2022-08-27 14:08:28 +03:00
|
|
|
const { Router, request, response } = require("express")
|
2022-03-21 23:53:22 +03:00
|
|
|
const app = Router();
|
2022-08-29 21:32:57 +03:00
|
|
|
const fs =require("fs")
|
2022-08-10 02:08:18 +03:00
|
|
|
const bcrypt = require("bcrypt");
|
|
|
|
const { SecretModel, UserModel } = require("../../models")
|
|
|
|
|
2022-03-21 23:53:22 +03:00
|
|
|
/**
|
2022-04-06 21:14:46 +03:00
|
|
|
* Auth checker
|
2022-03-21 23:53:22 +03:00
|
|
|
* @param {request} req
|
|
|
|
* @param {response} res
|
|
|
|
*/
|
2022-08-10 02:08:18 +03:00
|
|
|
|
2022-04-06 21:14:46 +03:00
|
|
|
app.use(async (req, res, next) => {
|
2022-08-27 14:08:28 +03:00
|
|
|
res.error = (status, error) => res.status(status).json({ error });
|
2022-08-10 02:08:18 +03:00
|
|
|
|
2022-08-24 22:09:21 +03:00
|
|
|
res.complate = result => res.status(200).json(result);
|
2022-03-21 23:53:22 +03:00
|
|
|
|
2022-08-11 00:38:44 +03:00
|
|
|
if (req.user) return next();
|
2022-03-21 23:53:22 +03:00
|
|
|
const { username = null, password = null } = req.headers;
|
|
|
|
|
|
|
|
if (!username || !password)
|
2022-08-10 02:08:18 +03:00
|
|
|
return res.error(401, "Authorise headers are missing")
|
2022-03-21 23:53:22 +03:00
|
|
|
|
2022-04-06 21:14:46 +03:00
|
|
|
const user = await SecretModel.findOne({ username });
|
2022-03-21 23:53:22 +03:00
|
|
|
|
|
|
|
if (!user)
|
2022-08-29 19:31:59 +03:00
|
|
|
return res.error(401, `We don't have any thread with name ${username}.`)
|
2022-08-10 02:08:18 +03:00
|
|
|
|
2022-08-28 21:14:02 +03:00
|
|
|
if (!await bcrypt.compare(password, user.password)) return res.error(401, 'Incorrect Password!');
|
2022-08-27 14:08:28 +03:00
|
|
|
|
2022-08-10 02:08:18 +03:00
|
|
|
req.user = await UserModel.findOne({ name: req.headers.username });
|
2022-03-21 23:53:22 +03:00
|
|
|
|
2022-04-03 21:22:06 +03:00
|
|
|
next();
|
2022-04-06 21:14:46 +03:00
|
|
|
});
|
2022-03-21 23:53:22 +03:00
|
|
|
|
2022-09-09 21:36:55 +03:00
|
|
|
app.post("me", (req, res) => res.complate(req.user))
|
|
|
|
|
2022-08-29 21:32:57 +03:00
|
|
|
for (const file of fs.readdirSync("./routes/api/routes"))
|
|
|
|
app.use("/" + file.replace(".js", ""), require(`./routes/${file}`));
|
|
|
|
|
2022-08-10 02:08:18 +03:00
|
|
|
app.all("*", (req, res) => res.error(400, "Bad request"));
|
2022-03-21 23:53:22 +03:00
|
|
|
|
|
|
|
module.exports = app;
|