Development

Procfile

@@ -0,0 +1 @@
+web: node app.js

app.js

@@ -1,25 +1,52 @@
-const express = require ('express')
+const express = require('express')
 const app = express()
-const port = 3000
+const port = process.env.PORT || 3000;
 const Post = require('./routes/Post')
 const Role = require('./routes/Role')
 const Tag = require('./routes/Tag')
 const User = require('./routes/User')
 const Index = require('./routes/Index')
+const path = require('path')
+const session  = require('express-session')
+const middlewareLogin = require('./helpers/middlewareLogin')
+const Admin = require('./routes/Admin')
+const middlewareLoginRole = require('./helpers/middlewareLoginRole')
 
-app.set("view engine", "ejs")
 
-app.use(express.urlencoded({extended:false}))
+app.set("view engine", "ejs")
+app.use(express.static('views'))
+app.use(express.static(path.join(__dirname, 'views')))
+app.use(express.urlencoded({ extended: false }))
 app.use(express.json())
 
+// Use the session middleware
+ var sess = {
+    secret: 'bebasajasihkak',
+    cookie: {}
+}
+
+app.use(session(sess))
+
+
+
+// app.locals({})
 
 app.use('/', Index)
-app.use('/post', Post)
+
+// register
+// login
+
+app.use(middlewareLogin)
+
+app.use('/user', User)
+// app.use('/post', Post)
 app.use('/role', Role)
 app.use('/tag', Tag)
-app.use('/user', User)
+
+app.use(middlewareLoginRole)
+app.use('/admin', Admin)
 
 
 
 
-app.listen(port,()=> console.log(`Server listen to port : ${port}`))
+app.listen(port, () => console.log(`Server listen to port : ${port}`))

config/config.json

@@ -5,5 +5,8 @@
     "database": "GoodTime",
     "host": "127.0.0.1",
     "dialect": "postgres"
+  },
+  "production": {
+    "use_env_variable": "DATABASE_URL"
   }
 }

helpers/cryptoHash.js

@@ -0,0 +1,11 @@
+function cryptoHash(secret, password) {
+    const crypto = require('crypto')
+
+    const hash = crypto.createHmac( 'sha256', secret)
+    .update(password)
+    .digest('hex');
+
+    return hash
+}
+
+module.exports = cryptoHash

helpers/middlewareLogin.js

@@ -0,0 +1,11 @@
+
+let middlewareLogin = function (req, res, next) {
+
+    if(!req.session.user) {
+        res.redirect('/login')
+    } else {
+        next()
+    }
+}
+
+module.exports = middlewareLogin

helpers/middlewareLoginRole.js

@@ -0,0 +1,13 @@
+
+let middlewareLoginRole = function (req, res, next) {
+
+    if(!req.session.user) {
+        res.redirect('/login')
+    } else if(req.session.user.role != "admin"){
+        res.redirect('/user')
+    } else {
+        next()
+    }
+}
+
+module.exports = middlewareLoginRole

helpers/searchByOne.js

@@ -0,0 +1,11 @@
+const Model =require('../models')
+
+function searchByOne(idUser) {
+    return new Promise((resolve, reject)=> {
+        Model.User.findByPk(idUser)
+        .then(data => resolve(data))
+        .catch(err => reject(err))
+    })  
+}
+
+module.exports = searchByOne

migrations/20181218131011-create-user.js

@@ -18,7 +18,8 @@ module.exports = {
         type: Sequelize.STRING
       },
       reputasi: {
-        type: Sequelize.REAL
+        type: Sequelize.REAL,
+        defaultValue: 0
       },
       createdAt: {
         allowNull: false,

migrations/20181218143247-add-column-isBan-to-user.js

@@ -21,6 +21,6 @@ module.exports = {
       return queryInterface.dropTable('users');
     */
 
-    return queryInterface.removeColumn('Users', 'isBan')
+    return queryInterface.removeColumn('Users', 'isBan', {})
   }
 };

migrations/20181219052001-add-secret-column-to-user.js

@@ -0,0 +1,25 @@
+'use strict';
+
+module.exports = {
+  up: (queryInterface, Sequelize) => {
+    /*
+      Add altering commands here.
+      Return a promise to correctly handle asynchronicity.
+
+      Example:
+      return queryInterface.createTable('users', { id: Sequelize.INTEGER });
+    */
+   return queryInterface.addColumn('Users', 'secret', Sequelize.STRING)
+  },
+
+  down: (queryInterface, Sequelize) => {
+    /*
+      Add reverting commands here.
+      Return a promise to correctly handle asynchronicity.
+
+      Example:
+      return queryInterface.dropTable('users');
+    */
+   return queryInterface.removeColumn('Users', 'secret')
+  }
+};

migrations/20181219053616-add-Role-to-User.js

@@ -0,0 +1,25 @@
+'use strict';
+
+module.exports = {
+  up: (queryInterface, Sequelize) => {
+    /*
+      Add altering commands here.
+      Return a promise to correctly handle asynchronicity.
+
+      Example:
+      return queryInterface.createTable('users', { id: Sequelize.INTEGER });
+    */
+   return queryInterface.addColumn('Users', 'role' , {type: Sequelize.STRING, defaultValue: 'user'})
+  },
+
+  down: (queryInterface, Sequelize) => {
+    /*
+      Add reverting commands here.
+      Return a promise to correctly handle asynchronicity.
+
+      Example:
+      return queryInterface.dropTable('users');
+    */
+   return queryInterface.removeColumn('Users', 'role')
+  }
+};

migrations/20181219110302-add-userId-to-post.js

@@ -0,0 +1,25 @@
+'use strict';
+
+module.exports = {
+  up: (queryInterface, Sequelize) => {
+    /*
+      Add altering commands here.
+      Return a promise to correctly handle asynchronicity.
+
+      Example:
+      return queryInterface.createTable('users', { id: Sequelize.INTEGER });
+    */
+   return queryInterface.addColumn('Posts', 'UserId', Sequelize.INTEGER)
+  },
+
+  down: (queryInterface, Sequelize) => {
+    /*
+      Add reverting commands here.
+      Return a promise to correctly handle asynchronicity.
+
+      Example:
+      return queryInterface.dropTable('users');
+    */
+   return queryInterface.removeColumn('Posts', 'UserId')
+  }
+};

models/post.js

@@ -2,10 +2,36 @@
 module.exports = (sequelize, DataTypes) => {
   const Post = sequelize.define('Post', {
     title: DataTypes.STRING,
-    content: DataTypes.TEXT
+    content: DataTypes.TEXT,
+    UserId:DataTypes.INTEGER
   }, {});
+
+  Post.beforeCreate(function(value){
+    return sequelize.models.User.find({
+      where: {
+                id : value.UserId
+              }
+    })
+    .then(data=>{
+      if(data.isBan == true){
+        throw new Error(`you are banned from posting in this forum`)
+      }
+
+    })
+    .catch(err=>{
+      throw new Error(err)
+    })
+  })
+
+
   Post.associate = function(models) {
     // associations can be defined here
+
+    Post.hasMany(models.PostLike)
+    Post.belongsToMany(models.User, {through: models.PostLike })
+    Post.belongsToMany(models.Tag, {through: models.PostTag})
+    Post.belongsTo(models.User)
+
   };
   return Post;
 };

models/postlike.js

@@ -5,8 +5,31 @@ module.exports = (sequelize, DataTypes) => {
     UserId: DataTypes.INTEGER,
     Like: DataTypes.BOOLEAN
   }, {});
+  PostLike.beforeCreate(function(value){
+    return sequelize.models.PostLike.find({
+      where: {
+                UserId : value.UserId,
+                PostId : value.PostId
+              }
+    })
+    .then(data=>{
+      if(data){
+        throw Error(`you already liked this post`)
+      }
+
+    })
+    .catch(err=>{
+      throw new Error(err)
+    })
+  })
+  // PostLike.afterCreate(function(value) {
+
+  // })
+
   PostLike.associate = function(models) {
     // associations can be defined here
+    PostLike.belongsTo(models.Post)
+    PostLike.belongsTo(models.User)
   };
   return PostLike;
 };

models/tag.js

@@ -1,5 +1,6 @@
 'use strict';
 module.exports = (sequelize, DataTypes) => {
+  const Op = sequelize.Op
   const Tag = sequelize.define('Tag', {
     name: {type: DataTypes.STRING,
       isUnique: function(value, next) {
@@ -18,6 +19,7 @@ module.exports = (sequelize, DataTypes) => {
   }, {});
   Tag.associate = function(models) {
     // associations can be defined here
+    Tag.belongsToMany(models.Post, {through : models.PostTag})
   };
   return Tag;
 };