.

2019-05-30 12:04:14 +02:00
parent 69792b518e
commit 6099d538c0
47 changed files with 1220 additions and 998 deletions
--- a/server/api/controller/bot.js
+++ b/server/api/controller/bot.js
@@ -1,5 +1,5 @@
 const { User, Event, Comment, Tag } = require('../model')
-const config = require('../../../config')
+const { SHARED_CONF } = require('../../../config')
 const Mastodon = require('mastodon-api')
 // const Sequelize = require('sequelize')
 // const Op = Sequelize.Op
@@ -13,7 +13,7 @@ const botController = {
  bot: null,
  async initialize () {
    const settings = await settingsController.settings()
-    if (!settings.mastodon_auth) return
+    if (!settings.mastodon_auth || !settings.mastodon_auth.access_token) return
    const mastodon_auth = settings.mastodon_auth
    botController.bot = new Mastodon({ 
      access_token: mastodon_auth.access_token,
@@ -46,7 +46,7 @@ const botController = {
    const { access_token, instance } = mastodon_auth
    const bot = new Mastodon({ access_token, api_url: `https://${instance}/api/v1/` })
    const status = `${event.title} @ ${event.place.name} ${moment(event.start_datetime).format('ddd, D MMMM HH:mm')} - 
-${event.description.length > 200 ? event.description.substr(0, 200) + '...' : event.description} - ${event.tags.map(t => '#' + t.tag).join(' ')} ${config.baseurl}/event/${event.id}`
+${event.description.length > 200 ? event.description.substr(0, 200) + '...' : event.description} - ${event.tags.map(t => '#' + t.tag).join(' ')} ${SHARED_CONF.baseurl}/event/${event.id}`

    let media
    if (event.image_path) {
--- a/server/api/controller/event.js
+++ b/server/api/controller/event.js
@@ -3,6 +3,7 @@ const moment = require('moment')
 const { Op } = require('sequelize')
 const lodash = require('lodash')
 const { User, Event, Comment, Tag, Place, Notification } = require('../model')
+const Sequelize = require('sequelize')

 const eventController = {

@@ -19,8 +20,26 @@ const eventController = {
  },

  async getMeta(req, res) {
-    const places = await Place.findAll()
-    const tags = await Tag.findAll()
+    const places = await Place.findAll({
+      group: ['place.id'],
+      order: [[Sequelize.fn("COUNT", Sequelize.col('events.id')), 'DESC']],
+      attributes: {
+        include: [[Sequelize.fn("COUNT", Sequelize.col('events.id')), 'eventsCount']],
+        exclude: ['createdAt', 'updatedAt']
+      },
+      include: { model: Event, attributes: [] }
+    })
+
+    const tags = await Tag.findAll({
+      group: ['tag'],
+      order: [[Sequelize.fn("COUNT", Sequelize.col('events.id')), 'DESC']],
+      includeIgnoreAttributes:false,
+      attributes: {
+        include: [[Sequelize.fn("COUNT", Sequelize.col('events.id')), 'eventsCount']],
+        exclude: ['createdAt', 'updatedAt']
+      },
+      include: { model: Event, attributes: [] }})
+
    res.json({ tags, places })
  },

@@ -67,7 +86,14 @@ const eventController = {

  async get(req, res) {
    const id = req.params.event_id
-    const event = await Event.findByPk(id, { include: [User, Tag, Comment, Place] })
+    const event = await Event.findByPk(id, { include:
+      [
+        Tag,
+        Comment,
+        { model: Place, attributes: ['name', 'address'] }
+      ] ,
+      order: [ [Comment, 'id', 'DESC'] ]
+    })
    res.json(event)
  },

--- a/server/api/controller/settings.js
+++ b/server/api/controller/settings.js
@@ -1,4 +1,6 @@
 const { Settings } = require('../model')
+const { SHARED_CONF } = require('../../../config')
+const Mastodon = require('mastodon-api')

 const settingsController = {
  async setAdminSetting (key, value) {
@@ -14,6 +16,42 @@ const settingsController = {
    res.json(settings)
  },

+  async getAuthURL(req, res) {
+    const instance = req.body.instance
+    const callback = `${SHARED_CONF.baseurl}/api/settings/oauth`
+    const { client_id, client_secret } = await Mastodon.createOAuthApp(`https://${instance}/api/v1/apps`,
+      SHARED_CONF.title, 'read write', callback)
+    const url = await Mastodon.getAuthorizationUrl(client_id, client_secret,
+      `https://${instance}`, 'read write', callback)
+
+    await settingsController.setAdminSetting('mastodon_auth', { client_id, client_secret, instance })
+    res.json(url)
+  },
+
+  async code(req, res) {
+    const code = req.query.code
+    let client_id, client_secret, instance
+    const callback = `${SHARED_CONF.baseurl}/api/settings/oauth`
+    console.error('sono dentro CODEEEEEEEEEE', code)
+
+    const settings = await settingsController.settings()
+
+    console.log(settings);
+    ({ client_id, client_secret, instance } = settings.mastodon_auth)
+
+    try {
+      const token = await Mastodon.getAccessToken(client_id, client_secret, code,
+        `https://${instance}`, callback)
+      const mastodon_auth = { client_id, client_secret, access_token: token, instance }
+      console.error(mastodon_auth)
+      await settingsController.setAdminSetting('mastodon_auth', mastodon_auth)
+      
+      res.redirect('/admin')
+    } catch (e) {
+      res.json(e)
+    }
+  },
+
  async settings () {
    const settings = await Settings.findAll()
    const map = {}
--- a/server/api/controller/user.js
+++ b/server/api/controller/user.js
@@ -2,14 +2,12 @@ const fs = require('fs')
 const path = require('path')
 const crypto = require('crypto')
 const jwt = require('jsonwebtoken')
-const Mastodon = require('mastodon-api')
 const { Op } = require('sequelize')
 const jsonwebtoken = require('jsonwebtoken')
 const User = require('../models/user')
-const config = require('../../../config')
+const { SECRET_CONF, SHARED_CONF } = require('../../../config')
 const mail = require('../mail')
 const { Event, Tag, Place } = require('../models/event')
-const settingsController = require('./settings')
 const eventController = require('./event')

 const userController = {
@@ -17,13 +15,13 @@ const userController = {
    // find the user
    const user = await User.findOne({ where: { email: { [Op.eq]: req.body && req.body.email } } })
    if (!user) {
-      res.status(404).json({ success: false, message: 'AUTH_FAIL' })
+      res.status(403).json({ success: false, message: 'auth.fail' })
    } else if (user) {
      if (!user.is_active) {
-        res.status(403).json({ success: false, message: 'NOT_CONFIRMED' })
+        res.status(403).json({ success: false, message: 'auth.not_confirmed' })
      // check if password matches
      } else if (!await user.comparePassword(req.body.password)) {
-        res.status(403).json({ success: false, message: 'AUTH_FAIL' })
+        res.status(403).json({ success: false, message: 'auth.fail' })
      } else {
        // if user is found and password is right
        // create a token
@@ -33,7 +31,7 @@ const userController = {
            email: user.email,
            scope: [user.is_admin ? 'admin' : 'user']
          },
-          config.secret
+          SECRET_CONF.secret
        )
      
        res.json({token: accessToken})        
@@ -58,8 +56,12 @@ const userController = {
      if (event.image_path) {
        const old_path = path.resolve(__dirname, '..', '..', 'uploads', event.image_path)
        const old_thumb_path = path.resolve(__dirname, '..', '..', 'uploads', 'thumb', event.image_path)
-        await fs.unlink(old_path)
-        await fs.unlink(old_thumb_path)
+        try {
+          await fs.unlink(old_path)
+          await fs.unlink(old_thumb_path)
+        } catch (e) {
+          console.error(e)
+        }
      }
      await event.destroy()
      res.sendStatus(200)
@@ -160,61 +162,14 @@ const userController = {
    return res.json(newEvent)
  },

-  async getAuthURL(req, res) {
-    const instance = req.body.instance
-    const is_admin = req.body.admin && req.user.is_admin
-    const callback = `${config.baseurl}/${is_admin ? 'admin/oauth' : 'settings'}`
-    const { client_id, client_secret } = await Mastodon.createOAuthApp(`https://${instance}/api/v1/apps`,
-      config.title, 'read write', callback)
-    const url = await Mastodon.getAuthorizationUrl(client_id, client_secret,
-      `https://${instance}`, 'read write', callback)
-
-    if (is_admin) {
-      await settingsController.setAdminSetting('mastodon_auth', { client_id, client_secret, instance })
-    } else {
-      req.user.mastodon_auth = { client_id, client_secret, instance }
-      await req.user.save()
-    }
-    res.json(url)
-  },
-
-  async code(req, res) {
-    const { code, is_admin } = req.body
-    let client_id, client_secret, instance
-    const callback = `${config.baseurl}/${is_admin ? 'admin/oauth' : 'settings'}`
-
-    if (is_admin) {
-      const settings = await settingsController.settings();
-      ({ client_id, client_secret, instance } = settings.mastodon_auth)
-    } else {
-      ({ client_id, client_secret, instance } = req.user.mastodon_auth)
-    }
-
-    try {
-      const token = await Mastodon.getAccessToken(client_id, client_secret, code,
-        `https://${instance}`, callback)
-      const mastodon_auth = { client_id, client_secret, access_token: token, instance }
-      if (is_admin) {
-        await settingsController.setAdminSetting('mastodon_auth', mastodon_auth)
-        res.json(instance)
-      } else {
-        req.user.mastodon_auth = mastodon_auth
-        await req.user.save()
-        // await bot.add(req.user, token)
-        res.json(req.user)
-      }
-    } catch (e) {
-      res.json(e)
-    }
-  },
-
  async forgotPassword(req, res) {
    const email = req.body.email
    const user = await User.findOne({ where: { email: { [Op.eq]: email } } })
    if (!user) return res.sendStatus(200)

    user.recover_code = crypto.randomBytes(16).toString('hex')
-    mail.send(user.email, 'recover', { user, config })
+    mail.send(user.email, 'recover', { user, config: SHARED_CONF })
+
    await user.save()
    res.sendStatus(200)
  },
@@ -229,13 +184,17 @@ const userController = {

  async updatePasswordWithRecoverCode(req, res) {
    const recover_code = req.body.recover_code
-    if (!recover_code) return res.sendStatus(400)
    const password = req.body.password
+    if (!recover_code || !password) return res.sendStatus(400)
    const user = await User.findOne({ where: { recover_code: { [Op.eq]: recover_code } } })
    if (!user) return res.sendStatus(400)
    user.password = password
-    await user.save()
-    res.sendStatus(200)
+    try {
+      await user.save()
+      res.sendStatus(200)
+    } catch(e) {
+      res.sendStatus(400)
+    }
  },

  async current(req, res) {
@@ -253,7 +212,7 @@ const userController = {
    const user = await User.findByPk(req.body.id)
    if (user) {
      if (!user.is_active && req.body.is_active) {
-        await mail.send(user.email, 'confirm', { user, config })
+        await mail.send(user.email, 'confirm', { user, config: SHARED_CONF })
      }
      await user.update(req.body)
      res.json(user)
@@ -263,25 +222,29 @@ const userController = {
  },

  async register(req, res) {
-    console.error('register !!', req)
+    
    const n_users = await User.count()
    try {
+
+      // the first registered user will be an active admin
      if (n_users === 0) {
-        // the first registered user will be an active admin
        req.body.is_active = req.body.is_admin = true
      } else {
        req.body.is_active = false
      }
+
      const user = await User.create(req.body)
      try {
-        mail.send([user.email, config.admin], 'register', { user, config })
+        mail.send([user.email, SECRET_CONF.admin], 'register', { user, config: SHARED_CONF })
      } catch (e) {
+        console.error(e)
        return res.status(400).json(e)
      }
      const payload = { email: user.email }
-      const token = jwt.sign(payload, config.secret)
+      const token = jwt.sign(payload, SECRET_CONF.secret)
      res.json({ user, token })
    } catch (e) {
+      console.error(e)
      res.status(404).json(e)
    }
  }