opt-cc/api/routes/decorations.js

"use strict";

// modules
const fs = require('fs');
const express = require('express');
const multer = require('multer');
const storage = multer.memoryStorage();
const upload = multer({storage: storage});
const logger = require('debug')('cc:decorations');

// HTTP status codes by name
const codes = require('./http-codes');

const apiAuthenticationMiddleware = require('../middleware/auth-middleware');
const checkHl = require('../middleware/permission-check').checkHl;
const routerHandling = require('../middleware/router-handling');

// Mongoose Model using mongoDB
const DecorationModel = require('../models/decoration');
const AwardingsModel = require('../models/awarding');

const decoration = express.Router();


// routes **********************
decoration.route('/')
  .get((req, res, next) => {
    const filter = {};
    if (req.query.fractFilter) {
      filter.fraction = req.query.fractFilter.toUpperCase()
    }
    if (req.query.q) {
      filter.name = {$regex: req.query.q, $options: 'i'}
    }
    DecorationModel.find(filter, {}, {sort: {fraction: 'asc', isMedal: 'asc', sortingNumber: 'asc', name: 'asc'}}, (err, items) => {
      if (err) {
        err.status = codes.servererror;
        return next(err);
      }
      if (items && items.length > 0) {
        res.locals.items = items;
      } else {
        res.locals.items = [];
      }
      res.locals.processed = true;
      next();
    });
  })

  .post(apiAuthenticationMiddleware, checkHl, upload.single('image'), (req, res, next) => {
    const decoration = new DecorationModel(req.body);
    // timestamp and default are set automatically by Mongoose Schema Validation
    decoration.save((err) => {
      if (err) {
        err.status = codes.wrongrequest;
        err.message += ' in fields: ' + Object.getOwnPropertyNames(err.errors);
        return next(err);
      }
      res.status(codes.created);
      res.locals.items = decoration;
      fs.appendFile(__dirname + '/../resource/decoration/' + decoration.id + '.png', new Buffer(req.file.buffer),
        (err) => {
          if (err) next(err);
        });
      next();
    })
  })

  .all(
    routerHandling.httpMethodNotAllowed
  );

decoration.route('/:id')
  .get((req, res, next) => {
    DecorationModel.findById(req.params.id, (err, item) => {
      if (err) {
        err.status = codes.servererror;
        return next(err);
      }
      else if (!item) {
        err = new Error("item not found");
        err.status = codes.notfound;
        return next(err);
      }
      res.locals.items = item;
      next();
    });
  })

  .patch(apiAuthenticationMiddleware, checkHl, upload.single('image'), (req, res, next) => {
    if (!req.body || (req.body._id && req.body._id !== req.params.id)) {
      // little bit different as in PUT. :id does not need to be in data, but if the _id and url id must match
      const err = new Error('id of PATCH resource and send JSON body are not equal ' + req.params.id + " " + req.body._id);
      err.status = codes.notfound;
      next(err);
      return; // prevent node to process this function further after next() has finished.
    }

    // optional task 3: increment version manually as we do not use .save(.)
    req.body.updatedAt = new Date();
    req.body.$inc = {__v: 1};

    if (req.file) {
      const file = __dirname + '/../resource/decoration/' + req.body._id + '.png';
      fs.unlink(file, (err) => {
        if (err) next(err);
        fs.appendFile(file, new Buffer(req.file.buffer), (err) => {
          if (err) next(err);
        });
      });
    }

    // PATCH is easier with mongoose than PUT. You simply update by all data that comes from outside. no need to reset attributes that are missing.
    DecorationModel.findByIdAndUpdate(req.params.id, req.body, {new: true}, (err, item) => {
      if (err) {
        err.status = codes.wrongrequest;
      }
      else if (!item) {
        err = new Error("item not found");
        err.status = codes.notfound;
      }
      else {
        res.locals.items = item;
      }
      next(err);
    })
  })

  .delete(apiAuthenticationMiddleware, checkHl, (req, res, next) => {
    DecorationModel.findByIdAndRemove(req.params.id, (err, item) => {
      if (err) {
        err.status = codes.wrongrequest;
      }
      else if (!item) {
        err = new Error("item not found");
        err.status = codes.notfound;
      }

      // deleted all awardings linked to this decoration
      AwardingsModel.find({decorationId: req.params.id}).remove().exec();

      // delete graphic
      fs.unlink(__dirname + '/../resource/decoration/' + req.params.id + '.png',
        (err) => {
          if (err) next(err);
        });

      // we don't set res.locals.items  and thus it will send a 204 (no content) at the end. see last handler user.use(..)
      res.locals.processed = true;
      next(err); // this works because err is in normal case undefined and that is the same as no parameter
    });
  })

  .all(
    routerHandling.httpMethodNotAllowed
  );

// this middleware function can be used, if you like or remove it
// it looks for object(s) in res.locals.items and if they exist, they are send to the client as json
decoration.use(routerHandling.emptyResponse);


module.exports = decoration;