const express = require('express'); const UsersService = require('../services/users'); const UsersDBApi = require('../db/api/users'); const wrapAsync = require('../helpers').wrapAsync; const router = express.Router(); const { parse } = require('json2csv'); const { checkCrudPermissions } = require('../middlewares/check-permissions'); router.use(checkCrudPermissions('users')); /** * @swagger * components: * schemas: * Users: * type: object * properties: * firstName: * type: string * default: firstName * lastName: * type: string * default: lastName * phoneNumber: * type: string * default: phoneNumber * email: * type: string * default: email */ /** * @swagger * tags: * name: Users * description: The Users managing API */ /** * @swagger * /api/users: * post: * security: * - bearerAuth: [] * tags: [Users] * summary: Add new item * description: Add new item * requestBody: * required: true * content: * application/json: * schema: * properties: * data: * description: Data of the updated item * type: object * $ref: "#/components/schemas/Users" * responses: * 200: * description: The item was successfully added * content: * application/json: * schema: * $ref: "#/components/schemas/Users" * 401: * $ref: "#/components/responses/UnauthorizedError" * 405: * description: Invalid input data * 500: * description: Some server error */ router.post( '/', wrapAsync(async (req, res) => { const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`; const link = new URL(referer); await UsersService.create(req.body.data, req.currentUser, true, link.host); const payload = true; res.status(200).send(payload); }), ); /** * @swagger * /api/budgets/bulk-import: * post: * security: * - bearerAuth: [] * tags: [Users] * summary: Bulk import items * description: Bulk import items * requestBody: * required: true * content: * application/json: * schema: * properties: * data: * description: Data of the updated items * type: array * items: * $ref: "#/components/schemas/Users" * responses: * 200: * description: The items were successfully imported * content: * application/json: * schema: * $ref: "#/components/schemas/Users" * 401: * $ref: "#/components/responses/UnauthorizedError" * 405: * description: Invalid input data * 500: * description: Some server error * */ router.post( '/bulk-import', wrapAsync(async (req, res) => { const referer = req.headers.referer || `${req.protocol}://${req.hostname}${req.originalUrl}`; const link = new URL(referer); await UsersService.bulkImport(req, res, true, link.host); const payload = true; res.status(200).send(payload); }), ); /** * @swagger * /api/users/{id}: * put: * security: * - bearerAuth: [] * tags: [Users] * summary: Update the data of the selected item * description: Update the data of the selected item * parameters: * - in: path * name: id * description: Item ID to update * required: true * schema: * type: string * requestBody: * description: Set new item data * required: true * content: * application/json: * schema: * properties: * id: * description: ID of the updated item * type: string * data: * description: Data of the updated item * type: object * $ref: "#/components/schemas/Users" * required: * - id * responses: * 200: * description: The item data was successfully updated * content: * application/json: * schema: * $ref: "#/components/schemas/Users" * 400: * description: Invalid ID supplied * 401: * $ref: "#/components/responses/UnauthorizedError" * 404: * description: Item not found * 500: * description: Some server error */ router.put( '/:id', wrapAsync(async (req, res) => { await UsersService.update(req.body.data, req.body.id, req.currentUser); const payload = true; res.status(200).send(payload); }), ); /** * @swagger * /api/users/{id}: * delete: * security: * - bearerAuth: [] * tags: [Users] * summary: Delete the selected item * description: Delete the selected item * parameters: * - in: path * name: id * description: Item ID to delete * required: true * schema: * type: string * responses: * 200: * description: The item was successfully deleted * content: * application/json: * schema: * $ref: "#/components/schemas/Users" * 400: * description: Invalid ID supplied * 401: * $ref: "#/components/responses/UnauthorizedError" * 404: * description: Item not found * 500: * description: Some server error */ router.delete( '/:id', wrapAsync(async (req, res) => { await UsersService.remove(req.params.id, req.currentUser); const payload = true; res.status(200).send(payload); }), ); /** * @swagger * /api/users/deleteByIds: * post: * security: * - bearerAuth: [] * tags: [Users] * summary: Delete the selected item list * description: Delete the selected item list * requestBody: * required: true * content: * application/json: * schema: * properties: * ids: * description: IDs of the updated items * type: array * responses: * 200: * description: The items was successfully deleted * content: * application/json: * schema: * $ref: "#/components/schemas/Users" * 401: * $ref: "#/components/responses/UnauthorizedError" * 404: * description: Items not found * 500: * description: Some server error */ router.post( '/deleteByIds', wrapAsync(async (req, res) => { await UsersService.deleteByIds(req.body.data, req.currentUser); const payload = true; res.status(200).send(payload); }), ); /** * @swagger * /api/users: * get: * security: * - bearerAuth: [] * tags: [Users] * summary: Get all users * description: Get all users * responses: * 200: * description: Users list successfully received * content: * application/json: * schema: * type: array * items: * $ref: "#/components/schemas/Users" * 401: * $ref: "#/components/responses/UnauthorizedError" * 404: * description: Data not found * 500: * description: Some server error */ router.get( '/', wrapAsync(async (req, res) => { const filetype = req.query.filetype; const currentUser = req.currentUser; const payload = await UsersDBApi.findAll(req.query, { currentUser }); if (filetype && filetype === 'csv') { const fields = ['id', 'firstName', 'lastName', 'phoneNumber', 'email']; const opts = { fields }; try { const csv = parse(payload.rows, opts); res.status(200).attachment(csv); res.send(csv); } catch (err) { console.error(err); } } else { res.status(200).send(payload); } }), ); /** * @swagger * /api/users/count: * get: * security: * - bearerAuth: [] * tags: [Users] * summary: Count all users * description: Count all users * responses: * 200: * description: Users count successfully received * content: * application/json: * schema: * type: array * items: * $ref: "#/components/schemas/Users" * 401: * $ref: "#/components/responses/UnauthorizedError" * 404: * description: Data not found * 500: * description: Some server error */ router.get( '/count', wrapAsync(async (req, res) => { const currentUser = req.currentUser; const payload = await UsersDBApi.findAll(req.query, null, { countOnly: true, currentUser, }); res.status(200).send(payload); }), ); /** * @swagger * /api/users/autocomplete: * get: * security: * - bearerAuth: [] * tags: [Users] * summary: Find all users that match search criteria * description: Find all users that match search criteria * responses: * 200: * description: Users list successfully received * content: * application/json: * schema: * type: array * items: * $ref: "#/components/schemas/Users" * 401: * $ref: "#/components/responses/UnauthorizedError" * 404: * description: Data not found * 500: * description: Some server error */ router.get('/autocomplete', async (req, res) => { const payload = await UsersDBApi.findAllAutocomplete( req.query.query, req.query.limit, req.query.offset, ); res.status(200).send(payload); }); /** * @swagger * /api/users/{id}: * get: * security: * - bearerAuth: [] * tags: [Users] * summary: Get selected item * description: Get selected item * parameters: * - in: path * name: id * description: ID of item to get * required: true * schema: * type: string * responses: * 200: * description: Selected item successfully received * content: * application/json: * schema: * $ref: "#/components/schemas/Users" * 400: * description: Invalid ID supplied * 401: * $ref: "#/components/responses/UnauthorizedError" * 404: * description: Item not found * 500: * description: Some server error */ router.get( '/:id', wrapAsync(async (req, res) => { const payload = await UsersDBApi.findBy({ id: req.params.id }); delete payload.password; res.status(200).send(payload); }), ); router.use('/', require('../helpers').commonErrorHandler); module.exports = router;