Enabled HTML embedding

README.md

@@ -48,6 +48,7 @@ GET /news/archive/:id
 		"title": title,			//title of the article
 		"author": author,		//author of the aricle
 		"body": body,			//body of the article
+		"rendered": rendered	//body rendered as HTML
 		"edits": edits			//number of times this article has been edited
 		"createdAt": createdAt	//time created
 		"updatedAt": updatedAt	//time updated

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "news-server",
-  "version": "1.4.0",
+  "version": "1.4.2",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "news-server",
-      "version": "1.4.0",
+      "version": "1.4.2",
       "license": "ISC",
       "dependencies": {
         "cors": "^2.8.5",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "news-server",
-  "version": "1.4.0",
+  "version": "1.4.2",
   "description": "An API centric news server. Uses Sequelize and mariaDB by default.",
   "main": "server/server.js",
   "scripts": {

server/news/edit.js

@@ -1,6 +1,6 @@
 const { Op } = require('sequelize');
 const { articles, revisions } = require('../database/models');
-const markdownIt = require('markdown-it')();
+const markdownIt = require('markdown-it')({ html: true });
 
 const route = async (req, res) => {
 	//get the existing record

server/news/index.js

@@ -23,7 +23,7 @@ router.get('/archive/metadata/:id(\\d+)', query(true, true));
 //use middleware to authenticate the rest of the routes
 router.use(authToken);
 router.use((req, res, next) => {
-	if (req.user.admin) {
+	if (req.user.mod) {
 		next();
 	} else {
 		res.status(403).end();

server/news/publish.js

@@ -1,5 +1,5 @@
 const { articles } = require('../database/models');
-const markdownIt = require('markdown-it')();
+const markdownIt = require('markdown-it')({ html: true });
 
 const route = async (req, res) => {
 	//check for missing data