app.js

//app.js


/*

===GET routes/views===
[view]get all po boxes by customer email.

===POST routes/views===
[route]post login request -> responds with a token
[route]post a user login
[route]post a customer
[route]post a employee
[route]post a shipment (when a shipment is created by employee,
                 it attaches the employee email, customer email,
                 tracking status (hardcode this), creation date,
                 num packages, region (hardcode this), shipment status,
                 current location -> branch,
                )
    - when 10 shipments are in store and the 11th is made -> trigger (store is full).
NOTE -> PO boxes are initially hardcode (ex: branch A has 10 po boxes that are all unowned).
NOTE -> branches are hardcoded and the system will not control that.

===UPDATE/PUT/PATCH routes===
NOTE-> (no deletions will be made, we will mark it as deleted within the table)
[route]update shipment status (current location) -> trigger to send email.
[route]update shipment location.
[route]update po box customer email when bought.
[route]delete employee
[route]delete shipment
*/

const http = require("http");
const url = require('url');


const { UserController } = require("./Controllers/userController");
const { ShipmentController } = require("./Controllers/shipmentController");
const { POBoxController } = require("./Controllers/poBoxController");
const { TracksController } = require("./Controllers/tracksController");
const { JobController } = require("./Controllers/jobController");
const { locHistController } = require("./Controllers/locHistController");
const { ReportController } = require("./Controllers/reportController");

const { authenticate, init_jwt } = require("./jwt");

const { getReqData } = require("./utils");


//USAGE: read JSON to parse ex:
//  const data = await getReqData(req);


const PORT = process.env.PORT || 5000;
// const PORT = process.env.PORT || 3000;


const server = http.createServer(async (req, res) => {
    const reqUrl = url.parse(req.url, true);
    const path = reqUrl.path;
    const method = req.method;
    console.log(`Route hit: ${path}`);
    console.log(method);
    // HANDLE CORS PREFLIGHT REQUEST
    if (method === "OPTIONS") {
        res.writeHead(204, {
            "Access-Control-Allow-Origin": "*",
            "Access-Control-Allow-Methods": "GET, POST, DELETE, PUT, PATCH",
            "Access-Control-Allow-Headers": "Origin, X-Requested-With, Content-Type, Accept, authorization",
            "Access-Control-Max-Age": 2592000
        });

        res.end();
        return;
    }
    //GET HANDLERS
    //Testing home to return 'Hello World'
    else if (path === "/" && method === "GET") {
        // set the status code, and content-type
        res.writeHead(200, { "Content-Type": "application/json" });
        // send the data
        res.end(JSON.stringify("Hello Post Office"));
    }

    // /api/users : GET
    else if (path === "/api/users" && method === "GET") {

        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            // get the users
            const users = await new UserController().getAllUsers();


            // send the data
            res.end(JSON.stringify(users));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }
    //get all customers
    // /api/customers : GET
    else if (path === "/api/customers" && method === "GET") {

        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            // get the users
            const users = await new UserController().getAllCustomers();


            // send the data
            res.end(JSON.stringify(users));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    //Get all shipments route
    else if (path === "/api/shipments" && method === "GET") {
        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            let shipments = await new ShipmentController().getAllShipments();

            //send the shipments
            res.end(JSON.stringify(shipments));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    //Get all employees route
    else if (path === "/api/employees" && method === "GET") {
        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            let employees = await new UserController().getAllEmployees();

            //send the employees payload
            res.end(JSON.stringify(employees));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    // api/po-boxes : GET
    // Get all po boxes route
    else if (path === "/api/po-boxes" && method === "GET") {
        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            let boxes = await new POBoxController().getAllPOBoxes();

            //send the boxes
            res.end(JSON.stringify(boxes));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    // Get all tracks
    else if (path === "/api/tracks" && method === "GET") {
        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            let tracks = await new TracksController().getAllTracks();


            //send the tracks
            res.end(JSON.stringify(tracks));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }
    //POST HANDLERS
    // Returns customer info with a email input
    // /api/userinfo : POST
    else if (path === "/api/userinfo" && method === "POST") {
        try {
            // set the status code and content-type
            res.setHeader("Access-Control-Allow-Origin", "*");
            res.setHeader("Access-Control-Request-Method", "POST");
            res.setHeader("Access-Control-Request-Headers", "Content-Type");

            // Receiving input data
            const data = await getReqData(req);

            const user_email = JSON.parse(data)
            //console.log(user_email);
            const user_info = await new UserController().getUserByEmail(user_email.email);
            //console.log(user_info);

            if (!user_info) {
                res.writeHead(404, { "Content-Type": "application/json" });
                // send error
                res.end(JSON.stringify(`No user found: ${user_email.email}`));
            }
            else {
                res.writeHead(202, {
                    "Content-Type": "application/json",
                    "Access-Control-Allow-Origin": "*",
                });
                res.end(JSON.stringify(user_info));
            }
        } catch (error) {
            res.writeHead(404, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }
    // returns employee info
    //api/employee-info POST (email as input)
    else if (path === "/api/employee-info" && method === "POST") {
        try {
            // set the status code and content-type
            res.setHeader("Access-Control-Allow-Origin", "*");
            res.setHeader("Access-Control-Request-Method", "POST");
            res.setHeader("Access-Control-Request-Headers", "Content-Type");

            // Receiving input data
            const data = await getReqData(req);

            const user_email = JSON.parse(data)
            //console.log(user_email);
            const user_info = await new UserController().getEmployeeByEmail(user_email.email);
            //console.log(user_info);

            if (!user_info) {
                res.writeHead(404, { "Content-Type": "application/json" });
                // send error
                res.end(JSON.stringify(`No user found: ${user_email.email}`));
            }
            else {
                res.writeHead(202, {
                    "Content-Type": "application/json",
                    "Access-Control-Allow-Origin": "*",
                });
                res.end(JSON.stringify(user_info));
            }
        } catch (error) {
            res.writeHead(404, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }
    //Given customer email, return box num and branch address
    // /api/userbox : POST
    else if (path === "/api/userbox" && method === "POST") {
        try {
            // set the status code and content-type
            res.setHeader("Access-Control-Allow-Origin", "*");
            res.setHeader("Access-Control-Request-Method", "POST");
            res.setHeader("Access-Control-Request-Headers", "Content-Type");

            // Receiving input data
            const data = await getReqData(req);

            const user_email = JSON.parse(data);
            //console.log(user_email);
            const user_info = await new POBoxController().getPOBoxByEmail(user_email.email);
            //console.log(user_info);

            if (!user_info) {
                res.writeHead(404, { "Content-Type": "application/json" });
                // send error
                res.end(JSON.stringify(`No user found: ${user_email.email}`));
            }
            else {
                res.writeHead(202, {
                    "Content-Type": "application/json",
                    "Access-Control-Allow-Origin": "*",
                });
                res.end(JSON.stringify(user_info));
            }
        } catch (error) {
            res.writeHead(404, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }
    // Returns shipment with a tracking id input
    // /api/shipment : POST
    else if (path === "/api/shipment" && method === "POST") {
        try {
            // set the status code and content-type
            res.setHeader("Access-Control-Allow-Origin", "*");
            res.setHeader("Access-Control-Request-Method", "POST");
            res.setHeader("Access-Control-Request-Headers", "Content-Type");

            const data = await getReqData(req);
            //const tracking_id = JSON.parse(data);

            const tracking_id = JSON.parse(data)
            console.log(tracking_id);
            const shipment = await new ShipmentController().getShipmentByID(tracking_id.tracking_id);
            console.log(shipment);

            if (!shipment) {
                res.writeHead(404, { "Content-Type": "application/json" });
                // send error
                res.end(JSON.stringify(`No shipment found with TID: ${tracking_id.tracking_id}`));
            }
            else {
                res.writeHead(202, {
                    "Content-Type": "application/json",
                    "Access-Control-Allow-Origin": "*",
                });
                res.end(JSON.stringify(shipment));
            }
        } catch (error) {
            res.writeHead(404, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    // creates a customer with a user login
    // /api/register-customer : POST
    else if (path === "/api/register-customer" && method === "POST") {
        try {
            res.writeHead(201, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = await getReqData(req);
            console.log(data);

            const result = await new UserController().createCustomer(data);
            // status code 201 -> created

            res.end(result);

        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error

            res.end(JSON.stringify({ message: error.message }));

        }
    }

    // creates an employee with a user login
    // /api/register-employee : POST
    else if (path === "/api/register-employee" && method === "POST") {
        try {
            res.writeHead(201, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = await getReqData(req);
            console.log(data);

            const result = await new UserController().createEmployee(data);
            res.end(result);
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    // /api/login : POST
    else if (path === "/api/login" && method === "POST") {
        try {
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            //receive email/password and check in db
            //create JWT and return it to the frontend
            // (then every protected route uses the JWT for its role)

            const data = await getReqData(req);
            const user = JSON.parse(data);
            // console.log(user);
            //get user.type from database
            const role = await new UserController().getUserType(user);
            // console.log(role);

            const verified_user = { ...user, ...role }
            //console.log(verified_user);
            if (!verified_user.type) {
                throw new Error('Wrong Email/Password Combination.');
            }

            //UNCOMMENT for debugging
            // const temp_user =
            // {
            //     type: "admin"
            // }

            //console.log(init_jwt(verified_user));

            res.end(JSON.stringify({ token: init_jwt(verified_user), role: verified_user.type, email: verified_user.email }));

        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }

    }

    // /api/create-shipment : POST
    // API route for creating a shipment in the database
    else if (path === "/api/create-shipment" && method === "POST") {
        try {
            // set the status code and content-type
            res.writeHead(201, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = await getReqData(req);
            const result = await new ShipmentController().createShipment(data);

            res.end(result);
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }

    }

    //DEPRECATED on single use
    // /api/add-tracks : POST
    // API route for creating a tracks in the database
    else if (path === "/api/add-tracks" && method === "POST") {
        try {
            // set the status code and content-type
            res.writeHead(201, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = await getReqData(req);
            const result = await new TracksController().createTracks(data);

            res.end(JSON.stringify(result));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    //given user email, retrieve : {shipment_tracking_id, tracking_status, est_delivery_date} from TRACKS,
    // {shipment_status, num_packages} from SHIPMENT
    // api/user-shipments : POST
    else if (path === "/api/user-shipments" && method === "POST") {
        try {
            // set the status code and content-type
            res.writeHead(201, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = await getReqData(req);
            const user_email = JSON.parse(data);
            //console.log(user_email);

            const result = await new UserController().getUserShipmentsByEmail(user_email.email);


            res.end(JSON.stringify(result));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    //Marks a shipment as deleted.
    // api/delete-shipment : PUT
    else if (path === "/api/delete-shipment" && method === "PUT") {
        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });

            const data = JSON.parse(await getReqData(req));
            const tracking_id = data.tracking_id;
            const isDeleted = data.mark_deletion;

            const result = await new ShipmentController().deleteShipment(tracking_id, isDeleted);

            res.end(JSON.stringify(result));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    //Updates the status of a shipment.
    // api/update-status : PUT
    else if (path === "/api/update-status" && method === "PUT") {
        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = JSON.parse(await getReqData(req));
            const result = await new ShipmentController().updateShipmentStatus(data.tracking_id, data.status, data.location);
            res.end(JSON.stringify(result));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }
    //Update status of a shipment
    // api/update-shipment : PUT
    else if (path === "/api/update-shipment" && method === "PUT")
    {
        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = JSON.parse(await getReqData(req));

            if (data.key === 'tracking_id') {
                throw new Error('Cannot update the tracking ID.');
            }
            const result = await new ShipmentController().updateShipment(data.tracking_id, data.key, data.new_value);
            res.end(JSON.stringify(result));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    //Update an attribute of an employee.
    // api/update-employee : PUT
    else if (path === "/api/update-employee" && method === "PUT") {
        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = JSON.parse(await getReqData(req));

            if (data.key === 'email') {
                throw new Error('Cannot update the email of an employee.');
            }
            const result = await new UserController().updateEmployee(data.email, data.key, data.new_value);
            res.end(JSON.stringify(result));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    //Update an attribute of a customer
    // api/update-customer : PUT
    else if (path === "/api/update-customer" && method === "PUT") {
        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = JSON.parse(await getReqData(req));

            if (data.key === 'email') {
                throw new Error('Cannot update the email of a customer.');
            }
            const result = await new UserController().updateCustomer(data.email, data.key, data.new_value);
            res.end(JSON.stringify(result));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    //Update an attribute of a job
    // api/update-job : PUT
    else if (path === "/api/update-job" && method === "PUT") {
        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = JSON.parse(await getReqData(req));

            if (data.key === 'work_id') {
                throw new Error('Cannot update the id of a job.');
            }
            const result = await new JobController().updateJob(data.id, data.key, data.new_value);
            res.end(JSON.stringify(result));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    // POST Job
    else if (path === "/api/job" && method === "POST") {
        try {
            // set the status code and content-type
            res.writeHead(201, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = await getReqData(req);
            const result = await new JobController().createJob(data);

            res.end(JSON.stringify(result));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    // get Job by id
    else if (path === "/api/get-job-with-id" && method === "POST") {
        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = JSON.parse(await getReqData(req));
            //console.log(data.id);
            const result = await new JobController().getJobByID(data.id);
            res.end(JSON.stringify(result));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    // GET All Jobs for all employee
    else if (path === "/api/job" && method === "GET") {
        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            let job = await new JobController().getAllJobs();

            //send the packages
            res.end(JSON.stringify(job));

        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    // GET Employee Self report (1 employee)
    else if (path === "/api/self-report" && method === "POST") {
        try {
            // set the status code and content-type
            res.writeHead(201, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = await getReqData(req);
            const result = await new JobController().getSelfReport(data);

            res.end(JSON.stringify(result));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    // GET All Location history
    else if (path === "/api/loc-history" && method === "GET") {
        try {
            // set the status code and content-type
            res.writeHead(200, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            let locHist = await new locHistController().getAllLocHist();

            //send the packages
            res.end(JSON.stringify(locHist));

        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    // GET Loc History by tracking ID
    else if (path === "/api/loc-history-id" && method === "POST") {
        try {
            // set the status code and content-type
            res.writeHead(201, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = await getReqData(req);
            const result = await new locHistController().getLocHistbyID(data);

            res.end(JSON.stringify(result));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    // GET Shipment report
    else if (path === "/api/shipment-report" && method === "POST") {
        try {
            // set the status code and content-type
            res.writeHead(201, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = await getReqData(req);
            const result = await new ReportController().getShipmentReport(data);
            console.log("Result :" + result);
            res.end(JSON.stringify(result));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    // GET Employee report
    else if (path === "/api/employee-report" && method === "POST") {
        try {
            // set the status code and content-type
            res.writeHead(201, {
                "Content-Type": "application/json",
                "Access-Control-Allow-Origin": "*",
            });
            const data = await getReqData(req);
            const result = await new ReportController().getEmployeeReport(data);
            console.log("Result :" + result);
            res.end(JSON.stringify(result));
        } catch (error) {
            // set error status code and content-type
            res.writeHead(500, { "Content-Type": "application/json" });
            // send error
            res.end(JSON.stringify({ message: error.message }));
        }
    }

    // No route present
    else {
        res.writeHead(404, { "Content-Type": "application/json" });
        res.end(JSON.stringify({ message: "Route not found" }));
    }
});

server.listen(PORT, () => {
    console.log(`server started on port: ${PORT}`);
});