mifi/Eventment-API
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

- Updating routes with security

Browse Source
This commit is contained in:
Mike Fitzpatrick
2019-07-04 16:45:49 -04:00
parent dd3552dee4
commit 6d5d238d34
5 changed files with 34 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
routes/sales.js
View File

@@ -8,8 +8,8 @@ const errors = require('restify-errors');
*/
const Sale = require('../models/sale');
module.exports = function(server) {
server.post('/sales', (req, res, next) => {
module.exports = function (server, auth) {
server.post('/sales', auth.manager, (req, res, next) => {
let data = req.body || {};
@@ -26,7 +26,7 @@ module.exports = function(server) {
});
});
server.get('/sales', (req, res, next) => {
server.get('/sales', auth.manager, (req, res, next) => {
Sale.apiQuery(req.params, function(err, docs) {
if (err) {
console.error(err);
@@ -40,7 +40,7 @@ module.exports = function(server) {
});
});
server.get('/sales/:sale_id', (req, res, next) => {
server.get('/sales/:sale_id', auth.manager, (req, res, next) => {
Sale.findOne({ _id: req.params.sale_id }, function(err, doc) {
if (err) {
console.error(err);
@@ -54,7 +54,7 @@ module.exports = function(server) {
});
});
server.put('/sales/:sale_id', (req, res, next) => {
server.put('/sales/:sale_id', auth.manager, (req, res, next) => {
let data = req.body || {};
@@ -76,7 +76,7 @@ module.exports = function(server) {
);
}
Sale.update({ _id: data._id }, data, function(err) {
Sale.updateOne({ _id: data._id }, data, function(err) {
if (err) {
console.error(err);
return next(
@@ -90,7 +90,7 @@ module.exports = function(server) {
});
});
server.del('/sales/:sale_id', (req, res, next) => {
server.del('/sales/:sale_id', auth.manager, (req, res, next) => {
Sale.deleteOne({ _id: req.params.sale_id }, function(err) {
if (err) {
console.error(err);