OT 83 UPDATE COMMENT

controllers/commentsController.js

@@ -1,7 +1,22 @@
-const { Comments } = require('../models');
+const CommentDao = require('../dao/comment');
 
 class CommentsControllers {
+  static async modifyComment(req, res) {
+    try {
+      const { id } = req.params;
+      const { body } = req.body;
 
+      const resultUpdate = await CommentDao.updateComment({ id }, { body });
+
+      return res.status(200).json({
+        resultUpdate,
+      });
+    } catch (error) {
+      return res.status(500).json({
+        msg: `Error while updating comment`,
+      });
+    }
+  }
 }
 
-module.exports = CommentsControllers;
+module.exports = CommentsControllers;

dao/comment.js

@@ -0,0 +1,22 @@
+const db = require('../models');
+const { Comment } = db;
+
+class CommentDao {
+  static async updateComment(where, data) {
+    try {
+      const commentUpdated = await Comment.update(data, {
+        where: where,
+      });
+
+      if (commentUpdated[0] < 1) {
+        return 'Comment not found';
+      }
+
+      return 'Comment updated succesfully';
+    } catch (error) {
+      throw new Error('Error Comment not updated');
+    }
+  }
+}
+
+module.exports = CommentDao;

middlewares/verify-role.js

@@ -1,5 +1,5 @@
 const { response } = require('express');
-const { User, Role } = require('../models');
+const { User, Role, Comment } = require('../models');
 const Token = require('../helpers/Token');
 
 class RoleMiddleware {
@@ -84,6 +84,67 @@ class RoleMiddleware {
 
     return next();
   }
+  static async isOwnerOfComment(req, res, next) {
+    const authToken = req.headers['authorization'];
+    if (!authToken) {
+      return res.status(500).json({
+        msg: 'There is no token in request',
+      });
+    }
+
+    const idComment = parseInt(req.params.id);
+    let userDecrypted, user, comment;
+
+    try {
+      userDecrypted = Token.decryptJWT(req, res);
+      user = await User.findOne({
+        where: { email: userDecrypted.email },
+        attributes: ['id', 'firstName'],
+        include: {
+          model: Role,
+          attributes: ['name'],
+        },
+      });
+
+      if (!user) {
+        return res.status(400).json({
+          msg: 'User not valid',
+        });
+      }
+    } catch (error) {
+      return res.status(500).json({
+        msg: 'Error while searching USER in db',
+      });
+    }
+
+    try {
+      comment = await Comment.findOne({
+        where: { id: idComment },
+        attributes: ['user_id'],
+      });
+      if (!comment) {
+        return res.status(404).json({
+          msg: 'Comment not fount',
+        });
+      }
+      if (user.Role.name === 'Admin') {
+        return next();
+      }
+      if (user.id === comment.user_id) {
+        return next();
+      }
+
+      return res.status(400).json({
+        msg: 'User not owner of comment ',
+      });
+    } catch (error) {
+      console.log(error);
+      return res.status(500).json({
+        error,
+        msg: 'Eror while searching Comment in db',
+      });
+    }
+  }
 }
 
 module.exports = RoleMiddleware;

routes/comment.js

@@ -0,0 +1,12 @@
+const express = require('express');
+const router = express.Router();
+const CommentController = require('../controllers/commentsController');
+const verifyRole = require('../middlewares/verify-role');
+
+router.put(
+  '/:id',
+  verifyRole.isOwnerOfComment,
+  CommentController.modifyComment
+);
+
+module.exports = router;

routes/index.js

@@ -11,6 +11,7 @@ const slidesRouter = require('./slides');
 const backoffice = require('./backoffice');
 const testimonialsRouter = require('./testimonials');
 const membersRouter = require('./members');
+const comments = require('./comment');
 /* GET home page. */
 router.get('/', function (req, res, next) {
   res.render('index', { title: 'Express' });
@@ -27,4 +28,5 @@ router.use('/slides', slidesRouter);
 router.use('/backoffice', backoffice);
 router.use('/testimonials', testimonialsRouter);
 router.use('/members', membersRouter);
+router.use('/comments', comments);
 module.exports = router;