R05-Allen

app.js

@@ -1,9 +1,39 @@
 const express = require('express')
+const handlebars = require('express-handlebars')
+const path = require('path')
+const session = require('express-session')
+const flash = require('connect-flash')
+const methodOverride = require('method-override')
+require('dotenv').config()
+
+const passport = require('./config/passport')
 const routes = require('./routes')
+const handlebarsHelper = require('./helpers/handlerBars-helper')
+const { getUser } = require('./helpers/auth-helpers')
 
 const app = express()
 const port = process.env.PORT || 3000
+const SESSION_SECRET = 'secret'
 
+app.engine('hbs', handlebars({ extname: '.hbs', helpers: handlebarsHelper }))
+app.set('view engine', 'hbs')
+app.use(express.urlencoded({ extended: true }))
+app.use(session({
+  secret: SESSION_SECRET,
+  resave: false,
+  saveUninitialized: false
+}))
+app.use(flash())
+app.use(passport.initialize())
+app.use(passport.session())
+app.use((req, res, next) => {
+  res.locals.success_messages = req.flash('success_messages')
+  res.locals.error_messages = req.flash('error_messages')
+  res.locals.user = getUser(req)
+  next()
+})
+app.use(methodOverride('_method'))
+app.use('/upload', express.static(path.join(__dirname, 'upload')))
 app.use(routes)
 
 app.listen(port, () => {

config/passport.js

@@ -0,0 +1,41 @@
+const passport = require('passport')
+const LocalStrategy = require('passport-local')
+const bcrypt = require('bcryptjs')
+const { User, Restaurant } = require('../models')
+
+passport.use(new LocalStrategy(
+  {
+    usernameField: 'email',
+    passwordField: 'password',
+    passReqToCallback: true
+  },
+  (req, email, password, cb) => {
+    User.findOne({ where: { email } })
+      .then(user => {
+        if (!user) return cb(null, false, req.flash('error_messages', '帳號或密碼輸入錯誤！'))
+        bcrypt.compare(password, user.password).then(isMatch => {
+          if (!isMatch) return cb(null, false, req.flash('error_messages', '帳號或密碼輸入錯誤！'))
+          return cb(null, user)
+        })
+      })
+  }
+))
+
+passport.serializeUser((user, cb) => {
+  cb(null, user.id)
+})
+
+passport.deserializeUser((id, cb) => {
+  User.findByPk(id, {
+    include: [
+      { model: Restaurant, as: 'FavoritedRestaurants' },
+      { model: User, as: 'Followers' },
+      { model: User, as: 'Followings' },
+      { model: Restaurant, as: 'LikedRestaurants' }
+    ]
+  })
+    .then(user => cb(null, user.toJSON()))
+    .catch(err => cb(err))
+})
+
+module.exports = passport

controllers/admin-controller.js

@@ -0,0 +1,131 @@
+const { Restaurant, User, Category } = require('../models')
+const { imgurUploader } = require('../helpers/file-helper')
+const { getOffset, getPagination } = require('../helpers/pagination-helper')
+
+module.exports = {
+  async getRestaurants (req, res, next) {
+    try {
+      const DEFAULT_LIMIT = 7
+      const page = Number(req.query.page) || 1
+      const limit = Number(req.query.limit) || DEFAULT_LIMIT
+      const offset = getOffset(limit, page)
+
+      const restaurants = await Restaurant.findAndCountAll({
+        raw: true,
+        limit,
+        offset,
+        include: [Category],
+        nest: true
+      })
+
+      res.render('admin/restaurants', {
+        restaurants: restaurants.rows,
+        pagination: getPagination(limit, page, restaurants.count)
+      })
+    } catch (err) {
+      next(err)
+    }
+  },
+  async createRestaurant (_req, res) {
+    res.render('admin/create-restaurant', { categories: await Category.findAll({ raw: true }) })
+  },
+  async postRestaurant (req, res, next) {
+    try {
+      const { name, tel, address, openingHours, description, categoryId } = req.body
+
+      if (!name || !name.replace(/\s/g, '').length) throw new Error('Restaurant name is required')
+
+      const filePath = await imgurUploader(req.file.buffer)
+      await Restaurant.create({ name, tel, address, openingHours, description, image: filePath || null, categoryId })
+      req.flash('success_messages', 'A restaurant was successfully created')
+      res.redirect('/admin/restaurants')
+    } catch (err) {
+      next(err)
+    }
+  },
+  async getRestaurant (req, res, next) {
+    try {
+      const restaurant = await Restaurant.findByPk(req.params.id, {
+        raw: true,
+        include: [Category],
+        nest: true
+      })
+
+      if (!restaurant) throw new Error('The restaurant is not existed.')
+      res.render('admin/restaurant', { restaurant })
+    } catch (err) {
+      next(err)
+    }
+  },
+  async editRestaurant (req, res, next) {
+    try {
+      const [restaurant, categories] = await Promise.all([
+        Restaurant.findByPk(req.params.id, { raw: true }),
+        Category.findAll({ raw: true })
+      ])
+
+      if (!restaurant) throw new Error('The restaurant is not existed.')
+      res.render('admin/edit-restaurant', { restaurant, categories })
+    } catch (err) {
+      next(err)
+    }
+  },
+  async putRestaurant (req, res, next) {
+    try {
+      const { name, tel, address, openingHours, description, categoryId } = req.body
+
+      if (!name || !name.replace(/\s/g, '').length) throw new Error('Restaurant name is required')
+
+      const [restaurant, filePath] = await Promise.all([
+        Restaurant.findByPk(req.params.id),
+        imgurUploader(req.file?.buffer)
+      ])
+
+      if (!restaurant) throw new Error('The restaurant is not existed')
+      await restaurant.update({ name, tel, address, openingHours, description, image: filePath || restaurant.image, categoryId })
+      req.flash('success_messages', 'The restaurant was successfully to update')
+      res.redirect('/admin/restaurants')
+    } catch (err) {
+      next(err)
+    }
+  },
+  async deleteRestaurant (req, res, next) {
+    try {
+      const restaurant = await Restaurant.findByPk(req.params.id)
+
+      if (!restaurant) throw new Error('The restaurant is not existed')
+      await restaurant.destroy()
+      res.redirect('/admin/restaurants')
+    } catch (err) {
+      next(err)
+    }
+  },
+  async getUsers (_req, res, next) {
+    try {
+      const users = await User.findAll({ raw: true })
+
+      res.render('admin/users', { users })
+    } catch (err) {
+      next(err)
+    }
+  },
+  async patchUser (req, res, next) {
+    try {
+      const userId = req.params.id
+      if (!userId) throw new Error('User id is required')
+
+      const user = await User.findByPk(userId)
+      if (!user) throw new Error('The user is not existed')
+      if (user.email === 'root@example.com') {
+        req.flash('error_messages', '禁止變更 root 權限')
+        res.redirect('back')
+      } else {
+        await user.update({ isAdmin: !user.isAdmin })
+        req.flash('success_messages', '使用者權限變更成功')
+        res.redirect('/admin/users')
+      }
+    } catch (err) {
+      next(err)
+    }
+  }
+}

controllers/category-controller.js

@@ -0,0 +1,53 @@
+const { Category } = require('../models')
+
+module.exports = {
+  async getCategories (req, res, next) {
+    try {
+      const [categories, category] = await Promise.all([
+        Category.findAll({ raw: true }),
+        req.params.id ? Category.findByPk(req.params.id, { raw: true }) : null
+      ])
+
+      res.render('admin/categories', { categories, category })
+    } catch (err) {
+      next(err)
+    }
+  },
+  async postCategory (req, res, next) {
+    try {
+      const { name } = req.body
+
+      if (!name || !name.replace(/\s/g, '').length) throw new Error('Category name is required')
+      await Category.create({ name })
+      req.flash('success_messages', 'A Category was successfully created')
+      res.redirect('/admin/categories')
+    } catch (err) {
+      next(err)
+    }
+  },
+  async putCategory (req, res, next) {
+    try {
+      const { name } = req.body
+      if (!name || !name.replace(/\s/g, '').length) throw new Error('Category name is required')
+
+      const category = await Category.findByPk(req.params.id)
+      if (!category) throw new Error('The category is not existed')
+      await category.update({ name })
+      req.flash('success_messages', 'The category was successfully to update')
+      res.redirect('/admin/categories')
+    } catch (err) {
+      next(err)
+    }
+  },
+  async deleteCategory (req, res, next) {
+    try {
+      const category = await Category.findByPk(req.params.id)
+
+      if (!category) throw new Error('The category is not existed')
+      await category.destroy()
+      res.redirect('/admin/categories')
+    } catch (err) {
+      next(err)
+    }
+  }
+}

controllers/comment-controller.js

@@ -0,0 +1,33 @@
+const { User, Restaurant, Comment } = require('../models')
+
+module.exports = {
+  async postComment (req, res, next) {
+    try {
+      const userId = req.user.id
+      const { text, restaurantId } = req.body
+      if (!text) throw new Error('The comment is required')
+
+      const [user, restaurant] = await Promise.all([
+        User.findByPk(userId),
+        Restaurant.findByPk(restaurantId)
+      ])
+      if (!user) throw new Error('The user does not exist')
+      if (!restaurant) throw new Error('The restaurant does not exist')
+      await Comment.create({ text, restaurantId, userId })
+      res.redirect(`/restaurants/${restaurantId}`)
+    } catch (err) {
+      next(err)
+    }
+  },
+  async deleteComment (req, res, next) {
+    try {
+      const comment = await Comment.findByPk(req.params.id)
+      if (!comment) throw new Error('The comment does not exist')
+      await comment.destroy()
+      req.flash('success_messages', 'Success to delete the comment')
+      res.redirect(`/restaurants/${comment.restaurantId}`)
+    } catch (err) {
+      next(err)
+    }
+  }
+}