+    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email) || email.length > 254) {
+      return res.redirect('/account?error=' + encodeURIComponent('Voer een geldig e-mailadres in.'));
+    }
+    const taken = db.prepare('SELECT 1 FROM users WHERE LOWER(email) = LOWER(?) AND id != ?')
+      .get(email, req.session.user.id);
+    if (taken) {
+      return res.redirect('/account?error=' + encodeURIComponent('Dit e-mailadres is al in gebruik.'));
+    }
+    db.prepare('UPDATE users SET email = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?')
+      .run(email, req.session.user.id);
+    req.session.user.email = email; // sessie bijwerken zodat de UI klopt
+  }
+
   db.prepare('UPDATE users SET bio = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?')
     .run(bio || null, req.session.user.id);
-  res.redirect('/account?success=' + encodeURIComponent('Profile updated'));
+  res.redirect('/account?success=' + encodeURIComponent('Profiel bijgewerkt'));
 });