奧莉薇 張雅婷 Rossi

.env.example

@@ -0,0 +1,3 @@
+IMGUR_CLIENT_ID=
+PORT=
+SESSION_SECRET=

.eslintignore

@@ -0,0 +1,2 @@
+/node_modules/*
+/test/*

.eslintrc.yml

@@ -0,0 +1,12 @@
+env:
+  browser: true
+  commonjs: true
+  es2021: true
+extends:
+  - standard
+parserOptions:
+  ecmaVersion: 12
+rules:
+  arrow-parens:
+    - warn
+    - as-needed

.gitattributes

@@ -0,0 +1,53 @@
+*                 text=auto
+
+# Source code
+*.css             text diff=css
+*.html            text diff=html
+*.js              text
+*.json            text
+
+# Documentation
+*.markdown        text diff=markdown
+*.md              text diff=markdown
+*.txt             text
+
+# Templates
+*.handlebars      text
+*.hbs             text
+
+# Configs
+*.cnf             text
+*.conf            text
+*.config          text
+.editorconfig     text
+.env              text
+.env.*            text
+.gitattributes    text
+.gitconfig        text
+*.lock            text -diff
+package.json      text eol=lf
+package-lock.json text -diff
+yarn.lock         text -diff
+*.yaml            text
+*.yml             text
+browserslist      text
+
+# Heroku
+Procfile          text
+
+# Graphics
+*.gif             binary
+*.ico             binary
+*.jpg             binary
+*.jpeg            binary
+*.pdf             binary
+*.png             binary
+# SVG treated as an asset (binary) by default.
+*.svg             text
+# If you want to treat it as binary,
+# use the following line instead.
+# *.svg           binary
+*.webp            binary
+
+# Ignore files (like .npmignore or .gitignore)
+*.*ignore         text

Procfile

@@ -0,0 +1 @@
+web: NODE_ENV=production node app.js

_helpers.js

@@ -1,12 +1,12 @@
-function ensureAuthenticated(req) {
-  return req.isAuthenticated();
+function ensureAuthenticated (req) {
+  return req.isAuthenticated()
 }
 
-function getUser(req) {
-  return req.user;
+function getUser (req) {
+  return req.user
 }
 
 module.exports = {
   ensureAuthenticated,
-  getUser,
-};
+  getUser
+}

app.js

@@ -1,13 +1,64 @@
+if (process.env.NODE_ENV !== 'production') {
+  require('dotenv').config()
+}
+
 const express = require('express')
-const helpers = require('./_helpers');
+const helpers = require('./_helpers')
+const exphbs = require('express-handlebars')
+const { pages, apis } = require('./routes')
+const methodOverride = require('method-override')
+const session = require('express-session')
+const passport = require('./config/passport')
+const flash = require('connect-flash')
+const handlebarsHelpers = require('./helpers/handlebars-helpers')
 
 const app = express()
-const port = 3000
+const port = process.env.PORT || 3000
+const SESSION_SECRET = process.env.SESSION_SECRET || 'twitterSECRET'
+
+require('./models/index')
+
+// handlebars
+app.engine('hbs', exphbs({ defaultLayout: 'main', extname: '.hbs', helpers: handlebarsHelpers }))
+app.set('view engine', 'hbs')
+
+// public
+app.use(express.static('public'))
+
+// body-parser
+app.use(express.urlencoded({ extended: true }))
+
+// json
+app.use(express.json())
+
+// session
+app.use(session({
+  secret: SESSION_SECRET,
+  resave: false,
+  saveUninitialized: false
+}))
+
+// passport
+app.use(passport.initialize())
+app.use(passport.session())
+
+// method-override
+app.use(methodOverride('_method'))
+
+// flash
+app.use(flash())
+app.use((req, res, next) => {
+  res.locals.success_messages = req.flash('success_messages')
+  res.locals.error_messages = req.flash('error_messages')
+  res.locals.warning_messages = req.flash('warning_messages')
+  res.locals.info_messages = req.flash('info_messages')
+  res.locals.signinUser = helpers.getUser(req)
+  next()
+})
 
-// use helpers.getUser(req) to replace req.user
-// use helpers.ensureAuthenticated(req) to replace req.isAuthenticated()
+app.use('/api', apis)
+app.use(pages)
 
-app.get('/', (req, res) => res.send('Hello World!'))
-app.listen(port, () => console.log(`Example app listening on port ${port}!`))
+app.listen(port, () => console.log(`App is running on http://localhost:${port}`))
 
 module.exports = app

config/config.json

@@ -4,7 +4,8 @@
     "password": "password",
     "database": "ac_twitter_workspace",
     "host": "127.0.0.1",
-    "dialect": "mysql"
+    "dialect": "mysql",
+    "logging": false
   },
   "test": {
     "username": "root",
@@ -15,11 +16,8 @@
     "logging": false
   },
   "production": {
-    "username": "root",
-    "password": null,
-    "database": "database_production",
-    "host": "127.0.0.1",
-    "dialect": "mysql"
+    "use_env_variable": "MYSQL_DATABASE_URL",
+    "logging": false
   },
   "travis": {
     "username": "travis",

config/passport.js

@@ -0,0 +1,66 @@
+const passport = require('passport')
+const LocalStrategy = require('passport-local').Strategy
+const bcrypt = require('bcryptjs')
+const { User, Like } = require('../models')
+
+passport.use('userSignin', new LocalStrategy(
+  {
+    usernameField: 'account',
+    passwordField: 'password',
+    passReqToCallback: true
+  },
+  async (req, account, password, cb) => {
+    try {
+      const user = await User.findOne({ where: { account } })
+      if (!user) return cb(null, false, req.flash('error_messages', '此帳號不存在'))
+      if (user.role !== 'user') return cb(null, false, req.flash('error_messages', '此帳號不存在'))
+
+      const passwordCompare = await bcrypt.compare(password, user.password)
+      if (!passwordCompare) return cb(null, false, req.flash('error_messages', '帳號或密碼輸入錯誤'))
+      return cb(null, user)
+    } catch (err) {
+      return cb(err)
+    }
+  })
+)
+
+passport.use('adminSignin', new LocalStrategy({
+  usernameField: 'account',
+  passwordField: 'password',
+  passReqToCallback: true
+},
+async (req, account, password, cb) => {
+  try {
+    const user = await User.findOne({ where: { account } })
+    if (!user) return cb(null, false, req.flash('error_messages', '此帳號不存在'))
+    if (user.role !== 'admin') return cb(null, false, req.flash('error_messages', '此帳號不存在'))
+
+    const passwordCompare = await bcrypt.compare(password, user.password)
+    if (!passwordCompare) return cb(null, false, req.flash('error_messages', '帳號或密碼輸入錯誤'))
+    return cb(null, user)
+  } catch (err) {
+    return cb(err)
+  }
+})
+)
+
+passport.serializeUser((user, cb) => {
+  cb(null, user.id)
+})
+
+passport.deserializeUser(async (id, cb) => {
+  try {
+    const user = await User.findByPk(id, {
+      include: [
+        { model: Like },
+        { model: User, as: 'Followers' },
+        { model: User, as: 'Followings' }
+      ]
+    })
+    return cb(null, user.toJSON())
+  } catch (err) {
+    cb(err)
+  }
+})
+
+module.exports = passport

controllers/apis/tweet-controller.js

@@ -0,0 +1,29 @@
+const { Tweet, User } = require('../../models')
+const helpers = require('../../_helpers')
+
+const tweetController = {
+  getTweet: (req, res, next) => {
+    return Tweet.findByPk(req.params.id, {
+      raw: true
+    })
+      .then(tweet => {
+        if (!tweet) throw new Error("Tweet didn't exist!")
+        User.findByPk(tweet.UserId, {
+          raw: true
+        })
+          .then(user => {
+            return res.json({
+              name: user.name,
+              account: user.account,
+              avatar: user.avatar,
+              tweet_id: tweet.id,
+              createdAt: tweet.createdAt,
+              description: tweet.description,
+              loginUserAvatar: helpers.getUser(req).avatar
+            })
+          })
+      })
+      .catch(err => next(err))
+  }
+}
+module.exports = tweetController