385 lines
11 KiB
JavaScript
385 lines
11 KiB
JavaScript
const express = require('express');
|
||
const router = express.Router();
|
||
const { verifyToken } = require('../middleware/auth');
|
||
const BuyProduct = require('../models/BuyProduct');
|
||
const path = require('path');
|
||
const fs = require('fs');
|
||
const multer = require('multer');
|
||
const UPLOADS_ROOT = path.join(__dirname, '..', '..', 'remote-assets', 'uploads', 'buy-products');
|
||
const ensureDirectory = (dirPath) => {
|
||
if (!fs.existsSync(dirPath)) {
|
||
fs.mkdirSync(dirPath, { recursive: true });
|
||
}
|
||
};
|
||
|
||
ensureDirectory(UPLOADS_ROOT);
|
||
|
||
const MAX_FILE_SIZE = 15 * 1024 * 1024; // 15MB
|
||
const ALLOWED_MIME_TYPES = new Set([
|
||
'application/pdf',
|
||
'application/msword',
|
||
'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
|
||
'application/vnd.ms-excel',
|
||
'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
|
||
'text/csv',
|
||
]);
|
||
|
||
const storage = multer.diskStorage({
|
||
destination: (req, file, cb) => {
|
||
const productId = req.params.id || 'common';
|
||
const productDir = path.join(UPLOADS_ROOT, productId);
|
||
ensureDirectory(productDir);
|
||
cb(null, productDir);
|
||
},
|
||
filename: (req, file, cb) => {
|
||
const originalExtension = path.extname(file.originalname) || '';
|
||
const baseName = path
|
||
.basename(file.originalname, originalExtension)
|
||
.replace(/[^a-zA-Z0-9-_]+/g, '_')
|
||
.toLowerCase();
|
||
cb(null, `${Date.now()}_${baseName}${originalExtension}`);
|
||
},
|
||
});
|
||
|
||
const upload = multer({
|
||
storage,
|
||
limits: {
|
||
fileSize: MAX_FILE_SIZE,
|
||
},
|
||
fileFilter: (req, file, cb) => {
|
||
if (ALLOWED_MIME_TYPES.has(file.mimetype)) {
|
||
cb(null, true);
|
||
return;
|
||
}
|
||
|
||
req.fileValidationError = 'UNSUPPORTED_FILE_TYPE';
|
||
cb(null, false);
|
||
},
|
||
});
|
||
|
||
const handleSingleFileUpload = (req, res, next) => {
|
||
upload.single('file')(req, res, (err) => {
|
||
if (err) {
|
||
console.error('[BuyProducts] Multer error:', err.message);
|
||
if (err.code === 'LIMIT_FILE_SIZE') {
|
||
return res.status(400).json({ error: 'File is too large. Maximum size is 15MB.' });
|
||
}
|
||
return res.status(400).json({ error: err.message });
|
||
}
|
||
next();
|
||
});
|
||
};
|
||
|
||
|
||
// Функция для логирования с проверкой DEV переменной
|
||
const log = (message, data = '') => {
|
||
if (process.env.DEV === 'true') {
|
||
if (data) {
|
||
console.log(message, data);
|
||
} else {
|
||
console.log(message);
|
||
}
|
||
}
|
||
};
|
||
|
||
// GET /buy-products/company/:companyId - получить товары компании
|
||
router.get('/company/:companyId', verifyToken, async (req, res) => {
|
||
try {
|
||
const { companyId } = req.params;
|
||
|
||
log('[BuyProducts] Fetching products for company:', companyId);
|
||
const products = await BuyProduct.find({ companyId })
|
||
.sort({ createdAt: -1 })
|
||
.exec();
|
||
|
||
log('[BuyProducts] Found', products.length, 'products for company', companyId);
|
||
log('[BuyProducts] Products:', products);
|
||
|
||
res.json(products);
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error fetching products:', error.message);
|
||
console.error('[BuyProducts] Error stack:', error.stack);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
// POST /buy-products - создать новый товар
|
||
router.post('/', verifyToken, async (req, res) => {
|
||
try {
|
||
const { name, description, quantity, unit, status } = req.body;
|
||
|
||
log('[BuyProducts] Creating new product:', { name, description, quantity, companyId: req.companyId });
|
||
|
||
if (!name || !description || !quantity) {
|
||
return res.status(400).json({
|
||
error: 'name, description, and quantity are required',
|
||
});
|
||
}
|
||
|
||
if (description.trim().length < 10) {
|
||
return res.status(400).json({
|
||
error: 'Description must be at least 10 characters',
|
||
});
|
||
}
|
||
|
||
const newProduct = new BuyProduct({
|
||
companyId: req.companyId,
|
||
name: name.trim(),
|
||
description: description.trim(),
|
||
quantity: quantity.trim(),
|
||
unit: unit || 'шт',
|
||
status: status || 'published',
|
||
files: [],
|
||
});
|
||
|
||
log('[BuyProducts] Attempting to save product to DB...');
|
||
const savedProduct = await newProduct.save();
|
||
|
||
log('[BuyProducts] New product created successfully:', savedProduct._id);
|
||
log('[BuyProducts] Product data:', savedProduct);
|
||
|
||
res.status(201).json(savedProduct);
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error creating product:', error.message);
|
||
console.error('[BuyProducts] Error stack:', error.stack);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
// PUT /buy-products/:id - обновить товар
|
||
router.put('/:id', verifyToken, async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
const { name, description, quantity, unit, status } = req.body;
|
||
|
||
const product = await BuyProduct.findById(id);
|
||
|
||
if (!product) {
|
||
return res.status(404).json({ error: 'Product not found' });
|
||
}
|
||
|
||
// Проверить, что товар принадлежит текущей компании
|
||
if (product.companyId !== req.companyId) {
|
||
return res.status(403).json({ error: 'Not authorized' });
|
||
}
|
||
|
||
// Обновить поля
|
||
if (name) product.name = name.trim();
|
||
if (description) product.description = description.trim();
|
||
if (quantity) product.quantity = quantity.trim();
|
||
if (unit) product.unit = unit;
|
||
if (status) product.status = status;
|
||
product.updatedAt = new Date();
|
||
|
||
const updatedProduct = await product.save();
|
||
|
||
log('[BuyProducts] Product updated:', id);
|
||
|
||
res.json(updatedProduct);
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error:', error.message);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
// DELETE /buy-products/:id - удалить товар
|
||
router.delete('/:id', verifyToken, async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
|
||
const product = await BuyProduct.findById(id);
|
||
|
||
if (!product) {
|
||
return res.status(404).json({ error: 'Product not found' });
|
||
}
|
||
|
||
if (product.companyId.toString() !== req.companyId.toString()) {
|
||
return res.status(403).json({ error: 'Not authorized' });
|
||
}
|
||
|
||
await BuyProduct.findByIdAndDelete(id);
|
||
|
||
log('[BuyProducts] Product deleted:', id);
|
||
|
||
res.json({ message: 'Product deleted successfully' });
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error:', error.message);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
// POST /buy-products/:id/files - добавить файл к товару
|
||
router.post('/:id/files', verifyToken, handleSingleFileUpload, async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
const product = await BuyProduct.findById(id);
|
||
|
||
if (!product) {
|
||
return res.status(404).json({ error: 'Product not found' });
|
||
}
|
||
|
||
// Только владелец товара может добавить файл
|
||
if (product.companyId.toString() !== req.companyId.toString()) {
|
||
return res.status(403).json({ error: 'Not authorized' });
|
||
}
|
||
|
||
if (req.fileValidationError) {
|
||
return res.status(400).json({ error: 'Unsupported file type. Use PDF, DOC, DOCX, XLS, XLSX or CSV.' });
|
||
}
|
||
|
||
if (!req.file) {
|
||
return res.status(400).json({ error: 'File is required' });
|
||
}
|
||
|
||
const relativePath = path.join('buy-products', id, req.file.filename).replace(/\\/g, '/');
|
||
const file = {
|
||
id: `file-${Date.now()}`,
|
||
name: req.file.originalname,
|
||
url: `/uploads/${relativePath}`,
|
||
type: req.file.mimetype,
|
||
size: req.file.size,
|
||
uploadedAt: new Date(),
|
||
storagePath: relativePath,
|
||
};
|
||
|
||
product.files.push(file);
|
||
await product.save();
|
||
|
||
log('[BuyProducts] File added to product:', id, file.name);
|
||
|
||
res.json(product);
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error adding file:', error.message);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
// DELETE /buy-products/:id/files/:fileId - удалить файл
|
||
router.delete('/:id/files/:fileId', verifyToken, async (req, res) => {
|
||
try {
|
||
const { id, fileId } = req.params;
|
||
|
||
const product = await BuyProduct.findById(id);
|
||
|
||
if (!product) {
|
||
return res.status(404).json({ error: 'Product not found' });
|
||
}
|
||
|
||
if (product.companyId.toString() !== req.companyId.toString()) {
|
||
return res.status(403).json({ error: 'Not authorized' });
|
||
}
|
||
|
||
const fileToRemove = product.files.find((f) => f.id === fileId);
|
||
if (!fileToRemove) {
|
||
return res.status(404).json({ error: 'File not found' });
|
||
}
|
||
|
||
product.files = product.files.filter(f => f.id !== fileId);
|
||
await product.save();
|
||
|
||
const storedPath = fileToRemove.storagePath || fileToRemove.url.replace(/^\/uploads\//, '');
|
||
const absolutePath = path.join(__dirname, '..', '..', 'remote-assets', 'uploads', storedPath);
|
||
|
||
fs.promises.unlink(absolutePath).catch((unlinkError) => {
|
||
if (unlinkError && unlinkError.code !== 'ENOENT') {
|
||
console.error('[BuyProducts] Failed to remove file from disk:', unlinkError.message);
|
||
}
|
||
});
|
||
|
||
log('[BuyProducts] File deleted from product:', id, fileId);
|
||
|
||
res.json(product);
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error deleting file:', error.message);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
// POST /buy-products/:id/accept - акцептировать товар
|
||
router.post('/:id/accept', verifyToken, async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
const companyId = req.companyId;
|
||
|
||
const product = await BuyProduct.findById(id);
|
||
|
||
if (!product) {
|
||
return res.status(404).json({ error: 'Product not found' });
|
||
}
|
||
|
||
// Не можем акцептировать собственный товар
|
||
if (product.companyId.toString() === companyId.toString()) {
|
||
return res.status(403).json({ error: 'Cannot accept own product' });
|
||
}
|
||
|
||
// Проверить, не акцептировал ли уже
|
||
const alreadyAccepted = product.acceptedBy.some(
|
||
a => a.companyId.toString() === companyId.toString()
|
||
);
|
||
|
||
if (alreadyAccepted) {
|
||
return res.status(400).json({ error: 'Already accepted' });
|
||
}
|
||
|
||
product.acceptedBy.push({
|
||
companyId,
|
||
acceptedAt: new Date()
|
||
});
|
||
|
||
await product.save();
|
||
|
||
log('[BuyProducts] Product accepted by company:', companyId);
|
||
|
||
res.json(product);
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error accepting product:', error.message);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
// GET /buy-products/:id/acceptances - получить компании которые акцептовали
|
||
router.get('/:id/acceptances', verifyToken, async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
|
||
const product = await BuyProduct.findById(id).populate('acceptedBy.companyId', 'shortName fullName');
|
||
|
||
if (!product) {
|
||
return res.status(404).json({ error: 'Product not found' });
|
||
}
|
||
|
||
log('[BuyProducts] Returned acceptances for product:', id);
|
||
|
||
res.json(product.acceptedBy);
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error fetching acceptances:', error.message);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
module.exports = router;
|