Updates
This commit is contained in:
nadja
32
backend/dist/routes/analytics.js
vendored
Normal file
32
backend/dist/routes/analytics.js
vendored
Normal file
@@ -0,0 +1,32 @@
|
||||
import { Router } from 'express';
|
||||
import { getOverview, getPageviewsByDay, getTopUsers, getTopRecipes, getEvents } from '../analytics-db.js';
|
||||
import { getUserById } from '../db.js';
|
||||
const router = Router();
|
||||
router.get('/overview', (req, res) => {
|
||||
res.json(getOverview());
|
||||
});
|
||||
router.get('/pageviews', (req, res) => {
|
||||
const { from, to } = req.query;
|
||||
res.json(getPageviewsByDay(from, to));
|
||||
});
|
||||
router.get('/users', (req, res) => {
|
||||
const topUsers = getTopUsers(20);
|
||||
const enriched = topUsers.map(u => {
|
||||
const user = getUserById(u.user_id);
|
||||
return { ...u, username: user ? user.username : `User #${u.user_id}` };
|
||||
});
|
||||
res.json(enriched);
|
||||
});
|
||||
router.get('/recipes', (req, res) => {
|
||||
res.json(getTopRecipes(20));
|
||||
});
|
||||
router.get('/activity', (req, res) => {
|
||||
const { user_id, limit } = req.query;
|
||||
const events = getEvents({ user_id, limit: limit ? Number(limit) : 50 });
|
||||
const enriched = events.map(e => {
|
||||
const user = e.user_id ? getUserById(e.user_id) : null;
|
||||
return { ...e, username: user ? user.username : null };
|
||||
});
|
||||
res.json(enriched);
|
||||
});
|
||||
export default router;
|
||||
175
backend/dist/routes/auth.js
vendored
Normal file
175
backend/dist/routes/auth.js
vendored
Normal file
@@ -0,0 +1,175 @@
|
||||
import { Router } from 'express';
|
||||
import bcrypt from 'bcryptjs';
|
||||
import jwt from 'jsonwebtoken';
|
||||
import crypto from 'crypto';
|
||||
import { getUserByUsername, getUserById, createUser, updateUserCredentials, deleteUser, createInviteToken, getInviteToken, useInviteToken, getInvitesByUser, getAllUsers, getInviteStats } from '../db.js';
|
||||
import { authMiddleware, adminMiddleware } from '../middleware.js';
|
||||
import { trackEvent } from '../analytics-db.js';
|
||||
const router = Router();
|
||||
const JWT_SECRET = process.env.JWT_SECRET || 'tiktok-rezepte-secret-key-change-in-production';
|
||||
const JWT_EXPIRES_IN = '7d';
|
||||
router.post('/register', async (req, res) => {
|
||||
try {
|
||||
const { username, password, inviteToken } = req.body;
|
||||
if (!username || !password || !inviteToken) {
|
||||
return res.status(400).json({ error: 'Benutzername, Passwort und Einladungscode erforderlich' });
|
||||
}
|
||||
if (username.length < 3) {
|
||||
return res.status(400).json({ error: 'Benutzername muss mindestens 3 Zeichen lang sein' });
|
||||
}
|
||||
if (password.length < 6) {
|
||||
return res.status(400).json({ error: 'Passwort muss mindestens 6 Zeichen lang sein' });
|
||||
}
|
||||
const invite = getInviteToken(inviteToken);
|
||||
if (!invite) {
|
||||
return res.status(400).json({ error: 'Ungültiger Einladungscode' });
|
||||
}
|
||||
if (invite.used_by) {
|
||||
return res.status(400).json({ error: 'Einladungscode wurde bereits verwendet' });
|
||||
}
|
||||
const existing = getUserByUsername(username);
|
||||
if (existing) {
|
||||
return res.status(409).json({ error: 'Benutzername ist bereits vergeben' });
|
||||
}
|
||||
const hashedPassword = await bcrypt.hash(password, 10);
|
||||
const user = createUser(username, hashedPassword);
|
||||
useInviteToken(inviteToken, user.id);
|
||||
trackEvent('user_register', user.id, { username: user.username });
|
||||
const token = jwt.sign({ id: user.id, username: user.username }, JWT_SECRET, { expiresIn: JWT_EXPIRES_IN });
|
||||
res.status(201).json({ user, token });
|
||||
}
|
||||
catch (error) {
|
||||
res.status(500).json({ error: 'Registrierung fehlgeschlagen' });
|
||||
}
|
||||
});
|
||||
router.post('/login', async (req, res) => {
|
||||
try {
|
||||
const { username, password } = req.body;
|
||||
if (!username || !password) {
|
||||
return res.status(400).json({ error: 'Benutzername und Passwort erforderlich' });
|
||||
}
|
||||
const user = getUserByUsername(username);
|
||||
if (!user) {
|
||||
return res.status(401).json({ error: 'Ungültige Anmeldedaten' });
|
||||
}
|
||||
const valid = await bcrypt.compare(password, user.password);
|
||||
if (!valid) {
|
||||
return res.status(401).json({ error: 'Ungültige Anmeldedaten' });
|
||||
}
|
||||
const token = jwt.sign({ id: user.id, username: user.username }, JWT_SECRET, { expiresIn: JWT_EXPIRES_IN });
|
||||
trackEvent('user_login', user.id, { username: user.username });
|
||||
res.json({
|
||||
user: { id: user.id, username: user.username, is_admin: !!user.is_admin, created_at: user.created_at },
|
||||
token,
|
||||
});
|
||||
}
|
||||
catch (error) {
|
||||
res.status(500).json({ error: 'Anmeldung fehlgeschlagen' });
|
||||
}
|
||||
});
|
||||
router.get('/me', (req, res) => {
|
||||
const authHeader = req.headers.authorization;
|
||||
if (!authHeader || !authHeader.startsWith('Bearer ')) {
|
||||
return res.status(401).json({ error: 'Nicht authentifiziert' });
|
||||
}
|
||||
try {
|
||||
const token = authHeader.split(' ')[1];
|
||||
const decoded = jwt.verify(token, JWT_SECRET);
|
||||
const user = getUserByUsername(decoded.username);
|
||||
if (!user)
|
||||
return res.status(401).json({ error: 'Benutzer nicht gefunden' });
|
||||
res.json({ id: user.id, username: user.username, is_admin: !!user.is_admin, created_at: user.created_at });
|
||||
}
|
||||
catch {
|
||||
res.status(401).json({ error: 'Ungültiges Token' });
|
||||
}
|
||||
});
|
||||
router.post('/invite', authMiddleware, adminMiddleware, (req, res) => {
|
||||
try {
|
||||
const { count = 1 } = req.body;
|
||||
const amount = Math.min(Math.max(parseInt(count) || 1, 1), 20);
|
||||
const tokens = [];
|
||||
for (let i = 0; i < amount; i++) {
|
||||
const token = crypto.randomBytes(16).toString('hex');
|
||||
createInviteToken(token, req.user.id);
|
||||
tokens.push(token);
|
||||
}
|
||||
res.json({ tokens });
|
||||
}
|
||||
catch (error) {
|
||||
res.status(500).json({ error: 'Einladung fehlgeschlagen' });
|
||||
}
|
||||
});
|
||||
router.get('/invites', authMiddleware, adminMiddleware, (req, res) => {
|
||||
try {
|
||||
const invites = getInvitesByUser(req.user.id);
|
||||
const stats = getInviteStats();
|
||||
res.json({ invites, stats });
|
||||
}
|
||||
catch (error) {
|
||||
res.status(500).json({ error: 'Fehler beim Laden der Einladungen' });
|
||||
}
|
||||
});
|
||||
router.get('/users', authMiddleware, adminMiddleware, (req, res) => {
|
||||
try {
|
||||
const users = getAllUsers();
|
||||
res.json(users);
|
||||
}
|
||||
catch (error) {
|
||||
res.status(500).json({ error: 'Fehler beim Laden der Benutzer' });
|
||||
}
|
||||
});
|
||||
router.delete('/users/:id', authMiddleware, adminMiddleware, (req, res) => {
|
||||
try {
|
||||
const userId = Number(req.params.id);
|
||||
if (userId === req.user.id) {
|
||||
return res.status(400).json({ error: 'Du kannst dich nicht selbst löschen' });
|
||||
}
|
||||
const user = getUserById(userId);
|
||||
if (!user)
|
||||
return res.status(404).json({ error: 'Benutzer nicht gefunden' });
|
||||
deleteUser(userId);
|
||||
res.json({ success: true });
|
||||
}
|
||||
catch (error) {
|
||||
res.status(500).json({ error: 'Fehler beim Löschen' });
|
||||
}
|
||||
});
|
||||
router.put('/credentials', authMiddleware, async (req, res) => {
|
||||
try {
|
||||
const { currentPassword, newUsername, newPassword } = req.body;
|
||||
const user = getUserByUsername(req.user.username);
|
||||
if (!user)
|
||||
return res.status(404).json({ error: 'Benutzer nicht gefunden' });
|
||||
if (currentPassword) {
|
||||
const valid = await bcrypt.compare(currentPassword, user.password);
|
||||
if (!valid)
|
||||
return res.status(401).json({ error: 'Aktuelles Passwort ist falsch' });
|
||||
}
|
||||
if (newUsername && newUsername !== user.username) {
|
||||
const exists = getUserByUsername(newUsername);
|
||||
if (exists)
|
||||
return res.status(409).json({ error: 'Benutzername ist bereits vergeben' });
|
||||
}
|
||||
const updates = {};
|
||||
if (newUsername)
|
||||
updates.username = newUsername;
|
||||
if (newPassword) {
|
||||
if (newPassword.length < 6)
|
||||
return res.status(400).json({ error: 'Neues Passwort muss mindestens 6 Zeichen lang sein' });
|
||||
updates.password = await bcrypt.hash(newPassword, 10);
|
||||
}
|
||||
if (Object.keys(updates).length === 0) {
|
||||
return res.status(400).json({ error: 'Keine Änderungen angegeben' });
|
||||
}
|
||||
const updated = updateUserCredentials(user.id, updates);
|
||||
if (!updated)
|
||||
return res.status(500).json({ error: 'Aktualisierung fehlgeschlagen' });
|
||||
const token = jwt.sign({ id: updated.id, username: updated.username }, JWT_SECRET, { expiresIn: JWT_EXPIRES_IN });
|
||||
res.json({ user: { id: updated.id, username: updated.username, is_admin: !!updated.is_admin, created_at: updated.created_at }, token });
|
||||
}
|
||||
catch (error) {
|
||||
res.status(500).json({ error: 'Fehler beim Aktualisieren' });
|
||||
}
|
||||
});
|
||||
export default router;
|
||||
105
backend/dist/routes/recipes.js
vendored
Normal file
105
backend/dist/routes/recipes.js
vendored
Normal file
@@ -0,0 +1,105 @@
|
||||
/// <reference path="../types.d.ts" />
|
||||
import { Router } from 'express';
|
||||
import { getAllRecipes, getRecipeById, createRecipe, updateRecipe, deleteRecipe, getCategories, getDb } from '../db.js';
|
||||
import { getTikTokData } from '../services/tiktok.js';
|
||||
import { isAiAvailable, extractRecipe } from '../services/ai.js';
|
||||
import { trackEvent } from '../analytics-db.js';
|
||||
const router = Router();
|
||||
router.get('/', (req, res) => {
|
||||
const { search, category, user_id } = req.query;
|
||||
const recipes = getAllRecipes(search, category, user_id);
|
||||
res.json(recipes.map(r => ({
|
||||
...r,
|
||||
ingredients: JSON.parse(r.ingredients || '[]'),
|
||||
steps: JSON.parse(r.steps || '[]'),
|
||||
})));
|
||||
});
|
||||
router.get('/categories', (req, res) => {
|
||||
res.json(getCategories());
|
||||
});
|
||||
router.get('/authors', (req, res) => {
|
||||
const db = getDb();
|
||||
const recipes = db.prepare('SELECT DISTINCT user_id FROM recipes WHERE user_id IS NOT NULL').all();
|
||||
const authorIds = recipes.map(r => r.user_id);
|
||||
const authors = authorIds.map(id => {
|
||||
const user = db.prepare('SELECT id, username FROM users WHERE id = ?').get(id);
|
||||
return { id, username: user ? user.username : `User #${id}` };
|
||||
}).sort((a, b) => a.username.localeCompare(b.username));
|
||||
res.json(authors);
|
||||
});
|
||||
router.get('/ai-status', async (req, res) => {
|
||||
const available = await isAiAvailable();
|
||||
res.json({ ai: available });
|
||||
});
|
||||
router.get('/:id', (req, res) => {
|
||||
const recipe = getRecipeById(req.params.id);
|
||||
if (!recipe)
|
||||
return res.status(404).json({ error: 'Rezept nicht gefunden' });
|
||||
res.json({
|
||||
...recipe,
|
||||
ingredients: JSON.parse(recipe.ingredients || '[]'),
|
||||
steps: JSON.parse(recipe.steps || '[]'),
|
||||
});
|
||||
});
|
||||
router.post('/', (req, res) => {
|
||||
const recipe = createRecipe(req.body);
|
||||
const userId = req.body.user_id || null;
|
||||
trackEvent('recipe_created', userId, { recipe_id: recipe.id, recipe_name: recipe.name });
|
||||
res.status(201).json(recipe);
|
||||
});
|
||||
router.put('/:id', (req, res) => {
|
||||
const existing = getRecipeById(req.params.id);
|
||||
if (!existing)
|
||||
return res.status(404).json({ error: 'Rezept nicht gefunden' });
|
||||
const updated = updateRecipe(req.params.id, req.body);
|
||||
trackEvent('recipe_updated', req.body.user_id || null, { recipe_id: Number(req.params.id), recipe_name: updated?.name });
|
||||
res.json(updated);
|
||||
});
|
||||
router.delete('/:id', (req, res) => {
|
||||
const existing = getRecipeById(req.params.id);
|
||||
if (!existing)
|
||||
return res.status(404).json({ error: 'Rezept nicht gefunden' });
|
||||
deleteRecipe(req.params.id);
|
||||
trackEvent('recipe_deleted', null, { recipe_id: Number(req.params.id) });
|
||||
res.json({ success: true });
|
||||
});
|
||||
router.post('/from-tiktok', async (req, res) => {
|
||||
try {
|
||||
const { url } = req.body;
|
||||
if (!url)
|
||||
return res.status(400).json({ error: 'URL erforderlich' });
|
||||
const tiktokData = await getTikTokData(url);
|
||||
const aiAvailable = await isAiAvailable();
|
||||
let extracted = null;
|
||||
let aiStatus = aiAvailable ? 'available' : 'unavailable';
|
||||
let aiMessage = '';
|
||||
if (aiAvailable && tiktokData.title) {
|
||||
try {
|
||||
extracted = await extractRecipe(tiktokData.title);
|
||||
aiStatus = 'success';
|
||||
}
|
||||
catch (e) {
|
||||
console.error('KI Extraktion fehlgeschlagen:', e.message);
|
||||
aiStatus = 'error';
|
||||
aiMessage = e.message;
|
||||
}
|
||||
}
|
||||
else if (!aiAvailable) {
|
||||
aiMessage = 'KI-Service nicht erreichbar';
|
||||
}
|
||||
else if (!tiktokData.title) {
|
||||
aiMessage = 'Kein Titel im Video gefunden';
|
||||
}
|
||||
res.json({
|
||||
tiktok: tiktokData,
|
||||
ai: aiAvailable,
|
||||
aiStatus,
|
||||
aiMessage,
|
||||
extracted,
|
||||
});
|
||||
}
|
||||
catch (error) {
|
||||
res.status(500).json({ error: error.message });
|
||||
}
|
||||
});
|
||||
export default router;
|
||||
Reference in New Issue
Block a user