mirror of
https://framagit.org/les/gancio.git
synced 2025-02-01 09:02:01 +01:00
105 lines
3.9 KiB
JavaScript
105 lines
3.9 KiB
JavaScript
const express = require('express')
|
|
const multer = require('multer')
|
|
const cors = require('cors')()
|
|
|
|
const { isAuth, isAdmin, hasPerm } = require('./auth')
|
|
const eventController = require('./controller/event')
|
|
const exportController = require('./controller/export')
|
|
const userController = require('./controller/user')
|
|
const settingsController = require('./controller/settings')
|
|
const instanceController = require('./controller/instance')
|
|
const apUserController = require('./controller/ap_user')
|
|
const resourceController = require('./controller/resource')
|
|
const oauthController = require('./controller/oauth')
|
|
|
|
const storage = require('./storage')
|
|
const upload = multer({ storage })
|
|
|
|
const debug = require('debug')('api')
|
|
|
|
const api = express.Router()
|
|
api.use(express.urlencoded({ extended: false }))
|
|
api.use(express.json())
|
|
|
|
api.get('/user', isAuth, (req, res) => res.json(res.locals.oauth.token.user))
|
|
// api.post('/user/login', userController.login)
|
|
// api.get('/user/logout', userController.logout)
|
|
api.post('/user/recover', userController.forgotPassword)
|
|
api.post('/user/check_recover_code', userController.checkRecoverCode)
|
|
api.post('/user/recover_password', userController.updatePasswordWithRecoverCode)
|
|
|
|
// register and add users
|
|
api.post('/user/register', userController.register)
|
|
api.post('/user', isAdmin, userController.create)
|
|
|
|
// update user
|
|
api.put('/user', hasPerm('user:update'), userController.update)
|
|
|
|
// delete user
|
|
api.delete('/user/:id', isAdmin, userController.remove)
|
|
api.delete('/user', hasPerm('user:remove'), userController.remove)
|
|
|
|
// get all users
|
|
api.get('/users', isAdmin, userController.getAll)
|
|
|
|
// update a place (modify address..)
|
|
api.put('/place', isAdmin, eventController.updatePlace)
|
|
|
|
// add event
|
|
api.post('/user/event', upload.single('image'), userController.addEvent)
|
|
|
|
// update event
|
|
api.put('/user/event', hasPerm('event:write'), upload.single('image'), userController.updateEvent)
|
|
|
|
// remove event
|
|
api.delete('/user/event/:id', hasPerm('event:remove'), userController.delEvent)
|
|
|
|
// get tags/places
|
|
api.get('/event/meta', eventController.getMeta)
|
|
|
|
// get unconfirmed events
|
|
api.get('/event/unconfirmed', isAdmin, eventController.getUnconfirmed)
|
|
|
|
// add event notification TODO
|
|
api.post('/event/notification', eventController.addNotification)
|
|
api.delete('/event/notification/:code', eventController.delNotification)
|
|
|
|
api.get('/settings', settingsController.getAllRequest)
|
|
api.post('/settings', isAdmin, settingsController.setRequest)
|
|
api.post('/settings/favicon', isAdmin, multer({ dest: 'thumb/' }).single('favicon'), settingsController.setFavicon)
|
|
|
|
// confirm event
|
|
api.get('/event/confirm/:event_id', hasPerm('event:write'), eventController.confirm)
|
|
api.get('/event/unconfirm/:event_id', hasPerm('event:write'), eventController.unconfirm)
|
|
|
|
// get event
|
|
api.get('/event/:event_id.:format?', cors, eventController.get)
|
|
|
|
// export events (rss/ics)
|
|
api.get('/export/:type', cors, exportController.export)
|
|
|
|
// get events in this range
|
|
// api.get('/event/:month/:year', cors, eventController.getAll)
|
|
api.get('/event', cors, eventController.select)
|
|
|
|
api.get('/instances', isAdmin, instanceController.getAll)
|
|
api.get('/instances/:instance_domain', isAdmin, instanceController.get)
|
|
api.post('/instances/toggle_block', isAdmin, instanceController.toggleBlock)
|
|
api.post('/instances/toggle_user_block', isAdmin, apUserController.toggleBlock)
|
|
api.put('/resources/:resource_id', isAdmin, resourceController.hide)
|
|
api.delete('/resources/:resource_id', isAdmin, resourceController.remove)
|
|
api.get('/resources', isAdmin, resourceController.getAll)
|
|
|
|
api.get('/clients', hasPerm('oauth:read'), oauthController.getClients)
|
|
api.get('/client/:client_id', hasPerm('oauth:read'), oauthController.getClient)
|
|
api.post('/client', oauthController.createClient)
|
|
|
|
api.use((req, res) => res.sendStatus(404))
|
|
|
|
// Handle 500
|
|
api.use((error, req, res, next) => {
|
|
debug(error.toString())
|
|
res.status(500).send('500: Internal Server Error')
|
|
})
|
|
|
|
module.exports = api
|