R01-鰻魚燒

.env.example

@@ -0,0 +1 @@
+IMGUR_CLIENT_ID =

Procfile

@@ -0,0 +1 @@
+web: NODE_ENV=production node app.js

app.js

@@ -1,7 +1,37 @@
 const express = require('express')
+const exphbs = require('express-handlebars')
+const flash = require('connect-flash')
+const session = require('express-session')
+const methodOverride = require('method-override')
+const bodyParser = require('body-parser')
+const helpers = require('./_helpers')
+const handlebarsHelpers = require('./helpers/handlebarsHelpers')
+if (process.env.NODE_ENV !== 'production') {
+  require('dotenv').config()
+}
+const passport = require('./config/passport')
 const app = express()
-const port = 3000
+const port = process.env.PORT || 3000
 
+app.engine('handlebars', exphbs({ defaultLayout: 'main', helpers: handlebarsHelpers }))
+app.set('view engine', 'handlebars')
+app.use(express.static('public'))
+app.use(methodOverride('_method'))
+app.use(express.urlencoded({extended: true}))
+app.use(bodyParser.json())
+app.use(session({ secret: 'secret', resave: false, saveUninitialized: false }))
+app.use(passport.initialize())
+app.use(passport.session())
+app.use(flash())
+
+app.use((req, res, next) => {
+  res.locals.user = helpers.getUser(req)
+  res.locals.success_messages = req.flash('success_messages')
+  res.locals.error_messages = req.flash('error_messages')
+  next()
+})
+
+app.use('/upload', express.static(__dirname + '/upload'))
 app.listen(port, () => {
   console.log(`Example app listening at http://localhost:${port}`)
 })

config/config.json

@@ -7,11 +7,14 @@
     "dialect": "mysql"
   },
   "production": {
-    "username": "root",
-    "password": null,
-    "database": "database_production",
-    "host": "127.0.0.1",
-    "dialect": "mysql"
+    "use_env_variable": "CLEARDB_DATABASE_URL",
+    "dialect": "postgres",
+    "protocol": "postgres",
+    "dialectOptions": {
+      "ssl": {
+        "rejectUnauthorized": false
+      }
+    }
   },
   "travis": {
     "username": "travis",

config/passport.js

@@ -0,0 +1,69 @@
+const passport = require('passport')
+const LocalStrategy = require('passport-local')
+const bcrypt = require('bcryptjs')
+const db = require('../models')
+const User = db.User
+const Restaurant = db.Restaurant
+
+// setup passport strategy
+passport.use(new LocalStrategy(
+  // customize user field
+  {
+    usernameField: 'email',
+    passwordField: 'password',
+    passReqToCallback: true
+  },
+  // authenticate user
+  (req, username, password, cb) => {
+    User.findOne({ where: { email: username } }).then(user => {
+      if (!user) return cb(null, false, req.flash('error_messages', '帳號或密碼輸入錯誤'))
+      if (!bcrypt.compareSync(password, user.password)) return cb(null, false, req.flash('error_messages', '帳號或密碼輸入錯誤！'))
+      return cb(null, user)
+    })
+  }
+))
+
+// serialize and deserialize user
+passport.serializeUser((user, cb) => {
+  cb(null, user.id)
+})
+passport.deserializeUser((id, cb) => {
+  User.findByPk(id,{
+    include: [
+      { model: Restaurant, as: 'FavoritedRestaurants' },
+      { model: Restaurant, as: 'LikedRestaurants' },
+      { model: User, as: 'Followers' },
+      { model: User, as: 'Followings' }
+    ]
+    }).then(user => {
+    user = user.toJSON() // 此處與影片示範不同
+    return cb(null, user) 
+  })
+})
+
+// JWT
+const jwt = require('jsonwebtoken')
+const passportJWT = require('passport-jwt')
+const ExtractJwt = passportJWT.ExtractJwt
+const JwtStrategy = passportJWT.Strategy
+
+let jwtOptions = {}
+jwtOptions.jwtFromRequest = ExtractJwt.fromAuthHeaderAsBearerToken()
+jwtOptions.secretOrKey = process.env.JWT_SECRET
+
+let strategy = new JwtStrategy(jwtOptions, function (jwt_payload, next) {
+  User.findByPk(jwt_payload.id, {
+    include: [
+      { model: db.Restaurant, as: 'FavoritedRestaurants' },
+      { model: db.Restaurant, as: 'LikedRestaurants' },
+      { model: User, as: 'Followers' },
+      { model: User, as: 'Followings' }
+    ]
+  }).then(user => {
+    if (!user) return next(null, false)
+    return next(null, user)
+  })
+})
+passport.use(strategy)
+
+module.exports = passport

controllers/adminController.js

@@ -0,0 +1,102 @@
+const fs = require('fs')
+const imgur = require('imgur-node-api')
+const IMGUR_CLIENT_ID = process.env.IMGUR_CLIENT_ID
+const db = require('../models') 
+const Restaurant = db.Restaurant
+const User = db.User
+const Category = db.Category
+const adminService = require('../services/adminService.js')
+
+const adminController = {
+  getRestaurants: (req, res) => {
+    adminService.getRestaurants(req, res, (data) => {
+      return res.render('admin/restaurants', data)
+    })
+  },
+
+  createRestaurant: (req, res) => {
+    Category.findAll({ 
+      raw: true,
+      nest: true
+    }).then(categories => {
+      return res.render('admin/create', { categories })
+    })
+  },
+
+  postRestaurant: (req, res) => {
+    adminService.postRestaurant(req, res, (data) => {
+      if (data['status'] === 'error') {
+        req.flash('error_messages', data['message'])
+        return res.redirect('back')
+      }
+      req.flash('success_messages', data['message'])
+      res.redirect('/admin/restaurants')
+    })
+  },
+
+  getRestaurant: (req, res) => {
+    adminService.getRestaurant(req, res, data => {
+      return res.render('admin/restaurant', { restaurant: data.restaurant }) 
+    })
+  },
+
+  editRestaurant: (req, res) => {
+    Category.findAll({
+      raw: true,
+      nest: true
+    }).then(categories => {
+      return Restaurant.findByPk(req.params.id).then(restaurant => {
+        return res.render('admin/create', {
+          categories, 
+          restaurant: restaurant.toJSON()
+        })
+      })
+    })
+  },
+
+  putRestaurant: (req, res) => {
+    adminService.putRestaurant(req, res, data => {
+      if(data['status'] === 'error'){
+        req.flash('error_messages', data['message'])
+        return res.redirect('back')
+      }
+      req.flash('success_messages', data['message'])
+      return res.redirect('/admin/restaurants')
+    })
+  },
+
+  deleteRestaurant: (req, res) => {
+    adminService.deleteRestaurant(req, res, (data) => {
+      if (data['status'] === 'success') {
+        return res.redirect('/admin/restaurants')
+      }
+    })
+  },
+
+  getUsers: (req, res) => {
+    return User.findAll({ raw: true, nest: true })
+    .then(users => res.render('admin/users', { users }))
+  },
+
+  toggleAdmin: async (req, res) => {
+    //判斷是否能變更管理權限 (自己不能變更自己)
+    // if (Number(req.params.id) === req.user.id) {
+    //   req.flash('error_messages','禁止變更管理者權限')
+    //   return res.redirect('/admin/users')
+    // }
+    //變更管理權限
+    return User.findByPk(req.params.id)
+    .then(async (user) => {
+      if (user.email === 'root@example.com') {
+        req.flash('error_messages','禁止變更管理者權限')
+        return res.redirect('back')
+      }
+      user.isAdmin ? await user.update({isAdmin: false }) : await user.update({isAdmin: true })
+      req.flash('success_messages','使用者權限變更成功')
+      return res.redirect('/admin/users')
+    })
+  }
+}
+
+
+module.exports = adminController

controllers/api/adminController.js

@@ -0,0 +1,53 @@
+const db = require('../../models')
+const Restaurant = db.Restaurant
+const Category = db.Category
+const adminService = require('../../services/adminService')
+
+const adminController = {
+  getRestaurants: (req, res) => {
+      adminService.getRestaurants(req, res, (data) => {
+        return res.json(data)
+      })
+  },
+  getRestaurant: (req, res) => {
+    adminService.getRestaurant(req, res, (data) => {
+      return res.json(data)
+    })
+  },
+  getCategories:(req, res) => {
+    adminService.getCategories(req, res, (data) => {
+      return res.json(data)
+    })
+  },
+  deleteRestaurant: (req, res) => {
+    adminService.deleteRestaurant(req, res, (data) => {
+      return res.json(data)
+    })
+  },
+  postRestaurant: (req, res) => {
+    adminService.postRestaurant(req, res, (data) => {
+      return res.json(data)
+    })
+  },
+  putRestaurant: (req, res) => {
+    adminService.putRestaurant(req, res, (data) => {
+      return res.json(data)
+    })
+  },
+  postCategory: (req, res) => {
+    adminService.postCategory(req, res, data => {
+      return res.json(data)
+    })
+  },
+  putCategory: (req, res) => {
+    adminService.putCategory(req, res, data => {
+      return res.json(data)
+    })
+  },
+  deleteCategory: (req, res) => {
+    adminService.deleteCategory(req, res, data => {
+      return res.json(data)
+    })
+  }
+}
+module.exports = adminController

controllers/api/userController.js

@@ -0,0 +1,60 @@
+const bcrypt = require('bcryptjs')
+const db = require('../../models')
+const User = db.User
+
+// JWT
+const jwt = require('jsonwebtoken')
+const passportJWT = require('passport-jwt')
+const ExtractJwt = passportJWT.ExtractJwt
+const JwtStrategy = passportJWT.Strategy
+
+let userController = {
+  signIn: (req, res) => {
+    // 檢查必要資料
+    if (!req.body.email || !req.body.password) {
+      return res.json({ status: 'error', message: "required fields didn't exist" })
+    }
+   // 檢查 user 是否存在與密碼是否正確
+    let username = req.body.email
+    let password = req.body.password
+
+    User.findOne({ where: { email: username } }).then(user => {
+      if (!user) return res.status(401).json({ status: 'error', message: 'no such user found' })
+      if (!bcrypt.compareSync(password, user.password)) {
+        return res.status(401).json({ status: 'error', message: 'passwords did not match' })
+      }
+      // 簽發 token
+      var payload = { id: user.id }
+      var token = jwt.sign(payload, process.env.JWT_SECRET)
+      return res.json({
+        status: 'success',
+        message: 'ok',
+        token: token,
+        user: {
+          id: user.id, name: user.name, email: user.email, isAdmin: user.isAdmin
+        }
+      })
+    })
+  },
+  signUp: (req, res) => {
+    if(req.body.passwordCheck !== req.body.password){
+      return res.json({ status: 'error', message: '兩次密碼輸入不同！'})
+    } else {
+      User.findOne({where: {email: req.body.email}}).then(user => {
+        if(user){
+          return res.json({ status: 'error', message: '信箱重複！'})
+        } else {
+          User.create({
+            name: req.body.name,
+            email: req.body.email,
+            password: bcrypt.hashSync(req.body.password, bcrypt.genSaltSync(10), null)
+          }).then(user => {
+            return res.json({ status: 'success', message: '成功註冊帳號！'})
+          })  
+        }
+      })    
+    }
+  }
+}
+
+module.exports = userController