sirx: und weg damit :D

src/inc/routes/apiv2.mjs

@@ -1,5 +1,7 @@
 import router from "../router.mjs";
 import sql from "../sql.mjs";
+import { auth } from "../meddlware.mjs";
+import util from "util";
 
 const allowedMimes = [ "audio", "image", "video", "%" ];
 
@@ -71,3 +73,132 @@ router.get(/^\/api\/v2\/user\/.*(\/\d+)?$/, async (req, res) => { // auf qs umst
     body: JSON.stringify(rows.length > 0 ? rows : [])
   });
 });
+
+// adminzeugs
+router.post(/^\/api\/v2\/admin\/tags\/add$/, auth, async (req, res) => {
+  if(!req.post.postid || !req.post.tag) {
+    return res.reply({ body: JSON.stringify({
+      success: false,
+      msg: "missing postid or tag"
+    })});
+  }
+
+  const postid = +req.post.postid;
+  const tag = req.post.tag;
+
+  if(tag.length >= 45) {
+    return res.reply({ body: JSON.stringify({
+      success: false,
+      msg: "tag is too long!"
+    })});
+  }
+
+  try {
+    let tagid;
+    const tag_exists = await sql("tags").select("id", "tag").where("tag", tag);
+    if(tag_exists.length === 0) { // create new tag
+      tagid = (await sql("tags").insert({
+        tag: tag
+      }))[0];
+    }
+    else {
+      tagid = tag_exists[0].id;
+    }
+    await sql("tags_assign").insert({
+      tag_id: tagid,
+      item_id: postid,
+      prefix: `${req.session.user}@webinterface`
+    });
+  } catch(err) {
+    return res.reply({ body: JSON.stringify({
+      success: false,
+      msg: err.message,
+      tags: await getTags(postid)
+    })});
+  }
+
+  return res.reply({ body: JSON.stringify({
+    success: true,
+    postid: req.post.postid,
+    tag: req.post.tag,
+    tags: await getTags(postid)
+  })});
+});
+
+const getTags = async itemid => await sql("tags_assign")
+  .leftJoin("tags", "tags.id", "tags_assign.tag_id")
+  .where("tags_assign.item_id", itemid)
+  .select("tags.id", "tags.tag", "tags_assign.prefix");
+
+const cleanTags = async () => {
+  const tags = await sql("tags").leftJoin("tags_assign", "tags_assign.tag_id", "tags.id").whereNull("tags_assign.item_id");
+  if(tags.length === 0)
+    return;
+  
+  let deleteTag = sql("tags");
+  tags.forEach(tag => {
+    if(["sfw", "nsfw"].includes(tag.tag.toLowerCase()))
+      return;
+    deleteTag = deleteTag.orWhere("id", tag.id);
+  });
+  await deleteTag.del();
+};
+
+router.post(/^\/api\/v2\/admin\/tags\/delete$/, auth, async (req, res) => {
+  if(!req.post.postid || !req.post.tag) {
+    return res.reply({ body: JSON.stringify({
+      success: false,
+      msg: "missing postid or tag"
+    })});
+  }
+
+  const postid = +req.post.postid;
+  const tag = req.post.tag;
+
+  const tags = await getTags(postid);
+
+  const tagid = tags.filter(t => t.tag === tag)[0]?.id ?? null;
+  if(!tagid || tagid?.length === 0) {
+    return res.reply({ body: JSON.stringify({
+      success: false,
+      tag: tag,
+      msg: "tag is not assigned",
+      tags: await getTags(postid)
+    })});
+  }
+  
+  let q = sql("tags_assign").where("tag_id", tagid).andWhere("item_id", postid).del();
+  if(req.session.level < 50)
+    q = q.andWhere("prefix", `${req.session.user}@webinterface`);
+  const reply = !!(await q);
+
+  await cleanTags();
+
+  return res.reply({ body: JSON.stringify({
+    success: reply,
+    tag: tag,
+    tagid: tagid,
+    tags: await getTags(postid)
+  })});
+});
+
+router.get(/^\/api\/v2\/admin\/tags\/get\/\d+$/, auth, async (req, res) => {
+  return res.reply({ body: JSON.stringify({
+    tags: await getTags(+req.url.split[5])
+  })});
+});
+
+router.get(/^\/api\/v2\/admin\/deletepost\/\d+$/, auth, async (req, res) => {
+  if(!req.url.split[4]) {
+    return res.reply({ body: JSON.stringify({
+      success: true,
+      msg: "no postid"
+    })});
+  }
+  const postid = +req.url.split[4];
+
+  const rows = await sql("items").where("id", postid).del();
+  res.reply({ body: JSON.stringify({
+    success: true
+  })});
+});