✨ feat(account, order, plan, profile, redis): enhance functionality and security
- Updated CORS settings for frontend compatibility. - Integrated Redis URL configuration. - Improved login response structure in account service. - Added role-based authorization for order and plan management. - Enhanced error handling and logging in profile and plan services. - Updated Swagger documentation for clarity on order statuses. - Configured Redis connection for better performance.
This commit is contained in:
Vendored
+4
-3
@@ -1,11 +1,12 @@
|
||||
import { Router } from "express";
|
||||
import auth from "../../middlewares/auth.js";
|
||||
import RequestValidator from "../../middlewares/request_validator.js";
|
||||
import { plan_controller } from "./plan.controller.js";
|
||||
import { plan_validations } from "./plan.validation.js";
|
||||
const router = Router();
|
||||
router.get("/", plan_controller.get_all_plan);
|
||||
router.post("/", RequestValidator(plan_validations.create_plan), plan_controller.create_plan);
|
||||
router.post("/", RequestValidator(plan_validations.create_plan), auth("ADMIN"), plan_controller.create_plan);
|
||||
router.get("/:id", plan_controller.get_single_plan);
|
||||
router.patch("/:id", RequestValidator(plan_validations.update_plan), plan_controller.update_plan);
|
||||
router.delete("/:id", plan_controller.delete_plan);
|
||||
router.patch("/:id", RequestValidator(plan_validations.update_plan), auth("ADMIN"), plan_controller.update_plan);
|
||||
router.delete("/:id", auth("ADMIN"), plan_controller.delete_plan);
|
||||
export default router;
|
||||
|
||||
+1
-1
@@ -17,7 +17,7 @@ const get_single_plan_from_db = async (req) => {
|
||||
};
|
||||
const create_plan_into_db = async (req) => {
|
||||
// define your own login here
|
||||
const user = req.user;
|
||||
const user = req?.user;
|
||||
if (user?.role !== "ADMIN") {
|
||||
throw new AppError("You don’t have permission to create plan information.!!!", 401);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user