Source: routers/member.js

  1. const express = require('express');
  2. const auth = require('../middleware/authenticator.js');
  3. const mysql = require("../db/mysql.js");
  4. const router = express.Router();
  5. const verify = require('../middleware/verifier.js');
  7. /**
  8.  * @typedef {object} MemberGetGetsFeedbackPackage
  9.  * @property {boolean} gets_feedback Whether the user gets feedback or not
  10.  */
  12. /**
  13.  * Route for checking if this user gets feedback on sheet music if they are verified to be in the choir attached to the sheet music
  14.  * @name member/get/gets-feedback
  15.  * @function
  16.  * @inner
  17.  * @param {*} req
  18.  * @param {string} req.body.choirId The choir ID to be accessed. NOTE: Only need to pass choirId in body or query not both
  19.  * @param {string} req.query.choirId The choir ID to be accessed. NOTE: Only need to pass choirId in body or query not both
  20.  * @param {*} res
  21.  * @returns {MemberGetGetsFeedbackPackage|string} On success, returns whether or not the user should get feedback. Otherwise, an error message.
  22.  * @async
  23.  */
  24. router.get('/gets-feedback', auth.token, async(req,res) => {
  25.   verify.userIsVerified(req, res).then((isVerified) => {
  26.     if (!isVerified) {
  27.       res.status(403).send('Unauthorized');
  28.     } else {
  29.       const choirId = req.query.choirId;
  30.       if (!choirId) {
  31.         choirId = req.body.choirId;
  32.       }
  33.       const errorMessage = "Unable to get if gets feedback";
  34.       if (choirId) {
  35.         mysql.getClient().then((client) => {
  36.           client.query("SELECT gets_feedback FROM tma.member WHERE person_id=? AND choir_id=unhex(?)", [res.locals.uid, choirId], function(error, results, fields) {
  37.             if (error) {
  38.               res.status(503).send(errorMessage);
  39.             } else if (results.length === 0) {
  40.               res.status(204).send(errorMessage);
  41.             } else {
  42.               let sum = 0;
  43.               for (let i = 0; i < results.length; i++) {
  44.                 sum += results[i]["gets_feedback"];
  45.               }
  46.               let gets_feedback = sum > 0 ? true : false;
  47.               res.status(200).json({ gets_feedback });
  48.             }
  49.           });
  50.         });
  51.       } else {
  52.         res.status(400).send(errorMessage);
  53.       }
  54.     }
  55.   }).catch((error) => {
  56.     res.status(403).send('Unauthorized');
  57.   });
  58. });
  60. /**
  61.  * @typedef {MemberGetPendingReturnPackage[]} MemberGetPendingPackage List of information about the pending members
  62.  */
  64. /**
  65.  * @typedef {object} MemberGetPendingReturnPackage
  66.  * @property {string} member_id The ID of the member
  67.  * @property {string} first_name The first name of the member
  68.  * @property {string} email The email of the member
  69.  * @property {string} member_type The type of the member
  70.  * @property {string} member_role The role of the member
  71.  * @property {boolean} has_picture Whether the person attached to the member has a profile picture 
  72.  */
  74. /**
  75.  * Route for getting all members which are still pending to be added to the choir which this user is an admin to
  76.  * @name member/get/pending
  77.  * @function
  78.  * @inner
  79.  * @param {*} req
  80.  * @param {string} req.query.choirId The choir ID to be accessed.
  81.  * @param {*} res
  82.  * @returns {MemberGetPendingPackage|string} On success then information about the members who are pending. Otherwise, an error message.
  83.  * @async
  84.  */
  85. router.get('/pending', auth.token, async(req,res) => {
  86.   verify.admin(req,res).then((isVerified) => {
  87.     if (!isVerified) {
  88.       res.status(403).send('Unauthorized');
  89.     } else {
  90.       let choirId = req.query.choirId;
  91.       const errorMessage = "Unable to get pending users";
  92.       if (choirId) {
  93.         mysql.getClient().then((client) => {
  94.           client.query("SELECT member_id, first_name, last_name, email, member_type, member_role, has_picture FROM tma.member INNER JOIN tma.person ON person.person_id = member.person_id WHERE member_status = 'pending' AND choir_id=unhex(?)", [choirId], function(error, results, fields) {
  95.             if (error) {
  96.               res.status(503).send(errorMessage);
  97.             } else {
  98.               res.status(200).json(results);
  99.             }
  100.           });
  101.         });
  102.       } else {
  103.         res.status(400).send(errorMessage);
  104.       }
  105.     }
  106.   }).catch((error) => {
  107.     res.status(403).send('Unauthorized');
  108.   });
  109. });
  111. /**
  112.  * Route for a non-admin attempting to join a choir. They are added as a pending member until an admin approves them
  113.  * @name member/post
  114.  * @function
  115.  * @inner
  116.  * @param {*} req
  117.  * @param {string} req.body.memberType The type of the member to be created
  118.  * @param {string} req.body.memberRole The role of the member to be created
  119.  * @param {string} req.body.accessCode The access code of the choir to which to add the member
  120.  * @param {*} res
  121.  * @returns {string} An error message if an error occured
  122.  * @async
  123.  */
  124. router.post('/', auth.token, async(req,res) => {
  125.   let memberType = req.body.memberType;
  126.   let memberRole = req.body.memberRole;
  127.   let accessCode = req.body.accessCode;
  128.   const errorMessage = "Unable to add member";
  129.   if (memberType && memberRole && accessCode) {
  130.     let client = await mysql.getClient();
  131.     client.query("SELECT hex(choir_id) FROM tma.choir WHERE access_code=?", [accessCode], function(error, results, fields) {
  132.       if (error) {
  133.         res.status(503).send(errorMessage);
  134.       } else if (results.length === 0) {
  135.         res.status(400).send(errorMessage);
  136.       } else {
  137.         let choirId = results[0]["hex(choir_id)"];
  138.         client.query("SELECT COUNT(*) FROM tma.member WHERE choir_id= unhex(?) AND person_id=? AND member_type=? AND member_role=?", [choirId, res.locals.uid, memberType, memberRole], function(error, results, fields) {
  139.           if (error) {
  140.             res.status(503).send(errorMessage);
  141.           } else if (results.length === 0) {
  142.             res.status(204).send(errorMessage);
  143.           } else if (parseInt(results[0]["COUNT(*)"],10) > 0) {
  144.             res.status(208).send(errorMessage);
  145.           } else {
  146.             client.query("INSERT INTO tma.member (member_id, member_type, member_role, choir_id, person_id, member_status) values(unhex(replace(uuid(),'-','')), ?, ?, unhex(?), ?, 'pending')", [memberType, memberRole, choirId, res.locals.uid], function(error, results, fields) {
  147.               if (error) {
  148.                 res.status(503).send(errorMessage);
  149.               } else {
  150.                 res.status(200).send();
  151.               }
  152.             });
  153.           }
  154.         });
  155.       }
  156.     });
  157.   } else {
  158.     res.status(400).send(errorMessage);
  159.   }
  160. });
  162. /**
  163.  * Route for an admin approving a pending member to joining a choir
  164.  * @name member/put/accept
  165.  * @function
  166.  * @inner
  167.  * @param {*} req
  168.  * @param {string} req.body.choirId The choir ID to be accessed.
  169.  * @param {string} req.body.memberId The member ID to be accepted.
  170.  * @param {*} res
  171.  * @returns {string} An error message if an error occured
  172.  * @async
  173.  */
  174. router.put('/accept', auth.token, async(req, res) => {
  175.   verify.admin(req,res).then((isVerified) => {
  176.     if (!isVerified) {
  177.       res.status(403).send('Unauthorized');
  178.     } else {
  179.       let choirId = req.body.choirId;
  180.       let memberId = req.body.memberId;
  181.       const errorMessage = "Unable to accept user";
  182.       if (choirId && memberId) {
  183.         mysql.getClient().then((client) => {
  184.           client.query("UPDATE tma.member SET member_status='verified' WHERE member_id=unhex(?) AND choir_id=unhex(?) AND member_status='pending'", [memberId, choirId], function(error, results, fields) {
  185.             if (error) {
  186.               res.status(503).send(errorMessage);
  187.             } else {
  188.               res.status(200).send();
  189.             }
  190.           });
  191.         });
  192.       } else {
  193.         res.status(400).send(errorMessage);
  194.       }
  195.     }
  196.   }).catch((error) => {
  197.     res.status(403).send('Unauthorized');
  198.   });
  199. });
  201. /**
  202.  * Route for an admin rejecting a pending member to joining a choir. This doesn't remove them from the list of members
  203.  * @name member/put/reject
  204.  * @function
  205.  * @inner
  206.  * @param {*} req
  207.  * @param {string} req.body.choirId The choir ID to be accessed.
  208.  * @param {string} req.body.memberId The member ID to be rejected.
  209.  * @param {*} res
  210.  * @returns {string} An error message if an error occured
  211.  * @async
  212.  */
  213. router.put('/reject', auth.token, async(req, res) => {
  214.   verify.admin(req,res).then((isVerified) => {
  215.     if (!isVerified) {
  216.       res.status(403).send('Unauthorized');
  217.     } else {
  218.       let choirId = req.body.choirId;
  219.       let memberId = req.body.memberId;
  220.       const errorMessage = "Unable to reject user";
  221.       if (choirId && memberId) {
  222.         mysql.getClient().then((client) => {
  223.           client.query("UPDATE tma.member SET member_status='rejected' WHERE member_id=unhex(?) AND choir_id=unhex(?) AND member_status='pending'", [memberId, choirId], function(error, results, fields) {
  224.             if (error) {
  225.               res.status(503).send(errorMessage);
  226.             } else {
  227.               res.status(200).send();
  228.             }
  229.           });
  230.         });
  231.       } else {
  232.         res.status(400).send(errorMessage);
  233.       }
  234.     }
  235.   }).catch((error) => {
  236.     res.status(403).send('Unauthorized');
  237.   });
  238. });
  240. /**
  241.  * Route for updating a member's information by an admin
  242.  * @name member/put/update
  243.  * @function
  244.  * @inner
  245.  * @param {*} req
  246.  * @param {string} req.body.memberId The member ID to be accessed.
  247.  * @param {string} req.body.memberType The new member type for the member
  248.  * @param {string} req.body.memberRole The new member role for the member
  249.  * @param {*} res
  250.  * @returns {string} An error message if an error occured
  251.  * @async
  252.  */
  253. router.put('/update', auth.token, async(req, res) => {
  254.   verify.adminOfMember(req,res).then((choirId) => {
  255.     if (choirId === null) {
  256.       res.status(403).send('Unauthorized');
  257.     } else {
  258.       let memberId = req.body.memberId;
  259.       let memberType = req.body.memberType;
  260.       let memberRole = req.body.memberRole;
  261.       const errorMessage = "Unable to update user";
  262.       if (memberId && memberType, memberRole) {
  263.         mysql.getClient().then((client) => {
  264.           client.query("UPDATE tma.member SET member_type=?, member_role=? WHERE member_id=unhex(?)", [memberType, memberRole, memberId], function(error, results, fields) {
  265.             if (error) {
  266.               res.status(503).send(errorMessage);
  267.             } else {
  268.               res.status(200).send();
  269.             }
  270.           });
  271.         });
  272.       } else {
  273.         res.status(400).send(errorMessage);
  274.       }
  275.     }
  276.   }).catch((error) => {
  277.     res.status(403).send('Unauthorized');
  278.   });
  279. });
  281. /**
  282.  * Route for deleting a member from a choir by an admin
  283.  * @name member/delete
  284.  * @function
  285.  * @inner
  286.  * @param {*} req
  287.  * @param {string} req.body.memberId The member ID to be deleted.
  288.  * @param {*} res
  289.  * @returns {string} An error message if an error occured
  290.  * @async
  291.  */
  292. router.delete('/', auth.token, async(req, res) => {
  293.   verify.adminOfMember(req,res).then((choirId) => {
  294.     if (choirId === null) {
  295.       res.status(403).send('Unauthorized');
  296.     } else {
  297.       let memberId = req.body.memberId;
  298.       const errorMessage = "Unable to delete user";
  299.       if (memberId) {
  300.         mysql.getClient().then((client) => {
  301.           client.query("UPDATE tma.member SET member_status='admin_removed' WHERE member_id=unhex(?)", [memberId], function(error, results, fields) {
  302.             if (error) {
  303.               res.status(503).send(errorMessage);
  304.             } else {
  305.               res.status(200).send();
  306.             }
  307.           });
  308.         });
  309.       } else {
  310.         res.status(400).send(errorMessage);
  311.       }
  312.     }
  313.   }).catch((error) => {
  314.     res.status(403).send('Unauthorized');
  315.   });
  316. });
  318. module.exports = router;