auth

pages/api/articles/[articleId].ts

@@ -6,66 +6,72 @@ import prisma, { ArticleWithIncludes } from "../../../lib/prisma";
 import type { NextApiRequest, NextApiResponse } from 'next'
 import { UpdateArticle } from "../../../types/api";
 import { isValidText } from "../../../validators";
+import { getServerSession } from "next-auth/next";
+import { authOptions } from "../auth/[...nextauth]";
 
 
 export default async function handler(req: NextApiRequest, res: NextApiResponse) {
-  const articleId: string = formatTextToUrlName(req.query?.articleId?.toString() ?? "")
-
-  if (req.method == "PUT") {//* PUT
-    console.log("PUT")
+  const session = await getServerSession(req, res, authOptions);
+  if (session) {
+    const articleId: string = formatTextToUrlName(req.query?.articleId?.toString() ?? "")
+    if (req.method == "PUT") {//* PUT
+      console.log("PUT")
 
 
-    console.log(`API articleId: ${articleId}`)
-    const articleData: UpdateArticle = req.body;
+      console.log(`API articleId: ${articleId}`)
+      const articleData: UpdateArticle = req.body;
 
-    if (articleData.title && !isValidText(articleData.title)) {
-      res.json({ target: "title", error: "Not a valid title" });
-      return;
-    }
-
-    if (articleData.introduction && !isValidText(articleData.introduction)) {
-      res.json({ target: "introduction", error: "Not a valid introduction" });
-      return;
-    }
-
-    const newArticle: Prisma.ArticleUncheckedUpdateInput = {
-      title: articleData.title ?? undefined,
-      name: articleData.title ? formatTextToUrlName(articleData.title) : undefined,
-      introduction: articleData.introduction ?? undefined,
-
-      categoryId: articleData.categoryId ?? undefined,
-      contentTable: articleData.contentTable ?? undefined,
-      markdown: articleData.markdown ?? undefined,
-      imageUrl: articleData.imageUrl ?? undefined,
-    }
-    console.log(newArticle)
-    await prisma.article.update({ data: newArticle, where: { id: articleId }, include: { category: true } })
-      .then(
-        (data) => {
-          res.json({ success: true, data: data });
-        },
-        (errorReason) => {
-          console.log(errorReason)
-          if (errorReason.code === "P2002") {
-            res.json({ target: errorReason.meta.target[0], error: "Already exists" });
-          }
-        }
-      )
-      .catch((err) => {
-        console.error(err);
-        res.status(500).end();
-      });
-  } else if (req.method == "DELETE") {
-    console.log("DELETE article")
-    prisma.article.delete({ where: { id: articleId }, include: { category: true } }).then((result: ArticleWithIncludes | null) => {
-      if (result) {
-        res.status(200).json(result)
-      } else {
-        res.status(500).json({ error: true, message: "No article found" })
+      if (articleData.title && !isValidText(articleData.title)) {
+        res.json({ target: "title", error: "Not a valid title" });
+        return;
       }
-    }, (err) => {
-      console.log(err)
-      res.status(500).end(err)
-    })
+
+      if (articleData.introduction && !isValidText(articleData.introduction)) {
+        res.json({ target: "introduction", error: "Not a valid introduction" });
+        return;
+      }
+
+      const newArticle: Prisma.ArticleUncheckedUpdateInput = {
+        title: articleData.title ?? undefined,
+        name: articleData.title ? formatTextToUrlName(articleData.title) : undefined,
+        introduction: articleData.introduction ?? undefined,
+
+        categoryId: articleData.categoryId ?? undefined,
+        contentTable: articleData.contentTable ?? undefined,
+        markdown: articleData.markdown ?? undefined,
+        imageUrl: articleData.imageUrl ?? undefined,
+      }
+      console.log(newArticle)
+      await prisma.article.update({ data: newArticle, where: { id: articleId }, include: { category: true } })
+        .then(
+          (data) => {
+            res.json({ success: true, data: data });
+          },
+          (errorReason) => {
+            console.log(errorReason)
+            if (errorReason.code === "P2002") {
+              res.json({ target: errorReason.meta.target[0], error: "Already exists" });
+            }
+          }
+        )
+        .catch((err) => {
+          console.error(err);
+          res.status(500).end();
+        });
+    } else if (req.method == "DELETE") {
+      console.log("DELETE article")
+      prisma.article.delete({ where: { id: articleId }, include: { category: true } }).then((result: ArticleWithIncludes | null) => {
+        if (result) {
+          res.status(200).json(result)
+        } else {
+          res.status(500).json({ error: true, message: "No article found" })
+        }
+      }, (err) => {
+        console.log(err)
+        res.status(500).end(err)
+      })
+    }
+  } else {
+    res.status(403).json({ error: true, message: "Authorization Required" });
   }
 }

pages/api/articles/index.ts

@@ -6,56 +6,64 @@ import { isValidText } from "../../../validators";
 
 import type { NextApiRequest, NextApiResponse } from 'next'
 import { Prisma } from '@prisma/client';
+import { getServerSession } from 'next-auth';
+import { authOptions } from "../auth/[...nextauth]";
 
 export default async function handler(req: NextApiRequest, res: NextApiResponse) {
-  if (req.method == "POST") { //* POST
-    console.log("API new article")
-    const articleData: CreateArticle = req.body
-    console.log(articleData)
+  const session = await getServerSession(req, res, authOptions);
+  if (session) {
+    if (req.method == "POST") { //* POST
+      console.log("API new article")
+      const articleData: CreateArticle = req.body
+      console.log(articleData)
 
 
-    if (!isValidText(articleData.title)) {
-      res.status(500).json({ target: "title", error: "Not a valid title" });
-      return;
-    }
+      if (!isValidText(articleData.title)) {
+        res.status(500).json({ target: "title", error: "Not a valid title" });
+        return;
+      }
 
-    if (!isValidText(articleData.introduction)) {
-      res.status(500).json({ target: "introduction", error: "Not a valid introduction" });
-      return;
-    }
+      if (!isValidText(articleData.introduction)) {
+        res.status(500).json({ target: "introduction", error: "Not a valid introduction" });
+        return;
+      }
 
-    if (!articleData.categoryId) {
-      res.status(500).json({ target: "category", error: "Category is required" });
-      return;
-    }
+      if (!articleData.categoryId) {
+        res.status(500).json({ target: "category", error: "Category is required" });
+        return;
+      }
 
-    const newArticle: Prisma.ArticleUncheckedCreateInput = {
-      title: articleData.title,
-      name: formatTextToUrlName(articleData.title),
-      introduction: articleData.introduction,
-      categoryId: articleData.categoryId,
-      markdown: articleData.markdown ?? "",
-      contentTable: articleData.contentTable ?? {},
-      imageUrl: articleData.imageUrl ?? ""
-    }
+      const newArticle: Prisma.ArticleUncheckedCreateInput = {
+        title: articleData.title,
+        name: formatTextToUrlName(articleData.title),
+        introduction: articleData.introduction,
+        categoryId: articleData.categoryId,
+        markdown: articleData.markdown ?? "",
+        contentTable: articleData.contentTable ?? {},
+        imageUrl: articleData.imageUrl ?? ""
+      }
 
-    prisma.article
-      .create({ data: newArticle, include: { category: true } })
-      .then(
-        (data: ArticleWithIncludes) => {
-          res.json({ success: true, data: data });
-        },
-        (errorReason) => {
-          console.log("reason", errorReason)
-          if (errorReason.code === "P2002") {
-            res.json({ target: errorReason.meta.target[0], error: "Already exists" });
+      prisma.article
+        .create({ data: newArticle, include: { category: true } })
+        .then(
+          (data: ArticleWithIncludes) => {
+            res.json({ success: true, data: data });
+          },
+          (errorReason) => {
+            console.log("reason", errorReason)
+            if (errorReason.code === "P2002") {
+              res.json({ target: errorReason.meta.target[0], error: "Already exists" });
+            }
           }
-        }
-      )
-      .catch((err) => {
-        console.error(err);
-        res.status(500).end();
-      });
+        )
+        .catch((err) => {
+          console.error(err);
+          res.status(500).end();
+        });
+    }
+  } else {
+    res.status(403).json({ error: true, message: "Authorization Required" });
   }
 
+
 }

pages/api/auth/[...nextauth].ts

@@ -0,0 +1,30 @@
+import NextAuth, { AuthOptions } from "next-auth"
+import GithubProvider from "next-auth/providers/github"
+export const authOptions: AuthOptions = {
+  // Configure one or more authentication providers
+  providers: [
+    GithubProvider({
+      clientId: "1afc604704e6ac0149e3", //! env vars
+      clientSecret: "b8f76990fc0a9181eaba23359a27b2d140ab67e7",  //! env vars
+    }),
+    // ...add more providers here
+  ], callbacks: {
+    async signIn({ user, account, profile, email, credentials }) {
+
+      if (user.id.toString() == "76851529") { //! env vars
+        return true
+      } else {
+        // Return false to display a default error message
+        return false
+        // Or you can return a URL to redirect to:
+        // return '/unauthorized'
+      }
+    }
+  },
+  secret: "@AWeFkHpv!jzVr^a9nRXS8^PcRFnDaLvt65mJb&*C^pcCgpbHFzzKN",
+
+
+
+}
+export default NextAuth(authOptions)
+

pages/api/categories/[categoryId].ts

@@ -7,76 +7,83 @@ import type { NextApiRequest, NextApiResponse } from 'next'
 import { formatTextToUrlName } from "../../../utils";
 import { isValidText } from "../../../validators";
 import { UpdateCategory } from '../../../types/api';
+import { getServerSession } from "next-auth";
+import { authOptions } from "../auth/[...nextauth]";
 
 export default async function handler(req: NextApiRequest, res: NextApiResponse) {
   const categoryId: string = req.query.categoryId?.toString() ?? "";
 
-  if (req.method == "PUT") {
+  const session = await getServerSession(req, res, authOptions);
+  if (session) {
+    if (req.method == "PUT") {
 
-    const categoryData: UpdateCategory = req.body;
+      const categoryData: UpdateCategory = req.body;
 
-    if (categoryData.title && !isValidText(categoryData.title)) {
-      res.json({ target: "title", error: "Not a valid title" });
-      return;
-    }
-
-    const newSvg: Prisma.SvgUncheckedUpdateInput = {
-      viewbox: categoryData.svg?.viewbox ?? undefined,
-      path: categoryData.svg?.path ?? undefined,
-    };
-
-    const newCategory: Prisma.CategoryUncheckedUpdateInput = {
-      title: categoryData.title ?? undefined,
-      name: categoryData.title ? formatTextToUrlName(categoryData.title) : undefined,
-      color: categoryData.color ?? undefined,
-    };
-
-    await prisma.category
-      .update({
-        data: newCategory,
-        where: { id: categoryId },
-        include: { svg: true },
-      })
-      .then(
-        async (categoryData) => {
-          await prisma.svg
-            .update({ data: newSvg, where: { id: categoryData.svg.id } })
-            .then(
-              (svgData) => {
-                console.log("3");
-                res.json({ success: true, data: categoryData });
-              },
-              (errorReason) => {
-                res.status(500).end(errorReason);
-              }
-            )
-            .catch((err) => {
-              console.error(err);
-              res.status(500).end();
-            });
-        },
-        (errorReason) => {
-          console.log(errorReason);
-          if (errorReason.code === "P2002") {
-            res.json({ target: errorReason.meta.target[0], error: "Already exists" });
-          }
-        }
-      )
-      .catch((err) => {
-        console.error(err);
-        res.status(500).end();
-      });
-  } else if (req.method == "DELETE") {
-    console.log("DELETE category")
-    prisma.category.delete({ where: { id: categoryId }, include: { articles: true, svg: true } }).then((result: CategoryWithIncludes | null) => {
-      if (result) {
-        res.status(200).json(result)
-      } else {
-        res.status(500).json({ error: true, message: "No category found" })
+      if (categoryData.title && !isValidText(categoryData.title)) {
+        res.json({ target: "title", error: "Not a valid title" });
+        return;
       }
-    }, (err) => {
-      console.log(err)
-      res.status(500).end(err)
-    })
+
+      const newSvg: Prisma.SvgUncheckedUpdateInput = {
+        viewbox: categoryData.svg?.viewbox ?? undefined,
+        path: categoryData.svg?.path ?? undefined,
+      };
+
+      const newCategory: Prisma.CategoryUncheckedUpdateInput = {
+        title: categoryData.title ?? undefined,
+        name: categoryData.title ? formatTextToUrlName(categoryData.title) : undefined,
+        color: categoryData.color ?? undefined,
+      };
+
+      await prisma.category
+        .update({
+          data: newCategory,
+          where: { id: categoryId },
+          include: { svg: true },
+        })
+        .then(
+          async (categoryData) => {
+            await prisma.svg
+              .update({ data: newSvg, where: { id: categoryData.svg.id } })
+              .then(
+                (svgData) => {
+                  console.log("3");
+                  res.json({ success: true, data: categoryData });
+                },
+                (errorReason) => {
+                  res.status(500).end(errorReason);
+                }
+              )
+              .catch((err) => {
+                console.error(err);
+                res.status(500).end();
+              });
+          },
+          (errorReason) => {
+            console.log(errorReason);
+            if (errorReason.code === "P2002") {
+              res.json({ target: errorReason.meta.target[0], error: "Already exists" });
+            }
+          }
+        )
+        .catch((err) => {
+          console.error(err);
+          res.status(500).end();
+        });
+    } else if (req.method == "DELETE") {
+      console.log("DELETE category")
+      prisma.category.delete({ where: { id: categoryId }, include: { articles: true, svg: true } }).then((result: CategoryWithIncludes | null) => {
+        if (result) {
+          res.status(200).json(result)
+        } else {
+          res.status(500).json({ error: true, message: "No category found" })
+        }
+      }, (err) => {
+        console.log(err)
+        res.status(500).end(err)
+      })
+    }
+  } else {
+    res.status(403).json({ error: true, message: "Authorization Required" });
   }
 }

pages/api/categories/index.ts

@@ -8,8 +8,12 @@ import { isValidText } from "../../../validators";
 
 import type { NextApiRequest, NextApiResponse } from 'next'
 import { CreateCategory } from "@/types/api";
+import { getServerSession } from "next-auth";
+import { authOptions } from "../auth/[...nextauth]";
 
 export default async function handler(req: NextApiRequest, res: NextApiResponse) {
+  const session = await getServerSession(req, res, authOptions);
+
   if (req.method == "GET") {
     console.log("API get categories")
     await prisma.category.findMany().then((result: Category[]) => {
@@ -22,65 +26,69 @@ export default async function handler(req: NextApiRequest, res: NextApiResponse)
     })
   } else
     if (req.method == "POST") {
-      console.log("API new category")
-      const categoryData: CreateCategory = req.body;
-      console.log(categoryData)
+      if (session) {
+        console.log("API new category")
+        const categoryData: CreateCategory = req.body;
+        console.log(categoryData)
 
-      if (!isValidText(categoryData.title)) {
-        res.json({ target: "title", error: "Not a valid title" });
-        return;
-      }
+        if (!isValidText(categoryData.title)) {
+          res.json({ target: "title", error: "Not a valid title" });
+          return;
+        }
 
-      categoryData.svg.viewbox = categoryData.svg.viewbox.length > 1 ? categoryData.svg.viewbox : "";
+        categoryData.svg.viewbox = categoryData.svg.viewbox.length > 1 ? categoryData.svg.viewbox : "";
 
-      const newSvg: Prisma.SvgUncheckedCreateInput = {
-        viewbox: categoryData.svg.viewbox,
-        path: categoryData.svg.path
-      }
+        const newSvg: Prisma.SvgUncheckedCreateInput = {
+          viewbox: categoryData.svg.viewbox,
+          path: categoryData.svg.path
+        }
 
-      await prisma.svg
-        .create({ data: newSvg })
-        .then(
-          async (createdSvg: Svg) => {
-            const newCategory: Prisma.CategoryUncheckedCreateInput = {
-              title: categoryData.title,
-              name: formatTextToUrlName(categoryData.title),
-              color: categoryData.color ?? "teal",
-              svgId: createdSvg.id,
+        await prisma.svg
+          .create({ data: newSvg })
+          .then(
+            async (createdSvg: Svg) => {
+              const newCategory: Prisma.CategoryUncheckedCreateInput = {
+                title: categoryData.title,
+                name: formatTextToUrlName(categoryData.title),
+                color: categoryData.color ?? "teal",
+                svgId: createdSvg.id,
+              }
+
+              await prisma.category
+                .create({
+                  data: newCategory,
+                  include: { svg: true, articles: true },
+                })
+                .then(
+                  (createdCategory: CategoryWithIncludes | null) => {
+                    if (createdCategory) {
+                      res.json({ success: true, data: createdCategory });
+                    } else {
+                      res.json({ error: true, message: "Could not create category" });
+                    }
+                  },
+                  (errorReason) => {
+                    console.log(errorReason)
+                    if (errorReason.code === "P2002") {
+                      res.json({ target: errorReason.meta.target[0], error: "Already exists" });
+                    }
+                  }
+                )
+                .catch((err) => {
+                  console.error(err);
+                  res.status(500).end();
+                });
+            },
+            (errorReason) => {
+              res.status(500).end(errorReason);
             }
-
-            await prisma.category
-              .create({
-                data: newCategory,
-                include: { svg: true, articles: true },
-              })
-              .then(
-                (createdCategory: CategoryWithIncludes | null) => {
-                  if (createdCategory) {
-                    res.json({ success: true, data: createdCategory });
-                  } else {
-                    res.json({ error: true, message: "Could not create category" });
-                  }
-                },
-                (errorReason) => {
-                  console.log(errorReason)
-                  if (errorReason.code === "P2002") {
-                    res.json({ target: errorReason.meta.target[0], error: "Already exists" });
-                  }
-                }
-              )
-              .catch((err) => {
-                console.error(err);
-                res.status(500).end();
-              });
-          },
-          (errorReason) => {
-            res.status(500).end(errorReason);
-          }
-        )
-        .catch((err) => {
-          console.error(err);
-          res.status(500).end();
-        });
+          )
+          .catch((err) => {
+            console.error(err);
+            res.status(500).end();
+          });
+      } else {
+        res.status(403).json({ error: true, message: "Authorization Required" });
+      }
     }
 }