posts.js
2.68 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
var express = require('express');
var router = express.Router();
var Post = require('../models/Post');
var util = require('../util');
// Post home
router.get('/', function(req, res){
Post.find({})
.populate('author')
.sort('-createdAt')
.exec(function(err, posts){
if(err){return res.json(err)};
res.render('posts/index', {posts:posts});
});
});
// Post new
router.get('/new', util.isLoggedin, function(req, res){
var post = req.flash('post')[0] || {};
var errors = req.flash('errors')[0] || {};
res.render('posts/new', {post:post, errors:errors});
})
// Post create
router.post('/', util.isLoggedin, function(req, res){
req.body.author = req.user._id;
Post.create(req.body, function(err, post){
if(err){
req.flash('post', req.body);
req.flash('errors', util.parseError(err));
return res.redirect('/posts/new');
};
res.redirect('/posts');
});
});
// Post show
router.get('/:id', util.isLoggedin, function(req, res){
Post.findOne({_id:req.params.id})
.populate('author')
.exec(function(err,post){
if(err){return res.json(err)};
res.render('posts/show', {post:post});
});
});
// Post edit
router.get('/:id/edit', util.isLoggedin, checkPermission, function(req, res){
var post = req.flash('post')[0];
var errors = req.flash('errors')[0] || {};
if(!post){
Post.findOne({_id:req.params.id}, function(err, post){
if(err){return res.json(err)};
res.render('posts/edit', {post:post, errors:errors});
});
}
else{
post._id = req.params.id;
res.render('posts/edit', {post:post, errors:errors});
}
});
// Post update
router.put('/:id', util.isLoggedin, checkPermission, function(req, res){
req.body.updatedAt = Date.now();
Post.findOneAndUpdate({_id:req.params.id}, req.body, {runValidators:true}, function(err, post){
if(err){
req.flash('post', req.body),
req.flash('errors', util.parseError(err));
return res.redirect('/posts/'+ req.params.id + '/edit');
};
res.redirect('/posts/' + req.params.id);
});
});
// Post delete
router.delete('/:id', util.isLoggedin, checkPermission, function(req, res){
Post.deleteOne({_id:req.params.id}, function(err){
if(err){return res.join(err)};
res.redirect('/posts');
});
});
function checkPermission(req, res, next){
Post.findOne({_id:req.params.id}, function(err, post){
if(err){return res.json(err)};
if(post.author != req.user.id){return util.noPermission(req,res)};
next();
});
}
// Export module
module.exports = router;