504 lines
16 KiB
JavaScript
504 lines
16 KiB
JavaScript
const express = require('express');
|
||
const router = express.Router();
|
||
const { verifyToken } = require('../middleware/auth');
|
||
const BuyProduct = require('../models/BuyProduct');
|
||
const path = require('path');
|
||
const fs = require('fs');
|
||
const multer = require('multer');
|
||
const UPLOADS_ROOT = 'server/routers/remote-assets/uploads/buy-products';
|
||
const ensureDirectory = (dirPath) => {
|
||
if (!fs.existsSync(dirPath)) {
|
||
fs.mkdirSync(dirPath, { recursive: true });
|
||
}
|
||
};
|
||
|
||
ensureDirectory(UPLOADS_ROOT);
|
||
|
||
const MAX_FILE_SIZE = 15 * 1024 * 1024; // 15MB
|
||
const ALLOWED_MIME_TYPES = new Set([
|
||
'application/pdf',
|
||
'application/msword',
|
||
'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
|
||
'application/vnd.ms-excel',
|
||
'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
|
||
'text/csv',
|
||
]);
|
||
|
||
const storage = multer.diskStorage({
|
||
destination: (req, file, cb) => {
|
||
const productId = req.params.id || 'common';
|
||
const productDir = `${UPLOADS_ROOT}/${productId}`;
|
||
ensureDirectory(productDir);
|
||
cb(null, productDir);
|
||
},
|
||
filename: (req, file, cb) => {
|
||
// Исправляем кодировку имени файла из Latin1 в UTF-8
|
||
const fixedName = Buffer.from(file.originalname, 'latin1').toString('utf8');
|
||
const originalExtension = path.extname(fixedName) || '';
|
||
const baseName = path
|
||
.basename(fixedName, originalExtension)
|
||
// eslint-disable-next-line no-control-regex
|
||
.replace(/[<>:"/\\|?*\x00-\x1F]+/g, '_'); // Убираем только недопустимые символы Windows, оставляем кириллицу
|
||
cb(null, `${Date.now()}_${baseName}${originalExtension}`);
|
||
},
|
||
});
|
||
|
||
const upload = multer({
|
||
storage,
|
||
limits: {
|
||
fileSize: MAX_FILE_SIZE,
|
||
},
|
||
fileFilter: (req, file, cb) => {
|
||
if (ALLOWED_MIME_TYPES.has(file.mimetype)) {
|
||
cb(null, true);
|
||
return;
|
||
}
|
||
|
||
req.fileValidationError = 'UNSUPPORTED_FILE_TYPE';
|
||
cb(null, false);
|
||
},
|
||
});
|
||
|
||
const handleSingleFileUpload = (req, res, next) => {
|
||
upload.single('file')(req, res, (err) => {
|
||
if (err) {
|
||
console.error('[BuyProducts] Multer error:', err.message);
|
||
if (err.code === 'LIMIT_FILE_SIZE') {
|
||
return res.status(400).json({ error: 'File is too large. Maximum size is 15MB.' });
|
||
}
|
||
return res.status(400).json({ error: err.message });
|
||
}
|
||
next();
|
||
});
|
||
};
|
||
|
||
|
||
// Функция для логирования с проверкой DEV переменной
|
||
const log = (message, data = '') => {
|
||
if (process.env.DEV === 'true') {
|
||
if (data) {
|
||
console.log(message, data);
|
||
} else {
|
||
console.log(message);
|
||
}
|
||
}
|
||
};
|
||
|
||
// GET /buy-products/company/:companyId - получить товары компании
|
||
router.get('/company/:companyId', verifyToken, async (req, res) => {
|
||
try {
|
||
const { companyId } = req.params;
|
||
|
||
log('[BuyProducts] Fetching products for company:', companyId);
|
||
const products = await BuyProduct.find({ companyId })
|
||
.sort({ createdAt: -1 })
|
||
.exec();
|
||
|
||
log('[BuyProducts] Found', products.length, 'products for company', companyId);
|
||
log('[BuyProducts] Products:', products);
|
||
|
||
res.json(products);
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error fetching products:', error.message);
|
||
console.error('[BuyProducts] Error stack:', error.stack);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
// POST /buy-products - создать новый товар
|
||
router.post('/', verifyToken, async (req, res) => {
|
||
try {
|
||
const { name, description, quantity, unit, status } = req.body;
|
||
|
||
log('[BuyProducts] Creating new product:', { name, description, quantity, companyId: req.companyId });
|
||
|
||
if (!name || !description || !quantity) {
|
||
return res.status(400).json({
|
||
error: 'name, description, and quantity are required',
|
||
});
|
||
}
|
||
|
||
if (description.trim().length < 10) {
|
||
return res.status(400).json({
|
||
error: 'Description must be at least 10 characters',
|
||
});
|
||
}
|
||
|
||
const newProduct = new BuyProduct({
|
||
companyId: req.companyId,
|
||
name: name.trim(),
|
||
description: description.trim(),
|
||
quantity: quantity.trim(),
|
||
unit: unit || 'шт',
|
||
status: status || 'published',
|
||
files: [],
|
||
});
|
||
|
||
log('[BuyProducts] Attempting to save product to DB...');
|
||
const savedProduct = await newProduct.save();
|
||
|
||
log('[BuyProducts] New product created successfully:', savedProduct._id);
|
||
log('[BuyProducts] Product data:', savedProduct);
|
||
|
||
res.status(201).json(savedProduct);
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error creating product:', error.message);
|
||
console.error('[BuyProducts] Error stack:', error.stack);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
// PUT /buy-products/:id - обновить товар
|
||
router.put('/:id', verifyToken, async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
const { name, description, quantity, unit, status } = req.body;
|
||
|
||
const product = await BuyProduct.findById(id);
|
||
|
||
if (!product) {
|
||
return res.status(404).json({ error: 'Product not found' });
|
||
}
|
||
|
||
// Проверить, что товар принадлежит текущей компании
|
||
if (product.companyId !== req.companyId) {
|
||
return res.status(403).json({ error: 'Not authorized' });
|
||
}
|
||
|
||
// Обновить поля
|
||
if (name) product.name = name.trim();
|
||
if (description) product.description = description.trim();
|
||
if (quantity) product.quantity = quantity.trim();
|
||
if (unit) product.unit = unit;
|
||
if (status) product.status = status;
|
||
product.updatedAt = new Date();
|
||
|
||
const updatedProduct = await product.save();
|
||
|
||
log('[BuyProducts] Product updated:', id);
|
||
|
||
res.json(updatedProduct);
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error:', error.message);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
// DELETE /buy-products/:id - удалить товар
|
||
router.delete('/:id', verifyToken, async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
|
||
const product = await BuyProduct.findById(id);
|
||
|
||
if (!product) {
|
||
return res.status(404).json({ error: 'Product not found' });
|
||
}
|
||
|
||
if (product.companyId.toString() !== req.companyId.toString()) {
|
||
return res.status(403).json({ error: 'Not authorized' });
|
||
}
|
||
|
||
await BuyProduct.findByIdAndDelete(id);
|
||
|
||
log('[BuyProducts] Product deleted:', id);
|
||
|
||
res.json({ message: 'Product deleted successfully' });
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error:', error.message);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
// POST /buy-products/:id/files - добавить файл к товару
|
||
router.post('/:id/files', verifyToken, handleSingleFileUpload, async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
const product = await BuyProduct.findById(id);
|
||
|
||
if (!product) {
|
||
return res.status(404).json({ error: 'Product not found' });
|
||
}
|
||
|
||
// Только владелец товара может добавить файл
|
||
const productCompanyId = product.companyId?.toString() || product.companyId;
|
||
const requestCompanyId = req.companyId?.toString() || req.companyId;
|
||
|
||
console.log('[BuyProducts] Comparing company IDs:', {
|
||
productCompanyId,
|
||
requestCompanyId,
|
||
match: productCompanyId === requestCompanyId
|
||
});
|
||
|
||
if (productCompanyId !== requestCompanyId) {
|
||
return res.status(403).json({ error: 'Not authorized' });
|
||
}
|
||
|
||
if (req.fileValidationError) {
|
||
return res.status(400).json({ error: 'Unsupported file type. Use PDF, DOC, DOCX, XLS, XLSX or CSV.' });
|
||
}
|
||
|
||
if (!req.file) {
|
||
return res.status(400).json({ error: 'File is required' });
|
||
}
|
||
|
||
// Исправляем кодировку имени файла из Latin1 в UTF-8
|
||
const fixedFileName = Buffer.from(req.file.originalname, 'latin1').toString('utf8');
|
||
|
||
// Извлекаем timestamp из имени файла, созданного multer (формат: {timestamp}_{name}.ext)
|
||
const fileTimestamp = req.file.filename.split('_')[0];
|
||
|
||
// storagePath относительно UPLOADS_ROOT (который уже включает 'buy-products')
|
||
const relativePath = `${id}/${req.file.filename}`;
|
||
const file = {
|
||
id: `file-${fileTimestamp}`, // Используем тот же timestamp, что и в имени файла
|
||
name: fixedFileName,
|
||
url: `/uploads/buy-products/${relativePath}`,
|
||
type: req.file.mimetype,
|
||
size: req.file.size,
|
||
uploadedAt: new Date(),
|
||
storagePath: relativePath,
|
||
};
|
||
|
||
console.log('[BuyProducts] Adding file to product:', {
|
||
productId: id,
|
||
fileName: file.name,
|
||
fileSize: file.size,
|
||
filePath: relativePath
|
||
});
|
||
|
||
console.log('[BuyProducts] File object:', JSON.stringify(file, null, 2));
|
||
|
||
// Используем findByIdAndUpdate вместо save() для избежания проблем с валидацией
|
||
let updatedProduct;
|
||
try {
|
||
console.log('[BuyProducts] Calling findByIdAndUpdate with id:', id);
|
||
updatedProduct = await BuyProduct.findByIdAndUpdate(
|
||
id,
|
||
{
|
||
$push: { files: file },
|
||
$set: { updatedAt: new Date() }
|
||
},
|
||
{ new: true, runValidators: false }
|
||
);
|
||
console.log('[BuyProducts] findByIdAndUpdate completed');
|
||
} catch (updateError) {
|
||
console.error('[BuyProducts] findByIdAndUpdate error:', {
|
||
message: updateError.message,
|
||
name: updateError.name,
|
||
code: updateError.code
|
||
});
|
||
throw updateError;
|
||
}
|
||
|
||
if (!updatedProduct) {
|
||
throw new Error('Failed to update product with file');
|
||
}
|
||
|
||
console.log('[BuyProducts] File added successfully to product:', id);
|
||
|
||
log('[BuyProducts] File added to product:', id, file.name);
|
||
|
||
res.json(updatedProduct);
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error adding file:', error.message);
|
||
console.error('[BuyProducts] Error stack:', error.stack);
|
||
console.error('[BuyProducts] Error name:', error.name);
|
||
if (error.errors) {
|
||
console.error('[BuyProducts] Validation errors:', JSON.stringify(error.errors, null, 2));
|
||
}
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
details: error.errors || {},
|
||
});
|
||
}
|
||
});
|
||
|
||
// DELETE /buy-products/:id/files/:fileId - удалить файл
|
||
router.delete('/:id/files/:fileId', verifyToken, async (req, res) => {
|
||
try {
|
||
const { id, fileId } = req.params;
|
||
|
||
const product = await BuyProduct.findById(id);
|
||
|
||
if (!product) {
|
||
return res.status(404).json({ error: 'Product not found' });
|
||
}
|
||
|
||
if (product.companyId.toString() !== req.companyId.toString()) {
|
||
return res.status(403).json({ error: 'Not authorized' });
|
||
}
|
||
|
||
const fileToRemove = product.files.find((f) => f.id === fileId);
|
||
if (!fileToRemove) {
|
||
return res.status(404).json({ error: 'File not found' });
|
||
}
|
||
|
||
product.files = product.files.filter(f => f.id !== fileId);
|
||
await product.save();
|
||
|
||
const storedPath = fileToRemove.storagePath || fileToRemove.url.replace(/^\/uploads\//, '');
|
||
const absolutePath = `server/routers/remote-assets/uploads/${storedPath}`;
|
||
|
||
fs.promises.unlink(absolutePath).catch((unlinkError) => {
|
||
if (unlinkError && unlinkError.code !== 'ENOENT') {
|
||
console.error('[BuyProducts] Failed to remove file from disk:', unlinkError.message);
|
||
}
|
||
});
|
||
|
||
log('[BuyProducts] File deleted from product:', id, fileId);
|
||
|
||
res.json(product);
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error deleting file:', error.message);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
// POST /buy-products/:id/accept - акцептировать товар
|
||
router.post('/:id/accept', verifyToken, async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
const companyId = req.companyId;
|
||
|
||
const product = await BuyProduct.findById(id);
|
||
|
||
if (!product) {
|
||
return res.status(404).json({ error: 'Product not found' });
|
||
}
|
||
|
||
// Не можем акцептировать собственный товар
|
||
if (product.companyId.toString() === companyId.toString()) {
|
||
return res.status(403).json({ error: 'Cannot accept own product' });
|
||
}
|
||
|
||
// Проверить, не акцептировал ли уже
|
||
const alreadyAccepted = product.acceptedBy.some(
|
||
a => a.companyId.toString() === companyId.toString()
|
||
);
|
||
|
||
if (alreadyAccepted) {
|
||
return res.status(400).json({ error: 'Already accepted' });
|
||
}
|
||
|
||
product.acceptedBy.push({
|
||
companyId,
|
||
acceptedAt: new Date()
|
||
});
|
||
|
||
await product.save();
|
||
|
||
log('[BuyProducts] Product accepted by company:', companyId);
|
||
|
||
res.json(product);
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error accepting product:', error.message);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
// GET /buy-products/:id/acceptances - получить компании которые акцептовали
|
||
router.get('/:id/acceptances', verifyToken, async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
|
||
const product = await BuyProduct.findById(id).populate('acceptedBy.companyId', 'shortName fullName');
|
||
|
||
if (!product) {
|
||
return res.status(404).json({ error: 'Product not found' });
|
||
}
|
||
|
||
log('[BuyProducts] Returned acceptances for product:', id);
|
||
|
||
res.json(product.acceptedBy);
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error fetching acceptances:', error.message);
|
||
res.status(500).json({
|
||
error: 'Internal server error',
|
||
message: error.message,
|
||
});
|
||
}
|
||
});
|
||
|
||
// GET /buy-products/download/:id/:fileId - скачать файл
|
||
router.get('/download/:id/:fileId', verifyToken, async (req, res) => {
|
||
try {
|
||
console.log('[BuyProducts] Download request received:', {
|
||
productId: req.params.id,
|
||
fileId: req.params.fileId,
|
||
userId: req.userId,
|
||
companyId: req.companyId,
|
||
headers: req.headers.authorization
|
||
});
|
||
|
||
const { id, fileId } = req.params;
|
||
const product = await BuyProduct.findById(id);
|
||
|
||
if (!product) {
|
||
return res.status(404).json({ error: 'Product not found' });
|
||
}
|
||
|
||
const file = product.files.find((f) => f.id === fileId);
|
||
if (!file) {
|
||
return res.status(404).json({ error: 'File not found' });
|
||
}
|
||
|
||
// Создаем абсолютный путь к файлу
|
||
const filePath = path.resolve(UPLOADS_ROOT, file.storagePath);
|
||
|
||
console.log('[BuyProducts] Trying to download file:', {
|
||
fileId: file.id,
|
||
fileName: file.name,
|
||
storagePath: file.storagePath,
|
||
absolutePath: filePath,
|
||
exists: fs.existsSync(filePath)
|
||
});
|
||
|
||
// Проверяем существование файла
|
||
if (!fs.existsSync(filePath)) {
|
||
console.error('[BuyProducts] File not found on disk:', filePath);
|
||
return res.status(404).json({ error: 'File not found on disk' });
|
||
}
|
||
|
||
// Устанавливаем правильные заголовки для скачивания с поддержкой кириллицы
|
||
const encodedFileName = encodeURIComponent(file.name);
|
||
res.setHeader('Content-Type', file.type || 'application/octet-stream');
|
||
res.setHeader('Content-Disposition', `attachment; filename*=UTF-8''${encodedFileName}`);
|
||
res.setHeader('Content-Length', file.size);
|
||
|
||
// Отправляем файл
|
||
res.sendFile(filePath, (err) => {
|
||
if (err) {
|
||
console.error('[BuyProducts] Error sending file:', err.message);
|
||
if (!res.headersSent) {
|
||
res.status(500).json({ error: 'Error downloading file' });
|
||
}
|
||
}
|
||
});
|
||
} catch (error) {
|
||
console.error('[BuyProducts] Error downloading file:', error.message);
|
||
res.status(500).json({ error: 'Internal server error' });
|
||
}
|
||
});
|
||
|
||
module.exports = router;
|