前後端分離組：Mi, Paul, Troy, Sunny

.env.example

@@ -0,0 +1 @@
+JWT_SECRET=

.eslintignore

@@ -0,0 +1,2 @@
+/node_modules/*
+/test/*

.eslintrc.yml

@@ -0,0 +1,12 @@
+env:
+  browser: true
+  commonjs: true
+  es2021: true
+extends:
+  - standard
+parserOptions:
+  ecmaVersion: 12
+rules:
+  arrow-parens:
+    - warn
+    - as-needed

.gitignore

@@ -1,3 +1,4 @@
+temp/
 .DS_Store
 *.DS_Store
 

Procfile

@@ -0,0 +1 @@
+web: NODE_ENV=production node app.js

README.md

@@ -0,0 +1,80 @@
+# twitter-api-2020
+ALPHA Camp | 學期 3 | Simple Twitter | 自動化測試檔 (前後分離組) 
+## 專案介紹
+此專案為此為一個簡易的社群平臺的 API 專案，可進行推文、回覆推文等功能，後端使用 Node.js 並搭配 express.js框架做開發，並使用MySQL資料庫。
+
+
+## 功能
+
+### 前台（使用者）
+- 註冊及登入功能
+- 編輯自己的頁面
+- 可瀏覽其他使用者的個人資料
+- 追蹤和取消追蹤其他使用者
+- 瀏覽全站所有推文
+- 使用者可新增推文
+- 瀏覽單筆推文及其回覆串
+- 使用者可回覆他人的推文
+- 喜歡及取消喜歡推文功能
+
+
+### 後台（管理者）
+- 登入功能
+- 瀏覽全部使用者列表
+- 瀏覽全站所有推文
+- 可刪除任何人的推文
+
+
+## 測試 / 種子帳號
+| Role     | Account   | Password |
+| :-------:| :-------: | :------: |
+| 前台使用者 | user1     | 12345678 |
+| 後台管理者 | root      | 12345678 |
+
+
+## 安裝及使用
+
+### 環境建置
+確認本地端已下載
+ - node.js
+ - MYSQL
+ - workbench
+
+### 開始使用
+1. 打開終端機(Terminal)，Clone 此專案至本機電腦
+  ```
+  $ git clone https://github.com/paulwu-tw/twitter-api-2020
+  ```
+
+2. 進入此專案資料夾
+  ```
+  $ cd twitter-api-2020
+  ```
+
+3. 安裝本專案相依套件 
+  ```
+  $ npm install
+  ```
+
+4. 參考 `.env.example` 建立 `.env` 文件，並設置您的環境變數
+  ```
+  JWT_SECRET=<setting by your own>
+  IMGUR_CLIENT_ID=<you imgur client id>
+  ```
+
+5. 於 `config/config.json` 文件中設定您資料庫的相關訊息
+
+6. 建立資料表
+  ```
+  $ npx sequelize db:migrate
+  ```
+
+7. 建立種子資料
+  ```
+  $ npx sequelize db:seed:all
+  ```
+
+8. 輸入以下指令，啟動本專案
+  ```
+  $ npm run dev
+  ```

_helpers.js

@@ -1,8 +1,7 @@
-
-function getUser(req) {
-  return req.user;
+function getUser (req) {
+  return req.user
 }
 
 module.exports = {
-  getUser,
-};
+  getUser
+}

app.js

@@ -1,14 +1,23 @@
+if (process.env.NODE_ENV !== 'production') {
+  require('dotenv').config()
+}
+
 const express = require('express')
-const helpers = require('./_helpers');
+const passport = require('./config/passport')
+const methodOverride = require('method-override')
+const routes = require('./routes')
+const cors = require('cors')
 
 const app = express()
-const port = 3000
+const port = process.env.PORT || 3000
 
-// use helpers.getUser(req) to replace req.user
-function authenticated(req, res, next){
-  // passport.authenticate('jwt', { ses...
-};
+app.use(cors())
+app.use(express.urlencoded({ extended: true }))
+app.use(express.json())
+app.use(passport.initialize())
+app.use(methodOverride('_method'))
 
+app.use(routes)
 app.get('/', (req, res) => res.send('Hello World!'))
 app.listen(port, () => console.log(`Example app listening on port ${port}!`))
 

config/config.json

@@ -15,11 +15,7 @@
     "logging": false
   },
   "production": {
-    "username": "root",
-    "password": null,
-    "database": "database_production",
-    "host": "127.0.0.1",
-    "dialect": "mysql"
+    "use_env_variable": "JAWSDB_URL"
   },
   "travis": {
     "username": "travis",

config/passport.js

@@ -1,5 +1,24 @@
 const passport = require('passport')
+const passportJWT = require('passport-jwt')
+const { User } = require('../models')
 
+const JWTStrategy = passportJWT.Strategy
+const ExtractJWT = passportJWT.ExtractJwt
 
+const jwtOptions = {
+  jwtFromRequest: ExtractJWT.fromAuthHeaderAsBearerToken(),
+  secretOrKey: process.env.JWT_SECRET || 'twitterapi'
+}
 
-module.exports = passport
+passport.use(new JWTStrategy(jwtOptions, (jwtPayload, cb) => {
+  User.findByPk(jwtPayload.id, {
+    include: [
+      { model: User, as: 'Followings' },
+      { model: User, as: 'Followers' }
+    ]
+  })
+    .then(user => cb(null, user))
+    .catch(err => cb(err))
+}))
+
+module.exports = passport

controllers/admin-controller.js

@@ -0,0 +1,120 @@
+const jwt = require('jsonwebtoken')
+const { User, Tweet, Reply, Like } = require('../models')
+const sequelize = require('sequelize')
+const { relativeTimeFromNow } = require('../helpers/dayjs-helpers')
+
+const adminController = {
+  signIn: (req, res, next) => {
+    try {
+      const userData = req.user.toJSON()
+      if (userData.role !== 'admin') {
+        throw new Error('帳號不存在')
+      }
+      delete userData.password
+      const token = jwt.sign(userData, process.env.JWT_SECRET, {
+        expiresIn: '30d'
+      })
+      res.json({
+        status: 'success',
+        data: {
+          token,
+          user: userData
+        }
+      })
+    } catch (err) {
+      next(err)
+    }
+  },
+  getUsers: async (req, res, next) => {
+    try {
+      const users = await User.findAll({
+        attributes: [
+          'id',
+          'name',
+          'account',
+          'avatar',
+          'cover',
+          [
+            sequelize.literal(
+              '(SELECT COUNT(*) FROM Tweets WHERE Tweets.UserId = User.id)'
+            ),
+            'tweetsAmount'
+          ],
+          [
+            sequelize.literal(
+              '(SELECT COUNT(*) FROM Likes WHERE Likes.TweetId IN (SELECT id FROM Tweets WHERE Tweets.UserId = User.id))'
+            ),
+            'likesAmount'
+          ],
+          [
+            sequelize.literal(
+              '(SELECT COUNT(*) FROM Followships WHERE Followships.followerId = User.id)'
+            ),
+            'followingsAmount'
+          ],
+          [
+            sequelize.literal(
+              '(SELECT COUNT(*) FROM Followships WHERE Followships.followingId = User.id)'
+            ),
+            'followersAmount'
+          ]
+        ],
+        order: [
+          [sequelize.literal('tweetsAmount'), 'DESC'] // 按照推文數排序、由多至少
+        ],
+        nest: true,
+        raw: true
+      })
+
+      return res.status(200).json(users)
+    } catch (err) {
+      return next(err)
+    }
+  },
+  getTweets: async (req, res, next) => {
+    try {
+      const tweets = await Tweet.findAll({
+        include: [
+          {
+            model: User,
+            attributes: ['id', 'account', 'name', 'avatar']
+          }
+        ],
+        order: [['createdAt', 'DESC']],
+        raw: true,
+        nest: true
+      })
+      const data = tweets.map(tweet => ({
+        ...tweet,
+        description: tweet.description.substring(0, 50),
+        createdAt: relativeTimeFromNow(tweet.createdAt)
+      }))
+
+      res.status(200).json(data)
+    } catch (err) {
+      next(err)
+    }
+  },
+  deleteTweet: async (req, res, next) => {
+    try {
+      const tweet = await Tweet.findByPk(req.params.id)
+      if (!tweet) throw new Error('此推文不存在！')
+
+      await Promise.all([
+        tweet.destroy(),
+        Reply.destroy({ where: { TweetId: tweet.id } }),
+        Like.destroy({ where: { TweetId: tweet.id } })
+      ])
+
+      return res.status(200).json({
+        status: 'success',
+        message: '成功刪除推文！',
+        tweet
+      })
+    } catch (err) {
+      next(err)
+    }
+  }
+}
+
+module.exports = adminController

controllers/followship-controller.js

@@ -0,0 +1,61 @@
+const { User, Followship } = require('../models')
+const helpers = require('../_helpers')
+
+const followshipController = {
+  addFollowing: async (req, res, next) => {
+    try {
+      const followingId = req.body.id
+      const currentUserId = helpers.getUser(req).id
+
+      if (followingId === currentUserId) throw new Error("You can't follow yourself.")
+
+      const user = await User.findByPk(followingId)
+      if (!user || user.role === 'admin') throw new Error("User doesn't exist.")
+
+      const followship = await Followship.findOne({
+        where: {
+          followerId: currentUserId,
+          followingId
+        }
+      })
+
+      if (followship) throw new Error('You are already follow this user.')
+
+      const addFollowship = await Followship.create({
+        followerId: currentUserId,
+        followingId
+      })
+      res.status(200).json({ status: 'success', addFollowship })
+    } catch (err) {
+      next(err)
+    }
+  },
+  removeFollowing: async (req, res, next) => {
+    try {
+      const followingId = req.params.id
+      const currentUserId = helpers.getUser(req).id
+
+      const user = await User.findByPk(followingId)
+      if (!user || user.role === 'admin') throw new Error("User doesn't exist.")
+
+      const followship = await Followship.findOne({
+        where: {
+          followingId,
+          followerId: currentUserId
+        }
+      })
+
+      if (!followship) throw new Error("You're not follower")
+
+      await followship.destroy()
+      res.status(200).json({
+        status: 'success',
+        message: 'Following remove'
+      })
+    } catch (err) {
+      next(err)
+    }
+  }
+}
+
+module.exports = followshipController