const express = require('express'); const common = require('../lib/common'); const { restrict, checkAccess } = require('../lib/auth'); const { indexProducts } = require('../lib/indexing'); const { validateJson } = require('../lib/schema'); const colors = require('colors'); const rimraf = require('rimraf'); const fs = require('fs'); const path = require('path'); const router = express.Router(); router.get('/admin/products', restrict, async (req, res, next) => { const db = req.app.db; // get the top results const topResults = await db.products.find({}).sort({ productAddedDate: -1 }).limit(10).toArray(); res.render('products', { title: 'Cart', top_results: topResults, session: req.session, admin: true, config: req.app.config, message: common.clearSessionValue(req.session, 'message'), messageType: common.clearSessionValue(req.session, 'messageType'), helpers: req.handlebars.helpers }); }); router.get('/admin/products/filter/:search', restrict, async (req, res, next) => { const db = req.app.db; const searchTerm = req.params.search; const productsIndex = req.app.productsIndex; const lunrIdArray = []; productsIndex.search(searchTerm).forEach((id) => { lunrIdArray.push(common.getId(id.ref)); }); // we search on the lunr indexes const results = await db.products.find({ _id: { $in: lunrIdArray } }).toArray(); if(req.apiAuthenticated){ res.status(200).json(results); return; } res.render('products', { title: 'Results', results: results, admin: true, config: req.app.config, session: req.session, searchTerm: searchTerm, message: common.clearSessionValue(req.session, 'message'), messageType: common.clearSessionValue(req.session, 'messageType'), helpers: req.handlebars.helpers }); }); // insert form router.get('/admin/product/new', restrict, checkAccess, (req, res) => { res.render('product_new', { title: 'New product', session: req.session, productTitle: common.clearSessionValue(req.session, 'productTitle'), productDescription: common.clearSessionValue(req.session, 'productDescription'), productPrice: common.clearSessionValue(req.session, 'productPrice'), productPermalink: common.clearSessionValue(req.session, 'productPermalink'), message: common.clearSessionValue(req.session, 'message'), messageType: common.clearSessionValue(req.session, 'messageType'), editor: true, admin: true, helpers: req.handlebars.helpers, config: req.app.config }); }); // insert new product form action router.post('/admin/product/insert', restrict, checkAccess, async (req, res) => { const db = req.app.db; // Process supplied options let productOptions = req.body.productOptions; if(productOptions && typeof productOptions !== 'object'){ try{ productOptions = JSON.parse(req.body.productOptions); }catch(ex){ console.log('Failure to parse options'); } } const doc = { productPermalink: req.body.productPermalink, productTitle: common.cleanHtml(req.body.productTitle), productPrice: common.safeParseInt(req.body.productPrice), productDescription: common.cleanHtml(req.body.productDescription), productPublished: common.convertBool(req.body.productPublished), productTags: req.body.productTags, productOptions: productOptions || null, productComment: common.checkboxBool(req.body.productComment), productAddedDate: new Date(), productStock: common.safeParseInt(req.body.productStock) || null }; // Validate the body again schema const schemaResult = validateJson('newProduct', doc); if(!schemaResult){ // If API request, return json if(req.apiAuthenticated){ res.status(400).json(schemaResult.errors); return; } console.log('schemaResult errors', schemaResult.errors); req.session.message = 'Form invalid. Please check values and try again.'; req.session.messageType = 'danger'; // keep the current stuff req.session.productTitle = req.body.productTitle; req.session.productDescription = req.body.productDescription; req.session.productPrice = req.body.productPrice; req.session.productPermalink = req.body.productPermalink; req.session.productOptions = productOptions; req.session.productComment = common.checkboxBool(req.body.productComment); req.session.productTags = req.body.productTags; req.session.productStock = req.body.productStock ? parseInt(req.body.productStock) : null; // redirect to insert res.redirect('/admin/product/new'); return; } // Check permalink doesn't already exist const product = await db.products.countDocuments({ productPermalink: req.body.productPermalink }); if(product > 0 && req.body.productPermalink !== ''){ // permalink exits req.session.message = 'Permalink already exists. Pick a new one.'; req.session.messageType = 'danger'; // keep the current stuff req.session.productTitle = req.body.productTitle; req.session.productDescription = req.body.productDescription; req.session.productPrice = req.body.productPrice; req.session.productPermalink = req.body.productPermalink; req.session.productOptions = productOptions; req.session.productComment = common.checkboxBool(req.body.productComment); req.session.productTags = req.body.productTags; req.session.productStock = req.body.productStock ? parseInt(req.body.productStock) : null; // If API request, return json if(req.apiAuthenticated){ res.status(400).json({ error: 'Permalink already exists. Pick a new one.' }); return; } // redirect to insert res.redirect('/admin/product/new'); return; } try{ const newDoc = await db.products.insertOne(doc); // get the new ID const newId = newDoc.insertedId; // add to lunr index indexProducts(req.app) .then(() => { req.session.message = 'New product successfully created'; req.session.messageType = 'success'; // If API request, return json if(req.apiAuthenticated){ res.status(200).json({ message: 'New product successfully created' }); return; } // redirect to new doc res.redirect('/admin/product/edit/' + newId); }); }catch(ex){ console.log(colors.red('Error inserting document: ' + ex)); // keep the current stuff req.session.productTitle = req.body.productTitle; req.session.productDescription = req.body.productDescription; req.session.productPrice = req.body.productPrice; req.session.productPermalink = req.body.productPermalink; req.session.productOptions = productOptions; req.session.productComment = common.checkboxBool(req.body.productComment); req.session.productTags = req.body.productTags; req.session.productStock = req.body.productStock ? parseInt(req.body.productStock) : null; req.session.message = 'Error: Inserting product'; req.session.messageType = 'danger'; // If API request, return json if(req.apiAuthenticated){ res.status(400).json({ error: 'Error inserting document' }); return; } // redirect to insert res.redirect('/admin/product/new'); } }); // render the editor router.get('/admin/product/edit/:id', restrict, checkAccess, async (req, res) => { const db = req.app.db; const images = await common.getImages(req.params.id, req, res); const product = await db.products.findOne({ _id: common.getId(req.params.id) }); if(!product){ // If API request, return json if(req.apiAuthenticated){ res.status(400).json({ message: 'Product not found' }); return; } req.session.message = 'Product not found'; req.session.messageType = 'danger'; res.redirect('/admin/products'); return; } let options = {}; if(product.productOptions){ options = product.productOptions; } // If API request, return json if(req.apiAuthenticated){ res.status(200).json(product); return; } res.render('product_edit', { title: 'Edit product', result: product, images: images, options: options, admin: true, session: req.session, message: common.clearSessionValue(req.session, 'message'), messageType: common.clearSessionValue(req.session, 'messageType'), config: req.app.config, editor: true, helpers: req.handlebars.helpers }); }); // Remove option from product router.post('/admin/product/removeoption', restrict, checkAccess, async (req, res) => { const db = req.app.db; const product = await db.products.findOne({ _id: common.getId(req.body.productId) }); if(product && product.productOptions){ const opts = product.productOptions; delete opts[req.body.optName]; try{ const updateOption = await db.products.updateOne({ _id: common.getId(req.body.productId) }, { $set: { productOptions: opts } }); if(updateOption.result.nModified === 1){ res.status(200).json({ message: 'Option successfully removed' }); return; } res.status(400).json({ message: 'Failed to remove option. Please try again.' }); return; }catch(ex){ res.status(400).json({ message: 'Failed to remove option. Please try again.' }); return; } } res.status(400).json({ message: 'Product not found. Try saving before removing.' }); }); // Update an existing product form action router.post('/admin/product/update', restrict, checkAccess, async (req, res) => { const db = req.app.db; const product = await db.products.findOne({ _id: common.getId(req.body.productId) }); if(!product){ req.session.message = 'Failed updating product.'; req.session.messageType = 'danger'; // If API request, return json if(req.apiAuthenticated){ res.status(400).json({ messge: 'Failed to update product' }); return; } res.redirect('/admin/product/edit/' + req.body.productId); return; } const count = await db.products.countDocuments({ productPermalink: req.body.productPermalink, _id: { $ne: common.getId(product._id) } }); if(count > 0 && req.body.productPermalink !== ''){ // If API request, return json if(req.apiAuthenticated){ res.status(400).json({ messge: 'Permalink already exists. Pick a new one' }); return; } // permalink exits req.session.message = 'Permalink already exists. Pick a new one.'; req.session.messageType = 'danger'; // keep the current stuff req.session.productTitle = req.body.productTitle; req.session.productDescription = req.body.productDescription; req.session.productPrice = req.body.productPrice; req.session.productPermalink = req.body.productPermalink; req.session.productTags = req.body.productTags; req.session.productOptions = req.body.productOptions; req.session.productComment = common.checkboxBool(req.body.productComment); req.session.productStock = req.body.productStock ? req.body.productStock : null; // redirect to insert res.redirect('/admin/product/edit/' + req.body.productId); return; } const images = await common.getImages(req.body.productId, req, res); // Process supplied options let productOptions = req.body.productOptions; if(productOptions && typeof productOptions !== 'object'){ try{ productOptions = JSON.parse(req.body.productOptions); }catch(ex){ console.log('Failure to parse options'); } } const productDoc = { productId: req.body.productId, productPermalink: req.body.productPermalink, productTitle: common.cleanHtml(req.body.productTitle), productPrice: common.safeParseInt(req.body.productPrice), productDescription: common.cleanHtml(req.body.productDescription), productPublished: common.convertBool(req.body.productPublished), productTags: req.body.productTags, productOptions: productOptions || null, productComment: common.checkboxBool(req.body.productComment), productStock: common.safeParseInt(req.body.productStock) || null }; // Validate the body again schema const schemaResult = validateJson('editProduct', productDoc); if(!schemaResult){ // If API request, return json if(req.apiAuthenticated){ res.status(400).json(schemaResult.errors); return; } req.session.message = 'Form invalid. Please check values and try again.'; req.session.messageType = 'danger'; // keep the current stuff req.session.productTitle = req.body.productTitle; req.session.productDescription = req.body.productDescription; req.session.productPrice = req.body.productPrice; req.session.productPermalink = req.body.productPermalink; req.session.productOptions = productOptions; req.session.productComment = common.checkboxBool(req.body.productComment); req.session.productTags = req.body.productTags; req.session.productStock = req.body.productStock ? parseInt(req.body.productStock) : null; // redirect to insert res.redirect('/admin/product/edit/' + req.body.productId); return; } // Remove productId from doc delete productDoc.productId; // if no featured image if(!product.productImage){ if(images.length > 0){ productDoc.productImage = images[0].path; }else{ productDoc.productImage = '/uploads/placeholder.png'; } }else{ productDoc.productImage = product.productImage; } try{ await db.products.updateOne({ _id: common.getId(req.body.productId) }, { $set: productDoc }, {}); // Update the index indexProducts(req.app) .then(() => { // If API request, return json if(req.apiAuthenticated){ res.status(200).json({ message: 'Successfully saved', product: productDoc }); return; } req.session.message = 'Successfully saved'; req.session.messageType = 'success'; res.redirect('/admin/product/edit/' + req.body.productId); }); }catch(ex){ // If API request, return json if(req.apiAuthenticated){ res.status(400).json({ messge: 'Failed to save. Please try again' }); return; } console.error(colors.red('Failed to save product: ' + ex)); req.session.message = 'Failed to save. Please try again'; req.session.messageType = 'danger'; res.redirect('/admin/product/edit/' + req.body.productId); } }); // delete product router.get('/admin/product/delete/:id', restrict, checkAccess, async (req, res) => { const db = req.app.db; // remove the product await db.products.deleteOne({ _id: common.getId(req.params.id) }, {}); // delete any images and folder rimraf('public/uploads/' + req.params.id, (err) => { if(err){ console.info(err.stack); } // re-index products indexProducts(req.app) .then(() => { // redirect home req.session.message = 'Product successfully deleted'; req.session.messageType = 'success'; res.redirect('/admin/products'); }); }); }); // update the published state based on an ajax call from the frontend router.post('/admin/product/published_state', restrict, checkAccess, async (req, res) => { const db = req.app.db; try{ await db.products.updateOne({ _id: common.getId(req.body.id) }, { $set: { productPublished: common.convertBool(req.body.state) } }, { multi: false }); res.status(200).json('Published state updated'); }catch(ex){ console.error(colors.red('Failed to update the published state: ' + ex)); res.status(400).json('Published state not updated'); } }); // set as main product image router.post('/admin/product/setasmainimage', restrict, checkAccess, async (req, res) => { const db = req.app.db; try{ // update the productImage to the db await db.products.updateOne({ _id: common.getId(req.body.product_id) }, { $set: { productImage: req.body.productImage } }, { multi: false }); res.status(200).json({ message: 'Main image successfully set' }); }catch(ex){ res.status(400).json({ message: 'Unable to set as main image. Please try again.' }); } }); // deletes a product image router.post('/admin/product/deleteimage', restrict, checkAccess, async (req, res) => { const db = req.app.db; // get the productImage from the db const product = await db.products.findOne({ _id: common.getId(req.body.product_id) }); if(!product){ res.status(400).json({ message: 'Product not found' }); return; } if(req.body.productImage === product.productImage){ // set the productImage to null await db.products.updateOne({ _id: common.getId(req.body.product_id) }, { $set: { productImage: null } }, { multi: false }); // remove the image from disk fs.unlink(path.join('public', req.body.productImage), (err) => { if(err){ res.status(400).json({ message: 'Image not removed, please try again.' }); }else{ res.status(200).json({ message: 'Image successfully deleted' }); } }); }else{ // remove the image from disk fs.unlink(path.join('public', req.body.productImage), (err) => { if(err){ res.status(400).json({ message: 'Image not removed, please try again.' }); }else{ res.status(200).json({ message: 'Image successfully deleted' }); } }); } }); module.exports = router;