Altered API, read more
I moved /auth/account/privilege to /admin/privilege I also fixed PATCH and DELETE on /account
This commit is contained in:
@@ -1,25 +0,0 @@
|
||||
const { accounts } = require('../database/models');
|
||||
|
||||
//auth/account/privilege
|
||||
const route = async (req, res) => {
|
||||
//check the user's privilege
|
||||
if (req.user.privilege != 'administrator') {
|
||||
return res.status(401).send('Only admins can change privilege');
|
||||
}
|
||||
|
||||
const updated = await accounts.update({
|
||||
privilege: req.body.privilege
|
||||
}, {
|
||||
where: {
|
||||
username: req.body.username
|
||||
}
|
||||
});
|
||||
|
||||
if (updated < 1) {
|
||||
return res.status(403).send(`Unknown account`);
|
||||
}
|
||||
|
||||
return res.status(200).end();
|
||||
};
|
||||
|
||||
module.exports = route;
|
||||
@@ -17,10 +17,8 @@ router.use(tokenAuth);
|
||||
|
||||
//basic account management (needs a token)
|
||||
router.delete('/logout', require('./logout'));
|
||||
router.get('/account', require('./account'));
|
||||
router.patch('/update', require('./update'));
|
||||
router.delete('/deletion', require('./deletion'));
|
||||
|
||||
router.patch('/account/privilege', require('./account-privilege'));
|
||||
router.get('/account', require('./account-query'));
|
||||
router.patch('/account', require('./account-update'));
|
||||
router.delete('/account', require('./account-delete'));
|
||||
|
||||
module.exports = router;
|
||||
|
||||
Reference in New Issue
Block a user