fluxer/fluxer_api/src/auth/services/AuthRegistrationService.ts

/*
 * Copyright (C) 2026 Fluxer Contributors
 *
 * This file is part of Fluxer.
 *
 * Fluxer is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * Fluxer is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with Fluxer. If not, see <https://www.gnu.org/licenses/>.
 */

import crypto from 'node:crypto';
import Bowser from 'bowser';
import {types} from 'cassandra-driver';
import type {RegisterRequest} from '~/auth/AuthModel';
import {createEmailVerificationToken, createInviteCode, createUserID, type UserID} from '~/BrandedTypes';
import {Config} from '~/Config';
import {APIErrorCodes, UserFlags} from '~/Constants';
import {FluxerAPIError, InputValidationError} from '~/Errors';
import type {IDiscriminatorService} from '~/infrastructure/DiscriminatorService';
import type {ICacheService} from '~/infrastructure/ICacheService';
import type {IEmailService} from '~/infrastructure/IEmailService';
import type {IRateLimitService} from '~/infrastructure/IRateLimitService';
import {getMetricsService} from '~/infrastructure/MetricsService';
import type {PendingJoinInviteStore} from '~/infrastructure/PendingJoinInviteStore';
import type {RedisActivityTracker} from '~/infrastructure/RedisActivityTracker';
import type {SnowflakeService} from '~/infrastructure/SnowflakeService';
import {InstanceConfigRepository} from '~/instance/InstanceConfigRepository';
import type {InviteService} from '~/invite/InviteService';
import {Logger} from '~/Logger';
import {getUserSearchService} from '~/Meilisearch';
import type {AuthSession, User} from '~/Models';
import {UserSettings} from '~/Models';
import type {RequestCache} from '~/middleware/RequestCacheMiddleware';
import type {IUserRepository} from '~/user/IUserRepository';
import * as AgeUtils from '~/utils/AgeUtils';
import * as IpUtils from '~/utils/IpUtils';
import {parseAcceptLanguage} from '~/utils/LocaleUtils';
import {generateRandomUsername} from '~/utils/UsernameGenerator';

const MINIMUM_AGE_BY_COUNTRY: Record<string, number> = {
	KR: 14,
	VN: 15,
	AW: 16,
	BQ: 16,
	CW: 16,
	SX: 16,
	AT: 14,
	BG: 14,
	HR: 16,
	CY: 14,
	CZ: 15,
	FR: 15,
	DE: 16,
	GR: 15,
	HU: 16,
	IE: 16,
	IT: 14,
	LT: 14,
	LU: 16,
	NL: 16,
	PL: 16,
	RO: 16,
	SM: 16,
	RS: 15,
	SK: 16,
	SI: 16,
	ES: 14,
	CL: 14,
	CO: 14,
	PE: 14,
	VE: 14,
};

const DEFAULT_MINIMUM_AGE = 13;
const USER_AGENT_TRUNCATE_LENGTH = 512;

type CountryResultDetailed = Awaited<ReturnType<typeof IpUtils.getCountryCodeDetailed>>;

interface RegistrationMetadataContext {
	metadata: Map<string, string>;
	clientIp: string;
	countryCode: string;
	location: string;
	city: string | null;
	region: string | null;
	osInfo: string;
	browserInfo: string;
	deviceInfo: string;
	truncatedUserAgent: string;
	fluxerTag: string;
	displayName: string;
	email: string;
	ipAddressReverse: string | null;
}

const AGE_BUCKETS: Array<{label: string; min: number; max: number}> = [
	{label: '0-12', min: 0, max: 12},
	{label: '13-17', min: 13, max: 17},
	{label: '18-24', min: 18, max: 24},
	{label: '25-34', min: 25, max: 34},
	{label: '35-44', min: 35, max: 44},
	{label: '45-54', min: 45, max: 54},
	{label: '55-64', min: 55, max: 64},
];

function determineAgeGroup(age: number | null): string {
	if (age === null || age < 0) return 'unknown';
	for (const bucket of AGE_BUCKETS) {
		if (age >= bucket.min && age <= bucket.max) return bucket.label;
	}
	return '65+';
}

function sanitizeEmail(email: string | null | undefined): {raw: string | null; key: string | null} {
	const key = email ? email.toLowerCase() : null;
	return {raw: email ?? null, key};
}

function isIpv6(ip: string): boolean {
	return ip.includes(':');
}

function rateLimitError(message: string): FluxerAPIError {
	return new FluxerAPIError({code: APIErrorCodes.RATE_LIMITED, message, status: 429});
}

function parseDobLocalDate(dateOfBirth: string): types.LocalDate {
	try {
		return types.LocalDate.fromString(dateOfBirth);
	} catch {
		throw InputValidationError.create('date_of_birth', 'Invalid date of birth format');
	}
}

function safeJsonParse<T>(value: string): T | null {
	try {
		return JSON.parse(value) as T;
	} catch (error) {
		Logger.warn({error}, 'Failed to parse JSON from environment variable');
		return null;
	}
}

interface RegisterParams {
	data: RegisterRequest;
	request: Request;
	requestCache: RequestCache;
}

export class AuthRegistrationService {
	private instanceConfigRepository = new InstanceConfigRepository();

	constructor(
		private repository: IUserRepository,
		private inviteService: InviteService | null,
		private rateLimitService: IRateLimitService,
		private emailService: IEmailService,
		private snowflakeService: SnowflakeService,
		private discriminatorService: IDiscriminatorService,
		private redisActivityTracker: RedisActivityTracker,
		private pendingJoinInviteStore: PendingJoinInviteStore,
		private cacheService: ICacheService,
		private hashPassword: (password: string) => Promise<string>,
		private isPasswordPwned: (password: string) => Promise<boolean>,
		private validateAge: (params: {dateOfBirth: string; minAge: number}) => boolean,
		private generateSecureToken: () => Promise<string>,
		private createAuthSession: (params: {user: User; request: Request}) => Promise<[string, AuthSession]>,
	) {}

	async register({
		data,
		request,
		requestCache,
	}: RegisterParams): Promise<{user_id: string; token: string; pending_verification?: boolean}> {
		if (!data.consent) {
			throw InputValidationError.create('consent', 'You must agree to the Terms of Service and Privacy Policy');
		}

		const now = new Date();
		const metrics = getMetricsService();

		const clientIp = IpUtils.requireClientIp(request);
		const countryCode = await IpUtils.getCountryCodeFromReq(request);
		const countryResultDetailed = await IpUtils.getCountryCodeDetailed(clientIp);

		const minAge = (countryCode && MINIMUM_AGE_BY_COUNTRY[countryCode]) || DEFAULT_MINIMUM_AGE;
		if (!this.validateAge({dateOfBirth: data.date_of_birth, minAge})) {
			throw InputValidationError.create(
				'date_of_birth',
				`You must be at least ${minAge} years old to create an account`,
			);
		}

		if (data.password && (await this.isPasswordPwned(data.password))) {
			throw InputValidationError.create('password', 'Password is too common');
		}

		const {raw: rawEmail, key: emailKey} = sanitizeEmail(data.email);

		const enforceRateLimits = !Config.dev.relaxRegistrationRateLimits;
		await this.enforceRegistrationRateLimits({enforceRateLimits, clientIp, emailKey});

		const {betaCode, hasValidBetaCode} = await this.resolveBetaCode(data.beta_code ?? null);

		if (rawEmail) {
			const emailTaken = await this.repository.findByEmail(rawEmail);
			if (emailTaken) throw InputValidationError.create('email', 'Email already in use');
		}

		const username = data.username || generateRandomUsername();
		const discriminator = await this.allocateDiscriminator(username);
		const userId = this.generateUserId(emailKey);

		const acceptLanguage = request.headers.get('accept-language');
		const userLocale = parseAcceptLanguage(acceptLanguage);

		const passwordHash = data.password ? await this.hashPassword(data.password) : null;

		const instanceConfig = await this.instanceConfigRepository.getInstanceConfig();
		const isManualReviewActive = this.instanceConfigRepository.isManualReviewActiveNow(instanceConfig);

		const shouldRequireVerification =
			(isManualReviewActive && Config.nodeEnv === 'production') ||
			(Config.nodeEnv === 'development' && data.beta_code === 'NOVERIFY');

		const isPendingVerification = shouldRequireVerification && !hasValidBetaCode;

		let flags = Config.nodeEnv === 'development' ? UserFlags.STAFF : 0n;
		if (isPendingVerification) flags |= UserFlags.PENDING_MANUAL_VERIFICATION;

		const user = await this.repository.create({
			user_id: userId,
			username,
			discriminator,
			global_name: data.global_name || null,
			bot: false,
			system: false,
			email: rawEmail,
			email_verified: false,
			email_bounced: false,
			phone: null,
			password_hash: passwordHash,
			password_last_changed_at: passwordHash ? now : null,
			totp_secret: null,
			authenticator_types: new Set(),
			avatar_hash: null,
			avatar_color: null,
			banner_hash: null,
			banner_color: null,
			bio: null,
			pronouns: null,
			accent_color: null,
			date_of_birth: parseDobLocalDate(data.date_of_birth),
			locale: userLocale,
			flags,
			premium_type: null,
			premium_since: null,
			premium_until: null,
			premium_will_cancel: null,
			premium_billing_cycle: null,
			premium_lifetime_sequence: null,
			stripe_subscription_id: null,
			stripe_customer_id: null,
			has_ever_purchased: null,
			suspicious_activity_flags: null,
			terms_agreed_at: now,
			privacy_agreed_at: now,
			last_active_at: now,
			last_active_ip: clientIp,
			temp_banned_until: null,
			pending_deletion_at: null,
			pending_bulk_message_deletion_at: null,
			pending_bulk_message_deletion_channel_count: null,
			pending_bulk_message_deletion_message_count: null,
			deletion_reason_code: null,
			deletion_public_reason: null,
			deletion_audit_log_reason: null,
			acls: null,
			first_refund_at: null,
			beta_code_allowance: 0,
			beta_code_last_reset_at: null,
			gift_inventory_server_seq: null,
			gift_inventory_client_seq: null,
			premium_onboarding_dismissed_at: null,
			version: 1,
		});

		await this.redisActivityTracker.updateActivity(user.id, now);

		metrics.counter({
			name: 'user.registration',
			dimensions: {
				country: countryCode ?? 'unknown',
				state: countryResultDetailed.region ?? 'unknown',
				ip_version: isIpv6(clientIp) ? 'v6' : 'v4',
			},
		});

		const age = data.date_of_birth ? AgeUtils.calculateAge(data.date_of_birth) : null;
		metrics.counter({
			name: 'user.age',
			dimensions: {
				country: countryCode ?? 'unknown',
				state: countryResultDetailed.region ?? 'unknown',
				age: age !== null ? age.toString() : 'unknown',
				age_group: determineAgeGroup(age),
			},
		});

		await this.repository.upsertSettings(
			UserSettings.getDefaultUserSettings({
				userId,
				locale: userLocale,
				isAdult: AgeUtils.isUserAdult(data.date_of_birth),
			}),
		);

		await this.maybeIndexUser(user);

		if (rawEmail) await this.maybeSendVerificationEmail({user, email: rawEmail});
		if (betaCode) await this.repository.updateBetaCodeRedeemed(betaCode.code, userId, now);

		const registrationMetadata = await this.buildRegistrationMetadataContext({
			user,
			clientIp,
			request,
			countryResultDetailed,
		});

		if (isPendingVerification)
			await this.repository.createPendingVerification(userId, now, registrationMetadata.metadata);

		await this.repository.createAuthorizedIp(userId, clientIp);

		await this.maybeAutoJoinInvite({
			userId,
			inviteCode: data.invite_code || Config.instance.autoJoinInviteCode,
			isPendingVerification,
			requestCache,
		});

		const [token] = await this.createAuthSession({user, request});

		this.sendRegistrationWebhook(user, registrationMetadata, instanceConfig.registrationAlertsWebhookUrl).catch(
			(error) => {
				Logger.warn({error, userId: user.id.toString()}, 'Failed to send registration webhook');
			},
		);

		return {
			user_id: user.id.toString(),
			token,
			pending_verification: isPendingVerification ? true : undefined,
		};
	}

	private async maybeIndexUser(user: User): Promise<void> {
		const userSearchService = getUserSearchService();
		if (!userSearchService) return;

		try {
			await userSearchService.indexUser(user);
		} catch (error) {
			Logger.error({userId: user.id, error}, 'Failed to index user in search');
		}
	}

	private async maybeSendVerificationEmail(params: {user: User; email: string}): Promise<void> {
		const {user, email} = params;
		const token = createEmailVerificationToken(await this.generateSecureToken());

		await this.repository.createEmailVerificationToken({
			token_: token,
			user_id: user.id,
			email,
		});

		await this.emailService.sendEmailVerification(email, user.username, token, user.locale);
	}

	private async maybeAutoJoinInvite(params: {
		userId: UserID;
		inviteCode: string | null | undefined;
		isPendingVerification: boolean;
		requestCache: RequestCache;
	}): Promise<void> {
		const {userId, inviteCode, isPendingVerification, requestCache} = params;
		if (inviteCode == null) return;

		if (isPendingVerification) {
			await this.pendingJoinInviteStore.setPendingInvite(userId, inviteCode);
			return;
		}

		if (!this.inviteService) return;

		try {
			await this.inviteService.acceptInvite({
				userId,
				inviteCode: createInviteCode(inviteCode),
				requestCache,
			});
		} catch (error) {
			Logger.warn({inviteCode, error}, 'Failed to auto-join invite on registration');
		}
	}

	private async enforceRegistrationRateLimits(params: {
		enforceRateLimits: boolean;
		clientIp: string;
		emailKey: string | null;
	}): Promise<void> {
		const {enforceRateLimits, clientIp, emailKey} = params;
		if (!enforceRateLimits) return;

		if (emailKey) {
			const emailRateLimit = await this.rateLimitService.checkLimit({
				identifier: `registration:email:${emailKey}`,
				maxAttempts: 3,
				windowMs: 15 * 60 * 1000,
			});

			if (!emailRateLimit.allowed) throw rateLimitError('Too many registration attempts. Please try again later.');
		}

		const ipRateLimit = await this.rateLimitService.checkLimit({
			identifier: `registration:ip:${clientIp}`,
			maxAttempts: 5,
			windowMs: 30 * 60 * 1000,
		});

		if (!ipRateLimit.allowed)
			throw rateLimitError('Too many registration attempts from this IP. Please try again later.');
	}

	private async resolveBetaCode(betaCodeInput: string | null): Promise<{
		betaCode: Awaited<ReturnType<IUserRepository['getBetaCode']>> | null;
		hasValidBetaCode: boolean;
	}> {
		if (!betaCodeInput) return {betaCode: null, hasValidBetaCode: false};
		if (Config.nodeEnv === 'development' && betaCodeInput === 'NOVERIFY')
			return {betaCode: null, hasValidBetaCode: false};

		const betaCode = await this.repository.getBetaCode(betaCodeInput);
		return {betaCode, hasValidBetaCode: Boolean(betaCode && !betaCode.redeemerId)};
	}

	private async allocateDiscriminator(username: string): Promise<number> {
		const result = await this.discriminatorService.generateDiscriminator({username, isPremium: false});
		if (!result.available || result.discriminator === -1) {
			throw InputValidationError.create('username', 'Too many users with this username');
		}
		return result.discriminator;
	}

	private generateUserId(emailKey: string | null): UserID {
		const mappingJson = process.env.EARLY_TESTER_EMAIL_HASH_TO_SNOWFLAKE;

		if (emailKey && mappingJson) {
			const mapping = safeJsonParse<Record<string, string>>(mappingJson);
			if (mapping) {
				const emailHash = crypto.createHash('sha256').update(emailKey).digest('hex');
				const mapped = mapping[emailHash];
				if (mapped) {
					try {
						return createUserID(BigInt(mapped));
					} catch (error) {
						Logger.warn({error}, 'Invalid snowflake mapping value; falling back to generated ID');
					}
				}
			}
		}

		return createUserID(this.snowflakeService.generate());
	}

	private truncateUserAgent(userAgent: string): string {
		if (userAgent.length <= USER_AGENT_TRUNCATE_LENGTH) return userAgent;
		return `${userAgent.slice(0, USER_AGENT_TRUNCATE_LENGTH)}...`;
	}

	private parseUserAgentSafe(userAgent: string): {osInfo: string; browserInfo: string; deviceInfo: string} {
		try {
			const result = Bowser.parse(userAgent);
			return {
				osInfo: this.formatOsInfo(result.os) ?? 'Unknown',
				browserInfo: this.formatNameVersion(result.browser?.name, result.browser?.version) ?? 'Unknown',
				deviceInfo: this.formatDeviceInfo(result.platform),
			};
		} catch (error) {
			Logger.warn({error}, 'Failed to parse user agent with Bowser');
			return {osInfo: 'Unknown', browserInfo: 'Unknown', deviceInfo: 'Desktop/Unknown'};
		}
	}

	private formatNameVersion(name?: string, version?: string): string | null {
		if (!name) return null;
		return version ? `${name} ${version}` : name;
	}

	private formatOsInfo(os?: {name?: string; version?: string; versionName?: string}): string | null {
		if (!os?.name) return null;
		if (os.versionName && os.version) return `${os.name} ${os.versionName} (${os.version})`;
		if (os.versionName) return `${os.name} ${os.versionName}`;
		if (os.version) return `${os.name} ${os.version}`;
		return os.name;
	}

	private formatDeviceInfo(platform?: {type?: string; vendor?: string; model?: string}): string {
		const type = this.formatPlatformType(platform?.type);
		const vendorModel = [platform?.vendor, platform?.model].filter(Boolean).join(' ').trim();

		if (vendorModel && type) return `${vendorModel} (${type})`;
		if (vendorModel) return vendorModel;
		if (type) return type;
		return 'Desktop/Unknown';
	}

	private formatPlatformType(type?: string): string | null {
		switch ((type ?? '').toLowerCase()) {
			case 'mobile':
				return 'Mobile';
			case 'tablet':
				return 'Tablet';
			case 'desktop':
				return 'Desktop';
			default:
				return null;
		}
	}

	private async buildRegistrationMetadataContext(params: {
		user: User;
		clientIp: string;
		request: Request;
		countryResultDetailed: CountryResultDetailed;
	}): Promise<RegistrationMetadataContext> {
		const {user, clientIp, request, countryResultDetailed} = params;

		const userAgentHeader = (request.headers.get('user-agent') ?? '').trim();
		const fluxerTag = `${user.username}#${user.discriminator.toString().padStart(4, '0')}`;
		const displayName = user.globalName || user.username;
		const emailDisplay = user.email || 'Not provided';

		const hasUserAgent = userAgentHeader.length > 0;
		const userAgentForDisplay = hasUserAgent ? userAgentHeader : 'Not provided';
		const truncatedUserAgent = this.truncateUserAgent(userAgentForDisplay);

		const uaInfo = hasUserAgent
			? this.parseUserAgentSafe(userAgentHeader)
			: {osInfo: 'Unknown', browserInfo: 'Unknown', deviceInfo: 'Desktop/Unknown'};

		const normalizedIp = countryResultDetailed.normalizedIp ?? clientIp;
		const geoipReason = countryResultDetailed.reason ?? 'none';
		const locationLabel = IpUtils.formatGeoipLocation(countryResultDetailed);
		const ipAddressReverse = await IpUtils.getIpAddressReverse(normalizedIp, this.cacheService);

		const metadataEntries: Array<[string, string]> = [
			['fluxer_tag', fluxerTag],
			['display_name', displayName],
			['email', emailDisplay],
			['ip_address', clientIp],
			['normalized_ip', normalizedIp],
			['country_code', countryResultDetailed.countryCode],
			['location', locationLabel],
			['geoip_reason', geoipReason],
			['os', uaInfo.osInfo],
			['browser', uaInfo.browserInfo],
			['device', uaInfo.deviceInfo],
			['user_agent', truncatedUserAgent],
		];

		if (countryResultDetailed.city) metadataEntries.push(['city', countryResultDetailed.city]);
		if (countryResultDetailed.region) metadataEntries.push(['region', countryResultDetailed.region]);
		if (countryResultDetailed.countryName) metadataEntries.push(['country_name', countryResultDetailed.countryName]);
		if (ipAddressReverse) metadataEntries.push(['ip_address_reverse', ipAddressReverse]);

		return {
			metadata: new Map(metadataEntries),
			clientIp,
			countryCode: countryResultDetailed.countryCode,
			location: locationLabel,
			city: countryResultDetailed.city,
			region: countryResultDetailed.region,
			osInfo: uaInfo.osInfo,
			browserInfo: uaInfo.browserInfo,
			deviceInfo: uaInfo.deviceInfo,
			truncatedUserAgent,
			fluxerTag,
			displayName,
			email: emailDisplay,
			ipAddressReverse,
		};
	}

	private async sendRegistrationWebhook(
		user: User,
		context: RegistrationMetadataContext,
		webhookUrl: string | null,
	): Promise<void> {
		if (!webhookUrl) return;

		const locationDisplay = context.city ? context.location : context.countryCode;

		const embedFields = [
			{name: 'User ID', value: user.id.toString(), inline: true},
			{name: 'FluxerTag', value: context.fluxerTag, inline: true},
			{name: 'Display Name', value: context.displayName, inline: true},
			{name: 'Email', value: context.email, inline: true},
			{name: 'IP Address', value: context.clientIp, inline: true},
			...(context.ipAddressReverse ? [{name: 'Reverse DNS', value: context.ipAddressReverse, inline: true}] : []),
			{name: 'Location', value: locationDisplay, inline: true},
			{name: 'OS', value: context.osInfo, inline: true},
			{name: 'Browser', value: context.browserInfo, inline: true},
			{name: 'Device', value: context.deviceInfo, inline: true},
			{name: 'User Agent', value: context.truncatedUserAgent, inline: false},
		];

		const payload = {
			username: 'Registration Monitor',
			embeds: [
				{
					title: 'New Account Registered',
					color: 0x10b981,
					fields: embedFields,
					timestamp: new Date().toISOString(),
				},
			],
		};

		try {
			const response = await fetch(webhookUrl, {
				method: 'POST',
				headers: {'Content-Type': 'application/json'},
				body: JSON.stringify(payload),
			});

			if (!response.ok) {
				const body = await response.text();
				Logger.warn({status: response.status, body}, 'Failed to send registration webhook');
			}
		} catch (error) {
			Logger.warn({error}, 'Failed to send registration webhook');
		}
	}
}