Theis Gaedigk
a8b4ac3d60
- Updated LoanTable component to fetch loan data from new API endpoint and display notes. - Enhanced UserTable component to include additional user fields (first name, last name, email, admin status) and updated input handling. - Modified fetcher utility to use new user data API endpoint. - Adjusted login functionality to point to the new admin login endpoint and handle unauthorized access. - Refactored user actions utility to align with updated API endpoints for user management. - Updated backend routes for user and loan data management to reflect new structure and naming conventions. - Revised SQL schema and mock data to accommodate new fields and constraints. - Changed Docker configuration to use the new database name.
124 lines
3.3 KiB
JavaScript
124 lines
3.3 KiB
JavaScript
import express from "express";
|
|
import { authenticateAdmin } from "../../services/authentication.js";
|
|
const router = express.Router();
|
|
import dotenv from "dotenv";
|
|
dotenv.config();
|
|
|
|
// database funcs import
|
|
import {
|
|
createUser,
|
|
deleteUserById,
|
|
editUserById,
|
|
changePassword,
|
|
getAllUsers,
|
|
getUserById,
|
|
} from "./database/userDataMgmt.database.js";
|
|
|
|
router.post("/create-user", authenticateAdmin, async (req, res) => {
|
|
const username = req.body.username;
|
|
const role = req.body.role;
|
|
const password = req.body.password;
|
|
const isAdmin = req.body.isAdmin;
|
|
const email = req.body.email;
|
|
const first_name = req.body.first_name;
|
|
const last_name = req.body.last_name;
|
|
const result = await createUser(
|
|
username,
|
|
role,
|
|
password,
|
|
isAdmin,
|
|
email,
|
|
first_name,
|
|
last_name
|
|
);
|
|
if (result.success) {
|
|
return res.status(201).json({ message: "User created successfully" });
|
|
}
|
|
return res.status(500).json({ message: "Failed to create user" });
|
|
});
|
|
|
|
router.delete("/delete-user/:id", authenticateAdmin, async (req, res) => {
|
|
const userId = req.params.id;
|
|
const result = await deleteUserById(userId);
|
|
if (result.success) {
|
|
return res.status(200).json({ message: "User deleted successfully" });
|
|
}
|
|
return res.status(500).json({ message: "Failed to delete user" });
|
|
});
|
|
|
|
router.post("/edit-user/:id", authenticateAdmin, async (req, res) => {
|
|
const first_name = req.body.first_name;
|
|
const last_name = req.body.last_name;
|
|
const role = req.body.role;
|
|
const email = req.body.email;
|
|
const userId = req.params.id;
|
|
const is_admin = req.body.is_admin;
|
|
|
|
const result = await editUserById(
|
|
userId,
|
|
first_name,
|
|
last_name,
|
|
role,
|
|
email,
|
|
is_admin
|
|
);
|
|
|
|
if (result.success) {
|
|
return res.status(200).json({ message: "User edited successfully" });
|
|
}
|
|
return res.status(500).json({ message: "Failed to edit user" });
|
|
});
|
|
|
|
router.post("/change-password", authenticateAdmin, async (req, res) => {
|
|
const username = req.body.username;
|
|
const password = req.body.password;
|
|
|
|
const result = await changePassword(username, password);
|
|
|
|
if (result.success) {
|
|
return res.status(200).json({ message: "Password reset successfully" });
|
|
}
|
|
return res.status(500).json({ message: "Failed to reset password" });
|
|
});
|
|
|
|
router.post("/edit-user/:id", authenticateAdmin, async (req, res) => {
|
|
const userId = req.params.id;
|
|
const first_name = req.body.first_name;
|
|
const last_name = req.body.last_name;
|
|
const role = req.body.role;
|
|
const email = req.body.email;
|
|
const is_admin = req.body.is_admin;
|
|
|
|
const result = await editUserById(
|
|
userId,
|
|
first_name,
|
|
last_name,
|
|
role,
|
|
email,
|
|
is_admin
|
|
);
|
|
|
|
if (result.success) {
|
|
return res.status(200).json({ message: "User edited successfully" });
|
|
}
|
|
return res.status(500).json({ message: "Failed to edit user" });
|
|
});
|
|
|
|
router.get("/users", authenticateAdmin, async (req, res) => {
|
|
const result = await getAllUsers();
|
|
if (result.success) {
|
|
return res.status(200).json(result.data);
|
|
}
|
|
return res.status(500).json({ message: "Failed to retrieve users" });
|
|
});
|
|
|
|
router.get("/user/:id", authenticateAdmin, async (req, res) => {
|
|
const result = await getUserById(req.params.id);
|
|
if (result.success) {
|
|
return res.status(200).json({ user: result.data });
|
|
}
|
|
return res.status(500).json({ message: "Failed to retrieve user" });
|
|
});
|
|
|
|
export default router;
|