Eval submission

README.md

@@ -1,5 +1,5 @@
 ## Sunglasses.io Server
 
-This project has been created by a student at Project Shift, a software engineering fellowship located in Downtown Durham.  The work in this repository is wholly of the student based on a sample starter project that can be accessed by looking at the repository that this project forks.
+This project has been created by a student at Project Shift, a software engineering fellowship located in Downtown Durham. The work in this repository is wholly of the student based on a sample starter project that can be accessed by looking at the repository that this project forks.
 
 If you have any questions about this project or the program in general, visit projectshift.io or email hello@projectshift.io.

app/server.js

@@ -3,21 +3,31 @@ const bodyParser = require('body-parser');
 const jwt = require('jsonwebtoken');
 const swaggerUi = require('swagger-ui-express');
 const YAML = require('yamljs');
-const swaggerDocument = YAML.load('./swagger.yaml'); // Replace './swagger.yaml' with the path to your Swagger file
+const swaggerDocument = YAML.load('./sunglasses-swagger.yaml');
+const { errorMessages } = require('../utility/errors');
+const { getUserFromToken,
+        getUserCart,
+        loginUser,
+        validateToken,
+        getAccessTokenFromUsername, 
+        isStillValid, 
+        updateTimestamp, 
+        AccessToken} = require("../utility/authHelpers");
+const { validateProduct, randId } = require('../utility/helper');
+
 const app = express();
 
+const BASE_URL = "/api"
+
 app.use(bodyParser.json());
 
 // Importing the data from JSON files
 const users = require('../initial-data/users.json');
 const brands = require('../initial-data/brands.json');
 const products = require('../initial-data/products.json');
 
-// Error handling
-app.use((err, req, res, next) => {
-	console.error(err.stack);
-	res.status(500).send('Something broke!');
-});
+// Access token "database"
+const ACCESS_TOKENS = [];
 
 // Swagger
 app.use('/api-docs', swaggerUi.serve, swaggerUi.setup(swaggerDocument));
@@ -28,4 +38,214 @@ app.listen(PORT, () => {
 	console.log(`Server running on port ${PORT}`);
 });
 
+// Gets a list of brands
+app.get(BASE_URL + "/brands", (req, res) => {
+  try {
+    // Check if brands were retrieved successfully
+    if (!brands) return res.status(500).send(errorMessages[500]);
+    res.send(brands);
+  } catch(err){
+    next(err);
+  };
+});
+
+// Get a list of products with brand of provided id
+app.get(BASE_URL + "/brands/:id/products", (req, res) => {
+  try {
+    // Check if id parameter is present
+    const { id } = req.params;
+    if (!id) return res.status(400).send(errorMessages[400]);
+
+    // Create a list of brandIds and check if the id is included in it
+    const brandIds = brands.map((brand) => brand.id);
+    if (!brandIds.includes(id)) return res.status(404).send(errorMessages[404]);
+
+    // Filter products according to brandId
+    const filteredProduct = products.filter((product) => product.categoryId === id);
+
+    res.send(filteredProduct);
+  } catch(err) {
+    next(err);
+  };
+});
+
+// Get a list of all products
+app.get(BASE_URL + "/products", (req, res) => {
+  try{
+    // Check if products were retrieved successfully
+    if(!products) return res.status(500).send(errorMessages[500]);
+
+    res.send(products);
+  } catch(err) {
+    next(err);
+  };
+});
+
+// Login
+app.post(BASE_URL + "/login", (req,res) => {
+  try {
+
+    // log user in
+    const {username, password} = req.body;
+    const login = loginUser(username, password, users);
+    if (!login.loginSuccess) return res.status(login.err).send(login.message);
+
+    const user = login.user;
+
+    // Check if user already has access token
+    let userAccessToken = getAccessTokenFromUsername(user, ACCESS_TOKENS);
+
+    // If user did not already have accessToken make one for them and add to database
+    if (!userAccessToken) {
+      userAccessToken = AccessToken(username);
+      ACCESS_TOKENS.push(userAccessToken);
+    };
+
+    // Check if token is expired and if so update it
+    const tokenStillValid = isStillValid(userAccessToken);
+    if(!tokenStillValid) updateTimestamp(token);
+
+    res.send(userAccessToken);
+  } catch (err) {
+    next(err);
+  }
+});
+
+// Get user cart
+app.get(BASE_URL + "/me/cart", (req, res) => {
+  try {
+    const token = req.header("token");
+
+    // Validate token
+    const tokenValidation = validateToken(token, ACCESS_TOKENS);
+    if (!tokenValidation.isValid) return res.status(tokenValidation.err).send(tokenValidation.message);
+
+    const accessToken = tokenValidation.accessToken; 
+
+    const userCart = getUserCart(accessToken.username, users);
+    if(!userCart.isFound) return res.status(userCart.err).send(userCart.message);
+
+    res.send(userCart.cart);
+  } catch(err) {
+    next(err);
+  };
+});
+
+// Add item to cart
+app.post(BASE_URL + "/me/cart", (req, res) => {
+  try {
+    const token = req.header("token");
+
+    // Validate token
+    const tokenValidation = validateToken(token, ACCESS_TOKENS);
+    if (!tokenValidation.isValid) return res.status(tokenValidation.err).send(tokenValidation.message);
+
+    const accessToken = tokenValidation.accessToken; 
+
+    const userCart = getUserCart(accessToken.username, users);
+    if(!userCart.isFound) return res.status(userCart.err).send(userCart.message);
+
+    // check if product was sent in body
+    const product = req.body;
+    if (!product) req.status(400).send(errorMessages[400]);
+
+    // Validate provided product
+    const productIsValid = validateProduct(product, products);
+    if (!productIsValid) return res.status(404).send(errorMessages[404]);
+
+    userCart.cart.push({quantity: 1, id: randId() , product: product});
+
+    res.send();
+
+  } catch(err) {
+    next(err)
+  }
+});
+
+// Delete cart item
+app.delete(BASE_URL + "/me/cart/:id", (req, res) => {
+  try {
+    const token = req.header("token");
+
+    // Validate token
+    const tokenValidation = validateToken(token, ACCESS_TOKENS);
+    if (!tokenValidation.isValid) return res.status(tokenValidation.err).send(tokenValidation.message);
+
+    const accessToken = tokenValidation.accessToken; 
+
+    // Try to get user from DB
+    const userStatus = getUserFromToken(accessToken, users);
+    if (!userStatus.userFound) return res.status(userStatus.err).send(userStatus.message);
+
+    // Get user cart
+    const userCart = getUserCart(accessToken.username, users);
+    if(!userCart.isFound) return res.status(userCart.err).send(userCart.message);
+
+    // Check if id parameter is present
+    const { id } = req.params;
+    if (!id) return res.status(400).send(errorMessages[400]);
+
+    // Check if item exists
+    const itemToDelete = userCart.cart.find((item) => item.id === id);
+    if(!itemToDelete) return res.status(404).send("Item could not be found");
+
+    // Filter item out of cart 
+    userStatus.user.cart = userCart.cart.filter((item) => item !== itemToDelete);
+
+    res.send(userStatus.user.cart);
+
+  } catch(err) {
+    next(err);
+  }
+});
+
+// Update quantity value of cart items
+app.post(BASE_URL + "/me/cart/:id", (req, res) => {
+  try {
+    const token = req.header("token");
+
+    // Validate and get token
+    const tokenValidation = validateToken(token, ACCESS_TOKENS);
+    if (!tokenValidation.isValid) return res.status(tokenValidation.err).send(tokenValidation.message);
+
+    const accessToken = tokenValidation.accessToken; 
+
+    // retrieve user
+    const userStatus = getUserFromToken(accessToken, users);
+    if (!userStatus.userFound) return res.status(userStatus.err).send(userStatus.message);
+    const user = userStatus.user;
+
+    // Check if user has cart
+    if (!user.cart) return res.status(500).send(errorMessages[500]);
+
+    // Check if id parameter is present
+    const { id } = req.params;
+    if (!id) return res.status(400).send(errorMessages[400]);
+
+    // Check if item exists
+    const itemToUpdate = user.cart.find((item) => item.id === id);
+    if(!itemToUpdate) return res.status(404).send("Item could not be found");
+
+    // Check is post body has quantity value
+    const {quantity} = req.body;
+    if(!quantity) return res.status(400).send(errorMessages[400]);
+
+    // Check if quantity is greater than 0
+    if (quantity <= 0) return res.status(400).send("Quantity must be greater than 0");
+
+    itemToUpdate.quantity = quantity;
+
+    res.send(errorMessages[200]);
+
+  } catch(err) {
+    next(err);
+  }
+});
+
+
+// Error handling
+app.use((err, req, res, next) => {
+	res.status(500).send(errorMessages[500]);
+});
+
 module.exports = app;