Paddy
3ea9e630ed
Prep PR for the admin auth module (docs/plan-admin-auth.md step 1).
better-auth 1.7 ships ESM only, so the API moves off CommonJS:
- "type": "module", module nodenext, target ES2024, .js suffixes on all
relative imports, require('mariadb'|'cors') replaced by imports, and
export= packages (winston, app-root-path, bcrypt) consumed via default
imports. The logger now uses appRoot.path explicitly.
- TypeScript 5.9, @types/node 26, tslint removed. Node 26 pinned via
engines and .nvmrc (Plesk runs 26).
- Jest 28 + ts-jest replaced by vitest 5. Eight test files depend on
hoisted module mocks with static imports and resetModules + require,
which Jest's ESM mode does not support; vitest keeps them nearly
verbatim. Coverage via @vitest/coverage-v8 (lcov), Sonar generic report
via vitest-sonar-reporter, so sonar-project.properties is unchanged.
vitest.config.ts sets FEEDBACK_IP_SALT so the suite passes without a
local .env.
- dotenv 8 -> 16 and axios 0.24 -> 1.x: their old typings are not
resolvable under nodenext.
- autoCommit: false dropped from the pool configs; it is not a mariadb
connector option and was silently ignored.
tsc clean, 96/96 tests green, compiled app boots and serves /, /docs and
CORS under Node ESM.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
91 lines
3.3 KiB
TypeScript
91 lines
3.3 KiB
TypeScript
/**
|
|
* Required External Modules and Interfaces
|
|
*/
|
|
import express, {Request, Response} from 'express';
|
|
import {requireAdminAuth} from '../feedback.auth.js';
|
|
import {sendServerError} from '../feedback.errors.js';
|
|
import {eventsAdminRouter} from './events.admin.router.js';
|
|
import {songsAdminRouter} from './songs.admin.router.js';
|
|
import {questionsAdminRouter} from './questions.admin.router.js';
|
|
import {reportsAdminRouter} from './reports.admin.router.js';
|
|
import * as ReportsAdminService from './reports.admin.service.js';
|
|
|
|
/**
|
|
* Router Definition
|
|
*/
|
|
export const adminRouter = express.Router();
|
|
|
|
// Applied once at the top of the admin router tree - every route below
|
|
// requires a valid admin session.
|
|
adminRouter.use(requireAdminAuth);
|
|
|
|
/**
|
|
* @swagger
|
|
* /feedback/admin/me:
|
|
* get:
|
|
* summary: Validate the current admin session
|
|
* description: Used by the Next.js middleware/proxy to gate /admin. Returns the authenticated admin's identity.
|
|
* tags: [feedback-admin]
|
|
* parameters:
|
|
* - $ref: '#/components/parameters/SessionIdHeader'
|
|
* - $ref: '#/components/parameters/SessionKeyHeader'
|
|
* responses:
|
|
* 200:
|
|
* description: Success
|
|
* content:
|
|
* application/json:
|
|
* schema:
|
|
* type: object
|
|
* properties:
|
|
* email:
|
|
* type: string
|
|
* fullName:
|
|
* type: string
|
|
* 401:
|
|
* description: Unauthorized
|
|
*/
|
|
adminRouter.get('/me', (req: Request, res: Response) => {
|
|
res.status(200).send({email: res.locals.admin.email, fullName: res.locals.admin.displayName});
|
|
});
|
|
|
|
/**
|
|
* @swagger
|
|
* /feedback/admin/submissions/{submissionId}:
|
|
* delete:
|
|
* summary: Delete a single submission
|
|
* description: Removes the submission and everything under it (its answers, guest book entry, newsletter signup) - for removing an individual abusive or inappropriate entry. Not a bulk moderation tool.
|
|
* tags: [feedback-admin]
|
|
* parameters:
|
|
* - $ref: '#/components/parameters/SessionIdHeader'
|
|
* - $ref: '#/components/parameters/SessionKeyHeader'
|
|
* - in: path
|
|
* name: submissionId
|
|
* required: true
|
|
* schema:
|
|
* type: integer
|
|
* responses:
|
|
* 204:
|
|
* description: Deleted
|
|
* 404:
|
|
* description: Unknown submission
|
|
* 401:
|
|
* description: Unauthorized
|
|
*/
|
|
adminRouter.delete('/submissions/:submissionId', async (req: Request, res: Response) => {
|
|
try {
|
|
const deleted = await ReportsAdminService.deleteSubmission(Number(req.params.submissionId));
|
|
if (!deleted) {
|
|
res.status(404).send({status: 'NOT_FOUND'});
|
|
return;
|
|
}
|
|
res.status(204).send();
|
|
} catch (e: any) {
|
|
sendServerError(res, e);
|
|
}
|
|
});
|
|
|
|
adminRouter.use('/events', eventsAdminRouter);
|
|
adminRouter.use('/events', reportsAdminRouter);
|
|
adminRouter.use('/songs', songsAdminRouter);
|
|
adminRouter.use('/questions', questionsAdminRouter);
|