R01

.github/workflows/ci.yml

@@ -1,12 +1,16 @@
 name: Node.js test
 
 on:
-  push:
+  pull_request_target:
     branches:
+      - main
+#  push:
+#    branches:
 #      - main
-      - '*-test'
-  pull_request:
-    branches:
+#      - 'R*'
+#      - '*-test'
+#  pull_request:
+#    branches:
 #      - main
 
 env:
@@ -34,7 +38,11 @@ jobs:
           # mysql user: 'github'                 # Required if "mysql root password" is empty, default is empty. The superuser for the specified database. Can use secrets, too
           # mysql password: 'password'           # Required if "mysql user" exists. The password for the "mysql user"
       - run: mysql --version
-      - uses: actions/checkout@v3
+      - run: echo "checkout head ${{ github.event.pull_request.head.sha }}"
+      - run: echo "base ${{ github.event.pull_request.base.sha }}"
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v3
         with:

.gitignore

@@ -1,6 +1,7 @@
-node_modules/ 
+node_modules/
 temp/
 upload/
 
 .DS_Store
-.env
+.env
+.idea

.vscode/launch.json

@@ -0,0 +1,20 @@
+{
+    // Use IntelliSense to learn about possible attributes.
+    // Hover to view descriptions of existing attributes.
+    // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
+    "version": "0.2.0",
+    "configurations": [
+        {
+            "command": "npm test",
+            "name": "Run npm test",
+            "request": "launch",
+            "type": "node-terminal"
+        },
+        {
+            "command": "npm start",
+            "name": "Run npm start",
+            "request": "launch",
+            "type": "node-terminal"
+        }
+    ]
+}

app.js

@@ -1,9 +1,28 @@
 const express = require('express')
+const session = require('express-session')
+const flash = require('connect-flash')
+const passport = require('passport')
 const routes = require('./routes')
 
+
+console.log('hi')
 const app = express()
 const port = process.env.PORT || 3000
 
+
+const SESSION_SECRET = 'secret'
+
+
+app.use(express.urlencoded({ extended: true }))
+app.use(session({
+  secret: SESSION_SECRET,
+  resave: false,
+  saveUninitialized: false
+}))
+app.use(passport.initialize())
+app.use(passport.session())
+app.use(flash())
+
 app.use(routes)
 
 app.listen(port, () => {

config/passport.js

@@ -0,0 +1,44 @@
+const passport = require('passport')
+const LocalStrategy = require('passport-local').Strategy
+const bcrypt = require('bcryptjs')
+const db = require('../models')
+const { User } = db
+
+passport.use(new LocalStrategy(
+  {
+    usernameField: 'email',
+    passwordField: 'password',
+    passReqToCallback: true
+  },
+  (req, email, password, done) => {
+    User.findOne({ where: { email } })
+      .then(user => {
+        if (!user) {
+          return done(null, false, req.flash('error_messages', '帳號或密碼錯誤!'))
+        }
+
+        bcrypt.compare(password, user.password)
+          .then(isMatch => {
+            if (!isMatch) {
+              return done(null, false, req.flash('error_messages', '帳號或密碼錯誤!'))
+            }
+
+            return done(null, user)
+          })
+      })
+
+    passport.serializeUser((user, done) => {
+      done(null, user.id)
+    })
+
+    passport.deserializeUser((id, done) => {
+      User.findByPk(id)
+        .then(user => {
+          user = user.toJSON()
+          return done(null, user)
+        })
+    })
+  }
+))
+
+module.exports = passport

controllers/admin-controller.js

@@ -0,0 +1,146 @@
+const { Restaurant, User } = require('../models')
+const { imgurFileHandler } = require('../helpers/file-helpers')
+
+const adminController = {
+  getRestaurants: (req, res, next) => {
+    Restaurant.findAll({
+      raw: true
+    })
+      .then(restaurants => res.render('admin/restaurants', { restaurants }))
+      .catch(err => next(err))
+  },
+  createRestaurant: (req, res) => {
+    res.render('admin/create-restaurant')
+  },
+  postRestaurant: (req, res, next) => {
+    const { name, tel, address, openingHours, description } = req.body
+    if (!name) throw new Error('Restaurant name is required!')
+
+    const { file } = req
+
+    imgurFileHandler(file)
+      .then(filePath => {
+        return Restaurant.create({
+          name,
+          tel,
+          address,
+          openingHours,
+          description,
+          image: filePath || null
+        })
+      })
+      .then(() => {
+        req.flash('success_messages', 'restaurant was successfully created ')
+        res.redirect('/admin/restaurants')
+      })
+      .catch(err => next(err))
+  },
+  getRestaurant: (req, res, next) => {
+    Restaurant.findByPk(req.params.id, {
+      raw: true
+    })
+      .then(restaurant => {
+        if (!restaurant) throw new Error("Restaurant didn't exist!")
+
+        res.render('admin/restaurant', { restaurant })
+      })
+      .catch(err => next(err))
+  },
+  editRestaurant: (req, res, next) => {
+    Restaurant.findByPk(req.params.id, {
+      raw: true
+    })
+      .then(restaurant => {
+        if (!restaurant) throw new Error("Restaurant didn't exist!")
+
+        res.render('admin/edit-restaurant', { restaurant })
+      })
+      .catch(err => next(err))
+  },
+  putRestaurant: (req, res, next) => {
+    const { name, tel, address, openingHours, description } = req.body
+    if (!name) throw new Error('Restaurant name is required!')
+
+    const { file } = req
+
+    Promise.all([
+      Restaurant.findByPk(req.params.id),
+      imgurFileHandler(file)
+    ])
+      .then(([restaurant, filePath]) => {
+        if (!restaurant) throw new Error("Restaurant didn't exist!")
+
+        return restaurant.update({
+          name,
+          tel,
+          address,
+          openingHours,
+          description,
+          image: filePath || restaurant.image
+        })
+      })
+      .then(() => {
+        req.flash('success_messages', 'restaurant was successfully update')
+        res.redirect('/admin/restaurants')
+      })
+      .catch(err => next(err))
+  },
+  deleteRestaurant: (req, res, next) => {
+    Restaurant.findByPk(req.params.id)
+      .then(restaurant => {
+        if (!restaurant) throw new Error("Restaurant didn't exist!")
+
+        return restaurant.destroy()
+      })
+      .then(() => res.redirect('/admin/restaurants'))
+      .catch(err => next(err))
+  },
+  getUsers: (req, res, next) => {
+    return User.findAll({
+      raw: true
+    })
+      .then(users => res.render('admin/users', { users }))
+      .catch(err => next(err))
+  },
+  // patchUser: (req, res, next) => {
+  //   return User.findByPk(req.params.id)
+  //     .then(user => {
+  //       if (!user) throw new Error("User didn't exist!")
+
+  //       if (user.email === 'root@example.com') {
+  //         req.flash('error_messages', '禁止變更 root 權限')
+  //         return res.redirect('back')
+  //       } else {
+  //         return user.update({ isAdmin: !user.isAdmin })
+  //       }
+  //     })
+  //     .then(() => {
+  //       req.flash('success_messages', '使用者權限變更成功')
+  //       res.redirect('/admin/users')
+  //     })
+  //     .catch(err => next(err))
+  // },
+  patchUser: (req, res, next) => {
+    return User.findByPk(req.params.id)
+      .then(user => {
+        if (!user) throw new Error("User didn't exist!")
+
+        if (user.email === 'root@example.com') {
+          req.flash('error_messages', '禁止變更 root 權限')
+        } else {
+          return user.update({ isAdmin: !user.isAdmin })
+        }
+      })
+      .then(success => {
+        if (success) {
+          req.flash('success_messages', '使用者權限變更成功')
+          res.redirect('/admin/users')
+        } else {
+          res.redirect('back')
+        }
+      })
+      .catch(err => next(err))
+  }
+}
+
+module.exports = adminController

controllers/user-controller.js

@@ -0,0 +1,46 @@
+const bcrypt = require('bcryptjs')
+
+const db = require('../models')
+const { User } = db
+
+const userController = {
+  signUpPage: (req, res) => {
+    res.render('signup')
+  },
+  signUp: (req, res, next) => {
+    const { name, email, password, passwordCheck } = req.body
+
+    if (password !== passwordCheck) throw new Error('Password do not match!')
+
+    User.findOne({ where: { email } })
+      .then(user => {
+        if (user) throw new Error('Email already exist!')
+
+        return bcrypt.hash(password, 10)
+      })
+      .then(hash => User.create({
+        name,
+        email,
+        password: hash
+      }))
+      .then(() => {
+        req.flash('success_messages', '成功註冊帳號!')
+        res.redirect('/signin')
+      })
+      .catch(err => next(err))
+  },
+  signInPage: (req, res) => {
+    res.render('signin')
+  },
+  singIn: (req, res) => {
+    req.flash('success_messages', '成功登入!')
+    res.redirect('/restaurants')
+  },
+  logout: (req, res) => {
+    req.flash('success_messages', '成功登出!')
+    req.logout()
+    res.redirect('/signin')
+  }
+}
+
+module.exports = userController

helpers/auth-helpers.js

@@ -0,0 +1,12 @@
+const getUser = req => {
+  return req.user || null
+}
+
+const ensureAuthenticated = req => {
+  return req.isAuthenticated()
+}
+
+module.exports = {
+  getUser,
+  ensureAuthenticated
+}

helpers/file-helpers.js

@@ -0,0 +1,34 @@
+const fs = require('fs')
+const imgur = require('imgur')
+const IMGUR_CLIENT_ID = process.env.IMGUR_CLIENT_ID
+
+imgur.setClientId(IMGUR_CLIENT_ID)
+
+const localFileHandler = file => {
+  return new Promise((resolve, reject) => {
+    if (!file) return resolve(null)
+
+    const fileName = `upload/${file.originalname}`
+    return fs.promises.readFile(file.path)
+      .then(data => fs.promises.writeFile(fileName, data))
+      .then(() => resolve(`/${fileName}`))
+      .catch(err => reject(err))
+  })
+}
+
+const imgurFileHandler = file => {
+  return new Promise((resolve, reject) => {
+    if (!file) return resolve(null)
+
+    return imgur.uploadFile(file.path)
+      .then(img => {
+        resolve(img?.link || null)
+      })
+      .catch(err => reject(err))
+  })
+}
+
+module.exports = {
+  localFileHandler,
+  imgurFileHandler
+}

helpers/handlebars-helpers.js

@@ -0,0 +1,5 @@
+const dayjs = require('dayjs')
+
+module.exports = {
+  currentYear: () => dayjs().year()
+}