yellowadmin/pp-tcms
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Check user auth in api request

Browse Source
This commit is contained in:
Takeshi Kimata
2024-05-25 12:35:10 +09:00
parent 7a0bb63e7b
commit d6e7c98025
19 changed files with 106 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
backend/routes/projects/index.js
View File

@@ -2,11 +2,12 @@ const express = require('express');
const router = express.Router();
const defineProject = require('../../models/projects');
const { DataTypes } = require('sequelize');
const { verifySinedIn } = require('../../middleware/auth');
module.exports = function (sequelize) {
const Project = defineProject(sequelize, DataTypes);
router.get('/', async (req, res) => {
router.get('/', verifySinedIn, async (req, res) => {
try {
const projects = await Project.findAll();
res.json(projects);

8
backend/routes/projects/show.js
View File

@@ -3,19 +3,25 @@ const router = express.Router();
const defineProject = require('../../models/projects');
const defineFolder = require('../../models/folders');
const { DataTypes } = require('sequelize');
const { verifySinedIn } = require('../../middleware/auth');
module.exports = function (sequelize) {
const Project = defineProject(sequelize, DataTypes);
const Folder = defineFolder(sequelize, DataTypes);
Project.hasMany(Folder, { foreignKey: 'projectId' });
router.get('/:projectId', async (req, res) => {
router.get('/:projectId', verifySinedIn, async (req, res) => {
const projectId = req.params.projectId;
if (!projectId) {
return res.status(400).json({ error: 'projectId is required' });
}
// if project is private, only project owner can access
if (!project.isPublic && project.userId !== req.userId) {
return res.status(403).json({ error: 'Forbidden' });
}
try {
const project = await Project.findByPk(projectId, {
include: [