Create admin page

backend/routes/users/authSettings.js

@@ -0,0 +1,4 @@
+const roles = [{ uid: 'administrator' }, { uid: 'user' }];
+const defaultDangerKey = 'test-plat-default-key';
+
+module.exports = { roles, defaultDangerKey };

backend/routes/users/index.js

@@ -0,0 +1,21 @@
+const express = require('express');
+const router = express.Router();
+const defineUser = require('../../models/users');
+const { DataTypes } = require('sequelize');
+
+module.exports = function (sequelize) {
+  const { verifySignedIn, verifyAdmin } = require('../../middleware/auth')(sequelize);
+  const User = defineUser(sequelize, DataTypes);
+
+  router.get('/', verifySignedIn, verifyAdmin, async (req, res) => {
+    try {
+      const users = await User.findAll();
+      res.json(users);
+    } catch (error) {
+      console.error(error);
+      res.status(500).send('Internal Server Error');
+    }
+  });
+
+  return router;
+};

backend/routes/users/signin.js

@@ -0,0 +1,42 @@
+const express = require('express');
+const router = express.Router();
+const defineUser = require('../../models/users');
+const { DataTypes } = require('sequelize');
+const bcrypt = require('bcrypt');
+const jwt = require('jsonwebtoken');
+const { defaultDangerKey } = require('./authSettings');
+
+module.exports = function (sequelize) {
+  const User = defineUser(sequelize, DataTypes);
+  const secretKey = process.env.SECRET_KEY || defaultDangerKey;
+
+  router.post('/signin', async (req, res) => {
+    try {
+      const { email, password } = req.body;
+      const user = await User.findOne({
+        where: {
+          email: email,
+        },
+      });
+      if (!user) {
+        return res.status(401).json({ error: 'Authentication failed' });
+      }
+
+      const passwordMatch = await bcrypt.compare(password, user.password);
+      if (!passwordMatch) {
+        return res.status(401).json({ error: 'Authentication failed' });
+      }
+      const accessToken = jwt.sign({ userId: user.id }, secretKey, {
+        expiresIn: '1h',
+      });
+      const expiresAt = Date.now() + 3600 * 1000; // expire date(ms)
+
+      res.status(200).json({ access_token: accessToken, expires_at: expiresAt, user });
+    } catch (error) {
+      console.error(error);
+      res.status(500).send('Sign up failed');
+    }
+  });
+
+  return router;
+};

backend/routes/users/signup.js

@@ -0,0 +1,45 @@
+const express = require('express');
+const router = express.Router();
+const defineUser = require('../../models/users');
+const { DataTypes } = require('sequelize');
+const { roles, defaultDangerKey } = require('./authSettings');
+const bcrypt = require('bcrypt');
+const jwt = require('jsonwebtoken');
+
+module.exports = function (sequelize) {
+  const User = defineUser(sequelize, DataTypes);
+  const secretKey = process.env.SECRET_KEY || defaultDangerKey;
+
+  router.post('/signup', async (req, res) => {
+    try {
+      const { email, password, username } = req.body;
+      const hashedPassword = await bcrypt.hash(password, 10);
+
+      const userCount = await User.count();
+      const initialRole =
+        userCount > 0
+          ? roles.findIndex((entry) => entry.uid === 'user')
+          : roles.findIndex((entry) => entry.uid === 'administrator');
+
+      const user = await User.create({
+        email,
+        password: hashedPassword,
+        username: username,
+        role: initialRole,
+      });
+
+      const accessToken = jwt.sign({ userId: user.id }, secretKey, {
+        expiresIn: '1h',
+      });
+      const expiresAt = Date.now() + 3600 * 1000; // expire date(ms)
+
+      user.password = undefined;
+      res.status(200).json({ access_token: accessToken, expires_at: expiresAt, user });
+    } catch (error) {
+      console.error(error);
+      res.status(500).send('Sign up failed');
+    }
+  });
+
+  return router;
+};