78 lines
3.4 KiB
JavaScript
78 lines
3.4 KiB
JavaScript
'use strict';
|
|||
|
|
const express = require('express');
|
||
|
|
const { db } = require('../db');
|
||
|
|
const { log } = require('../lib/audit');
|
||
|
|
const { parseInputDate } = require('../lib/dates');
|
||
|
|
const { requireAuth, requireAdmin } = require('../middleware/auth');
|
||
|
|
|
||
|
|
const router = express.Router();
|
||
|
|
const PAGE = 'Version Control';
|
||
|
|
|
||
|
|
// ---- Read: administrators only ----------------------------------------
|
||
|
|
router.get('/', requireAuth, requireAdmin, (req, res) => {
|
||
|
|
const entries = db.prepare(
|
||
|
|
`SELECT id, version, title, released_on, notes, sort_order, created_at, updated_at
|
||
|
|
FROM version_entries
|
||
|
|
ORDER BY sort_order DESC, COALESCE(released_on, '') DESC, id DESC`
|
||
|
|
).all();
|
||
|
|
res.json({ entries });
|
||
|
|
});
|
||
|
|
|
||
|
|
// ---- Write: administrators only ---------------------------------------
|
||
|
|
function clean(body) {
|
||
|
|
return {
|
||
|
|
version: String((body && body.version) || '').trim(),
|
||
|
|
title: String((body && body.title) || '').trim(),
|
||
|
|
released_on: parseInputDate((body && body.released_on) || ''),
|
||
|
|
released_on_raw: String((body && body.released_on) || '').trim(),
|
||
|
|
notes: String((body && body.notes) || '').trim(),
|
||
|
|
sort_order: Number.isFinite(Number(body && body.sort_order)) ? Number(body.sort_order) : 0,
|
||
|
|
};
|
||
|
|
}
|
||
|
|
|
||
|
|
router.post('/', requireAuth, requireAdmin, (req, res) => {
|
||
|
|
const v = clean(req.body);
|
||
|
|
if (!v.version) return res.status(400).json({ error: 'A version is required.' });
|
||
|
|
if (v.released_on_raw && !v.released_on) {
|
||
|
|
return res.status(400).json({ error: 'Release date must be a valid date in DD-MM-YYYY format.' });
|
||
|
|
}
|
||
|
|
const info = db.prepare(
|
||
|
|
`INSERT INTO version_entries (version, title, released_on, notes, sort_order, created_by)
|
||
|
|
VALUES (?, ?, ?, ?, ?, ?)`
|
||
|
|
).run(v.version, v.title || null, v.released_on || null, v.notes || null, v.sort_order, req.session.user.id);
|
||
|
|
|
||
|
|
log(req, 'VERSION_ENTRY_CREATED', 'Data Management', `Added version entry "${v.version}"`);
|
||
|
|
res.json({ ok: true, entry: db.prepare('SELECT * FROM version_entries WHERE id = ?').get(info.lastInsertRowid) });
|
||
|
|
});
|
||
|
|
|
||
|
|
router.patch('/:id', requireAuth, requireAdmin, (req, res) => {
|
||
|
|
const id = Number(req.params.id);
|
||
|
|
const existing = db.prepare('SELECT * FROM version_entries WHERE id = ?').get(id);
|
||
|
|
if (!existing) return res.status(404).json({ error: 'Entry not found.' });
|
||
|
|
|
||
|
|
const v = clean(req.body);
|
||
|
|
if (!v.version) return res.status(400).json({ error: 'A version is required.' });
|
||
|
|
if (v.released_on_raw && !v.released_on) {
|
||
|
|
return res.status(400).json({ error: 'Release date must be a valid date in DD-MM-YYYY format.' });
|
||
|
|
}
|
||
|
|
db.prepare(
|
||
|
|
`UPDATE version_entries
|
||
|
|
SET version = ?, title = ?, released_on = ?, notes = ?, sort_order = ?, updated_at = CURRENT_TIMESTAMP
|
||
|
|
WHERE id = ?`
|
||
|
|
).run(v.version, v.title || null, v.released_on || null, v.notes || null, v.sort_order, id);
|
||
|
|
|
||
|
|
log(req, 'VERSION_ENTRY_UPDATED', 'Data Management', `Updated version entry "${v.version}"`);
|
||
|
|
res.json({ ok: true, entry: db.prepare('SELECT * FROM version_entries WHERE id = ?').get(id) });
|
||
|
|
});
|
||
|
|
|
||
|
|
router.delete('/:id', requireAuth, requireAdmin, (req, res) => {
|
||
|
|
const id = Number(req.params.id);
|
||
|
|
const existing = db.prepare('SELECT * FROM version_entries WHERE id = ?').get(id);
|
||
|
|
if (!existing) return res.status(404).json({ error: 'Entry not found.' });
|
||
|
|
db.prepare('DELETE FROM version_entries WHERE id = ?').run(id);
|
||
|
|
log(req, 'VERSION_ENTRY_DELETED', 'Data Management', `Deleted version entry "${existing.version}"`);
|
||
|
|
res.json({ ok: true });
|
||
|
|
});
|
||
|
|
|
||
|
|
module.exports = router;
|