R01

.env.example

@@ -0,0 +1 @@
+IMGUR_CLIENT_ID=

Procfile

@@ -0,0 +1 @@
+web: NODE_ENV=production node app.js

app.js

@@ -1,9 +1,50 @@
+const path = require('path')
 const express = require('express')
+const handlebars = require('express-handlebars') // 引入 express-handlebars
+const flash = require('connect-flash')
+const methodOverride = require('method-override')
+const session = require('express-session')
+const passport = require('./config/passport')
+const handlebarsHelpers = require('./helpers/handlebars-helpers')
+const { getUser } = require('./helpers/auth-helpers')
 const routes = require('./routes')
 
+if (process.env.NODE_ENV !== 'production') {
+  require('dotenv').config()
+}
+
 const app = express()
 const port = process.env.PORT || 3000
+const SESSION_SECRET = 'secret'
+app.engine(
+  'hbs',
+  handlebars({
+    extname: '.hbs',
+    helpers: {
+      ...handlebarsHelpers,
+      eq: function (a, b) {
+        return a === b
+      }
+    }
+  })
+)
+app.set('view engine', 'hbs')
+app.use(express.urlencoded({ extended: true }))
+app.use(
+  session({ secret: SESSION_SECRET, resave: false, saveUninitialized: false })
+)
+app.use(passport.initialize())
+app.use(passport.session())
+app.use(flash())
+app.use(methodOverride('_method'))
+app.use('/upload', express.static(path.join(__dirname, 'upload')))
 
+app.use((req, res, next) => {
+  res.locals.success_messages = req.flash('success_messages')
+  res.locals.error_messages = req.flash('error_messages')
+  res.locals.user = getUser(req)
+  next()
+})
 app.use(routes)
 
 app.listen(port, () => {

config/config.json

@@ -7,11 +7,7 @@
     "dialect": "mysql"
   },
   "production": {
-    "username": "root",
-    "password": null,
-    "database": "database_production",
-    "host": "127.0.0.1",
-    "dialect": "mysql"
+    "use_env_variable": "MYSQL_DATABASE_URL"
   },
   "travis": {
     "username": "travis",

config/passport.js

@@ -0,0 +1,55 @@
+const passport = require('passport')
+const LocalStrategy = require('passport-local')
+const bcrypt = require('bcryptjs')
+const db = require('../models')
+const User = db.User
+
+// setup passport strategy
+passport.use(
+  new LocalStrategy(
+    // customize user field
+    {
+      usernameField: 'email',
+      passwordField: 'password',
+      passReqToCallback: true
+    },
+    // authenticate user
+    (req, email, password, cb) => {
+      User.findOne({ where: { email } }).then(user => {
+        if (!user) {
+          return cb(
+            null,
+            false,
+            req.flash('error_messages', '帳號或密碼輸入錯誤！')
+          )
+        }
+
+        bcrypt.compare(password, user.password).then(res => {
+          if (!res) {
+            return cb(
+              null,
+              false,
+              req.flash('error_messages', '帳號或密碼輸入錯誤！')
+            )
+          }
+
+          return cb(null, user)
+        })
+      })
+    }
+  )
+)
+
+// serialize and deserialize user
+passport.serializeUser((user, cb) => {
+  cb(null, user.id)
+})
+passport.deserializeUser((id, cb) => {
+  User.findByPk(id).then(user => {
+    user = user.toJSON() // 加入這行
+    console.log(user)
+    return cb(null, user)
+  })
+})
+
+module.exports = passport

controllers/admin-controller.js

@@ -0,0 +1,124 @@
+const { Restaurant, User } = require('../models')
+const { imgurFileHandler } = require('../helpers/file-helpers')
+
+const adminController = {
+  getRestaurants: (req, res, next) => {
+    Restaurant.findAll({
+      raw: true
+    })
+      .then(restaurants => res.render('admin/restaurants', { restaurants }))
+      .catch(err => next(err))
+  },
+  createRestaurant: (req, res) => {
+    return res.render('admin/create-restaurant')
+  },
+  postRestaurant: (req, res, next) => {
+    const { name, tel, address, openingHours, description } = req.body
+    if (!name) throw new Error('Restaurant name is required!')
+
+    const { file } = req
+
+    imgurFileHandler(file)
+      .then(filePath =>
+        Restaurant.create({
+          name,
+          tel,
+          address,
+          openingHours,
+          description,
+          image: filePath || null
+        })
+      )
+      .then(() => {
+        req.flash('success_messages', 'restaurant was successfully created')
+        res.redirect('/admin/restaurants')
+      })
+      .catch(err => next(err))
+  },
+  getRestaurant: (req, res, next) => {
+    Restaurant.findByPk(req.params.id, {
+      raw: true
+    })
+      .then(restaurant => {
+        if (!restaurant) throw new Error("Restaurant didn't exist!")
+
+        res.render('admin/restaurant', { restaurant })
+      })
+      .catch(err => next(err))
+  },
+  editRestaurant: (req, res, next) => {
+    Restaurant.findByPk(req.params.id, {
+      raw: true
+    })
+      .then(restaurant => {
+        if (!restaurant) throw new Error("Restaurant didn't exist!")
+
+        res.render('admin/edit-restaurant', { restaurant })
+      })
+      .catch(err => next(err))
+  },
+  putRestaurant: (req, res, next) => {
+    const { name, tel, address, openingHours, description } = req.body
+    if (!name) throw new Error('Restaurant name is required!')
+
+    const { file } = req
+
+    Promise.all([Restaurant.findByPk(req.params.id), imgurFileHandler(file)])
+      .then(([restaurant, filePath]) => {
+        if (!restaurant) throw new Error("Restaurant didn't exist!")
+
+        return restaurant.update({
+          name,
+          tel,
+          address,
+          openingHours,
+          description,
+          image: filePath || restaurant.image
+        })
+      })
+      .then(() => {
+        req.flash('success_messages', 'restaurant was successfully to update')
+        res.redirect('/admin/restaurants')
+      })
+      .catch(err => next(err))
+  },
+  deleteRestaurant: (req, res, next) => {
+    return Restaurant.findByPk(req.params.id)
+      .then(restaurant => {
+        if (!restaurant) throw new Error("Restaurant didn't exist!")
+
+        return restaurant.destroy()
+      })
+      .then(() => res.redirect('/admin/restaurants'))
+      .catch(err => next(err))
+  },
+  getUsers: (req, res, next) => {
+    return User.findAll({
+      raw: true
+    })
+      .then(users => {
+        res.render('admin/users', { users })
+      })
+      .catch(err => next(err))
+  },
+  patchUser: (req, res, next) => {
+    return User.findByPk(req.params.id)
+      .then(user => {
+        if (user.email === 'root@example.com') {
+          req.flash('error_messages', '禁止變更 root 權限')
+          throw res.redirect('back')
+        }
+        return user
+      })
+      .then(user => user.update({ isAdmin: !user.isAdmin }))
+      .then(() => {
+        req.flash('success_messages', '使用者權限變更成功')
+        res.redirect('/admin/users')
+      })
+      .catch(err => {
+        next(err)
+      })
+  }
+}
+
+module.exports = adminController

controllers/restaurant-controller.js

@@ -0,0 +1,6 @@
+const restaurantController = {
+  getRestaurants: (req, res) => {
+    return res.render('restaurants')
+  }
+}
+module.exports = restaurantController

controllers/user-controller.js

@@ -0,0 +1,44 @@
+const bcrypt = require('bcryptjs') // 載入 bcrypt
+const db = require('../models')
+const { User } = db
+const userController = {
+  signUpPage: (req, res) => {
+    res.render('signup')
+  },
+  signUp: (req, res, next) => {
+    if (req.body.password !== req.body.passwordCheck) { throw new Error('Passwords do not match!') }
+
+    User.findOne({ where: { email: req.body.email } })
+      .then(user => {
+        if (user) throw new Error('Email already exists!')
+
+        return bcrypt.hash(req.body.password, 10)
+      })
+      .then(hash =>
+        User.create({
+          name: req.body.name,
+          email: req.body.email,
+          password: hash
+        })
+      )
+      .then(() => {
+        req.flash('success_messages', '成功註冊帳號！')
+        res.redirect('/signin')
+      })
+      .catch(err => next(err))
+  },
+  signInPage: (req, res) => {
+    res.render('signin')
+  },
+  signIn: (req, res) => {
+    req.flash('success_messages', '成功登入！')
+    res.redirect('/restaurants')
+  },
+  logout: (req, res) => {
+    req.flash('success_messages', '登出成功！')
+    req.logout()
+    res.redirect('/signin')
+  }
+}
+
+module.exports = userController

helpers/auth-helpers.js

@@ -0,0 +1,11 @@
+const getUser = req => {
+  return req.user || null
+}
+const ensureAuthenticated = req => {
+  return req.isAuthenticated()
+}
+
+module.exports = {
+  getUser,
+  ensureAuthenticated
+}

helpers/file-helpers.js

@@ -0,0 +1,34 @@
+const fs = require("fs");
+const imgur = require("imgur");
+const IMGUR_CLIENT_ID = process.env.IMGUR_CLIENT_ID;
+imgur.setClientId(IMGUR_CLIENT_ID);
+
+const localFileHandler = (file) => {
+  return new Promise((resolve, reject) => {
+    if (!file) return resolve(null);
+
+    const fileName = `upload/${file.originalname}`;
+    return fs.promises
+      .readFile(file.path)
+      .then((data) => fs.promises.writeFile(fileName, data))
+      .then(() => resolve(`/${fileName}`))
+      .catch((err) => reject(err));
+  });
+};
+
+const imgurFileHandler = file => {
+  return new Promise((resolve, reject) => {
+    if (!file) return resolve(null)
+
+    return imgur.uploadFile(file.path)
+      .then(img => {
+        resolve(img?.link || null)
+      })
+      .catch(err => reject(err))
+  })
+}
+
+module.exports = {
+  localFileHandler,
+  imgurFileHandler
+}

helpers/handlebars-helpers.js

@@ -0,0 +1,5 @@
+const dayjs = require('dayjs')
+
+module.exports = {
+  currentYear: () => dayjs().year()
+}