R04-dream0184@yahoo.com.tw

.env.example

@@ -0,0 +1 @@
+IMGUR_CLIENT_ID=SKIP

Procfile

@@ -0,0 +1 @@
+web: NODE_ENV=production node app.js

_helpers.js

@@ -1,12 +1,12 @@
 function ensureAuthenticated(req) {
-  return req.isAuthenticated();
+  return req.isAuthenticated()
 }
 
 function getUser(req) {
-  return req.user;
+  return req.user
 }
 
 module.exports = {
   ensureAuthenticated,
   getUser,
-};
+}

app.js

@@ -1,11 +1,48 @@
 const express = require('express')
+const exphbs = require('express-handlebars')
+const bodyParser = require('body-parser')
+const flash = require('connect-flash')
+const session = require('express-session')
+const methodOverride = require('method-override')
+const passport = require('./config/passport')
 const app = express()
-const port = 3000
+const port = process.env.PORT || 3000
+
+if (process.env.NODE_ENV !== 'production') {
+  require('dotenv').config()
+}
+
+app.engine('hbs', exphbs.engine({
+  defaultLayout: 'main',
+  extname: '.hbs',
+  helpers: require('./config/handlebars-helpers')
+}))
+app.set('view engine', 'hbs')
+
+app.use(bodyParser.urlencoded({ extended: true }))
+app.use(session({
+  secret: 'secret',
+  resave: false,
+  saveUninitialized: false
+}))
+app.use(flash())
+app.use(passport.initialize())
+app.use(passport.session())
+app.use(methodOverride('_method'))
+app.use('/upload', express.static(__dirname + '/upload'))
+app.use(express.static('public'))
+
+app.use((req, res, next) => {
+  res.locals.success_messages = req.flash('success_messages')
+  res.locals.error_messages = req.flash('error_messages')
+  res.locals.user = req.user
+  next()
+})
 
 app.listen(port, () => {
   console.log(`Example app listening at http://localhost:${port}`)
 })
 
-require('./routes')(app)
+require('./routes')(app, passport)
 
 module.exports = app

config/config.json

@@ -7,6 +7,13 @@
     "dialect": "mysql"
   },
   "production": {
+    "use_env_variable": "CLEARDB_DATABASE_URL",
+    "protocol": "mysql",
+    "dialectOptions": {
+      "ssl": {
+        "rejectUnauthorized": false
+      }
+    },
     "username": "root",
     "password": null,
     "database": "database_production",

config/handlebars-helpers.js

@@ -0,0 +1,13 @@
+const moment = require('moment')
+
+module.exports = {
+  ifCond: function (a, b, options) {
+    if (a === b) {
+      return options.fn(this)
+    }
+    return options.inverse(this)
+  },
+  moment: function (a) {
+    return moment(a).fromNow()
+  }
+}

config/passport.js

@@ -0,0 +1,42 @@
+const passport = require('passport')
+const LocalStrategy = require('passport-local')
+const bcrypt = require('bcryptjs')
+const db = require('../models')
+const Like = db.Like
+const User = db.User
+const Restaurant = db.Restaurant
+
+passport.use(new LocalStrategy(
+  {
+    usernameField: 'email',
+    passwordField: 'password',
+    passReqToCallback: true
+  },
+
+  (req, username, password, done) => {
+    User.findOne({ where: { email: username } })
+      .then(user => {
+        if (!user) return done(null, false, req.flash('error_messages', '帳號輸入錯誤!'))
+        if (!bcrypt.compareSync(password, user.password)) return done(null, false, req.flash('error_messages', '密碼輸入錯誤!'))
+        return done(null, user)
+      })
+  }
+))
+
+passport.serializeUser((user, done) => {
+  done(null, user.id)
+})
+
+passport.deserializeUser((id, done) => {
+  User.findByPk(id, {
+    include: [
+      { model: Restaurant, as: 'FavoritedRestaurants' },
+      { model: Restaurant, as: 'LikedRestaurants' }
+    ]
+  }).then(user => {
+    user = user.toJSON()
+    return done(null, user)
+  })
+})
+
+module.exports = passport

controllers/adminController.js

@@ -0,0 +1,168 @@
+const db = require('../models')
+const Restaurant = db.Restaurant
+const User = db.User
+const Category = db.Category
+const fs = require('fs')
+const imgur = require('imgur-node-api')
+const user = require('../models/user')
+const IMGUR_CLIENT_ID = process.env.IMGUR_CLIENT_ID
+
+const adminController = {
+  getRestaurants: (req, res) => {
+    return Restaurant.findAll({
+      raw: true,
+      nest: true,
+      include: [Category]
+    }).then(restaurants => {
+      return res.render('admin/restaurants', { restaurants: restaurants })
+    })
+  },
+  createRestaurant: (req, res) => {
+    Category.findAll({
+      raw: true,
+      nest: true
+    }).then(categories => {
+      return res.render('admin/create', {
+        categories: categories
+      })
+    })
+  },
+  postRestaurant: (req, res) => {
+    if (!req.body.name) {
+      req.flash('error_messages', "name didn't exist")
+      return res.redirect('back')
+    }
+
+    const { file } = req
+    if (file) {
+      imgur.setClientID(IMGUR_CLIENT_ID)
+      imgur.upload(file.path, (err, img) => {
+        return Restaurant.create({
+          name: req.body.name,
+          tel: req.body.tel,
+          address: req.body.address,
+          opening_hours: req.body.opening_hours,
+          description: req.body.description,
+          image: file ? img.data.link : null,
+          CategoryId: req.body.categoryId
+        })
+          .then((restaurant) => {
+            req.flash('success_messages', "restaurant was successfully created")
+            res.redirect('/admin/restaurants')
+          })
+      })
+    } else {
+      return Restaurant.create({
+        name: req.body.name,
+        tel: req.body.tel,
+        address: req.body.address,
+        opening_hours: req.body.opening_hours,
+        description: req.body.description,
+        imgae: null,
+        CategoryId: req.body.categoryId
+      })
+        .then((restaurant) => {
+          req.flash('success_messages', "restaurant was successfully created")
+          res.redirect('/admin/restaurants')
+        })
+    }
+  },
+  getRestaurant: (req, res) => {
+    return Restaurant.findByPk(req.params.id, {
+      include: [Category]
+    }).then(restaurant => {
+      return res.render('admin/restaurant', {
+        restaurant: restaurant.toJSON()
+      })
+    })
+  },
+  editRestaurant: (req, res) => {
+    Category.findAll({
+      raw: true,
+      nest: true
+    }).then(categories => {
+      return Restaurant.findByPk(req.params.id, { raw: true }).then(restaurant => {
+        return res.render('admin/create', {
+          restaurant: restaurant,
+          categories: categories
+        })
+      })
+    })
+  },
+  putRestaurant: (req, res) => {
+    if (!req.body.name) {
+      req.flash('error_messages', "name didn't exist")
+      return res.redirect('back')
+    }
+
+    const { file } = req
+    if (file) {
+      imgur.setClientID(IMGUR_CLIENT_ID)
+      imgur.upload(file.path, (err, img) => {
+        return Restaurant.findByPk(req.params.id)
+          .then((restaurant) => {
+            restaurant.update({
+              name: req.body.name,
+              tel: req.body.tel,
+              address: req.body.address,
+              opening_hours: req.body.opening_hours,
+              description: req.body.description,
+              image: file ? img.data.link : restaurant.image,
+              CategoryId: req.body.categoryId
+            })
+              .then((restaurant) => {
+                req.flash('success_messages', "restaurant was successfully update")
+                res.redirect('/admin/restaurants')
+              })
+          })
+      })
+    } else {
+      return Restaurant.findByPk(req.params.id)
+        .then((restaurant) => {
+          restaurant.update({
+            name: req.body.name,
+            tel: req.body.tel,
+            address: req.body.address,
+            opening_hours: req.body.opening_hours,
+            description: req.body.description,
+            image: restaurant.image,
+            CategoryId: req.body.categoryId
+          })
+            .then((restaurant) => {
+              req.flash('success_messages', "restaurant was successfully update")
+              res.redirect('/admin/restaurants')
+            })
+        })
+    }
+  },
+  deleteRestaurant: (req, res) => {
+    return Restaurant.findByPk(req.params.id)
+      .then((restaurant) => {
+        restaurant.destroy()
+          .then((restaurant) => {
+            res.redirect('/admin/restaurants')
+          })
+      })
+  },
+  getUsers: (req, res) => {
+    return User.findAll({ raw: true }).then(users => {
+      return res.render('admin/users', { users: users })
+    })
+  },
+  toggleAdmin: (req, res) => {
+    return User.findByPk(req.params.id).then(user => {
+      if (user.email === 'root@example.com') {
+        req.flash('error_messages', '禁止變更管理者權限')
+        return res.redirect('back')
+      }
+      user.update({
+        isAdmin: user.isAdmin ? false : true
+      })
+    })
+      .then((user) => {
+        req.flash('success_messages', "使用者權限變更成功")
+        res.redirect('/admin/users')
+      })
+  }
+}
+module.exports = adminController

controllers/categoryController.js

@@ -0,0 +1,59 @@
+const db = require('../models')
+const Category = db.Category
+let categoryController = {
+  getCategories: (req, res) => {
+    return Category.findAll({
+      raw: true,
+      nest: true
+    }).then(categories => {
+      if (req.params.id) {
+        Category.findByPk(req.params.id)
+          .then((category) => {
+            return res.render('admin/categories', {
+              categories: categories,
+              category: category.toJSON()
+            })
+          })
+      } else {
+        return res.render('admin/categories', { categories: categories })
+      }
+    })
+  },
+  postCategory: (req, res) => {
+    if (!req.body.name) {
+      req.flash('error_messages', 'name didn\'t exist')
+      return res.redirect('back')
+    } else {
+      return Category.create({
+        name: req.body.name
+      })
+        .then((category) => {
+          res.redirect('/admin/categories')
+        })
+    }
+  },
+  putCategory: (req, res) => {
+    if (!req.body.name) {
+      req.flash('error_messages', 'name did\'t exist')
+      return res.redirect('back')
+    } else {
+      return Category.findByPk(req.params.id)
+        .then((category) => {
+          category.update(req.body)
+            .then((category) => {
+              res.redirect('/admin/categories')
+            })
+        })
+    }
+  },
+  deleteCategory: (req, res) => {
+    return Category.findByPk(req.params.id)
+      .then((category) => {
+        category.destroy()
+          .then((category) => {
+            res.redirect('/admin/categories')
+          })
+      })
+  }
+}
+module.exports = categoryController