Refactor summary into submodule, fix bug in expectededs

1 files changed, 296 insertions, 0 deletions

diff --git a/src/server/index.js b/src/server/index.js
new file mode 100644
index 0000000..75c00d1
--- /dev/null
+++ b/src/server/index.js
@@ -0,0 +1,296 @@
+const express = require('express');
+const bodyParser = require('body-parser');
+const cookieParser = require('cookie-parser');
+//const request = require('request');
+const crypto = require('crypto');
+const uuidv4 = require('uuid/v4');
+
+const path = require('path');
+const fs = require('fs');
+const config = JSON.parse(fs.readFileSync(path.join(__dirname, '../config.json')));
+
+const server = express();
+server.use(cookieParser())
+server.use(bodyParser.json());
+server.use(bodyParser.urlencoded({ extended: true }));
+
+function listen(port) {
+    server.listen(port, () => console.info(`Listening: http://localhost:${port} `));
+}
+
+function hashWithSalt(password, salt) {
+    var hash = crypto.createHmac('sha512', salt);
+    hash.update(password);
+    return hash.digest("base64");
+};
+
+let messages = {}
+function putMessage(message, res){
+    console.debug("message put", res.locals.id, message)
+    messages[res.locals.id] = message;
+}
+function consumeMessage(res){
+    let id = res.locals.id
+    if(messages[id]){
+        let t = messages[id]
+        console.debug("message consume", id, t)
+        delete messages[id]
+        return t
+    } else {
+        console.debug("message consume", id, undefined)
+        return undefined
+    }
+}
+function dateToString(d){
+    return `${d.getFullYear().toString()}/${d.getMonth().toString()}/${d.getDate().toString()}`
+}
+
+function setUpRoutes(models, jwtFunctions, database, templates) {
+    // Authentication routine
+    server.use(async function (req, res, next) {
+        let session_cookie = req.cookies.session;
+        if (!session_cookie) {
+            session_cookie = uuidv4();
+            res.cookie('session', session_cookie, { expires: new Date(Date.now() + (1000 * 60 * 60 * 30)) });
+        }
+        res.locals.id = session_cookie;
+
+        let path = req.path.toLowerCase();
+        if(path.startsWith("/static")){
+            next();
+            return;
+        }
+        if (!path.startsWith("/login")) {
+            let cookie = req.cookies.authorization
+            if (!cookie) {
+                console.debug("Redirecting to login - no cookie")
+                res.redirect('/login');
+                return;
+            }
+            try {
+                const decryptedUserId = jwtFunctions.verify(cookie);
+                var user = await models.users.findOne({ where: { username: decryptedUserId } });
+                if (user) {
+                    res.locals.user = user.get({ plain: true });
+                } else {
+                    console.debug("Redirecting to login - invalid cookie")
+                    res.redirect('/login');
+                    return;
+                }
+            } catch (e) {
+                res.status(400).send(e.message);
+            }
+        }
+        next();
+    })
+
+    // Route logging
+    server.use(function (req, res, next) {
+        console.debug(new Date(), req.method, req.originalUrl);
+        next()
+    })
+
+    server.use('/static', express.static(path.join(__dirname, '../static')))
+    server.get('/', (req, res) => res.redirect("/ledger"))
+    server.get('/about', (req, res) => {
+        let name = res.locals.user.username
+        let body = templates["about"]({name});
+        res.status(200).send(body)
+    })
+    server.get('/me', (req, res) => {
+        let name = res.locals.user.username
+        let body = templates["me"]({name, message: consumeMessage(res)});
+        res.status(200).send(body)
+    })
+    server.get('/login', (req, res) => {
+        let body = templates["login"]({message: consumeMessage(res)});
+        res.status(200).send(body)
+    })
+    server.get('/logout', (req, res) => {
+        putMessage("Logged out", res)
+        res.clearCookie('authorization');
+        res.redirect("/login");
+    });
+    server.get('/login/signup', async (req, res) => {
+        let body = templates["signup"]({message: consumeMessage(res)});
+        res.status(200).send(body)
+    })
+    server.get('/ledger', async (req, res) => {
+        var ledger = await database.query(`SELECT * FROM transactions WHERE username = '${res.locals.user.username}' ORDER BY \`when\` DESC`, { type: database.QueryTypes.SELECT })
+        ledger.forEach((element, i) => {
+            element.when = dateToString(element.when);
+            element.index = i + 1
+        });
+        let name = res.locals.user.username
+        let body = templates["ledger"]({ name, ledger })
+        res.status(200).send(body)
+    })
+    server.get('/ledger/edit/:id', async (req, res) => {
+        let ledger = await database.query(`SELECT * FROM transactions WHERE username = '${res.locals.user.username}' and id='${req.params.id}' ORDER BY \`when\` DESC`, { type: database.QueryTypes.SELECT })
+        let ledger_item = ledger[0]
+        let name = res.locals.user.username
+        let body = templates["ledger-edit"]({ name, item: ledger_item })
+        res.status(200).send(body)
+    })
+    server.get('/goals', async (req, res) => {
+        let goals = await database.query(`SELECT * FROM goals WHERE username = '${res.locals.user.username}' ORDER BY \`name\` DESC`, { type: database.QueryTypes.SELECT })
+        goals.forEach((element, i) => {
+            element.remaining = element.total - element.amount;
+            element.index = i + 1
+        });
+        let name = res.locals.user.username
+        let body = templates["goals"]({ name, goals })
+        res.status(200).send(body)
+    })
+    server.get(`/expected`, async (req, res, next) => {
+        try {
+            let expecteds = await database.query(`SELECT * FROM expecteds WHERE username = '${res.locals.user.username}' ORDER BY \`name\` DESC`, { type: database.QueryTypes.SELECT })
+            let day_average = 0
+            expecteds.forEach((element, i) => {
+                element.index = i + 1
+                day_average += (element.total / element.days)
+            });
+            let name = res.locals.user.username
+            let week = Math.round(day_average * 7)
+            let month = Math.round(day_average * 31)
+            let year = Math.round(day_average * 365)
+            let body = templates["expected"]({ name, expecteds, week, month, year })
+            res.status(200).send(body);
+        } catch (e) {
+            console.log(e)
+            res.status(400).send(e.message);
+        }
+    })
+    const summary = require('./summary');
+    summary.setUpRoutes(server, models, jwtFunctions, database, templates);
+    
+    server.post('/password', async (req, res, next) => {
+        const user = await models.users.findOne({ where: { username: res.locals.user.username } })
+        const hash = hashWithSalt(req.body.old, user.salt)
+        if(hash != user.password){
+            putMessage("Old password incorrect", res)
+            res.redirect("/me");
+        } else if( req.body.new1 != req.body.new2){
+            putMessage("New passwords do not match", res)
+            res.redirect("/me");
+        } else {
+            await user.update({password: hash});
+            putMessage("Password updated", res);
+            res.redirect("/me");
+        }
+    })
+    server.post('/login', async (req, res, next) => {
+        const user = await models.users.findOne({ where: { username: req.body.username } })
+        const hash = hashWithSalt(req.body.password, user.salt)
+        if (!user || user.password != hash) {
+            putMessage("Username or password incorrect", res)
+            res.redirect('/login');
+        } else if (user.password == hash) {
+            const token = jwtFunctions.sign(user.username);
+            res.cookie('authorization', token, { expires: new Date(Date.now() + (1000 * 60 * 60 * 24 * 30)) });
+            res.redirect('/ledger');
+        }
+    })
+    server.post('/login/signup', async (req, res) => {
+        if(req.body.code != config.signup_code){
+            putMessage("Bad code", res)
+            res.redirect('/login/signup');
+            return;
+        }
+        const user = await models.users.findOne({ where: { username: req.body.username } })
+        if(user){
+            putMessage("Username already exists", res)
+            res.redirect('/login/signup');
+            return;
+        }
+        let salt = crypto.randomBytes(32).toString("Base64");
+        let password = req.body.password
+        const hash = hashWithSalt(password, salt)
+        let new_user = {
+            username: req.body.username,
+            password: hash,
+            salt: salt
+        }
+        await models.users.create(new_user);
+        putMessage("Account created, please log in")
+        res.redirect("/login")
+    })
+    server.post(`/transaction`, async (req, res, next) => {
+        try {
+            let item = req.body;
+            item.username = res.locals.user.username
+            if (!item.when) {
+                item.when = new Date().toLocaleDateString();
+            }
+            await models.transaction.create(item);
+            res.redirect("/ledger")
+        } catch (e) {
+            console.log(e);
+            res.status(400).send(e.message);
+        }
+    })
+    server.post(`/allocate`, async (req, res, next) => {
+        try {
+            let amount = req.body.amount;
+            var toUpdate = await models.goals.findOne({ where: { name: req.body.name, username: res.locals.user.username } });
+            var update = { amount: toUpdate.amount + amount }
+            await toUpdate.update(update);
+            res.redirect("/goals")
+        } catch (e) {
+            console.log(e);
+            res.status(400).send(e.message);
+        }
+    })
+    server.post(`/goals`, async (req, res, next) => {
+        try {
+            let item = req.body;
+            item.username = res.locals.user.username
+            item.amount = 0;
+            await models.goals.create(item);
+            res.redirect("/goals")
+        } catch (e) {
+            console.log(e);
+            res.status(400).send(e.message);
+        }
+    })
+    server.post(`/expected`, async (req, res, next) => {
+        try {
+            let item = req.body;
+            item.username = res.locals.user.username
+            await models.expected.create(item);
+            res.redirect("/expected")
+        } catch (e) {
+            console.log(e);
+            res.status(400).send(e.message);
+        }
+    })
+    server.post(`/transaction/:id`, async (req, res, next) => {
+        try {
+            let id = req.params.id;
+            let update = req.body;
+            if(update.when.length == 0){
+                delete update.when
+            }
+            var toUpdate = await models.transaction.findOne({ where: { id: id, username:res.locals.user.username } });
+            await toUpdate.update(update);
+            res.redirect(`/ledger`)
+        } catch (e) {
+            console.log(e);
+            res.status(400).send(e.message);
+        }
+    })
+
+    server.delete('/ledger/:id', async (req, res) => {
+        let id = req.params.id;
+        console.log(id, res.locals.user.username)
+        await models.transaction.destroy({ where: { id, username: res.locals.user.username } });
+        res.redirect('/ledger')
+    })
+}
+
+module.exports = {
+    listen,
+    setUpRoutes
+};
+
+