R01-mingmoth

Procfile

@@ -0,0 +1 @@
+web: NODE_ENV=production node app.js

_helpers.js

@@ -1,12 +1,12 @@
 function ensureAuthenticated(req) {
-  return req.isAuthenticated();
+  return req.isAuthenticated()
 }
 
 function getUser(req) {
-  return req.user;
+  return req.user
 }
 
 module.exports = {
   ensureAuthenticated,
   getUser,
-};
+}

app.js

@@ -1,11 +1,46 @@
 const express = require('express')
+const exphbs = require('express-handlebars')
+const db = require('./models')
+const flash = require('connect-flash')
+const session = require('express-session')
+const passport = require('./config/passport')
+const methodOverride = require('method-override')
 const app = express()
-const port = 3000
+const port = process.env.PORT || 3000
+
+if (process.env.NODE_ENV !== 'production') {
+  require('dotenv').config()
+}
+
+app.engine('hbs', exphbs({extname: '.hbs'}))
+app.set('view engine', 'hbs')
+
+// set body-parser
+app.use(express.urlencoded({extended: true}))
+
+// 我們需要用到「快閃訊息 (flash message)」，這種 message 存在 session 裡面
+// set session and flash
+app.use(session({ secret: 'secret', resave: false, saveUninitialized: false }))
+app.use(flash())
+// set passport
+app.use(passport.initialize())
+app.use(passport.session())
+// set method-override
+app.use(methodOverride('_method'))
+// 把 req.flash 放到 res.locals 裡面
+app.use((req, res, next) => {
+  res.locals.success_messages = req.flash('success_messages')
+  res.locals.error_messages = req.flash('error_messages')
+  res.locals.user = req.user
+  next()
+})
+// /upload 這組路由，這裡因為是靜態檔案，所以不需要像其他的路由一樣寫 controller 邏輯，直接用 express.static 來指定路徑就可以了
+app.use('/upload', express.static(__dirname + '/upload'))
 
 app.listen(port, () => {
   console.log(`Example app listening at http://localhost:${port}`)
 })
-
-require('./routes')(app)
+// 把 passport 傳入 routes
+require('./routes')(app, passport)
 
 module.exports = app

config/config.json

@@ -4,14 +4,19 @@
     "password": "password",
     "database": "forum",
     "host": "127.0.0.1",
-    "dialect": "mysql"
+    "dialect": "mysql",
+    "logging": true,
+    "logQueryParameter": false
   },
   "production": {
-    "username": "root",
-    "password": null,
-    "database": "database_production",
-    "host": "127.0.0.1",
-    "dialect": "mysql"
+    "use_env_variable": "CLEARDB_DATABASE_URL",
+    "dialect": "postgres",
+    "protocol": "postgres",
+    "dialectOptions": {
+      "ssl": {
+        "rejectUnauthorized": false
+      }
+    }
   },
   "travis": {
     "username": "travis",

config/passport.js

@@ -0,0 +1,38 @@
+const passport = require('passport')
+const LocalStrategy = require('passport-local')
+const bcrypt = require('bcryptjs')
+
+const db = require('../models')
+const User = db.User
+
+// setup passport strategy
+// passport.use(new LocalStrategy(option: 設定客製化選項, function 登入認證程序))
+passport.use(new LocalStrategy(
+  {
+    usernameField: 'email',
+    passwordField: 'password',
+    // 設置了 flash message，現在也想沿用，必須在 passport 的驗證邏輯裡，拿到 req 這個參數
+    // 設定了 passReqToCallback: true，就可以 callback 的第一個參數裡拿到 req，這麼一來我們就可以呼叫 req.flash() 把想要客製化的訊息放進去
+    passReqToCallback: true
+  },
+  (req, username, password, cb) => {
+    User.findOne({where: { email: username }}).then(user => {
+      if (!user) return cb(null, false, req.flash('error_messages', '帳號或密碼輸入錯誤'))
+      if (!bcrypt.compareSync(password, user.password)) return cb(null, false, req.flash('error_messages', '帳號或密碼輸入錯誤！'))
+      return cb(null, user)
+    })
+  }
+))
+
+// serialize and deserialize user
+passport.serializeUser((user, cb) => {
+  cb(null, user.id)
+})
+passport.deserializeUser((id, cb) => {
+  User.findByPk(id).then(user => {
+    user = user.toJSON() // 此處與影片示範不同
+    return cb(null, user)
+  })
+})
+
+module.exports = passport

controllers/adminController.js

@@ -0,0 +1,142 @@
+const db = require('../models')
+const fs = require('fs')
+const imgur = require('imgur-node-api')
+const IMGUR_CLIENT_ID = process.env.IMGUR_CLIENT_ID
+const Restaurant = db.Restaurant
+const User = db.User
+
+const adminController = {
+  // get all Users
+  getUsers: (req, res) => {
+    return User.findAll({raw: true}).then((users) => {
+      return res.render('admin/users', { users: users })
+    })
+  },
+  // toggle user isAdmin
+  toggleAdmin: (req, res) => {
+    return User.findByPk(req.params.id).then((user) => {
+      if (user.email === 'root@example.com') {
+        req.flash('error_messages', "禁止變更管理者權限")
+        return res.redirect('back')
+      } else {
+        user.update({
+          isAdmin: !user.isAdmin
+        }).then((user) => {
+          req.flash('success_messages', '使用者權限變更成功')
+          res.redirect('/admin/users')
+        })
+      }
+    })
+  },
+  // get all restaurants
+  getRestaurants: (req, res) => {
+    return Restaurant.findAll({ raw: true }).then(restaurants => {
+      return res.render('admin/restaurants', { restaurants: restaurants })
+    })
+  },
+  // get one restaurant
+  getRestaurant: (req, res) => {
+    return Restaurant.findByPk(req.params.id, { raw: true }).then(restaurant => {
+      return res.render('admin/restaurant', { restaurant: restaurant })
+    })
+  },
+  // create page
+  createRestaurant: (req, res) => {
+    return res.render('admin/create')
+  },
+  // create new restaurant
+  postRestaurant: (req, res) => {
+    if (!req.body.name) {
+      req.flash('error_messages', "請填寫餐廳名稱")
+      return res.redirect('back')
+    }
+    const { file } = req
+    if (file) {
+      imgur.setClientID(IMGUR_CLIENT_ID)
+      imgur.upload(file.path, (err, img) => {
+        return Restaurant.create({
+          name: req.body.name,
+          tel: req.body.tel,
+          address: req.body.address,
+          opening_hours: req.body.opening_hours,
+          description: req.body.description,
+          image: file ? img.data.link : null
+        }).then((restaurant) => {
+          req.flash('success_messages', '成功新增餐廳與圖片')
+          return res.redirect('/admin/restaurants')
+        })
+      })
+    } else {
+      return Restaurant.create({
+        name: req.body.name,
+        tel: req.body.tel,
+        address: req.body.address,
+        opening_hours: req.body.opening_hours,
+        description: req.body.description,
+        image: null
+      })
+        .then((restaurant) => {
+          req.flash('success_messages', '成功新增餐廳')
+          res.redirect('/admin/restaurants')
+        })
+    }
+  },
+  editRestaurant: (req, res) => {
+    return Restaurant.findByPk(req.params.id, { raw: true }).then((restaurant) => {
+      return res.render('admin/create', { restaurant: restaurant })
+    })
+  },
+  putRestaurant: (req, res) => {
+    if (!req.body.name) {
+      req.flash('error_messages', "name didn't exist")
+      return res.redirect('back')
+    }
+    const { file } = req
+    if (file) {
+      imgur.setClientID(IMGUR_CLIENT_ID);
+      imgur.upload(file.path, (err, img) => {
+        return Restaurant.findByPk(req.params.id).then((restaurant) => {
+          restaurant.update({
+            name: req.body.name,
+            tel: req.body.tel,
+            address: req.body.address,
+            opening_hours: req.body.opening_hours,
+            description: req.body.description,
+            image: file ? img.data.link : restaurant.image
+          }).then((restaurant) => {
+            req.flash('success_messages', '已成功更新餐廳資訊與圖片')
+            res.redirect(`/admin/restaurants/${req.params.id}`)
+          })
+        })
+      })
+    } else {
+      return Restaurant.findByPk(req.params.id)
+        .then((restaurant) => {
+          restaurant.update({
+            name: req.body.name,
+            tel: req.body.tel,
+            address: req.body.address,
+            opening_hours: req.body.opening_hours,
+            description: req.body.description,
+            image: null
+          })
+            .then((restaurant) => {
+              req.flash('success_messages', '已成功更新餐廳資訊')
+              res.redirect(`/admin/restaurants/${req.params.id}`)
+            })
+        })
+    }
+  },
+  deleteRestaurant: (req, res) => {
+    return Restaurant.findByPk(req.params.id)
+      .then((restaurant) => {
+        restaurant.destroy()
+          .then((restaurant) => {
+            req.flash('success_messages', '成功刪除餐廳')
+            res.redirect('/admin/restaurants')
+          })
+      })
+  }
+}
+
+module.exports = adminController

controllers/restController.js

@@ -0,0 +1,7 @@
+const restController = {
+  getRestaurants: (req, res) => {
+    return res.render('restaurants')
+  }
+}
+
+module.exports = restController

controllers/userController.js

@@ -0,0 +1,52 @@
+const bcrypt = require('bcryptjs')
+const req = require('express/lib/request')
+const { resetWatchers } = require('nodemon/lib/monitor/watch')
+const db = require('../models')
+const User = db.User
+
+const userController = {
+  SignUpPage: (req, res) => {
+    return res.render('signup')
+  },
+  SignUp: (req, res) => {
+    // confirm
+    if (req.body.passwordCheck !== req.body.password) {
+      req.flash('error_messages', '兩次密碼輸入不同')
+      return res.redirect('/signup')
+    } else {
+      User.findOne({ where: { email: req.body.email } })
+        .then(user => {
+          if (user) {
+            req.flash('error_messages', '信箱重複！')
+            return res.redirect('/signup')
+          } else {
+            User.create({
+              name: req.body.name,
+              email: req.body.email,
+              password: bcrypt.hashSync(req.body.password, bcrypt.genSaltSync(10), null)
+            }).then(user => {
+              req.flash('success_messages', '成功註冊帳號！')
+              return res.redirect('/signin')
+            })
+          }
+        })
+    }
+  },
+  signInPage: (req, res) => {
+    return res.render('signin')
+  },
+
+  signIn: (req, res) => {
+    req.flash('success_messages', '成功登入！')
+    res.redirect('/restaurants')
+  },
+
+  logout: (req, res) => {
+    req.flash('success_messages', '登出成功！')
+    req.logout()
+    res.redirect('/signin')
+  }
+
+}
+
+module.exports = userController