move add/rm/edit event in eventController

server/api/controller/event.js

@@ -1,12 +1,16 @@
 const crypto = require('crypto')
 const moment = require('moment-timezone')
+const path = require('path')
+const config = require('config')
+const fs = require('fs')
 const { Op } = require('sequelize')
 const _ = require('lodash')
 const { event: Event, resource: Resource, tag: Tag, place: Place, notification: Notification } = require('../models')
 const Sequelize = require('sequelize')
 const exportController = require('./export')
+const sanitizeHtml = require('sanitize-html')
+
 const debug = require('debug')('controller:event')
-// const { Task, TaskManager } = require('../../taskManager')
 
 const eventController = {
 
@@ -191,6 +195,148 @@ const eventController = {
     res.sendStatus(200)
   },
 
+  async add (req, res) {
+    // req.err comes from multer streaming error
+    if (req.err) {
+      debug(req.err)
+      return res.status(400).json(req.err.toString())
+    }
+
+    try {
+      const body = req.body
+      const recurrent = body.recurrent ? JSON.parse(body.recurrent) : null
+
+      const eventDetails = {
+        title: body.title,
+        // remove html tags
+        description: sanitizeHtml(body.description),
+        multidate: body.multidate,
+        start_datetime: body.start_datetime,
+        end_datetime: body.end_datetime,
+        recurrent,
+        // publish this event only if authenticated
+        is_visible: !!req.user
+      }
+
+      if (req.file) {
+        eventDetails.image_path = req.file.filename
+      }
+
+      const event = await Event.create(eventDetails)
+
+      // create place if needed
+      const place = await Place.findOrCreate({
+        where: { name: body.place_name },
+        defaults: { address: body.place_address }
+      })
+        .spread((place, created) => place)
+      await event.setPlace(place)
+      event.place = place
+
+      // create/assign tags
+      if (body.tags) {
+        await Tag.bulkCreate(body.tags.map(t => ({ tag: t })), { ignoreDuplicates: true })
+        const tags = await Tag.findAll({ where: { tag: { [Op.in]: body.tags } } })
+        await Promise.all(tags.map(t => t.update({ weigth: Number(t.weigth) + 1 })))
+        await event.addTags(tags)
+        event.tags = tags
+      }
+
+      // associate user to event and reverse
+      if (req.user) {
+        await req.user.addEvent(event)
+        await event.setUser(req.user)
+      }
+
+      // create recurrent instances of event if needed
+      // without waiting for the task manager
+      if (event.recurrent) {
+        eventController._createRecurrent()
+      }
+
+      // return created event to the client
+      res.json(event)
+
+      // send notification (mastodon/email)
+      // only if user is authenticated
+      if (req.user) {
+        const notifier = require('../../notifier')
+        notifier.notifyEvent('Create', event.id)
+      }
+    } catch (e) {
+      res.sendStatus(400)
+      debug(e)
+    }
+  },
+
+  async update (req, res) {
+    if (req.err) {
+      return res.status(400).json(req.err.toString())
+    }
+    const body = req.body
+    const event = await Event.findByPk(body.id)
+    if (!req.user.is_admin && event.userId !== req.user.id) {
+      return res.sendStatus(403)
+    }
+
+    if (req.file) {
+      if (event.image_path) {
+        const old_path = path.resolve(config.upload_path, event.image_path)
+        const old_thumb_path = path.resolve(config.upload_path, 'thumb', event.image_path)
+        await fs.unlink(old_path, e => console.error(e))
+        await fs.unlink(old_thumb_path, e => console.error(e))
+      }
+      body.image_path = req.file.filename
+    }
+
+    body.description = sanitizeHtml(body.description)
+
+    await event.update(body)
+    let place
+    try {
+      place = await Place.findOrCreate({
+        where: { name: body.place_name },
+        defaults: { address: body.place_address }
+      }).spread((place, created) => place)
+    } catch (e) {
+      console.log('error', e)
+    }
+    await event.setPlace(place)
+    await event.setTags([])
+    if (body.tags) {
+      await Tag.bulkCreate(body.tags.map(t => ({ tag: t })), { ignoreDuplicates: true })
+      const tags = await Tag.findAll({ where: { tag: { [Op.in]: body.tags } } })
+      await event.addTags(tags)
+    }
+    const newEvent = await Event.findByPk(event.id, { include: [Tag, Place] })
+    res.json(newEvent)
+    const notifier = require('../../notifier')
+    notifier.notifyEvent('Update', event.id)
+  },
+
+  async remove (req, res) {
+    const event = await Event.findByPk(req.params.id)
+    // check if event is mine (or user is admin)
+    if (event && (req.user.is_admin || req.user.id === event.userId)) {
+      if (event.image_path) {
+        const old_path = path.join(config.upload_path, event.image_path)
+        const old_thumb_path = path.join(config.upload_path, 'thumb', event.image_path)
+        try {
+          fs.unlinkSync(old_thumb_path)
+          fs.unlinkSync(old_path)
+        } catch (e) {
+          debug(e)
+        }
+      }
+      const notifier = require('../../notifier')
+      await notifier.notifyEvent('Delete', event.id)
+      await event.destroy()
+      res.sendStatus(200)
+    } else {
+      res.sendStatus(403)
+    }
+  },
+
   async _select (start = moment.unix(), limit = 100) {
     const where = {
       // confirmed event only

server/api/controller/oauth.js

@@ -76,7 +76,7 @@ const oauthController = {
      * */
     async getAccessToken (accessToken) {
       const oauth_token = await OAuthToken.findByPk(accessToken,
-        { include: [User, { model: OAuthClient, as: 'client' }] })
+        { include: [{ model: User, attributes: { exclude: ['password'] } }, { model: OAuthClient, as: 'client' }] })
       return oauth_token
     },
 

server/api/controller/user.js

@@ -1,160 +1,12 @@
-const fs = require('fs')
-const path = require('path')
 const crypto = require('crypto')
 const { Op } = require('sequelize')
-const sanitizeHtml = require('sanitize-html')
 const config = require('config')
 const mail = require('../mail')
-const { user: User, event: Event, tag: Tag, place: Place } = require('../models')
+const { user: User } = require('../models')
 const settingsController = require('./settings')
-const eventController = require('./event')
 const debug = require('debug')('user:controller')
 
 const userController = {
-  async delEvent (req, res) {
-    const event = await Event.findByPk(req.params.id)
-    // check if event is mine (or user is admin)
-    if (event && (req.user.is_admin || req.user.id === event.userId)) {
-      if (event.image_path) {
-        const old_path = path.join(config.upload_path, event.image_path)
-        const old_thumb_path = path.join(config.upload_path, 'thumb', event.image_path)
-        try {
-          fs.unlinkSync(old_thumb_path)
-          fs.unlinkSync(old_path)
-        } catch (e) {
-          debug(e)
-        }
-      }
-      const notifier = require('../../notifier')
-      await notifier.notifyEvent('Delete', event.id)
-      await event.destroy()
-      res.sendStatus(200)
-    } else {
-      res.sendStatus(403)
-    }
-  },
-
-  /**
-   * add event
-   */
-  async addEvent (req, res) {
-    // req.err comes from multer streaming error
-    if (req.err) {
-      debug(req.err)
-      return res.status(400).json(req.err.toString())
-    }
-
-    try {
-      const body = req.body
-      const recurrent = body.recurrent ? JSON.parse(body.recurrent) : null
-
-      const eventDetails = {
-        title: body.title,
-        // remove html tags
-        description: sanitizeHtml(body.description),
-        multidate: body.multidate,
-        start_datetime: body.start_datetime,
-        end_datetime: body.end_datetime,
-        recurrent,
-        // publish this event only if authenticated
-        is_visible: !!req.user
-      }
-
-      if (req.file) {
-        eventDetails.image_path = req.file.filename
-      }
-
-      const event = await Event.create(eventDetails)
-
-      // create place if needed
-      const place = await Place.findOrCreate({
-        where: { name: body.place_name },
-        defaults: { address: body.place_address }
-      })
-        .spread((place, created) => place)
-      await event.setPlace(place)
-      event.place = place
-
-      // create/assign tags
-      if (body.tags) {
-        await Tag.bulkCreate(body.tags.map(t => ({ tag: t })), { ignoreDuplicates: true })
-        const tags = await Tag.findAll({ where: { tag: { [Op.in]: body.tags } } })
-        await Promise.all(tags.map(t => t.update({ weigth: Number(t.weigth) + 1 })))
-        await event.addTags(tags)
-        event.tags = tags
-      }
-
-      // associate user to event and reverse
-      if (req.user) {
-        await req.user.addEvent(event)
-        await event.setUser(req.user)
-      }
-
-      // create recurrent instances of event if needed
-      // without waiting for the task manager
-      if (event.recurrent) {
-        eventController._createRecurrent()
-      }
-
-      // return created event to the client
-      res.json(event)
-
-      // send notification (mastodon/email)
-      // only if user is authenticated
-      if (req.user) {
-        const notifier = require('../../notifier')
-        notifier.notifyEvent('Create', event.id)
-      }
-    } catch (e) {
-      res.sendStatus(400)
-      debug(e)
-    }
-  },
-
-  async updateEvent (req, res) {
-    if (req.err) {
-      return res.status(400).json(req.err.toString())
-    }
-    const body = req.body
-    const event = await Event.findByPk(body.id)
-    if (!req.user.is_admin && event.userId !== req.user.id) {
-      return res.sendStatus(403)
-    }
-
-    if (req.file) {
-      if (event.image_path) {
-        const old_path = path.resolve(config.upload_path, event.image_path)
-        const old_thumb_path = path.resolve(config.upload_path, 'thumb', event.image_path)
-        await fs.unlink(old_path, e => console.error(e))
-        await fs.unlink(old_thumb_path, e => console.error(e))
-      }
-      body.image_path = req.file.filename
-    }
-
-    body.description = sanitizeHtml(body.description)
-
-    await event.update(body)
-    let place
-    try {
-      place = await Place.findOrCreate({
-        where: { name: body.place_name },
-        defaults: { address: body.place_address }
-      }).spread((place, created) => place)
-    } catch (e) {
-      console.log('error', e)
-    }
-    await event.setPlace(place)
-    await event.setTags([])
-    if (body.tags) {
-      await Tag.bulkCreate(body.tags.map(t => ({ tag: t })), { ignoreDuplicates: true })
-      const tags = await Tag.findAll({ where: { tag: { [Op.in]: body.tags } } })
-      await event.addTags(tags)
-    }
-    const newEvent = await Event.findByPk(event.id, { include: [Tag, Place] })
-    res.json(newEvent)
-    const notifier = require('../../notifier')
-    notifier.notifyEvent('Update', event.id)
-  },
 
   async forgotPassword (req, res) {
     const email = req.body.email