54 lines
2.1 KiB
JavaScript
54 lines
2.1 KiB
JavaScript
const express = require('express');
|
|
const db = require('../db');
|
|
const { authMiddleware, adminOnly } = require('../middleware/auth');
|
|
|
|
const router = express.Router();
|
|
|
|
// L5：?all=1（查看含草稿/下架的全部公告）需登录——中间件链：all=1 时先走 authMiddleware
|
|
// 校验 token，未登录返回 401；默认只返回 active 公告，游客可读。
|
|
router.get('/', (req, res, next) => {
|
|
if (req.query.all === '1') return authMiddleware(req, res, next);
|
|
next();
|
|
}, (req, res) => {
|
|
const allFlag = req.query.all === '1';
|
|
let rows;
|
|
if (allFlag) {
|
|
rows = db.all('SELECT * FROM announcements ORDER BY created_at DESC');
|
|
} else {
|
|
rows = db.all('SELECT * FROM announcements WHERE active = 1 ORDER BY created_at DESC');
|
|
}
|
|
res.json(rows);
|
|
});
|
|
|
|
router.post('/', authMiddleware, adminOnly, (req, res) => {
|
|
const { title, content, active } = req.body;
|
|
if (!content) return res.status(400).json({ error: '内容不能为空' });
|
|
const id = db.run(
|
|
'INSERT INTO announcements (title, content, active) VALUES (?, ?, ?)',
|
|
[title || '', content, active !== undefined ? (active ? 1 : 0) : 1]
|
|
);
|
|
const ann = db.get('SELECT * FROM announcements WHERE id = ?', [id]);
|
|
res.json(ann);
|
|
});
|
|
|
|
router.put('/:id', authMiddleware, adminOnly, (req, res) => {
|
|
const { title, content, active } = req.body;
|
|
const existing = db.get('SELECT id FROM announcements WHERE id = ?', [req.params.id]);
|
|
if (!existing) return res.status(404).json({ error: '公告不存在' });
|
|
db.run(
|
|
"UPDATE announcements SET title=?, content=?, active=?, updated_at=datetime('now') WHERE id=?",
|
|
[title || '', content || '', active !== undefined ? (active ? 1 : 0) : 1, req.params.id]
|
|
);
|
|
const ann = db.get('SELECT * FROM announcements WHERE id = ?', [req.params.id]);
|
|
res.json(ann);
|
|
});
|
|
|
|
router.delete('/:id', authMiddleware, adminOnly, (req, res) => {
|
|
const existing = db.get('SELECT id FROM announcements WHERE id = ?', [req.params.id]);
|
|
if (!existing) return res.status(404).json({ error: '公告不存在' });
|
|
db.run('DELETE FROM announcements WHERE id = ?', [req.params.id]);
|
|
res.json({ message: '删除成功' });
|
|
});
|
|
|
|
module.exports = router;
|