adopt-a-street/backend/routes/profile.js

const express = require("express");
const User = require("../models/User");
const auth = require("../middleware/auth");
const { asyncHandler } = require("../middleware/errorHandler");
const { upload, handleUploadError } = require("../middleware/upload");
const { uploadImage, deleteImage } = require("../config/cloudinary");
const { validateProfile } = require("../middleware/validators/profileValidator");
const { userIdValidation } = require("../middleware/validators/userValidator");

const router = express.Router();

// GET user profile
router.get(
  "/:userId",
  auth,
  userIdValidation,
  asyncHandler(async (req, res) => {
    const { userId } = req.params;
    const user = await User.findById(userId);

    if (!user) {
      return res.status(404).json({ msg: "User not found" });
    }

    if (user.privacySettings.profileVisibility === "private" && req.user.id !== userId) {
      return res.status(403).json({ msg: "This profile is private" });
    }

    res.json(user.toSafeObject());
  })
);

// PUT update user profile
router.put(
  "/",
  auth,
  validateProfile,
  asyncHandler(async (req, res) => {
    const userId = req.user.id;
    const {
      bio,
      location,
      website,
      social,
      privacySettings,
      preferences,
    } = req.body;

    const user = await User.findById(userId);
    if (!user) {
      return res.status(404).json({ msg: "User not found" });
    }

    // Update fields
    if (bio !== undefined) user.bio = bio;
    if (location !== undefined) user.location = location;
    if (website !== undefined) user.website = website;
    if (social !== undefined) user.social = { ...user.social, ...social };
    if (privacySettings !== undefined) user.privacySettings = { ...user.privacySettings, ...privacySettings };
    if (preferences !== undefined) user.preferences = { ...user.preferences, ...preferences };

    const updatedUser = await user.save();

    res.json(updatedUser.toSafeObject());
  })
);

// POST upload avatar
router.post(
  "/avatar",
  auth,
  upload.single("avatar"),
  handleUploadError,
  asyncHandler(async (req, res) => {
    if (!req.file) {
      return res.status(400).json({ msg: "No image file provided" });
    }

    const user = await User.findById(req.user.id);
    if (!user) {
      return res.status(404).json({ msg: "User not found" });
    }

    if (user.cloudinaryPublicId) {
      await deleteImage(user.cloudinaryPublicId);
    }

    const result = await uploadImage(
      req.file.buffer,
      "adopt-a-street/avatars"
    );

    user.avatar = result.secure_url;
    user.cloudinaryPublicId = result.public_id;
    const updatedUser = await user.save();

    res.json({ 
        msg: "Avatar updated successfully",
        avatar: updatedUser.avatar 
    });
  })
);

// DELETE remove avatar
router.delete(
  "/avatar",
  auth,
  asyncHandler(async (req, res) => {
    const user = await User.findById(req.user.id);
    if (!user) {
      return res.status(404).json({ msg: "User not found" });
    }

    if (user.cloudinaryPublicId) {
      await deleteImage(user.cloudinaryPublicId);
      user.avatar = null;
      user.cloudinaryPublicId = null;
      await user.save();
    }

    res.json({ msg: "Avatar removed successfully" });
  })
);

module.exports = router;