30 lines
1.1 KiB
TypeScript
30 lines
1.1 KiB
TypeScript
import { Router } from "express";
|
|
import { ADMIN_KEY } from "../Modules/Constants";
|
|
import { Song } from "../Schemas/Song";
|
|
|
|
const App = Router();
|
|
|
|
// ! ANY ENDPOINTS DEFINED IN THIS FILE WILL REQUIRE ADMIN AUTHORIZATION !
|
|
// ! ANY ENDPOINTS DEFINED IN THIS FILE WILL REQUIRE ADMIN AUTHORIZATION !
|
|
// ! ANY ENDPOINTS DEFINED IN THIS FILE WILL REQUIRE ADMIN AUTHORIZATION !
|
|
|
|
App.use((req, res, next) => {
|
|
if (req.path === "/key")
|
|
return res.status(req.body.Key === ADMIN_KEY ? 200 : 403).send(req.body.Key === ADMIN_KEY ? "Login successful!" : "Key doesn't match. Try again.");
|
|
|
|
if ((req.cookies["AdminKey"] ?? req.header("Authorization")) !== ADMIN_KEY)
|
|
return res.status(403).send("You don't have permission to access this endpoint.");
|
|
|
|
next();
|
|
});
|
|
|
|
App.get("/test", (_, res) => res.send("Permission check OK"));
|
|
|
|
App.get("/tracks", async (_, res) => res.json((await Song.find()).map(x => x.Package())));
|
|
|
|
App.post("/create/song", async (req, res) => res.json(await Song.create(req.body).save()));
|
|
|
|
export default {
|
|
App,
|
|
DefaultAPI: "/admin/api"
|
|
} |