yellowadmin/pp-tcms
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: implement auth for folders

Browse Source
This commit is contained in:
Takeshi Kimata
2024-06-01 22:00:45 +09:00
parent d941b2a08e
commit 8300520a86
14 changed files with 188 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
backend/routes/folders/delete.js
View File

@@ -4,9 +4,10 @@ const defineFolder = require('../../models/folders');
const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn, verifyProjectDeveloper } = require('../../middleware/auth')(sequelize);
const Folder = defineFolder(sequelize, DataTypes);
router.delete('/:folderId', async (req, res) => {
router.delete('/:folderId', verifySignedIn, verifyProjectDeveloper, async (req, res) => {
const folderId = req.params.folderId;
try {
const folder = await Folder.findByPk(folderId);

3
backend/routes/folders/edit.js
View File

@@ -4,9 +4,10 @@ const defineFolder = require('../../models/folders');
const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn, verifyProjectDeveloper } = require('../../middleware/auth')(sequelize);
const Folder = defineFolder(sequelize, DataTypes);
router.put('/:folderId', async (req, res) => {
router.put('/:folderId', verifySignedIn, verifyProjectDeveloper, async (req, res) => {
const folderId = req.params.folderId;
const { name, detail, projectId, parentFolderId } = req.body;
try {

3
backend/routes/folders/index.js
View File

@@ -4,9 +4,10 @@ const defineFolder = require('../../models/folders');
const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn, verifyProjectVisible } = require('../../middleware/auth')(sequelize);
const Folder = defineFolder(sequelize, DataTypes);
router.get('/', async (req, res) => {
router.get('/', verifySignedIn, verifyProjectVisible, async (req, res) => {
const { projectId } = req.query;
if (!projectId) {

6
backend/routes/folders/new.js
View File

@@ -4,11 +4,13 @@ const defineFolder = require('../../models/folders');
const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn, verifyProjectDeveloper } = require('../../middleware/auth')(sequelize);
const Folder = defineFolder(sequelize, DataTypes);
router.post('/', async (req, res) => {
router.post('/', verifySignedIn, verifyProjectDeveloper, async (req, res) => {
try {
const { name, detail, projectId, parentFolderId } = req.body;
const projectId = req.query.projectId;
const { name, detail, parentFolderId } = req.body;
if (!name || !projectId) {
return res.status(400).json({ error: 'Name and projectId are required' });
}