const handler = require('express-async-handler') const Helpers = require('../helpers'); const db = require('../models'); async function login(req, res) { res.send(await Helpers.ViewLoader.load('admin/login.pug', { current_route: req.originalUrl })); } async function apiLogin(req, res) { if (req.session.user) { res.send('Already logged in'); return; } const user = (await db.User.authenticate(req.body)); if (!user) { res.status(401).send('Bad auth'); } const session = await user.createSession(); req.session.user = session; res.redirect('/admin/panel'); return; } async function panel(req, res) { const gb_records = await db.Guestbook.findAll({ order: [['id', 'DESC']] }); res.send(await Helpers.ViewLoader.load('admin/panel.pug', { current_route: req.originalUrl, gb_records })); return; } async function gb_api(req, res) { let action = false; const id = req.body.id; if (req.body.hide) action = 'hide'; if (!action) { res.redirect('/admin/panel'); return; } switch (action) { case 'hide': const response = await db.Guestbook.update({hidden: db.Sequelize.literal('NOT hidden')}, {where: {id}}) res.redirect('/admin/panel'); return; } } module.exports = (router) => { // login router.get('/login', handler(login)); router.get('/admin/login', handler(login)); router.post('/admin/login', handler(apiLogin)); // panel router.get('/admin/panel', handler(panel)); router.post('/admin/panel/gb_api', handler(gb_api)); }