Final Project

final_project/index.js

@@ -3,20 +3,39 @@ const jwt = require('jsonwebtoken');
 const session = require('express-session')
 const customer_routes = require('./router/auth_users.js').authenticated;
 const genl_routes = require('./router/general.js').general;
+const { users } = require("./router/auth_users.js");
 
 const app = express();
 
 app.use(express.json());
 
-app.use("/customer",session({secret:"fingerprint_customer",resave: true, saveUninitialized: true}))
+app.get("/users", (req, res) => {
+    return res.status(200).json({
+        users,
+    });
+});
+
+app.use("/customer", session({ secret: "fingerprint_customer", resave: true, saveUninitialized: true }))
+
+app.use("/customer/auth/*", function auth(req, res, next) {
+    if (!req.session.authorization) {
+        return res.status(403).json({ message: "User not logged in" });
+    }
 
-app.use("/customer/auth/*", function auth(req,res,next){
-//Write the authenication mechanism here
+    const token = req.session.authorization.accessToken;
+
+    jwt.verify(token, "fingerprint", (err, user) => {
+        if (err) {
+            return res.status(403).json({ message: "Invalid token" });
+        }
+        req.user = user;
+        next();
+    });
 });
- 
-const PORT =5000;
+
+const PORT = 5000;
 
 app.use("/customer", customer_routes);
 app.use("/", genl_routes);
 
-app.listen(PORT,()=>console.log("Server is running"));
+app.listen(PORT, () => console.log("Server is running"));

final_project/router/auth_users.js

@@ -6,23 +6,99 @@ const regd_users = express.Router();
 let users = [];
 
 const isValid = (username)=>{ //returns boolean
-//write code to check is the username is valid
+return users.some((user) => user.username === username);
 }
 
 const authenticatedUser = (username,password)=>{ //returns boolean
-//write code to check if username and password match the one we have in records.
+return users.some(
+        (user) => user.username === username && user.password === password
+    );
 }
 
 //only registered users can login
-regd_users.post("/login", (req,res) => {
-  //Write your code here
-  return res.status(300).json({message: "Yet to be implemented"});
+regd_users.post("/login", (req, res) => {
+    const { username, password } = req.body;
+
+    if (!username || !password) {
+        return res.status(409).json({
+            message: "Please enter username and password both!",
+        });
+    }
+
+    if (!authenticatedUser(username, password)) {
+        return res.status(400).json({
+            message: "Username and password do not match",
+            username,
+            password,
+        });
+    }
+
+    const token = jwt.sign({ username }, "fingerprint", { expiresIn: "1h" });
+
+    req.session.authorization = {
+        accessToken: token,
+        username,
+    };
+
+    return res.status(200).json({
+        message: "Login successful",
+        token: token,
+    });
 });
 
 // Add a book review
 regd_users.put("/auth/review/:isbn", (req, res) => {
-  //Write your code here
-  return res.status(300).json({message: "Yet to be implemented"});
+    const isbn = req.params.isbn;
+    const review = req.body.review;
+
+    if (!review) {
+        return res.status(400).json({ message: "Review is required" });
+    }
+
+    const username = req.session.authorization?.username;
+    const book = books[isbn];
+
+    if (!book) {
+        return res.status(404).json({ message: "Book not found" });
+    }
+
+    book.reviews[username] = review;
+
+    return res.status(200).json({
+        message: "Rating saved",
+        reviews: book.reviews,
+        books
+    });
+});
+
+regd_users.delete("/auth/review/:isbn", (req, res) => {
+    const isbn = req.params.isbn; // keep as string
+    const username = req.session.authorization?.username;
+
+    if (!username) {
+        return res.status(401).json({
+            message: "Not authorized. Please log in",
+        });
+    }
+
+    const book = books[isbn];
+    if (!book) {
+        return res.status(404).json({
+            message: "Book not found",
+        });
+    }
+
+    if (!book.reviews[username]) {
+        return res.status(404).json({
+            message: "No review found from this user",
+        });
+    }
+
+    delete book.reviews[username];  // delete user’s review
+
+    return res.status(200).json({
+        message: "Review successfully deleted",
+    });
 });
 
 module.exports.authenticated = regd_users;

final_project/router/booksdb.js

@@ -1,14 +1,54 @@
 let books = {
-      1: {"author": "Chinua Achebe","title": "Things Fall Apart", "reviews": {} },
-      2: {"author": "Hans Christian Andersen","title": "Fairy tales", "reviews": {} },
-      3: {"author": "Dante Alighieri","title": "The Divine Comedy", "reviews": {} },
-      4: {"author": "Unknown","title": "The Epic Of Gilgamesh", "reviews": {} },
-      5: {"author": "Unknown","title": "The Book Of Job", "reviews": {} },
-      6: {"author": "Unknown","title": "One Thousand and One Nights", "reviews": {} },
-      7: {"author": "Unknown","title": "Nj\u00e1l's Saga", "reviews": {} },
-      8: {"author": "Jane Austen","title": "Pride and Prejudice", "reviews": {} },
-      9: {"author": "Honor\u00e9 de Balzac","title": "Le P\u00e8re Goriot", "reviews": {} },
-      10: {"author": "Samuel Beckett","title": "Molloy, Malone Dies, The Unnamable, the trilogy", "reviews": {} }
-}
+    1: {
+        author: "Chinua Achebe",
+        title: "Things Fall Apart",
+        reviews: {},
+    },
+    2: {
+        author: "Hans Christian Andersen",
+        title: "Fairy tales",
+        reviews: {},
+    },
+    3: {
+        author: "Dante Alighieri",
+        title: "The Divine Comedy",
+        reviews: {},
+    },
+    4: {
+        author: "Unknown",
+        title: "The Epic Of Gilgamesh",
+        reviews: {},
+    },
+    5: {
+        author: "Unknown",
+        title: "The Book Of Job",
+        reviews: {},
+    },
+    6: {
+        author: "Unknown",
+        title: "One Thousand and One Nights",
+        reviews: {},
+    },
+    7: {
+        author: "Unknown",
+        title: "Nj\u00e1l's Saga",
+        reviews: {},
+    },
+    8: {
+        author: "Jane Austen",
+        title: "Pride and Prejudice",
+        reviews: {},
+    },
+    9: {
+        author: "Honor\u00e9 de Balzac",
+        title: "Le P\u00e8re Goriot",
+        reviews: {},
+    },
+    10: {
+        author: "Samuel Beckett",
+        title: "Molloy, Malone Dies, The Unnamable, the trilogy",
+        reviews: {},
+    },
+};
 
-module.exports=books;
+module.exports = books;