Compare commits
3 Commits
debian12ne
...
manualRelo
Author | SHA1 | Date | |
---|---|---|---|
6a8d13b69b | |||
7abed30091 | |||
850c475329 |
110
backend/routes/api.js
Normal file
110
backend/routes/api.js
Normal file
@@ -0,0 +1,110 @@
|
||||
import express from "express";
|
||||
import {
|
||||
loginUser,
|
||||
createUser,
|
||||
updateUser,
|
||||
deleteUser,
|
||||
getAllUsers,
|
||||
} from "../services/database.js";
|
||||
import { generateToken, authenticate } from "../services/tokenService.js";
|
||||
|
||||
const router = express.Router();
|
||||
|
||||
router.post("/login", async (req, res) => {
|
||||
try {
|
||||
const result = await loginUser(req.body.username, req.body.password);
|
||||
if (result.success && result.user.role === "admin") {
|
||||
const userToken = await generateToken({
|
||||
role: result.user.role,
|
||||
username: result.user.username,
|
||||
});
|
||||
console.log("User token generated: ", userToken);
|
||||
res.status(200).json({
|
||||
success: true,
|
||||
message: "Login successful",
|
||||
token: userToken,
|
||||
...result,
|
||||
});
|
||||
} else if (result.success && result.user.role === "user") {
|
||||
res.status(403).json(result, { message: "You are not an Admin!" }); // Event Handler is in LoginCard.tsx - there is defined what happens when the status is 403
|
||||
} else {
|
||||
res.status(401).json(result, { message: "Invalid credentials" }); // Event Handler is in LoginCard.tsx - there is defined what happens when the status is 401
|
||||
}
|
||||
} catch (err) {
|
||||
console.error("Error logging in:", err);
|
||||
res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
});
|
||||
|
||||
router.get("/getAllUsers", authenticate, async (req, res) => {
|
||||
if (req.user.role === "admin") {
|
||||
getAllUsers()
|
||||
.then((users) => {
|
||||
res.status(200).json(users);
|
||||
})
|
||||
.catch((err) => {
|
||||
console.error("Error fetching users:", err);
|
||||
res
|
||||
.status(500)
|
||||
.json({ success: false, message: "Internal server error" });
|
||||
});
|
||||
console.log("Fetched all users successfully");
|
||||
} else if (req.user.role === "user") {
|
||||
res.status(403).json({ success: false, message: "Access denied" });
|
||||
console.log("Access denied for user role");
|
||||
} else {
|
||||
res.status(500).json({ success: false, message: "Server error" });
|
||||
console.log("Server error while fetching users");
|
||||
}
|
||||
});
|
||||
|
||||
router.post("/deleteUser", authenticate, async (req, res) => {
|
||||
if (req.user.role === "admin") {
|
||||
deleteUser(req.body.id)
|
||||
.then((result) => {
|
||||
if (result.success) {
|
||||
res.status(200).json(result);
|
||||
} else {
|
||||
throw new Error("Failed to delete user");
|
||||
}
|
||||
})
|
||||
.catch((err) => {
|
||||
console.error("Error deleting user:", err);
|
||||
res
|
||||
.status(500)
|
||||
.json({ success: false, message: "Internal server error" });
|
||||
});
|
||||
console.log("User deleted successfully");
|
||||
} else {
|
||||
console.log("Access denied for user role");
|
||||
}
|
||||
});
|
||||
|
||||
router.post("/updateUser", authenticate, async (req, res) => {
|
||||
if (req.user.role === "admin") {
|
||||
updateUser(
|
||||
req.body.username,
|
||||
req.body.first_name,
|
||||
req.body.last_name,
|
||||
req.body.password,
|
||||
req.body.email,
|
||||
req.body.id
|
||||
)
|
||||
.then((result) => {
|
||||
if (result.success) {
|
||||
res.status(200).json(result);
|
||||
} else {
|
||||
throw new Error("Failed to update user");
|
||||
}
|
||||
})
|
||||
.catch((err) => {
|
||||
console.error("Error updating user:", err);
|
||||
res
|
||||
.status(500)
|
||||
.json({ success: false, message: "Internal server error" });
|
||||
});
|
||||
console.log("User updated successfully");
|
||||
}
|
||||
});
|
||||
|
||||
export default router;
|
@@ -3,15 +3,8 @@ import express from "express";
|
||||
import cors from "cors";
|
||||
const app = express();
|
||||
const port = 5002;
|
||||
import {
|
||||
loginUser,
|
||||
createUser,
|
||||
updateUser,
|
||||
deleteUser,
|
||||
getAllUsers,
|
||||
} from "./services/database.js";
|
||||
import { generateToken, authenticate } from "./services/tokenService.js";
|
||||
import cookieParser from "cookie-parser";
|
||||
import router from "./routes/api.js";
|
||||
|
||||
//view engine ejs
|
||||
app.set("view engine", "ejs");
|
||||
@@ -20,102 +13,7 @@ app.use(express.json());
|
||||
app.use(cors());
|
||||
app.use(cookieParser());
|
||||
|
||||
app.post("/api/login", async (req, res) => {
|
||||
try {
|
||||
const result = await loginUser(req.body.username, req.body.password);
|
||||
if (result.success && result.user.role === "admin") {
|
||||
const userToken = await generateToken({
|
||||
role: result.user.role,
|
||||
username: result.user.username,
|
||||
});
|
||||
console.log("User token generated: ", userToken);
|
||||
res.status(200).json({
|
||||
success: true,
|
||||
message: "Login successful",
|
||||
token: userToken,
|
||||
...result,
|
||||
});
|
||||
} else if (result.success && result.user.role === "user") {
|
||||
res.status(403).json(result, { message: "You are not an Admin!" }); // Event Handler is in LoginCard.tsx - there is defined what happens when the status is 403
|
||||
} else {
|
||||
res.status(401).json(result, { message: "Invalid credentials" }); // Event Handler is in LoginCard.tsx - there is defined what happens when the status is 401
|
||||
}
|
||||
} catch (err) {
|
||||
console.error("Error logging in:", err);
|
||||
res.status(500).json({ success: false, message: "Internal server error" });
|
||||
}
|
||||
});
|
||||
|
||||
app.get("/api/getAllUsers", authenticate, async (req, res) => {
|
||||
if (req.user.role === "admin") {
|
||||
getAllUsers()
|
||||
.then((users) => {
|
||||
res.status(200).json(users);
|
||||
})
|
||||
.catch((err) => {
|
||||
console.error("Error fetching users:", err);
|
||||
res
|
||||
.status(500)
|
||||
.json({ success: false, message: "Internal server error" });
|
||||
});
|
||||
console.log("Fetched all users successfully");
|
||||
} else if (req.user.role === "user") {
|
||||
res.status(403).json({ success: false, message: "Access denied" });
|
||||
console.log("Access denied for user role");
|
||||
} else {
|
||||
res.status(500).json({ success: false, message: "Server error" });
|
||||
console.log("Server error while fetching users");
|
||||
}
|
||||
});
|
||||
|
||||
app.post("/api/deleteUser", authenticate, async (req, res) => {
|
||||
if (req.user.role === "admin") {
|
||||
deleteUser(req.body.id)
|
||||
.then((result) => {
|
||||
if (result.success) {
|
||||
res.status(200).json(result);
|
||||
} else {
|
||||
throw new Error("Failed to delete user");
|
||||
}
|
||||
})
|
||||
.catch((err) => {
|
||||
console.error("Error deleting user:", err);
|
||||
res
|
||||
.status(500)
|
||||
.json({ success: false, message: "Internal server error" });
|
||||
});
|
||||
console.log("User deleted successfully");
|
||||
} else {
|
||||
console.log("Access denied for user role");
|
||||
}
|
||||
});
|
||||
|
||||
app.post("/api/updateUser", authenticate, async (req, res) => {
|
||||
if (req.user.role === "admin") {
|
||||
updateUser(
|
||||
req.body.username,
|
||||
req.body.first_name,
|
||||
req.body.last_name,
|
||||
req.body.password,
|
||||
req.body.email,
|
||||
req.body.id
|
||||
)
|
||||
.then((result) => {
|
||||
if (result.success) {
|
||||
res.status(200).json(result);
|
||||
} else {
|
||||
throw new Error("Failed to update user");
|
||||
}
|
||||
})
|
||||
.catch((err) => {
|
||||
console.error("Error updating user:", err);
|
||||
res
|
||||
.status(500)
|
||||
.json({ success: false, message: "Internal server error" });
|
||||
});
|
||||
console.log("User updated successfully");
|
||||
}
|
||||
});
|
||||
app.use("/api", router);
|
||||
|
||||
app.listen(port, () => {
|
||||
console.log(`Express backend server is running at http://localhost:${port}`);
|
||||
|
1
frontend_admin/.env
Normal file
1
frontend_admin/.env
Normal file
@@ -0,0 +1 @@
|
||||
REACT_APP_SERVER_URL=http://localhost:5002
|
13
frontend_admin/package-lock.json
generated
13
frontend_admin/package-lock.json
generated
@@ -12,6 +12,7 @@
|
||||
"@tanstack/react-table": "^8.21.3",
|
||||
"class-variance-authority": "^0.7.1",
|
||||
"clsx": "^2.1.1",
|
||||
"dotenv": "^17.2.0",
|
||||
"js-cookie": "^3.0.5",
|
||||
"lucide-react": "^0.525.0",
|
||||
"react": "^19.1.0",
|
||||
@@ -2640,6 +2641,18 @@
|
||||
"tslib": "^2.0.3"
|
||||
}
|
||||
},
|
||||
"node_modules/dotenv": {
|
||||
"version": "17.2.0",
|
||||
"resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.2.0.tgz",
|
||||
"integrity": "sha512-Q4sgBT60gzd0BB0lSyYD3xM4YxrXA9y4uBDof1JNYGzOXrQdQ6yX+7XIAqoFOGQFOTK1D3Hts5OllpxMDZFONQ==",
|
||||
"license": "BSD-2-Clause",
|
||||
"engines": {
|
||||
"node": ">=12"
|
||||
},
|
||||
"funding": {
|
||||
"url": "https://dotenvx.com"
|
||||
}
|
||||
},
|
||||
"node_modules/electron-to-chromium": {
|
||||
"version": "1.5.187",
|
||||
"resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.187.tgz",
|
||||
|
@@ -15,6 +15,7 @@
|
||||
"@tanstack/react-table": "^8.21.3",
|
||||
"class-variance-authority": "^0.7.1",
|
||||
"clsx": "^2.1.1",
|
||||
"dotenv": "^17.2.0",
|
||||
"js-cookie": "^3.0.5",
|
||||
"lucide-react": "^0.525.0",
|
||||
"react": "^19.1.0",
|
||||
|
@@ -4,13 +4,18 @@ import { useUsers } from "./utils/useUsers";
|
||||
import UserTable from "./components/UserTable";
|
||||
import { useEffect } from "react";
|
||||
import { loadTheme } from "./utils/frontendService";
|
||||
import { myToast } from "./utils/frontendService";
|
||||
import "react-toastify/dist/ReactToastify.css";
|
||||
import Cookies from "js-cookie";
|
||||
|
||||
function App() {
|
||||
const users = useUsers();
|
||||
|
||||
useEffect(() => {
|
||||
loadTheme();
|
||||
if (Cookies.get("token")) {
|
||||
myToast("User list updated", "success");
|
||||
}
|
||||
}, []);
|
||||
|
||||
return (
|
||||
|
@@ -2,7 +2,7 @@ import Cookies from "js-cookie";
|
||||
import { myToast } from "./frontendService";
|
||||
|
||||
export const loginUser = (username: string, password: string) => {
|
||||
fetch("http://localhost:5002/api/login", {
|
||||
fetch(`http://localhost:5002/api/login`, {
|
||||
method: "POST",
|
||||
headers: { "Content-Type": "application/json" },
|
||||
body: JSON.stringify({ username, password }),
|
||||
@@ -38,7 +38,7 @@ export const logout = () => {
|
||||
Cookies.remove("name");
|
||||
Cookies.remove("token");
|
||||
localStorage.removeItem("users");
|
||||
myToast("Logged out successfully!", "info");
|
||||
myToast("Logged out successfully!", "success");
|
||||
};
|
||||
|
||||
export const deleteUser = (id: number) => {
|
||||
@@ -52,9 +52,9 @@ export const deleteUser = (id: number) => {
|
||||
})
|
||||
.then((response) => {
|
||||
if (response.ok) {
|
||||
replaceUsers();
|
||||
replaceUsers("User deleted successfully!");
|
||||
} else {
|
||||
alert("Failed to delete user");
|
||||
myToast("Failed to delete user", "error");
|
||||
}
|
||||
})
|
||||
.catch((error) => {
|
||||
@@ -62,7 +62,7 @@ export const deleteUser = (id: number) => {
|
||||
});
|
||||
};
|
||||
|
||||
export const replaceUsers = async () => {
|
||||
export const replaceUsers = async (alertMessage: string) => {
|
||||
localStorage.removeItem("users");
|
||||
await fetch("http://localhost:5002/api/getAllUsers", {
|
||||
method: "GET",
|
||||
@@ -73,7 +73,7 @@ export const replaceUsers = async () => {
|
||||
.then((res) => res.json())
|
||||
.then((users) => {
|
||||
localStorage.setItem("users", JSON.stringify(users));
|
||||
window.location.reload();
|
||||
myToast(alertMessage, "success");
|
||||
});
|
||||
};
|
||||
|
||||
@@ -99,7 +99,7 @@ export const updateUserFunc = async (userID: number) => {
|
||||
|
||||
if (!usernameEl || !firstNameEl || !lastNameEl || !emailEl) {
|
||||
console.error("Required form elements not found");
|
||||
alert("Form elements not found");
|
||||
myToast("Form elements not found", "error");
|
||||
return;
|
||||
}
|
||||
|
||||
@@ -129,7 +129,7 @@ export const updateUserFunc = async (userID: number) => {
|
||||
|
||||
if (response.ok) {
|
||||
console.log("User updated successfully");
|
||||
replaceUsers();
|
||||
replaceUsers("User updated successfully!");
|
||||
} else {
|
||||
const errorText = await response.text();
|
||||
console.error("Server error:", response.status, errorText);
|
||||
|
Reference in New Issue
Block a user