82 lines
3.7 KiB
JavaScript
82 lines
3.7 KiB
JavaScript
|
'use strict';
|
||
|
|
const express = require('express');
|
||
|
|
const { db } = require('../db');
|
||
|
|
const { log } = require('../lib/audit');
|
||
|
|
const { requireAuth, requireAdmin } = require('../middleware/auth');
|
||
|
|
const { parseInputDate } = require('../lib/dates');
|
||
|
|
|
||
|
|
const router = express.Router();
|
||
|
|
const PAGE = 'Legislation';
|
||
|
|
|
||
|
|
// ---- Read: available to every signed-in user --------------------------
|
||
|
|
router.get('/', requireAuth, (req, res) => {
|
||
|
|
const entries = db.prepare(
|
||
|
|
`SELECT id, reference, title, effective_date, summary, link_url, sort_order, created_at, updated_at
|
||
|
|
FROM legislation_entries
|
||
|
|
ORDER BY sort_order DESC, COALESCE(effective_date, '') DESC, id DESC`
|
||
|
|
).all();
|
||
|
|
res.json({ entries });
|
||
|
|
});
|
||
|
|
|
||
|
|
// ---- Write: administrators only ---------------------------------------
|
||
|
|
function clean(body) {
|
||
|
|
return {
|
||
|
|
reference: String((body && body.reference) || '').trim(),
|
||
|
|
title: String((body && body.title) || '').trim(),
|
||
|
|
effective_date: parseInputDate((body && body.effective_date) || ''),
|
||
|
|
effective_date_raw: String((body && body.effective_date) || '').trim(),
|
||
|
|
summary: String((body && body.summary) || '').trim(),
|
||
|
|
link_url: String((body && body.link_url) || '').trim(),
|
||
|
|
sort_order: Number.isFinite(Number(body && body.sort_order)) ? Number(body.sort_order) : 0,
|
||
|
|
};
|
||
|
|
}
|
||
|
|
|
||
|
|
router.post('/', requireAuth, requireAdmin, (req, res) => {
|
||
|
|
const v = clean(req.body);
|
||
|
|
if (!v.title) return res.status(400).json({ error: 'A title is required.' });
|
||
|
|
if (v.effective_date_raw && !v.effective_date) {
|
||
|
|
return res.status(400).json({ error: 'Effective date must be a valid date in DD-MM-YYYY format.' });
|
||
|
|
}
|
||
|
|
const info = db.prepare(
|
||
|
|
`INSERT INTO legislation_entries (reference, title, effective_date, summary, link_url, sort_order, created_by)
|
||
|
|
VALUES (?, ?, ?, ?, ?, ?, ?)`
|
||
|
|
).run(v.reference || null, v.title, v.effective_date || null, v.summary || null,
|
||
|
|
v.link_url || null, v.sort_order, req.session.user.id);
|
||
|
|
|
||
|
|
log(req, 'LEGISLATION_ENTRY_CREATED', 'Data Management', `Added legislation entry "${v.title}"`);
|
||
|
|
res.json({ ok: true, entry: db.prepare('SELECT * FROM legislation_entries WHERE id = ?').get(info.lastInsertRowid) });
|
||
|
|
});
|
||
|
|
|
||
|
|
router.patch('/:id', requireAuth, requireAdmin, (req, res) => {
|
||
|
|
const id = Number(req.params.id);
|
||
|
|
const existing = db.prepare('SELECT * FROM legislation_entries WHERE id = ?').get(id);
|
||
|
|
if (!existing) return res.status(404).json({ error: 'Entry not found.' });
|
||
|
|
|
||
|
|
const v = clean(req.body);
|
||
|
|
if (!v.title) return res.status(400).json({ error: 'A title is required.' });
|
||
|
|
if (v.effective_date_raw && !v.effective_date) {
|
||
|
|
return res.status(400).json({ error: 'Effective date must be a valid date in DD-MM-YYYY format.' });
|
||
|
|
}
|
||
|
|
db.prepare(
|
||
|
|
`UPDATE legislation_entries
|
||
|
|
SET reference = ?, title = ?, effective_date = ?, summary = ?, link_url = ?,
|
||
|
|
sort_order = ?, updated_at = CURRENT_TIMESTAMP
|
||
|
|
WHERE id = ?`
|
||
|
|
).run(v.reference || null, v.title, v.effective_date || null, v.summary || null,
|
||
|
|
v.link_url || null, v.sort_order, id);
|
||
|
|
|
||
|
|
log(req, 'LEGISLATION_ENTRY_UPDATED', 'Data Management', `Updated legislation entry "${v.title}"`);
|
||
|
|
res.json({ ok: true, entry: db.prepare('SELECT * FROM legislation_entries WHERE id = ?').get(id) });
|
||
|
|
});
|
||
|
|
|
||
|
|
router.delete('/:id', requireAuth, requireAdmin, (req, res) => {
|
||
|
|
const id = Number(req.params.id);
|
||
|
|
const existing = db.prepare('SELECT * FROM legislation_entries WHERE id = ?').get(id);
|
||
|
|
if (!existing) return res.status(404).json({ error: 'Entry not found.' });
|
||
|
|
db.prepare('DELETE FROM legislation_entries WHERE id = ?').run(id);
|
||
|
|
log(req, 'LEGISLATION_ENTRY_DELETED', 'Data Management', `Deleted legislation entry "${existing.title}"`);
|
||
|
|
res.json({ ok: true });
|
||
|
|
});
|
||
|
|
|
||
|
|
module.exports = router;
|