HUA-R05

.github/workflows/ci.yml

@@ -1,16 +1,12 @@
 name: Node.js test
 
 on:
-  pull_request_target:
+  push:
     branches:
-      - main
-#  push:
-#    branches:
 #      - main
-#      - 'R*'
-#      - '*-test'
-#  pull_request:
-#    branches:
+      - '*-test'
+  pull_request:
+    branches:
 #      - main
 
 env:
@@ -38,11 +34,7 @@ jobs:
           # mysql user: 'github'                 # Required if "mysql root password" is empty, default is empty. The superuser for the specified database. Can use secrets, too
           # mysql password: 'password'           # Required if "mysql user" exists. The password for the "mysql user"
       - run: mysql --version
-      - run: echo "checkout head ${{ github.event.pull_request.head.sha }}"
-      - run: echo "base ${{ github.event.pull_request.base.sha }}"
-      - uses: actions/checkout@v4
-        with:
-          ref: ${{ github.event.pull_request.head.sha }}
+      - uses: actions/checkout@v3
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v3
         with:

.sequelizerc

@@ -0,0 +1,8 @@
+const path = require('path')
+
+module.exports = {
+    'config': path.resolve('config', 'database.js'),
+    'models-path': path.resolve('db/', 'models'),
+    'seeders-path': path.resolve('db/', 'seeders'),
+    'migrations-path': path.resolve('db/', 'migrations')
+}

.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+    "editor.tabSize": 2
+}

app.js

@@ -1,9 +1,59 @@
 const express = require('express')
 const routes = require('./routes')
 
+const path = require('path')
+
 const app = express()
 const port = process.env.PORT || 3000
 
+const db = require('./db/models')
+
+const handlebars = require('express-handlebars')
+
+// 引入 helpers
+const handlebarsHelpers = require('./helpers/handlebars-helpers')
+
+// 註冊 Handlebars 樣板引擎，並指定副檔名為 .hbs
+app.engine('.hbs', handlebars({ extname: '.hbs', helpers: handlebarsHelpers }))
+
+// 設定使用 Handlebars 做為樣板引擎
+app.set('view engine', '.hbs')
+
+// 啟用 body-parser
+app.use(express.urlencoded({ extended: true }))
+
+// 載入 express-session 套件
+const session = require('express-session')
+
+// 載入 connect-flash 套件
+const flash = require('connect-flash')
+
+// 載入 message
+const message = require('./middlewares/messages')
+
+// 載入 passport
+const passport = require('passport')
+
+// 設定 SESSION_SECRET 還境變數
+const SESSION_SECRET = 'secret'
+
+// 設定 session
+app.use(session({ secret: SESSION_SECRET, saveUninitialized: false, resave: false }))
+
+app.use(flash())
+
+app.use(passport.initialize())
+app.use(passport.session())
+
+// 載入 method-override
+const methodOverride = require('method-override')
+
+app.use(methodOverride('_method'))
+
+app.use('/upload', express.static(path.join(__dirname, '/upload')))
+
+app.use(message)
+
 app.use(routes)
 
 app.listen(port, () => {

config/database.js

@@ -0,0 +1,32 @@
+module.exports = {
+
+  development: {
+    username: 'root',
+    password: 'password',
+    database: 'forum',
+    host: '127.0.0.1',
+    dialect: 'mysql'
+  },
+  test: {
+    username: 'root',
+    password: null,
+    database: 'database_test',
+    host: '127.0.0.1',
+    dialect: 'mysql'
+  },
+  production: {
+    username: 'root',
+    password: null,
+    database: 'database_production',
+    host: '127.0.0.1',
+    dialect: 'mysql'
+  },
+  github: {
+    username: 'root',
+    password: 'password',
+    database: 'forum',
+    host: '127.0.0.1',
+    dialect: 'mysql',
+    logging: false
+  }
+}

config/passport.js

@@ -0,0 +1,46 @@
+const passport = require('passport')
+const LocalStrategy = require('passport-local')
+
+const { User, Restaurant } = require('../db/models')
+
+const bcrypt = require('bcryptjs')
+
+passport.use(new LocalStrategy({
+  usernameField: 'email',
+  passReqToCallback: true // 在下面的 callback function 中加入 req 屬性
+},
+(req, email, password, done) => {
+  User.findOne({
+    attributes: ['id', 'name', 'email', 'password'],
+    where: { email }
+  })
+    .then(user => {
+      if (!user) return done(null, false, req.flash('error_messages', 'email or passport input error!!'))
+
+      bcrypt.compare(password, user.password)
+        .then(ans => {
+          if (!ans) return done(null, false, req.flash('error_messages', 'email or passport input error!!'))
+          return done(null, user)
+        })
+    })
+}))
+
+passport.serializeUser((user, done) => {
+  return done(null, user.id)
+})
+
+passport.deserializeUser((id, done) => {
+  User.findByPk(id, {
+    // nest: true,
+    include: [
+      { model: Restaurant, as: 'FavoritedRestaurants' },
+      { model: Restaurant, as: 'LikeRestaurants' },
+      { model: User, as: 'Followings' },
+      { model: User, as: 'Followers' }
+    ]
+  })
+    .then(user => done(null, user.toJSON()))
+    .catch(err => done(err))
+})
+
+module.exports = passport

controllers/admin-controller.js

@@ -0,0 +1,192 @@
+const { Restaurant, User, Category } = require('../db/models')
+const localFileHandler = require('../helpers/file-helpers') // 載入 file-helper
+const { getOffset, getPagination } = require('../helpers/pagination-helper')
+
+const adminController = {
+  getRestaurant: (req, res, next) => {
+    return Restaurant.findByPk(req.params.id, {
+      raw: true,
+      nest: true,
+      include: Category
+    })
+      .then(restaurant => {
+        if (!restaurant) throw Error("Couldn't find any restaurant!!")
+        res.render('admin/restaurant', { restaurant })
+      })
+      .catch(err => {
+        err.name = '搜尋單筆餐廳'
+        err.message = '資料庫查找錯誤!!'
+        next(err)
+      })
+  },
+
+  editRestaurant: (req, res, next) => {
+    return Promise.all([
+      Restaurant.findByPk(req.params.id, {
+        raw: true,
+        nest: true,
+        include: Category
+      }),
+      Category.findAll({ raw: true })
+    ])
+      .then(([restaurant, categories]) => {
+        if (!restaurant) throw Error("Couldn't find any restaurant!!")
+        res.render('admin/edit-restaurant', { restaurant, categories })
+      })
+      .catch(err => {
+        err.name = '編輯單筆餐廳'
+        err.message = '資料庫查找錯誤!!'
+        next(err)
+      })
+  },
+
+  putRestaurant: (req, res, next) => {
+    const { name, categoryId, tel, address, openingHours, description } = req.body
+    if (!name) throw new Error('Missing name!!')
+    if (!categoryId) throw new Error('Missing name!!')
+
+    const { file } = req // 把檔案取出來，也可以寫成 const file = req.file
+
+    return Promise.all([ // 非同步處理
+      Restaurant.findByPk(req.params.id), // 去資料庫查有沒有這間餐廳
+      localFileHandler(file)
+    ])
+
+      .then(([restaurant, file]) => {
+        if (!restaurant) throw Error("Couldn't find any restaurant!!")
+
+        return restaurant.update({
+          name,
+          categoryId,
+          tel,
+          address,
+          openingHours,
+          description,
+          image: file || restaurant.image // 如果 filePath 是 Truthy (使用者有上傳新照片) 就用 filePath，是 Falsy (使用者沒有上傳新照片) 就沿用原本資料庫內的值
+        })
+      })
+      .then(() => {
+        req.flash('success_messages', 'restaurant edited successfully!!') // 在畫面顯示成功提示
+        res.redirect('/admin/restaurants')
+      })
+      .catch(err => {
+        err.name = 'editeError'
+        err.message = 'edited fail!!'
+        next(err)
+      })
+  },
+
+  getRestaurants: (req, res, next) => {
+    const categoryId = Number(req.query.categoryId) || ''
+    const page = Number(req.query.page) || 1
+    const DEFAULT_LIMIT = 10
+    const offset = getOffset(page, DEFAULT_LIMIT)
+    const limit = Number(req.query.limit) || DEFAULT_LIMIT
+
+    Promise.all([
+      Restaurant.findAndCountAll({
+        where: { ...categoryId ? { categoryId } : {} },
+        offset,
+        limit,
+        raw: true,
+        nest: true,
+        include: Category
+      }),
+      Category.findAll({ raw: true })
+    ])
+      .then(([restaurants, categories]) => res.render('admin/restaurants', {
+        restaurants: restaurants.rows,
+        categories,
+        categoryId,
+        pagination: getPagination(limit, page, restaurants.count)
+      }))
+      .catch(err => {
+        err.name = '全部餐廳搜尋'
+        err.message = '資料庫錯誤!!'
+        next(err)
+      })
+  },
+
+  getUsers: (req, res, next) => {
+    return User.findAll({ raw: true })
+      .then(users => {
+        res.render('admin/users', { users })
+      })
+      .catch(err => {
+        err.name = '全部使用者搜尋'
+        err.message = '資料庫錯誤!!'
+        next(err)
+      })
+  },
+
+  createRestaurant: (req, res, next) => {
+    Category.findAll({ raw: true })
+      .then(categories => res.render('admin/create-restaurant', { categories }))
+      .catch(err => next(err))
+  },
+
+  postRestaurant: (req, res, next) => {
+    const { name, categoryId, tel, address, openingHours, description } = req.body
+
+    if (!name) throw new Error('Missing name!!')
+    if (!categoryId) throw new Error('Missing name!!')
+
+    const { file } = req // 把檔案取出來，也可以寫成 const file = req.file
+
+    return localFileHandler(file) // 把取出的檔案傳給 file-helper 處理後
+      .then(filePath => Restaurant.create({
+        name,
+        categoryId,
+        tel,
+        address,
+        openingHours,
+        description,
+        image: filePath
+      }))
+      .then(() => {
+        req.flash('success_messages', 'restaurant created successfully!!') // 在畫面顯示成功提示
+        res.redirect('/admin/restaurants') // 新增完成後導回後台首頁
+      })
+      .catch(err => {
+        err.name = 'createError'
+        err.message = 'created fail!!'
+        next(err)
+      })
+  },
+
+  patchUser: (req, res, next) => {
+    const { id } = req.params
+    return User.findByPk(id)
+      .then(user => {
+        if (!user) throw new Error("Couldn't find any user!!")
+        if (user.name === 'admin') {
+          req.flash('error_messages', '禁止變更 root 權限')
+          return res.redirect('back')
+        }
+        return user.update({
+          isAdmin: !user.isAdmin
+        })
+      })
+      .then(() => {
+        req.flash('success_messages', '使用者權限變更成功') // 在畫面顯示成功提示
+        return res.redirect('/admin/users')
+      })
+      .catch(err => next(err))
+  },
+
+  deleteRestaurant: (req, res, next) => {
+    return Restaurant.findByPk(req.params.id)
+      .then(restaurant => {
+        console.log(restaurant === null)
+        if (restaurant === null) throw new Error("Couldn't delete any restaurant!!")
+        return restaurant.destroy()
+      })
+      .then(() => {
+        req.flash('success_messages', 'Delete successfully!!')
+        res.redirect('/admin/restaurants')
+      })
+      .catch(err => next(err))
+  }
+}
+
+module.exports = adminController