3 Commits

7 changed files with 140 additions and 112 deletions

110
backend/routes/api.js Normal file
View File

@@ -0,0 +1,110 @@
import express from "express";
import {
loginUser,
createUser,
updateUser,
deleteUser,
getAllUsers,
} from "../services/database.js";
import { generateToken, authenticate } from "../services/tokenService.js";
const router = express.Router();
router.post("/login", async (req, res) => {
try {
const result = await loginUser(req.body.username, req.body.password);
if (result.success && result.user.role === "admin") {
const userToken = await generateToken({
role: result.user.role,
username: result.user.username,
});
console.log("User token generated: ", userToken);
res.status(200).json({
success: true,
message: "Login successful",
token: userToken,
...result,
});
} else if (result.success && result.user.role === "user") {
res.status(403).json(result, { message: "You are not an Admin!" }); // Event Handler is in LoginCard.tsx - there is defined what happens when the status is 403
} else {
res.status(401).json(result, { message: "Invalid credentials" }); // Event Handler is in LoginCard.tsx - there is defined what happens when the status is 401
}
} catch (err) {
console.error("Error logging in:", err);
res.status(500).json({ success: false, message: "Internal server error" });
}
});
router.get("/getAllUsers", authenticate, async (req, res) => {
if (req.user.role === "admin") {
getAllUsers()
.then((users) => {
res.status(200).json(users);
})
.catch((err) => {
console.error("Error fetching users:", err);
res
.status(500)
.json({ success: false, message: "Internal server error" });
});
console.log("Fetched all users successfully");
} else if (req.user.role === "user") {
res.status(403).json({ success: false, message: "Access denied" });
console.log("Access denied for user role");
} else {
res.status(500).json({ success: false, message: "Server error" });
console.log("Server error while fetching users");
}
});
router.post("/deleteUser", authenticate, async (req, res) => {
if (req.user.role === "admin") {
deleteUser(req.body.id)
.then((result) => {
if (result.success) {
res.status(200).json(result);
} else {
throw new Error("Failed to delete user");
}
})
.catch((err) => {
console.error("Error deleting user:", err);
res
.status(500)
.json({ success: false, message: "Internal server error" });
});
console.log("User deleted successfully");
} else {
console.log("Access denied for user role");
}
});
router.post("/updateUser", authenticate, async (req, res) => {
if (req.user.role === "admin") {
updateUser(
req.body.username,
req.body.first_name,
req.body.last_name,
req.body.password,
req.body.email,
req.body.id
)
.then((result) => {
if (result.success) {
res.status(200).json(result);
} else {
throw new Error("Failed to update user");
}
})
.catch((err) => {
console.error("Error updating user:", err);
res
.status(500)
.json({ success: false, message: "Internal server error" });
});
console.log("User updated successfully");
}
});
export default router;

View File

@@ -3,15 +3,8 @@ import express from "express";
import cors from "cors";
const app = express();
const port = 5002;
import {
loginUser,
createUser,
updateUser,
deleteUser,
getAllUsers,
} from "./services/database.js";
import { generateToken, authenticate } from "./services/tokenService.js";
import cookieParser from "cookie-parser";
import router from "./routes/api.js";
//view engine ejs
app.set("view engine", "ejs");
@@ -20,102 +13,7 @@ app.use(express.json());
app.use(cors());
app.use(cookieParser());
app.post("/api/login", async (req, res) => {
try {
const result = await loginUser(req.body.username, req.body.password);
if (result.success && result.user.role === "admin") {
const userToken = await generateToken({
role: result.user.role,
username: result.user.username,
});
console.log("User token generated: ", userToken);
res.status(200).json({
success: true,
message: "Login successful",
token: userToken,
...result,
});
} else if (result.success && result.user.role === "user") {
res.status(403).json(result, { message: "You are not an Admin!" }); // Event Handler is in LoginCard.tsx - there is defined what happens when the status is 403
} else {
res.status(401).json(result, { message: "Invalid credentials" }); // Event Handler is in LoginCard.tsx - there is defined what happens when the status is 401
}
} catch (err) {
console.error("Error logging in:", err);
res.status(500).json({ success: false, message: "Internal server error" });
}
});
app.get("/api/getAllUsers", authenticate, async (req, res) => {
if (req.user.role === "admin") {
getAllUsers()
.then((users) => {
res.status(200).json(users);
})
.catch((err) => {
console.error("Error fetching users:", err);
res
.status(500)
.json({ success: false, message: "Internal server error" });
});
console.log("Fetched all users successfully");
} else if (req.user.role === "user") {
res.status(403).json({ success: false, message: "Access denied" });
console.log("Access denied for user role");
} else {
res.status(500).json({ success: false, message: "Server error" });
console.log("Server error while fetching users");
}
});
app.post("/api/deleteUser", authenticate, async (req, res) => {
if (req.user.role === "admin") {
deleteUser(req.body.id)
.then((result) => {
if (result.success) {
res.status(200).json(result);
} else {
throw new Error("Failed to delete user");
}
})
.catch((err) => {
console.error("Error deleting user:", err);
res
.status(500)
.json({ success: false, message: "Internal server error" });
});
console.log("User deleted successfully");
} else {
console.log("Access denied for user role");
}
});
app.post("/api/updateUser", authenticate, async (req, res) => {
if (req.user.role === "admin") {
updateUser(
req.body.username,
req.body.first_name,
req.body.last_name,
req.body.password,
req.body.email,
req.body.id
)
.then((result) => {
if (result.success) {
res.status(200).json(result);
} else {
throw new Error("Failed to update user");
}
})
.catch((err) => {
console.error("Error updating user:", err);
res
.status(500)
.json({ success: false, message: "Internal server error" });
});
console.log("User updated successfully");
}
});
app.use("/api", router);
app.listen(port, () => {
console.log(`Express backend server is running at http://localhost:${port}`);

1
frontend_admin/.env Normal file
View File

@@ -0,0 +1 @@
REACT_APP_SERVER_URL=http://localhost:5002

View File

@@ -12,6 +12,7 @@
"@tanstack/react-table": "^8.21.3",
"class-variance-authority": "^0.7.1",
"clsx": "^2.1.1",
"dotenv": "^17.2.0",
"js-cookie": "^3.0.5",
"lucide-react": "^0.525.0",
"react": "^19.1.0",
@@ -2640,6 +2641,18 @@
"tslib": "^2.0.3"
}
},
"node_modules/dotenv": {
"version": "17.2.0",
"resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.2.0.tgz",
"integrity": "sha512-Q4sgBT60gzd0BB0lSyYD3xM4YxrXA9y4uBDof1JNYGzOXrQdQ6yX+7XIAqoFOGQFOTK1D3Hts5OllpxMDZFONQ==",
"license": "BSD-2-Clause",
"engines": {
"node": ">=12"
},
"funding": {
"url": "https://dotenvx.com"
}
},
"node_modules/electron-to-chromium": {
"version": "1.5.187",
"resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.187.tgz",

View File

@@ -15,6 +15,7 @@
"@tanstack/react-table": "^8.21.3",
"class-variance-authority": "^0.7.1",
"clsx": "^2.1.1",
"dotenv": "^17.2.0",
"js-cookie": "^3.0.5",
"lucide-react": "^0.525.0",
"react": "^19.1.0",

View File

@@ -4,13 +4,18 @@ import { useUsers } from "./utils/useUsers";
import UserTable from "./components/UserTable";
import { useEffect } from "react";
import { loadTheme } from "./utils/frontendService";
import { myToast } from "./utils/frontendService";
import "react-toastify/dist/ReactToastify.css";
import Cookies from "js-cookie";
function App() {
const users = useUsers();
useEffect(() => {
loadTheme();
if (Cookies.get("token")) {
myToast("User list updated", "success");
}
}, []);
return (

View File

@@ -2,7 +2,7 @@ import Cookies from "js-cookie";
import { myToast } from "./frontendService";
export const loginUser = (username: string, password: string) => {
fetch("http://localhost:5002/api/login", {
fetch(`http://localhost:5002/api/login`, {
method: "POST",
headers: { "Content-Type": "application/json" },
body: JSON.stringify({ username, password }),
@@ -38,7 +38,7 @@ export const logout = () => {
Cookies.remove("name");
Cookies.remove("token");
localStorage.removeItem("users");
myToast("Logged out successfully!", "info");
myToast("Logged out successfully!", "success");
};
export const deleteUser = (id: number) => {
@@ -52,9 +52,9 @@ export const deleteUser = (id: number) => {
})
.then((response) => {
if (response.ok) {
replaceUsers();
replaceUsers("User deleted successfully!");
} else {
alert("Failed to delete user");
myToast("Failed to delete user", "error");
}
})
.catch((error) => {
@@ -62,7 +62,7 @@ export const deleteUser = (id: number) => {
});
};
export const replaceUsers = async () => {
export const replaceUsers = async (alertMessage: string) => {
localStorage.removeItem("users");
await fetch("http://localhost:5002/api/getAllUsers", {
method: "GET",
@@ -73,7 +73,7 @@ export const replaceUsers = async () => {
.then((res) => res.json())
.then((users) => {
localStorage.setItem("users", JSON.stringify(users));
window.location.reload();
myToast(alertMessage, "success");
});
};
@@ -99,7 +99,7 @@ export const updateUserFunc = async (userID: number) => {
if (!usernameEl || !firstNameEl || !lastNameEl || !emailEl) {
console.error("Required form elements not found");
alert("Form elements not found");
myToast("Form elements not found", "error");
return;
}
@@ -129,7 +129,7 @@ export const updateUserFunc = async (userID: number) => {
if (response.ok) {
console.log("User updated successfully");
replaceUsers();
replaceUsers("User updated successfully!");
} else {
const errorText = await response.text();
console.error("Server error:", response.status, errorText);