feat(privat/CV): sync to latest upstream (cv-upstream/main, 30f9608b)

2026-07-07 15:20:55 +02:00
parent 8ac664d33d
commit a4efabbc60
417 changed files with 48564 additions and 712 deletions
@@ -0,0 +1,37 @@
+import { Router } from 'express'
+import { talkRequestLimiter } from '../middleware/rateLimiter.js'
+import { antiSpam } from '../middleware/antiSpam.js'
+import { createToken, verifyToken } from '../services/confirmationToken.js'
+import { sendConfirmationEmail, sendStakeholderNotification } from '../services/mailer.js'
+
+const router = Router()
+
+router.post('/', talkRequestLimiter, antiSpam, async (req, res) => {
+  const { name, email, event_name, topic, message } = req.body
+  const errors = {}
+  if (!name || name.trim().length === 0) errors.name = 'Name ist erforderlich.'
+  if (!email || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) errors.email = 'Gültige E-Mail erforderlich.'
+  if (!event_name || event_name.trim().length === 0) errors.event_name = 'Eventname ist erforderlich.'
+  if (!topic || topic.trim().length === 0) errors.topic = 'Thema ist erforderlich.'
+  if (!message || message.trim().length === 0) errors.message = 'Nachricht ist erforderlich.'
+  if (message && message.length > 2000) errors.message = 'Max. 2000 Zeichen.'
+
+  if (Object.keys(errors).length > 0) {
+    return res.status(400).json({ errors })
+  }
+
+  const token = createToken('talk-request', { name, email, event_name, topic, message }, 48)
+  await sendConfirmationEmail(email, 'talk-request', token)
+  res.status(201).json({ ok: true, message: 'Bestätigungs-E-Mail gesendet.' })
+})
+
+router.post('/confirm/:token', async (req, res) => {
+  const entry = verifyToken(req.params.token)
+  if (!entry) {
+    return res.status(410).json({ error: 'Link abgelaufen oder ungültig.' })
+  }
+  await sendStakeholderNotification('talk-request', entry.data)
+  res.json({ ok: true, message: 'Vortragsanfrage wurde weitergeleitet.' })
+})
+
+export default router