Merge pull request #3 from Pathokun/access-public-private

Access Public Private

Author: jack5341

src/middlewares/authorize.js

@@ -3,19 +3,17 @@ import jwt from "jsonwebtoken"
 export const fetchAuthorize = (req, res, next) => {
     let token = req.headers.Authorization || req.headers.authorization;
     if (!token) {
-        return res.status(401).send({
-            message: 'Unauthorized'
-        });
+        req.auth = false 
+        next()
     }
 
     if (token.startsWith('Bearer ')) token = token.substr('Bearer '.length)
 
     jwt.verify(token, process.env.SECRET_KEY, err => {
         if (err) {
-            return res.status(401).send({
-                message: 'Unauthorized'
-            });
+            throw err
         }
+        req.auth = true
         next();
     });
 }

src/routes/api.js

@@ -1,4 +1,4 @@
-import { Router } from "express";
+import { response, Router } from "express";
 import jwt from "jsonwebtoken";
 
 const route = Router();
@@ -10,7 +10,7 @@ route.get("/getprivtoken", (_, res) => {
 
 route.post("/point", async (req, res) => {
     const DATABASE = req.db;
-    const { url, description, content, date } = req.body;
+    const { url, description, content, date, isprivate } = req.body;
 
     if (!url || !content) {
         res.status(400).send();
@@ -21,6 +21,7 @@ route.post("/point", async (req, res) => {
         url: url,
         description: description ? description : null,
         content: content,
+        isprivate: isprivate,
         date: date ? date : null,
     };
 
@@ -57,6 +58,18 @@ route.get("/fetch/:point", async(req, res) => {
         return;
     }
 
+    if(result.isprivate) {
+        req.auth ? () => {
+            res.status(200).send({
+                data: result,   
+            })
+            return 
+        } : () => {
+            res.status(401).send()
+            return
+        }
+    }
+
     res.status(200).send({
         data: result,
     });

src/views/components/cards/create-component.ejs

@@ -12,6 +12,10 @@
         id="endpoint-url"
       />
     </div>
+    <div class="form-switch mb-3">
+      <input class="form-check-input" id="isprivate" type="checkbox" id="flexSwitchCheckChecked">
+      <label class="form-check-label" for="flexSwitchCheckChecked">Private Access 🔒</label>
+    </div>    
     <div class="mb-3">
       <label for="description" class="form-label">Description:</label>
       <input
@@ -48,7 +52,8 @@
     const url = document.getElementById("endpoint-url").value;
     const description = document.getElementById("description").value;
     const content = document.getElementById("content").value;
-
+    const isprivate = document.getElementById("isprivate").checked;
+    
     if (url === "" || description === "" || content === "") {
       alert("Please fill all the fields.");
       return;
@@ -63,6 +68,7 @@
         url: url,
         description: description,
         content: content,
+        isprivate: isprivate,
         date: new Date().toISOString(),
       }),
     }).then((res) => {