ready to test

Testing

Signed-off-by: Kenneth Obsequio <k80308392@gmail.com>

controllers/client/profile.controller.js

@@ -1,23 +1,28 @@
 /***********************************************************************************************************************************************************************
  * File Name: profile.controller.js  (client)
  * Type of Program: Controller
- * Description: Self-service profile management for CLIENT users.
+ * Description: Self-service profile management for all end users.
  *              All routes require: authenticate → requireClient()
  *
  *              Endpoints:
- *              GET  /api/client/profile          → view own profile
- *              PUT  /api/client/profile          → update personal_info
- *              GET  /api/client/sessions         → view own active sessions
- *              DELETE /api/client/sessions/:id   → revoke a specific session
+ *              GET    /api/client/profile          → view own profile
+ *              PUT    /api/client/profile          → update personal_info
+ *              GET    /api/client/sessions         → view own active sessions
+ *              DELETE /api/client/sessions/:id     → revoke a specific session
+ *              GET    /api/client/achievements     → view own achievements
  *
  * Author: rgrgogu
  * Date Created: Oct. 6, 2025
  ***********************************************************************************************************************************************************************/
 const mdl_Users        = require('../../models/users/users.mdl');
 const mdl_UserSessions = require('../../models/users/user_sessions.mdl');
+const mdl_Achievements = require('../../models/users/achievements.mdl');
+const logActivity      = require('../../utils/logActivity.util');
 const R                = require('../../utils/response.util');
+const { uploadFile, deleteFile } = require('../../services/s3.service');
 
 // ─── GET own profile ───────────────────────────────────────────────────────────
+
 exports.getProfile = async (req, res) => {
   try {
     const user = await mdl_Users.findByPk(req.user.user_id, {
@@ -30,6 +35,7 @@ exports.getProfile = async (req, res) => {
 };
 
 // ─── PUT update own profile ────────────────────────────────────────────────────
+
 exports.updateProfile = async (req, res) => {
   try {
     const user = await mdl_Users.findByPk(req.user.user_id);
@@ -51,6 +57,8 @@ exports.updateProfile = async (req, res) => {
       attributes: { exclude: ['password', 'otp_code', 'otp_expires_at'] },
     });
 
+    logActivity(req.user.user_id, 'update_profile');
+
     return R.success(res, 'Profile updated.', updated);
   } catch (err) {
     console.error('[CLIENT] updateProfile error:', err);
@@ -59,11 +67,12 @@ exports.updateProfile = async (req, res) => {
 };
 
 // ─── GET own sessions ──────────────────────────────────────────────────────────
+
 exports.getSessions = async (req, res) => {
   try {
     const sessions = await mdl_UserSessions.findAll({
-      where: { user_id: req.user.user_id, is_active: true },
-      order: [['createdAt', 'DESC']],
+      where:      { user_id: req.user.user_id, is_active: true },
+      order:      [['createdAt', 'DESC']],
       attributes: { exclude: ['refresh_token_hash'] },
     });
     return R.success(res, 'Sessions retrieved.', sessions);
@@ -73,6 +82,7 @@ exports.getSessions = async (req, res) => {
 };
 
 // ─── DELETE revoke a session ───────────────────────────────────────────────────
+
 exports.revokeSession = async (req, res) => {
   try {
     const session = await mdl_UserSessions.findOne({
@@ -85,8 +95,86 @@ exports.revokeSession = async (req, res) => {
       logout_info: { date: new Date().toISOString(), ip_address: req.ip },
     });
 
+    logActivity(req.user.user_id, 'revoke_session', { entityType: 'session', entityId: session.session_id });
+
     return R.success(res, 'Session revoked.');
   } catch (err) {
     return R.error(res, 'Could not revoke session.', 500);
   }
+};
+
+// ─── POST upload own avatar ────────────────────────────────────────────────────
+
+exports.uploadAvatar = async (req, res) => {
+  try {
+    if (!req.file) return R.error(res, 'No file provided.', 400);
+
+    const user = await mdl_Users.findByPk(req.user.user_id);
+
+    // Remove old avatar from S3 before replacing
+    const oldKey = user.personal_info?.avatar?.uuid;
+    if (oldKey) await deleteFile(oldKey).catch(() => {});
+
+    const { url, uuid } = await uploadFile({
+      buffer:       req.file.buffer,
+      originalname: req.file.originalname,
+      mimetype:     req.file.mimetype,
+      ownerType:    'avatar',
+    });
+
+    const merged = {
+      ...(user.personal_info || {}),
+      avatar: {
+        url,
+        uuid,
+        name:      req.file.originalname,
+        mime_type: req.file.mimetype,
+        size:      req.file.size,
+      },
+    };
+
+    await user.update({ personal_info: merged });
+
+    const updated = await mdl_Users.findByPk(req.user.user_id, {
+      attributes: { exclude: ['password', 'otp_code', 'otp_expires_at'] },
+    });
+    return R.success(res, 'Avatar updated.', updated);
+  } catch (err) {
+    console.error('[CLIENT] uploadAvatar error:', err);
+    return R.error(res, 'Avatar upload failed.', 500);
+  }
+};
+
+// ─── DELETE remove own avatar ──────────────────────────────────────────────────
+
+exports.deleteAvatar = async (req, res) => {
+  try {
+    const user = await mdl_Users.findByPk(req.user.user_id);
+    const key  = user.personal_info?.avatar?.uuid;
+    if (!key) return R.error(res, 'No avatar to remove.', 404);
+
+    await deleteFile(key).catch(() => {});
+
+    const merged = { ...(user.personal_info || {}), avatar: null };
+    await user.update({ personal_info: merged });
+
+    return R.success(res, 'Avatar removed.');
+  } catch (err) {
+    console.error('[CLIENT] deleteAvatar error:', err);
+    return R.error(res, 'Could not remove avatar.', 500);
+  }
+};
+
+// ─── GET own achievements ──────────────────────────────────────────────────────
+
+exports.getAchievements = async (req, res) => {
+  try {
+    const achievements = await mdl_Achievements.findAll({
+      where: { user_id: req.user.user_id },
+      order: [['granted_at', 'DESC']],
+    });
+    return R.success(res, 'Achievements retrieved.', achievements);
+  } catch (err) {
+    return R.error(res, 'Could not retrieve achievements.', 500);
+  }
 };