104 lines
3.3 KiB
JavaScript
104 lines
3.3 KiB
JavaScript
const { MessageModel, ThreadModel } = require("../../../models");
|
|
const rateLimit = require('express-rate-limit')
|
|
|
|
const { Router } = require("express")
|
|
|
|
const app = Router();
|
|
|
|
|
|
app.get("/:id", async (req, res) => {
|
|
|
|
const message = await MessageModel.get(req.params.id);
|
|
|
|
if (!message || (message.deleted && req.user && !req.user.admin)) return res.error(404, `We don't have any message with id ${req.params.id}.`);
|
|
|
|
res.complate(message.toObject({ virtuals: true }));
|
|
|
|
})
|
|
|
|
app.post("/", rateLimit({
|
|
windowMs: 60_000, max: 1, standardHeaders: true, legacyHeaders: false,
|
|
handler: (request, response, next, options) =>
|
|
!request.user.admin ?
|
|
response.error(options.statusCode, "You are begin ratelimited")
|
|
: next()
|
|
}), async (req, res) => {
|
|
|
|
const { threadID = null, content = null } = req.body;
|
|
if (!content) return res.error(400, "Missing message content in request body.");
|
|
|
|
const thread = await ThreadModel.get(threadID);
|
|
|
|
if (!thread) return res.error(404, `We don't have any thread with id ${threadID}.`);
|
|
|
|
const message = await new MessageModel({ content, author: req.user, threadID: thread.id }).takeId();
|
|
await message.save();
|
|
await thread.push(message.id).save();
|
|
|
|
res.complate(message.toObject({ virtuals: true }));
|
|
|
|
})
|
|
app.post("/:id/react/:type", async (req, res) => {
|
|
|
|
const message = await MessageModel.get(req.params.id);
|
|
if (!message) return error(res, 404, `We don't have any message with id ${req.params.id}.`);
|
|
|
|
if (req.params.type == "like") {
|
|
if (message.react.like.includes(req.user.id))
|
|
message.react.like.pull(req.user.id);
|
|
else {
|
|
message.react.like.push(req.user.id);
|
|
message.react.dislike.pull(req.user.id);
|
|
}
|
|
|
|
|
|
} else if (req.params.type == "dislike") {
|
|
|
|
if (message.react.dislike.includes(req.user.id))
|
|
message.react.dislike.pull(req.user.id);
|
|
else {
|
|
message.react.dislike.push(req.user.id);
|
|
message.react.like.pull(req.user.id);
|
|
}
|
|
|
|
} else {
|
|
return res.error(400, `We don't have any react type with name ${req.params.type}.`);
|
|
}
|
|
|
|
await message.save();
|
|
|
|
res.complate(message.toObject({ virtuals: true }));
|
|
|
|
});
|
|
|
|
app.post("/:id/delete", async (req, res) => {
|
|
const message = await MessageModel.get(req.params.id);
|
|
if (!message || (message.deleted && req.user && !req.user.admin))
|
|
return res.error(404, `We don't have any message with id ${req.params.id}.`);
|
|
const user = req.user;
|
|
if (user.id != message.authorID && !user.admin)
|
|
return res.error(403, "You have not got permission for this.");
|
|
message.deleted = true;
|
|
await message.save();
|
|
|
|
res.complate(message.toObject({ virtuals: true }));
|
|
|
|
})
|
|
|
|
app.post("/:id/undelete", async (req, res) => {
|
|
if (!req.user.admin) return res.error(403, "You have not got permission for this.");
|
|
|
|
const message = await MessageModel.get(req.params.id);
|
|
|
|
if (!message) return res.error(404, `We don't have any message with id ${req.params.id}.`);
|
|
|
|
if (!message.deleted) return res.error(404, "This message is not deleted, first, delete it.");
|
|
|
|
message.deleted = false;
|
|
await message.save();
|
|
|
|
res.complate(message.toObject({ virtuals: true }));
|
|
|
|
})
|
|
|
|
module.exports = app; |