GDPR2

* Remember and recall consents
* Speeds up logging in if we already have it

NOTES:
* Good thing I twiddled with this before :)

Post OpenUserJS#1174 and OpenUserJS#1385 'ish

Author: Martii

controllers/auth.js

@@ -280,6 +280,9 @@ exports.callback = function (aReq, aRes, aNext) {
       // Save the last date a user sucessfully logged in
       aUser.authed = new Date();
 
+      // Save consent
+      aUser.consented = true;
+
       // Save the session id on the user model
       aUser.sessionId = aReq.sessionID;
 

controllers/user.js

@@ -14,6 +14,7 @@ var formidable = require('formidable');
 var async = require('async');
 var _ = require('underscore');
 var util = require('util');
+var rfc2047 = require('rfc2047');
 
 var SPDX = require('spdx-license-ids');
 var SPDXOSI = require('spdx-osi'); // NOTE: Sub-dep of `spdx-is-osi`
@@ -84,21 +85,34 @@ exports.exist = function (aReq, aRes) {
     return;
   }
 
-  User.count({
+  User.findOne({
     name: caseInsensitive(username)
-  }, function (aErr, aCount) {
+  }, function (aErr, aUser) {
+    var msg = null;
+
     if (aErr) {
       aRes.status(400).send();
       return;
     }
 
-    if (aCount === 0) {
+
+    if (!aUser) {
       aRes.status(404).send();
       return;
     }
 
+    if (!aUser.consented) {
+      msg = [
+        '199 ' + aReq.headers.host + ' consent'
+
+      ].join('\u0020');
+      aRes.set('Warning', msg);
+    }
+
     aRes.status(200).send();
-  });
+});
+
+
 };
 
 var setupUserModerationUITask = function (aOptions) {

models/user.js

@@ -17,6 +17,7 @@ var userSchema = new Schema({
   about: String,
 
   // A user can link multiple accounts to their OpenUserJS account
+  consented: Boolean,
   auths: Array,
   strategies: Array,
   authed: Date, // last logged in

views/includes/scripts/loginEcho.html

@@ -15,16 +15,23 @@
     function onDOMContentLoaded(aEv) {
       var username = document.querySelector('input[name="username"]');
       var auth = document.querySelector('select[name="auth"]');
+      var consent = document.querySelector('input[name="consent"]');
       var action = document.querySelector('button#action');
 
       function onInput(aEv) {
         var req = new XMLHttpRequest();
         var wantname = cleanFilename(aEv.target.value, '');
 
-        function show() {
+        function show(aConsent) {
           action.innerHTML = action.innerHTML.replace(/Sign Up/, 'Sign In');
           action.classList.add('btn-success');
           action.classList.remove('btn-info');
+
+          if (aConsent) {
+            consent.checked = false;
+          } else {
+            consent.checked = true;
+          }
         }
 
         function hide() {
@@ -39,11 +46,11 @@
             if (this.readyState == this.DONE) {
               switch (this.status) {
                 case 200:
-                  show();
+                  show(/ consent$/.test(this.getResponseHeader('Warning')));
                   auth.value = '';
                   break;
                 default:
-                  hide();
+                  hide(true);
                   auth.value = 'github';
               }
             }