fdfsa

src/inc/routes/admin.mjs

@@ -12,7 +12,7 @@ import cfg from "../config.mjs";
 import security from "../security.mjs";
 import crypto from "crypto";
 import path from "path";
-import { getManualApproval, setManualApproval, getMinTags, setMinTags, getRegistrationOpen, setRegistrationOpen, getTrustedUploads, setTrustedUploads, getEnablePdf, setEnablePdf, getLogUserIps, setLogUserIps, getHashUserIps, setHashUserIps, getEnableCleanup, setEnableCleanup, getCleanupStartDate, setCleanupStartDate, getCleanupEndDate, setCleanupEndDate, getCleanupIncludeEngaged, setCleanupIncludeEngaged, getShitpostMode } from "../settings.mjs";
+import { getManualApproval, setManualApproval, getMinTags, setMinTags, getRegistrationOpen, setRegistrationOpen, getTrustedUploads, setTrustedUploads, getEnablePdf, setEnablePdf, getLogUserIps, setLogUserIps, getHashUserIps, setHashUserIps, getEnableCleanup, setEnableCleanup, getCleanupStartDate, setCleanupStartDate, getCleanupEndDate, setCleanupEndDate, getCleanupIncludeEngaged, setCleanupIncludeEngaged, getShitpostMode, ensureAllItemsHaveSlugs, getEnableItemSlugs } from "../settings.mjs";
 
 export default (router, tpl) => {
   router.get(/^\/login(\/)?$/, async (req, res) => {
@@ -650,7 +650,78 @@ export default (router, tpl) => {
 
     return res.writeHead(302, { "Location": "/admin" }).end();
   });
-  
+
+  // Config Manager API GET
+  router.get(/^\/api\/v2\/admin\/config\/?$/, async (req, res) => {
+    const origin = req.headers?.origin || '*';
+    res.setHeader('Access-Control-Allow-Origin', origin);
+    res.setHeader('Access-Control-Allow-Credentials', 'true');
+
+    const isDev = cfg.main?.development === true;
+    if (!isDev && (!req.session || !req.session.admin)) {
+      return res.writeHead(401, { 'Content-Type': 'application/json' }).end(JSON.stringify({ success: false, msg: 'Unauthorized' }));
+    }
+
+    try {
+      const configPath = path.resolve(process.cwd(), "config.json");
+      const raw = await fs.readFile(configPath, "utf-8");
+      const json = JSON.parse(raw);
+      if (res.json) return res.json({ success: true, config: json });
+      return res.writeHead(200, { 'Content-Type': 'application/json' }).end(JSON.stringify({ success: true, config: json }));
+    } catch (err) {
+      if (res.json) return res.json({ success: false, msg: err.message });
+      return res.writeHead(500, { 'Content-Type': 'application/json' }).end(JSON.stringify({ success: false, msg: err.message }));
+    }
+  });
+
+  // Config Manager API POST
+  router.post(/^\/api\/v2\/admin\/config\/?$/, async (req, res) => {
+    const origin = req.headers?.origin || '*';
+    res.setHeader('Access-Control-Allow-Origin', origin);
+    res.setHeader('Access-Control-Allow-Credentials', 'true');
+
+    const isDev = cfg.main?.development === true;
+    if (!isDev && (!req.session || !req.session.admin)) {
+      return res.writeHead(401, { 'Content-Type': 'application/json' }).end(JSON.stringify({ success: false, msg: 'Unauthorized' }));
+    }
+
+    try {
+      let updatedConfig = req.post?.config || req.json?.config || req.post;
+      if (typeof updatedConfig === 'string') {
+        updatedConfig = JSON.parse(updatedConfig);
+      }
+      if (!updatedConfig || typeof updatedConfig !== 'object') {
+        throw new Error('Invalid configuration payload');
+      }
+
+      const configPath = path.resolve(process.cwd(), "config.json");
+      
+      // Write formatted JSON to config.json on disk
+      await fs.writeFile(configPath, JSON.stringify(updatedConfig, null, 2) + "\n", "utf-8");
+
+      // Mutate in-memory cfg object so changes apply immediately
+      Object.assign(cfg, updatedConfig);
+
+      if (getEnableItemSlugs()) {
+        ensureAllItemsHaveSlugs();
+      }
+
+      // Audit log entry (if session available)
+      if (req.session?.id) {
+        await audit.log(req.session.id, 'update_config_file', 'system', 0, { updatedKeys: Object.keys(updatedConfig) });
+      }
+
+      const response = { success: true, message: 'Configuration saved to config.json' };
+      if (res.json) return res.json(response);
+      return res.writeHead(200, { 'Content-Type': 'application/json' }).end(JSON.stringify(response));
+    } catch (err) {
+      console.error('[ADMIN] Config Save Error:', err);
+      const response = { success: false, msg: err.message };
+      if (res.json) return res.json(response, 400);
+      return res.writeHead(400, { 'Content-Type': 'application/json' }).end(JSON.stringify(response));
+    }
+  });
+
   router.get(/^\/admin\/cleanup\/?$/, lib.auth, async (req, res) => {
     if (!getEnableCleanup()) {
       return res.redirect("/admin");