app.js

var Sequelize = require('sequelize');
var axios = require("axios");
var express = require('express');
var cors = require('cors');
var basicAuth = require('express-basic-auth');
var Handlebars = require('handlebars');
var exphbs = require('express-handlebars');
var {allowInsecurePrototypeAccess} = require('@handlebars/allow-prototype-access');
var paginate = require('handlebars-paginate');
var app = express();

var config = require('./config');

app.use(cors());

app.use(express.urlencoded({ extended: true }));

var basicAuthOptions = {
  users: {},
  challenge: true
};

basicAuthOptions.users[config.api.username] = config.api.password;

var hbs = exphbs.create({
  defaultLayout: 'admin',
  handlebars: allowInsecurePrototypeAccess(Handlebars),
  helpers: {
    formatDate: function(date) {
      return date.toLocaleString('en-US');
    },
    postType: function(type) {
      switch(type) {
        case 1:
          return 'Instagram';
        case 2:
          return 'Twitter';
      }
    },
    paginate: paginate
  }
});

app.engine('handlebars', hbs.engine);
app.set('view engine', 'handlebars');

var databaseModels = require('./database-models');

var Post = databaseModels.Post;
var User = databaseModels.User;
var DeletedPost = databaseModels.DeletedPost;
var IgnoredUser = databaseModels.IgnoredUser;

app.get('/', function (req, res) {
  res.redirect('/posts');
});

app.get('/posts', function (req, res) {

  Post.findAll({
    limit: 30,
    order: [
      ['created_at', 'DESC']
    ],
    include: [
      { model: User }
    ]
  })
  .then(function(posts) {

    res.json(posts);

  });

});

app.get('/posts/:time', function (req, res) {

  Post.findAll({
    where: {
      created_at: {
        [Sequelize.Op.gt]: new Date(parseInt(req.params.time))
      }
    },
    order: [
      ['created_at', 'DESC']
    ],
    include: [
      { model: User }
    ]
  })
  .then(function(posts) {

    res.json(posts);

  });

});

app.get('/image-proxy/:url', function (req, res) {

  axios.get(req.params.url, {
    responseType: 'stream'
  })
      .then(response => {
        for (const key in response.headers) {
          if (response.headers.hasOwnProperty(key)) {
            const element = response.headers[key];
            res.header(key, element);
          }
        }
        res.status(response.status);
        response.data.pipe(res);
      })
      .catch(({ response }) => {
        for (const key in response.headers) {
          if (response.headers.hasOwnProperty(key)) {
            const element = response.headers[key];
            res.header(key, element);
          }
        }
        res.status(response.status);
        response.data.pipe(res);
      });

});

app.get('/admin', basicAuth(basicAuthOptions), function (req, res) {

  var totalPosts = 0;

  var postsPerPage = 10;

  var currentPage = 1;

  var offset = 0;

  Post.count()
  .then(function(postsCount) {

    totalPosts = postsCount;

    if(typeof req.query.p != 'undefined') {
      currentPage = req.query.p;
    }

    offset = (currentPage - 1) * postsPerPage;

    return Post.findAll({
      order: [
        ['created_at', 'DESC']
      ],
      offset: offset,
      limit: postsPerPage,
      include: [
        { model: User }
      ]
    });

  })
  .then(function(posts) {

    res.render('admin', {
      posts: posts,
      pagination: {
        page: currentPage,
        pageCount: Math.ceil(totalPosts / postsPerPage)
      },
      navActive: {
        admin: true
      }
    });

  });

});

app.get('/admin/delete/:id', basicAuth(basicAuthOptions), function (req, res) {

  var postToBeDeleted = {};

  Post.findByPk(req.params.id)
  .then(function(post) {

    postToBeDeleted = post;

    return DeletedPost.create({
      type: post.type,
      source_id: post.source_id,
      link: post.link
    });

  })
  .then(function() {
    return postToBeDeleted.destroy();
  })

  .then(function() {
    res.redirect("/admin");
  });

});

app.get('/admin/ignored-users', basicAuth(basicAuthOptions), function (req, res) {

  var ignoredUsers = [];

  var allUsers = [];

  IgnoredUser.findAll({
    order: [
      ['created_at', 'DESC']
    ]
  })
  .then(function(users) {

    ignoredUsers = users;

    return User.findAll({
      order: [
        ['type', 'ASC'],
        ['username', 'ASC']
      ],
    });

  })
  .then(function(users) {

    allUsers = users;

    res.render('ignored-users', {
      ignoredUsers: ignoredUsers,
      allUsers: allUsers,
      navActive: {
        ignoredUsers: true
      }
    });

  });

});

app.get('/admin/unignore-user/:id', basicAuth(basicAuthOptions), function (req, res) {

  IgnoredUser.findByPk(req.params.id)
  .then(function(user) {

    return user.destroy();

  })
  .then(function() {
    res.redirect("/admin/ignored-users");
  });

});

app.post('/admin/ignore-user', basicAuth(basicAuthOptions), function (req, res) {

  var theUser = {};

  User.findByPk(req.body.user)
  .then(function(user) {

    theUser = user;

    return IgnoredUser.create({
      type: user.type,
      username: user.username,
      source_id: user.source_id
    });

  })
  .then(function() {

    if(req.body.delete_posts) {

      return Post.destroy({
        where: {
          user_id: theUser.id
        }
      });

    } else {

      return 1;

    }

  })
  .then(function() {
    res.redirect("/admin/ignored-users");
  });

});

app.get('/admin/deleted-posts', basicAuth(basicAuthOptions), function (req, res) {

  DeletedPost.findAll({
    order: [
      ['created_at', 'DESC']
    ]
  })
  .then(function(posts) {

    res.render('deleted-posts', {
      deletedPosts: posts,
      navActive: {
        deletedPosts: true
      }
    });

  });

});

app.get('/admin/undelete/:id', basicAuth(basicAuthOptions), function (req, res) {

  DeletedPost.findByPk(req.params.id)
  .then(function(post) {
    return post.destroy();
  })

  .then(function() {
    res.redirect("/admin/deleted-posts");
  });

});

app.listen(config.api.port, config.api.hostname, function () {

  console.log('App listening at http://%s:%s', config.api.hostname, config.api.port);

});

module.exports = app;