ménage

app.js

@@ -5,6 +5,9 @@ const app = express()
 const path = require("path")
 const publicDir = path.join(__dirname, './public')
 const bcrypt = require("bcryptjs")
+var bodyParser = require('body-parser')
+var cookieParser = require("cookie-parser")
+
 
 /* Connexion à la BDD MySQL */
 dotenv.config({ path: './.env'})
@@ -23,23 +26,25 @@ db.connect((error) => {
     }
 })
 
-app.set('view engine', 'hbs')
-app.use(express.static(publicDir))
+app.set('view engine', 'hbs');
+app.use(express.static(publicDir));
 /* Pour utiliser le bootstrap local */
 app.use('/css', express.static(__dirname + '/node_modules/bootstrap/dist/css'));
+app.use(cookieParser());
 
 /* configure the Express.js server to receive the form values as JSON */
-app.use(express.urlencoded({extended: 'false'}))
+app.use(bodyParser.urlencoded({extended: false}));
 app.use(express.json())
 
 
-app.get("/", (req, res) => { res.render("login") })
-app.get("/register", (req, res) => { res.render("register") })
-app.get("/index", (req, res) => { res.render("index") })
+app.get("/", (req, res) => { res.render("login-session") });
+app.get("/login", (req, res) => { res.render("login") });
+app.get("/register", (req, res) => { res.render("register") });
+app.get("/index", (req, res) => { res.render("index") });
 
 
 app.post("/auth/register", (req, res) => {    
-    const { gender, name, firstname, dob, title, email, password, password_confirm } = req.body
+    const { gender, name, firstname, dob, title, email, password, password_confirm, session, role } = req.body
 
     // db.query() code goes here
     db.query('SELECT email FROM user WHERE email = ?', [email], async (error, result) => {
@@ -61,17 +66,16 @@ app.post("/auth/register", (req, res) => {
             if(error) {
                 console.log(error)
             } else {
-                return res.render('index')
+                return res.render('login-session')
             }
         })  
     })
 })
 
-app.post("/auth/log-control", (req, res) => {    
-    const { email, password } = req.body
+app.post("/auth/check-login", (req, res) => {    
+    const { email, password, role, session } = req.body
 
-    // db.query() code goes here
-    db.query('SELECT password FROM user WHERE email = ?', [email], async (error, result) => {
+    db.query('SELECT * FROM user WHERE email = ?', [email], async (error, result) => {
         if(error){
             console.log(error)
         }
@@ -82,8 +86,31 @@ app.post("/auth/log-control", (req, res) => {
             })
         }
 
+        var userId = result[0].ID
         bcrypt.compare(password, result[0].password, function(err, result) {
             if(result) {
+
+                // Le user est connecté avec succès : on vérifie qu'il n'est pas déjà inscrit à la session et si pas le cas, on l'inscrit et on incrémente le compteur des participants
+                db.query('SELECT * FROM participation WHERE ID_user = ?', [userId], async (error, result) => {
+                    if(error) {
+                        console.log(error)
+                    }
+
+                    if (result.length == 0) {
+                        db.query('INSERT INTO participation (ID_user, ID_session, role_during_session) VALUES (?, ?, ?)', [userId, session, role], function (err, result) {
+                            if (err) throw err;
+                            console.log("1 record inserted");
+                          });
+
+                        db.query('UPDATE session SET nb_of_participants = nb_of_participants + 1 WHERE ID=?', session, function (err, result) {
+                            if (err) throw err;
+                            console.log("1 record updated");
+                          });
+                    }
+                })
+
+                //res.cookie("authorization", userId, { maxAge: 900000, httpOnly: true });
+
                 return res.render('index')
             }
             else {
@@ -95,7 +122,35 @@ app.post("/auth/log-control", (req, res) => {
     })
 })
 
+app.post("/auth/check-session", (req, res) => { 
+    
+    const { session, session_password, role } = req.body
 
+    db.query('SELECT password FROM session WHERE ID = ?', [session], async (error, result) => {
+        if(error){
+            console.log(error)
+        }
+
+        if( result.length == 0 ) {
+            return res.render('login-session', {
+                error: 'Session inconnue : veuillez saisir un identifiant de session valide'
+            })
+        }
+        else {
+            if (result[0].password === session_password) {
+
+                //res.send(req.cookies);
+
+                return res.render('login', {"session": session, "role": role})
+            }
+            else {
+                return res.render('login-session', {
+                    error: 'Mot de passe incorrect : corriger votre saisie'
+                })
+            }
+        }
+    })
+})
 
 
 app.listen(5005, ()=> {