initial commit, boilerplate stuff

api/routes/dumps.ts

@@ -0,0 +1,130 @@
+import { Router } from "@oak/oak";
+
+import {
+  APIErrorCode,
+  APIException,
+  type APIResponse,
+  type Dump,
+  isCreateDumpRequest,
+  isUpdateDumpRequest,
+} from "../model/interfaces.ts";
+
+import { authMiddleware } from "../middleware/auth.ts";
+import {
+  createDump,
+  deleteDump,
+  getDump,
+  listDumps,
+  updateDump,
+} from "../services/dump-service.ts";
+
+const router = new Router({ prefix: "/api/dumps" });
+
+router.post(
+  "/",
+  authMiddleware,
+  async (ctx) => {
+    const createDumpRequest = await ctx.request.body.json();
+
+    if (!isCreateDumpRequest(createDumpRequest)) {
+      throw new APIException(
+        APIErrorCode.VALIDATION_ERROR,
+        400,
+        "Invalid dump data",
+      );
+    }
+
+    const userId = ctx.state.user.userId;
+    const dump = createDump(createDumpRequest, userId);
+
+    const responseBody: APIResponse<Dump> = {
+      success: true,
+      data: dump,
+    };
+
+    ctx.response.status = 201;
+    ctx.response.body = responseBody;
+  },
+);
+
+router.get("/:dumpId", (ctx) => {
+  const dumpId = ctx.params.dumpId;
+  const dump = getDump(dumpId);
+
+  const responseBody: APIResponse<Dump> = {
+    success: true,
+    data: dump,
+  };
+
+  ctx.response.body = responseBody;
+});
+
+router.get("/", (ctx) => {
+  const dumps = listDumps();
+
+  const responseBody: APIResponse<Dump[]> = {
+    success: true,
+    data: dumps,
+  };
+
+  ctx.response.body = responseBody;
+});
+
+router.put("/:dumpId", authMiddleware, async (ctx) => {
+  const dumpId = ctx.params.dumpId;
+  const userId = ctx.state.user?.userId;
+  const updateDumpRequest = await ctx.request.body.json();
+
+  if (!isUpdateDumpRequest(updateDumpRequest)) {
+    throw new APIException(
+      APIErrorCode.VALIDATION_ERROR,
+      422,
+      "Erroneous user input",
+    );
+  }
+
+  const dump = getDump(dumpId);
+
+  if (userId !== dump.userId) {
+    throw new APIException(
+      APIErrorCode.UNAUTHORIZED,
+      401,
+      "Not authorized to update dump",
+    );
+  }
+
+  const updatedDump = updateDump(dumpId, updateDumpRequest);
+
+  const responseBody: APIResponse<Dump> = {
+    success: true,
+    data: updatedDump,
+  };
+
+  ctx.response.body = responseBody;
+});
+
+router.delete("/:dumpId", authMiddleware, (ctx) => {
+  const dumpId = ctx.params.dumpId;
+  const userId = ctx.state.user?.userId;
+
+  const dump = getDump(dumpId);
+
+  if (userId !== dump.userId) {
+    throw new APIException(
+      APIErrorCode.UNAUTHORIZED,
+      401,
+      "Not authorized to update dump",
+    );
+  }
+
+  deleteDump(dumpId);
+
+  const responseBody: APIResponse<null> = {
+    success: true,
+    data: null,
+  };
+
+  ctx.response.body = responseBody;
+});
+
+export default router;

api/routes/users.ts

@@ -0,0 +1,132 @@
+import { Router } from "@oak/oak";
+
+import {
+  APIErrorCode,
+  APIException,
+  isLoginUserRequest,
+  isRegisterUserRequest,
+} from "../model/interfaces.ts";
+
+import { createJWT, verifyPassword } from "../lib/jwt.ts";
+import { type AuthContext, authMiddleware } from "../middleware/auth.ts";
+import {
+  createUser,
+  getUserById,
+  getUserByUsername,
+} from "../services/user-service.ts";
+
+// Users router
+const router = new Router({ prefix: "/api/users" });
+
+// Register a new user
+router.post("/register", async (ctx) => {
+  try {
+    const body = await ctx.request.body.json();
+
+    if (!isRegisterUserRequest(body)) {
+      throw new APIException(
+        APIErrorCode.VALIDATION_ERROR,
+        400,
+        "Invalid request",
+      );
+    }
+
+    const user = await createUser(body);
+    const token = await createJWT({
+      userId: user.id,
+      username: user.username,
+      isAdmin: user.isAdmin,
+    });
+
+    ctx.response.status = 201;
+    ctx.response.body = {
+      success: true,
+      data: {
+        token,
+        user,
+      },
+    };
+  } catch (err) {
+    console.error(err);
+
+    throw new APIException(
+      APIErrorCode.SERVER_ERROR,
+      500,
+      "Failed to register user",
+    );
+  }
+});
+
+// Login
+router.post("/login", async (ctx) => {
+  try {
+    const body = await ctx.request.body.json();
+
+    if (!isLoginUserRequest(body)) {
+      throw new APIException(
+        APIErrorCode.VALIDATION_ERROR,
+        400,
+        "Invalid request",
+      );
+    }
+
+    const user = getUserByUsername(body.username);
+    const valid = await verifyPassword(body.password, user.passwordHash);
+
+    if (!valid) {
+      throw new APIException(
+        APIErrorCode.VALIDATION_ERROR,
+        401,
+        "Invalid username or password",
+      );
+    }
+
+    const token = await createJWT({
+      userId: user.id,
+      username: user.username,
+      isAdmin: user.isAdmin,
+    });
+
+    ctx.response.body = {
+      success: true,
+      data: {
+        token,
+        user,
+      },
+    };
+  } catch (err) {
+    console.error(err);
+
+    throw new APIException(APIErrorCode.SERVER_ERROR, 500, "Failed to login");
+  }
+});
+
+// Get current user profile
+router.get("/me", authMiddleware, (ctx: AuthContext) => {
+  try {
+    if (!ctx.state.user) {
+      throw new APIException(
+        APIErrorCode.UNAUTHORIZED,
+        401,
+        "Not authenticated",
+      );
+    }
+
+    const user = getUserById(ctx.state.user.userId);
+
+    ctx.response.body = {
+      success: true,
+      data: user,
+    };
+  } catch (err) {
+    console.error(err);
+
+    throw new APIException(
+      APIErrorCode.SERVER_ERROR,
+      500,
+      "Failed to fetch user profile",
+    );
+  }
+});
+
+export default router;