Zaimki/server/nouns.js

import {renderJson} from "../src/helpers";

const dbConnection = require('./db');
const SQL = require('sql-template-strings');
import { ulid } from 'ulid'
import authenticate from './authenticate';



const getId = url => url.match(/\/([^/]+)$/)[1];

const approve = async (db, id) => {
    const {base_id} = await db.get(SQL`SELECT base_id FROM nouns WHERE id=${id}`);
    if (base_id) {
        await db.get(SQL`
            DELETE FROM nouns
            WHERE id = ${base_id}
        `);
    }
    await db.get(SQL`
        UPDATE nouns
        SET approved = 1, base_id = NULL
        WHERE id = ${id}
    `);
}

const hide = async (db, id) => {
    await db.get(SQL`
        UPDATE nouns
        SET approved = 0
        WHERE id = ${id}
    `);
}

const remove = async (db, id) => {
    await db.get(SQL`
        DELETE FROM nouns
        WHERE id = ${id}
    `);
}

const trollWords = [
    'cipeusz',
    'feminazi',
    'bruksela',
    'zboczeń',
];

const isTroll = (body) => {
    const jsonBody = JSON.stringify(body);
    for (let trollWord of trollWords) {
        if (jsonBody.indexOf(trollWord) > -1) {
            return true;
        }
    }

    return false;
}

export default async function (req, res, next) {
    const db = await dbConnection();
    const user = authenticate(req);
    const isAdmin = user && user.authenticated && user.roles === 'admin';

    if (req.method === 'GET' && req.url === '/all') {
        return renderJson(res, await db.all(`
            SELECT * FROM nouns
            ${isAdmin ? '' : 'WHERE approved = 1'}
            ORDER BY approved, masc
        `));
    }

    if (req.method === 'POST' && req.url === '/submit') {
        if (isAdmin || !isTroll(req.body.data)) {
            const id = ulid()
            await db.get(SQL`
                INSERT INTO nouns (id, masc, fem, neutr, mascPl, femPl, neutrPl, approved, base_id)
                VALUES (
                    ${id},
                    ${req.body.data.masc.join('|')}, ${req.body.data.fem.join('|')}, ${req.body.data.neutr.join('|')},
                    ${req.body.data.mascPl.join('|')}, ${req.body.data.femPl.join('|')}, ${req.body.data.neutrPl.join('|')},
                    0, ${req.body.data.base}
                )
            `);
            if (isAdmin) {
                await approve(db, id);
            }
        }
        return renderJson(res, 'ok');
    }

    if (req.method === 'POST' && req.url.startsWith('/approve/') && isAdmin) {
        await approve(db, getId(req.url));
        return renderJson(res, 'ok');
    }

    if (req.method === 'POST' && req.url.startsWith('/hide/') && isAdmin) {
        await hide(db, getId(req.url));
        return renderJson(res, 'ok');
    }

    if (req.method === 'POST' && req.url.startsWith('/remove/') && isAdmin) {
        await remove(db, getId(req.url));
        return renderJson(res, 'ok');
    }

    return renderJson(res, {error: 'Not found'}, 404);
}