sven/filing-cabinet-api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added security policies to all endpoints and implemented file upload feature on posts

Browse Source
This commit is contained in:
Sven laptop
2026-07-24 23:25:31 +02:00
parent 9519a01ca0
commit 9e56f00c1e
19 changed files with 718 additions and 134 deletions
Download Patch File Download Diff File Expand all files Collapse all files
features/relations/CREATE_friendship.js
+27 -23
View File
@@ -1,28 +1,32 @@
const express = require('express');
const express = require("express");
const router = express.Router();
var driver = require('../../graph_db');
var driver = require("../../graph_db");
const { strictInput } = require('../../middleware/strict_input');
async function create_friendship(req, res) {
try {
const me = req.query.me;
const them = req.query.them;
const { records } = await driver.executeQuery('MATCH (m:Person {name: $me}) MATCH (t:Person {name: $them}) CREATE (m)-[:FRIENDS_WITH]-> (t) CREATE (t)-[:FRIENDS_WITH]-> (m)', { me: me, them: them }, { database: process.env.GRAPH_DB_NAME});
res.status(200).send('Relationship has been created');
try {
const me = req.query.me;
const them = req.query.them;
if (String(req.user.id) !== String(me)) {
return res.status(403).send("You can only create relationships as yourself");
}
catch (err) {
console.error('database query failed', {
message: err.message,
code: err.code,
detail: err.detail,
hint: err.hint,
stack: err.stack,
});
res.status(500).send('Relationship was not created, request failed');
}
};
const { records } = await driver.executeQuery(
"MATCH (m:Person {db_id: $me}) MATCH (t:Person {db_id: $them}) CREATE (m)-[:FRIENDS_WITH]-> (t) CREATE (t)-[:FRIENDS_WITH]-> (m)",
{ me: me, them: them },
{ database: process.env.GRAPH_DB_NAME },
);
res.status(200).send("Relationship has been created");
} catch (err) {
console.error("database query failed", {
message: err.message,
code: err.code,
detail: err.detail,
hint: err.hint,
stack: err.stack,
});
res.status(500).send("Relationship was not created, request failed");
}
}
router.post('/', create_friendship);
module.exports = router;
router.post("/", strictInput({ query: ['me', 'them'] }), create_friendship);
module.exports = router;