akf-forum/routes/message.js

const { MessageModel } = require("../models");
const error = require("../errors/error")

const { Router } = require("express");

const app = Router();

app.get("/:id", async (req, res) => {
    const message = await MessageModel.get(req.params.id);

    if (!message || message.deleted) return error(res, 404, "We have not got any message declared as this id.");
    res.redirect("/threads/" + message.threadID);

});

app.use(require("../middlewares/login"));

app.post("/:id/delete", async (req, res) => {
    const message = await MessageModel.get(req.params.id);
    if (!message || message.deleted) return error(res, 404, "We have not got any message declared as this id.");
    const user = req.user;
    if (user.id != message.authorID && !user.admin)
        return error(res, 403, "You have not got permission for this.");
    message.deleted = true;
    await message.save();


    res.status(200).redirect("/threads/" + message.threadID);

})



module.exports = app;