+ Press n or j to go to the next uncovered block, b, p or k for the previous block. +
+ +| File | ++ | Statements | ++ | Branches | ++ | Functions | ++ | Lines | ++ |
|---|---|---|---|---|---|---|---|---|---|
| src | +
+
+ |
+ 96.29% | +26/27 | +100% | +2/2 | +66.66% | +2/3 | +96.29% | +26/27 | +
| src/_helpers | +
+
+ |
+ 100% | +14/14 | +100% | +0/0 | +100% | +1/1 | +100% | +14/14 | +
| src/_middleware | +
+
+ |
+ 30.76% | +8/26 | +0% | +0/9 | +20% | +1/5 | +32% | +8/25 | +
| src/users | +
+
+ |
+ 33.33% | +24/72 | +0% | +0/18 | +4% | +1/25 | +33.8% | +24/71 | +
+ Press n or j to go to the next uncovered block, b, p or k for the previous block. +
+ +| 1 +2 +3 +4 +5 +6 +7 +8 +9 +10 +11 +12 +13 +14 +15 +16 +17 +18 +19 +20 +21 +22 +23 +24 +25 +26 +27 +28 +29 +30 +31 +32 +33 +34 +35 +36 +37 +38 +39 +40 +41 +42 +43 +44 +45 | 1x + + +1x +1x +1x + +1x + + + +1x + +1x + + + + + + +1x + +1x +1x + + +1x + + + + + + + + + + + + +1x + + +1x +1x + | require('dotenv').config();
+
+// const config = require('../config.json');
+const mysql = require('mysql2/promise');
+const { Sequelize } = require('sequelize');
+module.exports = db = {};
+
+initialize();
+
+async function initialize() {
+
+ const host = process.env.MYSQLDB_HOST;
+ // create db if it doesn't already exist
+ const config = {
+ host: host,
+ port: process.env.MYSQLDB_PORT,
+ user: process.env.MYSQLDB_USER,
+ password: process.env.MYSQLDB_PASSWORD,
+ database: process.env.MYSQLDB_DATABASE
+ }
+ console.log('database config :>> ', config);
+
+ const connection = await mysql.createConnection(config);
+ await connection.query(`CREATE DATABASE IF NOT EXISTS \`${process.env.MYSQLDB_DATABASE}\`;`);
+
+ // connect to db
+ const sequelize = new Sequelize(
+ process.env.MYSQLDB_DATABASE,
+ process.env.MYSQLDB_USER,
+ process.env.MYSQLDB_PASSWORD,
+ {
+ dialect: 'mysql',
+ host: host,
+ port: process.env.MYSQLDB_PORT,
+ logging: false
+ }
+ );
+
+ // init models and add them to the exported db object
+ db.User = require('../users/user.model')(sequelize);
+
+ // sync all models with database
+ await sequelize.sync();
+ connection.end();
+} |
+ Press n or j to go to the next uncovered block, b, p or k for the previous block. +
+ +| File | ++ | Statements | ++ | Branches | ++ | Functions | ++ | Lines | ++ |
|---|---|---|---|---|---|---|---|---|---|
| db.js | +
+
+ |
+ 100% | +14/14 | +100% | +0/0 | +100% | +1/1 | +100% | +14/14 | +
+ Press n or j to go to the next uncovered block, b, p or k for the previous block. +
+ +| 1 +2 +3 +4 +5 +6 +7 +8 +9 +10 +11 +12 +13 +14 +15 +16 +17 +18 +19 +20 +21 +22 +23 +24 +25 +26 +27 | 1x +1x +1x + +1x + + +5x +5x + + + + + + + + + + + + + + + + + + | const jwt = require('express-jwt');
+const db = require('../_helpers/db');
+require('dotenv').config();
+
+module.exports = authorize;
+
+function authorize() {
+ const secret = process.env.JWT_SECRET;
+ return [
+ // authenticate JWT token and attach decoded token to request as req.user
+ jwt({ secret, algorithms: ['HS256'] }),
+
+ // attach full user record to request object
+ async (req, res, next) => {
+ // get user with id from token 'sub' (subject) property
+ const user = await db.User.findByPk(req.user.sub);
+
+ // check user still exists
+ if (!user)
+ return res.status(401).json({ message: 'Unauthorized' });
+
+ // authorization successful
+ req.user = user.get();
+ next();
+ }
+ ];
+} |
+ Press n or j to go to the next uncovered block, b, p or k for the previous block. +
+ +| 1 +2 +3 +4 +5 +6 +7 +8 +9 +10 +11 +12 +13 +14 +15 +16 | 1x + + + + + + + + + + + + + + + | module.exports = errorHandler; + +function errorHandler(err, req, res, next) { + switch (true) { + case typeof err === 'string': + // custom application error + const is404 = err.toLowerCase().endsWith('not found'); + const statusCode = is404 ? 404 : 400; + return res.status(statusCode).json({ message: err }); + case err.name === 'UnauthorizedError': + // jwt authentication error + return res.status(401).json({ message: 'Unauthorized' }); + default: + return res.status(500).json({ message: err.message }); + } +} |
+ Press n or j to go to the next uncovered block, b, p or k for the previous block. +
+ +| File | ++ | Statements | ++ | Branches | ++ | Functions | ++ | Lines | ++ |
|---|---|---|---|---|---|---|---|---|---|
| authorize.js | +
+
+ |
+ 54.54% | +6/11 | +0% | +0/2 | +50% | +1/2 | +54.54% | +6/11 | +
| error-handler.js | +
+
+ |
+ 14.28% | +1/7 | +0% | +0/5 | +0% | +0/1 | +14.28% | +1/7 | +
| validate-request.js | +
+
+ |
+ 12.5% | +1/8 | +0% | +0/2 | +0% | +0/2 | +14.28% | +1/7 | +
+ Press n or j to go to the next uncovered block, b, p or k for the previous block. +
+ +| 1 +2 +3 +4 +5 +6 +7 +8 +9 +10 +11 +12 +13 +14 +15 +16 | 1x + + + + + + + + + + + + + + + | module.exports = validateRequest; + +function validateRequest(req, next, schema) { + const options = { + abortEarly: false, // include all errors + allowUnknown: true, // ignore unknown props + stripUnknown: true // remove unknown props + }; + const { error, value } = schema.validate(req.body, options); + if (error) { + next(`Validation error: ${error.details.map(x => x.message).join(', ')}`); + } else { + req.body = value; + next(); + } +} |
+ Press n or j to go to the next uncovered block, b, p or k for the previous block. +
+ +| File | ++ | Statements | ++ | Branches | ++ | Functions | ++ | Lines | ++ |
|---|---|---|---|---|---|---|---|---|---|
| server.js | +
+
+ |
+ 96.29% | +26/27 | +100% | +2/2 | +66.66% | +2/3 | +96.29% | +26/27 | +
+ Press n or j to go to the next uncovered block, b, p or k for the previous block. +
+ +| 1 +2 +3 +4 +5 +6 +7 +8 +9 +10 +11 +12 +13 +14 +15 +16 +17 +18 +19 +20 +21 +22 +23 +24 +25 +26 +27 +28 +29 +30 +31 +32 +33 +34 +35 +36 +37 +38 +39 +40 +41 +42 +43 +44 +45 +46 +47 +48 +49 +50 +51 +52 +53 +54 +55 +56 +57 +58 +59 +60 +61 +62 +63 +64 +65 +66 | 1x +1x +1x +1x +1x +1x +1x + +1x + +1x +1x +1x + +1x + + + + + + + + + + + + + + + + + +1x + +1x + + +1x +1x +1x + + + +1x + + +1x + + + +1x + + +1x + + +1x + + +1x +1x +1x + + +1x + | require('rootpath')();
+const express = require('express');
+const cors = require('cors');
+const bodyParser = require('body-parser');
+const Sentry = require('@sentry/node');
+const Tracing = require('@sentry/tracing');
+const errorHandler = require('./_middleware/error-handler');
+
+const app = express();
+
+app.use(bodyParser.urlencoded({ extended: false }));
+app.use(bodyParser.json());
+app.use(cors());
+
+Sentry.init({
+ dsn:
+ 'https://d9a67ee83934468ba36c008766bcfeb3@o358880.ingest.sentry.io/6146406',
+ integrations: [
+ // enable HTTP calls tracing
+ new Sentry.Integrations.Http({ tracing: true }),
+ // enable Express.js middleware tracing
+ new Tracing.Integrations.Express({ app }),
+ ],
+
+ // Set tracesSampleRate to 1.0 to capture 100%
+ // of transactions for performance monitoring.
+ // We recommend adjusting this value in production
+ tracesSampleRate: 1.0,
+});
+
+// RequestHandler creates a separate execution context using domains, so that every
+// transaction/span/breadcrumb is attached to its own Hub instance
+app.use(Sentry.Handlers.requestHandler());
+// TracingHandler creates a trace for every incoming request
+app.use(Sentry.Handlers.tracingHandler());
+
+// api routes
+app.get('/', (req, res, next) => {
+ console.log('Logging in the home route...');
+ res.send({
+ message:
+ "Welcome to Konsensus' backend! Windsor is Julian's favourite student!",
+ });
+ next();
+});
+
+app.get('/debug-sentry', function mainHandler(req, res) {
+ throw new Error('My first Sentry error!');
+});
+
+app.use('/users', require('./users/users.controller'));
+
+// The error handler must be before any other error middleware and after all controllers
+app.use(Sentry.Handlers.errorHandler());
+
+// global error handler
+app.use(errorHandler);
+
+// start server
+const port = process.env.PORT || 8080;
+server = app.listen(port, () =>
+ console.log('Server listening on port ' + port)
+);
+
+module.exports = server;
+ |
+ Press n or j to go to the next uncovered block, b, p or k for the previous block. +
+ +| File | ++ | Statements | ++ | Branches | ++ | Functions | ++ | Lines | ++ |
|---|---|---|---|---|---|---|---|---|---|
| user.model.js | +
+
+ |
+ 100% | +5/5 | +100% | +0/0 | +100% | +1/1 | +100% | +5/5 | +
| user.service.js | +
+
+ |
+ 14.7% | +5/34 | +0% | +0/18 | +0% | +0/8 | +15.15% | +5/33 | +
| users.controller.js | +
+
+ |
+ 42.42% | +14/33 | +100% | +0/0 | +0% | +0/16 | +42.42% | +14/33 | +
+ Press n or j to go to the next uncovered block, b, p or k for the previous block. +
+ +| 1 +2 +3 +4 +5 +6 +7 +8 +9 +10 +11 +12 +13 +14 +15 +16 +17 +18 +19 +20 +21 +22 +23 +24 +25 | 1x + +1x + + +1x + + + + + + +1x + + + + + + + + + + +1x + | const { DataTypes } = require('sequelize');
+
+module.exports = model;
+
+function model(sequelize) {
+ const attributes = {
+ firstName: { type: DataTypes.STRING, allowNull: false },
+ lastName: { type: DataTypes.STRING, allowNull: false },
+ username: { type: DataTypes.STRING, allowNull: false },
+ hash: { type: DataTypes.STRING, allowNull: false }
+ };
+
+ const options = {
+ defaultScope: {
+ // exclude hash by default
+ attributes: { exclude: ['hash'] }
+ },
+ scopes: {
+ // include hash with this scope
+ withHash: { attributes: {}, }
+ }
+ };
+
+ return sequelize.define('User', attributes, options);
+} |
+ Press n or j to go to the next uncovered block, b, p or k for the previous block. +
+ +| 1 +2 +3 +4 +5 +6 +7 +8 +9 +10 +11 +12 +13 +14 +15 +16 +17 +18 +19 +20 +21 +22 +23 +24 +25 +26 +27 +28 +29 +30 +31 +32 +33 +34 +35 +36 +37 +38 +39 +40 +41 +42 +43 +44 +45 +46 +47 +48 +49 +50 +51 +52 +53 +54 +55 +56 +57 +58 +59 +60 +61 +62 +63 +64 +65 +66 +67 +68 +69 +70 +71 +72 +73 +74 +75 +76 +77 +78 +79 +80 +81 +82 +83 +84 +85 +86 | 1x +1x +1x +1x + +1x + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + | require('dotenv').config();
+const jwt = require('jsonwebtoken');
+const bcrypt = require('bcryptjs');
+const db = require('../_helpers/db');
+
+module.exports = {
+ authenticate,
+ getAll,
+ getById,
+ create,
+ update,
+ delete: _delete
+};
+
+async function authenticate({ username, password }) {
+ const user = await db.User.scope('withHash').findOne({ where: { username } });
+
+ if (!user || !(await bcrypt.compare(password, user.hash)))
+ throw 'Username or password is incorrect';
+
+ // authentication successful
+ const token = jwt.sign({ sub: user.id }, process.env.JWT_SECRET, { expiresIn: '7d' });
+ return { ...omitHash(user.get()), token };
+}
+
+async function getAll() {
+ return await db.User.findAll();
+}
+
+async function getById(id) {
+ return await getUser(id);
+}
+
+async function create(params) {
+ // validate
+ if (await db.User.findOne({ where: { username: params.username } })) {
+ throw 'Username "' + params.username + '" is already taken';
+ }
+
+ // hash password
+ if (params.password) {
+ params.hash = await bcrypt.hash(params.password, 10);
+ }
+
+ // save user
+ await db.User.create(params);
+}
+
+async function update(id, params) {
+ const user = await getUser(id);
+
+ // validate
+ const usernameChanged = params.username && user.username !== params.username;
+ if (usernameChanged && await db.User.findOne({ where: { username: params.username } })) {
+ throw 'Username "' + params.username + '" is already taken';
+ }
+
+ // hash password if it was entered
+ if (params.password) {
+ params.hash = await bcrypt.hash(params.password, 10);
+ }
+
+ // copy params to user and save
+ Object.assign(user, params);
+ await user.save();
+
+ return omitHash(user.get());
+}
+
+async function _delete(id) {
+ const user = await getUser(id);
+ await user.destroy();
+}
+
+// helper functions
+
+async function getUser(id) {
+ const user = await db.User.findByPk(id);
+ if (!user) throw 'User not found';
+ return user;
+}
+
+function omitHash(user) {
+ const { hash, ...userWithoutHash } = user;
+ return userWithoutHash;
+} |
+ Press n or j to go to the next uncovered block, b, p or k for the previous block. +
+ +| 1 +2 +3 +4 +5 +6 +7 +8 +9 +10 +11 +12 +13 +14 +15 +16 +17 +18 +19 +20 +21 +22 +23 +24 +25 +26 +27 +28 +29 +30 +31 +32 +33 +34 +35 +36 +37 +38 +39 +40 +41 +42 +43 +44 +45 +46 +47 +48 +49 +50 +51 +52 +53 +54 +55 +56 +57 +58 +59 +60 +61 +62 +63 +64 +65 +66 +67 +68 +69 +70 +71 +72 +73 +74 +75 +76 +77 +78 +79 +80 +81 +82 +83 +84 +85 | 1x +1x +1x +1x +1x +1x + + +1x +1x +1x +1x +1x +1x +1x + +1x + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + | const express = require('express');
+const router = express.Router();
+const Joi = require('joi');
+const validateRequest = require('../_middleware/validate-request');
+const authorize = require('../_middleware/authorize')
+const userService = require('./user.service');
+
+// routes
+router.post('/authenticate', authenticateSchema, authenticate);
+router.post('/register', registerSchema, register);
+router.get('/', authorize(), getAll);
+router.get('/current', authorize(), getCurrent);
+router.get('/:id', authorize(), getById);
+router.put('/:id', authorize(), updateSchema, update);
+router.delete('/:id', authorize(), _delete);
+
+module.exports = router;
+
+function authenticateSchema(req, res, next) {
+ const schema = Joi.object({
+ username: Joi.string().required(),
+ password: Joi.string().required()
+ });
+ validateRequest(req, next, schema);
+}
+
+function authenticate(req, res, next) {
+ userService.authenticate(req.body)
+ .then(user => res.json(user))
+ .catch(next);
+}
+
+function registerSchema(req, res, next) {
+ const schema = Joi.object({
+ firstName: Joi.string().required(),
+ lastName: Joi.string().required(),
+ username: Joi.string().required(),
+ password: Joi.string().min(6).required()
+ });
+ validateRequest(req, next, schema);
+}
+
+function register(req, res, next) {
+ userService.create(req.body)
+ .then(() => res.json({ message: 'Registration successful' }))
+ .catch(next);
+}
+
+function getAll(req, res, next) {
+ userService.getAll()
+ .then(users => res.json(users))
+ .catch(next);
+}
+
+function getCurrent(req, res, next) {
+ res.json(req.user);
+}
+
+function getById(req, res, next) {
+ userService.getById(req.params.id)
+ .then(user => res.json(user))
+ .catch(next);
+}
+
+function updateSchema(req, res, next) {
+ const schema = Joi.object({
+ firstName: Joi.string().empty(''),
+ lastName: Joi.string().empty(''),
+ username: Joi.string().empty(''),
+ password: Joi.string().min(6).empty('')
+ });
+ validateRequest(req, next, schema);
+}
+
+function update(req, res, next) {
+ userService.update(req.params.id, req.body)
+ .then(user => res.json(user))
+ .catch(next);
+}
+
+function _delete(req, res, next) {
+ userService.delete(req.params.id)
+ .then(() => res.json({ message: 'User deleted successfully' }))
+ .catch(next);
+} |