feat: inplement auth for cases
This commit is contained in:
@@ -5,9 +5,10 @@ const { DataTypes } = require('sequelize');
|
||||
|
||||
module.exports = function (sequelize) {
|
||||
const Case = defineCase(sequelize, DataTypes);
|
||||
const { verifySignedIn, verifyProjectVisible } = require('../../middleware/auth')(sequelize);
|
||||
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
|
||||
const { verifyProjectVisibleFromFolderId } = require('../../middleware/verifyVisible')(sequelize);
|
||||
|
||||
router.get('/', verifySignedIn, verifyProjectVisible, async (req, res) => {
|
||||
router.get('/', verifySignedIn, verifyProjectVisibleFromFolderId, async (req, res) => {
|
||||
const { folderId } = req.query;
|
||||
|
||||
if (!folderId) {
|
||||
|
||||
@@ -13,9 +13,10 @@ module.exports = function (sequelize) {
|
||||
Step.belongsToMany(Case, { through: 'caseSteps' });
|
||||
Case.belongsToMany(Attachment, { through: 'caseAttachments' });
|
||||
Attachment.belongsToMany(Case, { through: 'caseAttachments' });
|
||||
const { verifySignedIn, verifyProjectVisible } = require('../../middleware/auth')(sequelize);
|
||||
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
|
||||
const { verifyProjectVisibleFromCaseId } = require('../../middleware/verifyVisible')(sequelize);
|
||||
|
||||
router.get('/:caseId', verifySignedIn, verifyProjectVisible, async (req, res) => {
|
||||
router.get('/:caseId', verifySignedIn, verifyProjectVisibleFromCaseId, async (req, res) => {
|
||||
const caseId = req.params.caseId;
|
||||
|
||||
if (!caseId) {
|
||||
|
||||
@@ -4,10 +4,11 @@ const defineFolder = require('../../models/folders');
|
||||
const { DataTypes } = require('sequelize');
|
||||
|
||||
module.exports = function (sequelize) {
|
||||
const { verifySignedIn, verifyProjectVisible } = require('../../middleware/auth')(sequelize);
|
||||
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
|
||||
const { verifyProjectVisibleFromProjectId } = require('../../middleware/verifyVisible')(sequelize);
|
||||
const Folder = defineFolder(sequelize, DataTypes);
|
||||
|
||||
router.get('/', verifySignedIn, verifyProjectVisible, async (req, res) => {
|
||||
router.get('/', verifySignedIn, verifyProjectVisibleFromProjectId, async (req, res) => {
|
||||
const { projectId } = req.query;
|
||||
|
||||
if (!projectId) {
|
||||
|
||||
@@ -8,7 +8,8 @@ const defineRunCase = require('../../models/runCases');
|
||||
const { DataTypes } = require('sequelize');
|
||||
|
||||
module.exports = function (sequelize) {
|
||||
const { verifySignedIn, verifyProjectVisible } = require('../../middleware/auth')(sequelize);
|
||||
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
|
||||
const { verifyProjectVisibleFromProjectId } = require('../../middleware/verifyVisible')(sequelize);
|
||||
|
||||
const Project = defineProject(sequelize, DataTypes);
|
||||
const Folder = defineFolder(sequelize, DataTypes);
|
||||
@@ -20,7 +21,7 @@ module.exports = function (sequelize) {
|
||||
Project.hasMany(Run, { foreignKey: 'projectId' });
|
||||
Run.hasMany(RunCase, { foreignKey: 'runId' });
|
||||
|
||||
router.get('/:projectId', verifySignedIn, verifyProjectVisible, async (req, res) => {
|
||||
router.get('/:projectId', verifySignedIn, verifyProjectVisibleFromProjectId, async (req, res) => {
|
||||
const projectId = req.params.projectId;
|
||||
|
||||
if (!projectId) {
|
||||
|
||||
@@ -5,12 +5,13 @@ const defineMember = require('../../models/members');
|
||||
const { DataTypes } = require('sequelize');
|
||||
|
||||
module.exports = function (sequelize) {
|
||||
const { verifySignedIn, verifyProjectVisible } = require('../../middleware/auth')(sequelize);
|
||||
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
|
||||
const { verifyProjectVisibleFromProjectId } = require('../../middleware/verifyVisible')(sequelize);
|
||||
const User = defineUser(sequelize, DataTypes);
|
||||
const Member = defineMember(sequelize, DataTypes);
|
||||
Member.belongsTo(User, { foreignKey: 'userId' });
|
||||
|
||||
router.get('/', verifySignedIn, verifyProjectVisible, async (req, res) => {
|
||||
router.get('/', verifySignedIn, verifyProjectVisibleFromProjectId, async (req, res) => {
|
||||
const { projectId } = req.query;
|
||||
|
||||
if (!projectId) {
|
||||
|
||||
@@ -5,12 +5,13 @@ const defineFolder = require('../../models/folders');
|
||||
const { DataTypes } = require('sequelize');
|
||||
|
||||
module.exports = function (sequelize) {
|
||||
const { verifySignedIn, verifyProjectVisible } = require('../../middleware/auth')(sequelize);
|
||||
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
|
||||
const { verifyProjectVisibleFromProjectId } = require('../../middleware/verifyVisible')(sequelize);
|
||||
const Project = defineProject(sequelize, DataTypes);
|
||||
const Folder = defineFolder(sequelize, DataTypes);
|
||||
Project.hasMany(Folder, { foreignKey: 'projectId' });
|
||||
|
||||
router.get('/:projectId', verifySignedIn, verifyProjectVisible, async (req, res) => {
|
||||
router.get('/:projectId', verifySignedIn, verifyProjectVisibleFromProjectId, async (req, res) => {
|
||||
const projectId = req.params.projectId;
|
||||
if (!projectId) {
|
||||
return res.status(400).json({ error: 'projectId is required' });
|
||||
|
||||
Reference in New Issue
Block a user