R03:andy060104@gmail.com

app.js

@@ -1,11 +1,37 @@
+const path = require('path')
 const express = require('express')
+const handlebars = require('express-handlebars')
+const flash = require('connect-flash')
+const session = require('express-session')
+const methodOverride = require('method-override')
+const passport = require('./config/passport')
+
 const routes = require('./routes')
+const { generalPartialsHandler } = require('./middlewares/partials-handler')
+const { generalErrorHandler } = require('./middlewares/error-handler')
+const handlebarsHelper = require('./helpers/handlebars-helpers')
 
 const app = express()
 const port = process.env.PORT || 3000
+const SESSION_SECRET = 'secret'
+// 註冊 Handlebars 樣板引擎，並指定副檔名為 .hbs
+app.engine('hbs', handlebars({ extname: '.hbs', helpers: handlebarsHelper }))
+// 設定使用 Handlebars 做為樣板引擎
+app.set('view engine', 'hbs')
+app.set('views', './views')
 
-app.use(routes)
+app.use(express.urlencoded({ extended: true }))
+app.use(session({ secret: SESSION_SECRET, resave: false, saveUninitialized: false }))
+app.use(flash()) // flash這種功能存在 session裡
+app.use(methodOverride('_method')) // _method為自定義
+app.use('/upload', express.static(path.join(__dirname, 'upload'))) // 以/upload開頭的才被允許訪問 而__dirname/upload 被設為根目錄
 
+app.use(passport.initialize())
+app.use(passport.session())
+app.use(generalPartialsHandler)
+
+app.use(routes)
+app.use(generalErrorHandler)
 app.listen(port, () => {
   console.info(`Example app listening on port ${port}!`)
 })

config/config.json

@@ -28,4 +28,4 @@
     "dialect": "mysql",
     "logging": false
   }
-}
+}

config/passport.js

@@ -0,0 +1,36 @@
+const passport = require('passport')
+const LocalStrategy = require('passport-local')
+const bcrypt = require('bcryptjs')
+const db = require('../models')
+const User = db.User
+// set up Passport strategy
+passport.use(new LocalStrategy(
+  // customize user field
+  {
+    usernameField: 'email',
+    passwordField: 'password',
+    passReqToCallback: true
+  },
+  // authenticate user
+  (req, email, password, cb) => {
+    User.findOne({ where: { email } })
+      .then(user => {
+        if (!user) return cb(null, false, req.flash('error', '帳號或密碼輸入錯誤！'))
+        bcrypt.compare(password, user.password).then(res => {
+          if (!res) return cb(null, false, req.flash('error', '帳號或密碼輸入錯誤！'))
+          return cb(null, user)
+        })
+      })
+  }
+))
+// serialize and deserialize user
+passport.serializeUser((user, cb) => {
+  cb(null, user.id)
+})
+passport.deserializeUser((id, cb) => {
+  User.findByPk(id).then(user => {
+    user = user.toJSON()
+    return cb(null, user)
+  })
+})
+module.exports = passport

controllers/admin-controller.js

@@ -0,0 +1,126 @@
+const { Restaurant, User, Category } = require('../models')
+const { localFileHandler } = require('../helpers/file-helpers')
+
+const adminController = {
+  getRestaurants: (req, res, next) => {
+    return Restaurant.findAll({
+      raw: true,
+      nest: true, // 讓他從 Restaurant[Category.id] => Restaurant.Category.id 比較好理解
+      include: [Category] // 包含Category的資料
+    })
+      .then(restaurants => res.render('admin/restaurants', { restaurants }))
+      .catch(err => next(err))
+  },
+  createRestaurant: (req, res, next) => {
+    return Category.findAll({
+      raw: true
+    })
+      .then(categories => res.render('admin/create-restaurant', { categories }))
+      .catch(err => next(err))
+  },
+  postRestaurant: (req, res, next) => {
+    const { name, tel, address, openingHours, description, categoryId } = req.body
+    if (!name) throw new Error('Restaurant name is required !')
+
+    const { file } = req // 這邊要獲取的是req中file這個檔案 而req.body.file 獲取的是 name=file 輸入的字串
+
+    localFileHandler(file) // 傳入req獲取的file 有無檔案邏輯已在helpers內做完
+      .then(filePath => { // filePath為最後resolve的`/${fileName}`路徑字符串
+        return Restaurant.create({ name, tel, address, openingHours, description, image: filePath || null, categoryId })
+      })
+
+      .then(() => {
+        req.flash('success_messages', 'restaurant was successfully created') // 在畫面顯示成功提示
+        res.redirect('/admin/restaurants') // 新增完成後導回後台首頁
+      })
+      .catch(err => next(err))
+  },
+  getRestaurant: (req, res, next) => {
+    return Restaurant.findByPk(req.params.id, {
+      raw: true,
+      nest: true,
+      include: [Category]
+    })
+      .then(restaurant => {
+        if (!restaurant) throw new Error('Restaurant did not exist!')
+        res.render('admin/restaurant', { restaurant })
+        // 在只有單筆資料時候 可以使用 { restaurant: restaurant.toJSON() } 取代  raw: true, nest: true,
+      })
+      .catch(err => next(err))
+  },
+  editRestaurant: (req, res, next) => {
+    return Promise.all([
+      Restaurant.findByPk(req.params.id, { raw: true }),
+      Category.findAll({ raw: true })
+    ])
+      .then(([restaurant, categories]) => {
+        if (!restaurant) throw new Error('Restaurant did not exist!')
+
+        res.render('admin/edit-restaurant', { restaurant, categories })
+      })
+      .catch(err => next(err))
+  },
+  putRestaurant: (req, res, next) => {
+    const { name, tel, address, openingHours, description, categoryId } = req.body
+    if (!name) throw new Error('Restaurant name is required !')
+
+    const { file } = req // 這邊要獲取的是req中file這個檔案 而req.body.file 獲取的是 name=file 輸入的字串
+
+    // 傳入req獲取的file 有無檔案邏輯已在helpers內做完
+    // Promise.all([a.b]) Promise.all會把參數a,b做完 .then會收到a.b的結果 在執行 .then([a,b])
+    return Promise.all([
+      Restaurant.findByPk(req.params.id),
+      localFileHandler(file)
+    ])
+      .then(([restaurant, filePath]) => {
+        if (!restaurant) throw new Error('Restaurant did not exist!')
+        // 也可用Restaurant.update寫法 裡面多添加where 就好
+        // image: filePath || restaurant.image 如果有編輯照片 就用新的 沒有用舊的
+        return restaurant.update({ name, tel, address, openingHours, description, image: filePath || restaurant.image, categoryId })
+      })
+
+      .then(() => {
+        req.flash('success_messages', 'Update successfully!')
+        res.redirect('/admin/restaurants')
+      })
+      .catch(err => next(err))
+  },
+  deleteRestaurant: (req, res, next) => {
+    return Restaurant.findByPk(req.params.id)
+      .then(restaurant => {
+        if (!restaurant) throw new Error('Restaurant did not exist!')
+        // 也可用Restaurant.update寫法 裡面多添加where 就好
+        return restaurant.destroy()
+      })
+      .then(() => {
+        req.flash('success_messages', 'Delete successfully!')
+        res.redirect('/admin/restaurants')
+      })
+      .catch(err => next(err))
+  },
+  getUsers: (req, res) => {
+    return User.findAll({
+      raw: true
+    })
+      .then(users => res.render('admin/users', { users }))
+  },
+  patchUser: (req, res, next) => {
+    return User.findByPk(req.params.id)
+      .then(user => {
+        if (!user) throw new Error('User did not exist!')
+        if (user.email === 'root@example.com') {
+          req.flash('error_messages', '禁止變更 root 權限')
+          return res.redirect('back')
+        }
+        return user.update({
+          isAdmin: !user.isAdmin
+        })
+      })
+      .then(() => {
+        req.flash('success_messages', '使用者權限變更成功')
+        return res.redirect('/admin/users')
+      })
+      .catch(err => next(err))
+  }
+}
+module.exports = adminController

controllers/category-controller.js

@@ -0,0 +1,50 @@
+const { Category } = require('../models')
+
+const categoryController = {
+  getCategories: (req, res, next) => {
+    return Promise.all([
+      Category.findAll({ raw: true }),
+      req.params.id ? Category.findByPk(req.params.id, { raw: true }) : null
+    ])
+      .then(([categories, category]) => {
+        res.render('admin/categories', {
+          categories,
+          category
+        })
+      })
+      .catch(err => next(err))
+  },
+  postCategory: (req, res, next) => {
+    const { name } = req.body
+
+    if (!name) throw new Error('Category name is required!')
+
+    return Category.create({ name })
+      .then(() => res.redirect('/admin/categories'))
+      .catch(err => next(err))
+  },
+  putCategory: (req, res, next) => {
+    const { name } = req.body
+
+    if (!name) throw new Error('Category name is required!')
+
+    return Category.findByPk(req.params.id)
+      .then(category => {
+        if (!category) throw new Error("Category doesn't exist!")
+        return category.update({ name })
+      })
+      .then(() => res.redirect('/admin/categories'))
+      .catch(err => next(err))
+  },
+  deleteCategory: (req, res, next) => {
+    return Category.findByPk(req.params.id)
+      .then(category => {
+        if (!category) throw new Error("Category didn't exist!") // 反查，確認要刪除的類別存在，再進行下面刪除動作
+        return category.destroy()
+      })
+      .then(() => res.redirect('/admin/categories'))
+      .catch(err => next(err))
+  }
+}
+
+module.exports = categoryController

controllers/comment-controller.js

@@ -0,0 +1,40 @@
+const { Comment, User, Restaurant } = require('../models')
+const commentController = {
+
+  postComment: (req, res, next) => {
+    const { restaurantId, text } = req.body
+    const userId = req.user.id
+
+    if (!text) throw new Error('Comment text is required!')
+
+    return Promise.all([
+      User.findByPk(userId),
+      Restaurant.findByPk(restaurantId)
+    ])
+      .then(([user, restaurant]) => {
+        if (!user) throw new Error("User didn't exist!")
+        if (!restaurant) throw new Error("Restaurant didn't exist!")
+
+        return Comment.create({
+          text,
+          restaurantId,
+          userId
+        })
+      })
+      .then(() => {
+        res.redirect(`/restaurants/${restaurantId}`)
+      })
+      .catch(err => next(err))
+  },
+  deleteComment: (req, res, next) => {
+    return Comment.findByPk(req.params.id)
+      .then(comment => {
+        if (!comment) throw new Error("Comment didn't exist!")
+
+        return comment.destroy()
+      })
+      .then(deletedComment => res.redirect(`/restaurants/${deletedComment.restaurantId}`))
+      .catch(err => next(err))
+  }
+}
+module.exports = commentController

controllers/restaurant-controller.js

@@ -0,0 +1,70 @@
+// 用物件的方式儲存
+const { Restaurant, Category, Comment, User } = require('../models')
+const { getOffset, getPagination } = require('../helpers/pagination-helpers')
+
+const restaurantController = {
+  getRestaurants: (req, res) => {
+    const DEFAULT_LIMIT = 9
+
+    const categoryId = Number(req.query.categoryId) || '' // 變成數字是因為 id在db資料庫值為integer
+
+    const page = Number(req.query.page) || 1
+    const limit = Number(req.query.limit) || DEFAULT_LIMIT
+    const offset = getOffset(limit, page)
+
+    return Promise.all([
+      Restaurant.findAndCountAll({
+        include: Category,
+        where: {
+          ...(categoryId ? { categoryId } : {})
+        },
+        limit,
+        offset,
+        nest: true,
+        raw: true
+      }),
+      Category.findAll({ raw: true })
+    ])
+      .then(([restaurants, categories]) => {
+        const data = restaurants.rows.map(r => ({
+          ...r,
+          description: r.description.substring(0, 50) // 修改...r的description 縮減資料到50個字
+        }))
+        return res.render('restaurants', {
+          restaurants: data,
+          categories,
+          categoryId,
+          pagination: getPagination(limit, page, restaurants.count)
+        })
+      })
+  },
+  getRestaurant: (req, res, next) => {
+    return Restaurant.findByPk(req.params.id, {
+      include: [
+        Category,
+        { model: Comment, include: User }
+        // 先找 Category 再找 Comment 再利用 Comment 關係找 User 使用User資料就變成Restaurant.Comment.User.id
+      ],
+      order: [[Comment, 'createdAt', 'DESC']]
+    })
+      .then(restaurant => {
+        if (!restaurant) throw new Error("Restaurant didn't exist!")
+        restaurant.increment('viewCounts', { by: 1 })
+        res.render('restaurant', { restaurant: restaurant.toJSON() })
+      })
+      .catch(err => next(err))
+  },
+  getDashboard: (req, res, next) => {
+    return Restaurant.findByPk(req.params.id, {
+      include: Category,
+      raw: true,
+      nest: true
+    })
+      .then(restaurant => {
+        if (!restaurant) throw new Error("Restaurant didn't exist!")
+        res.render('dashboard', { restaurant })
+      })
+      .catch(err => next(err))
+  }
+}
+module.exports = restaurantController