前後分離: 郭劭耘，佳穎，Allen HUANG，Samuel LEE

.env.example

@@ -0,0 +1,5 @@
+JWT_SECRET=alphacamp
+SESSION_SECRET=secret
+IMGUR_CLIENT_ID=
+PORT=
+HEROKU_PAGE=

.eslintignore

@@ -0,0 +1,2 @@
+/node_modules/*
+/test/*

.eslintrc.yml

@@ -0,0 +1,12 @@
+env:
+  browser: true
+  commonjs: true
+  es2021: true
+extends:
+  - standard
+parserOptions:
+  ecmaVersion: 12
+rules:
+  arrow-parens:
+    - warn
+    - as-needed

.gitattributes

@@ -0,0 +1,53 @@
+*                 text=auto
+
+# Source code
+*.css             text diff=css
+*.html            text diff=html
+*.js              text
+*.json            text
+
+# Documentation
+*.markdown        text diff=markdown
+*.md              text diff=markdown
+*.txt             text
+
+# Templates
+*.handlebars      text
+*.hbs             text
+
+# Configs
+*.cnf             text
+*.conf            text
+*.config          text
+.editorconfig     text
+.env              text
+.env.*            text
+.gitattributes    text
+.gitconfig        text
+*.lock            text -diff
+package.json      text eol=lf
+package-lock.json text -diff
+yarn.lock         text -diff
+*.yaml            text
+*.yml             text
+browserslist      text
+
+# Heroku
+Procfile          text
+
+# Graphics
+*.gif             binary
+*.ico             binary
+*.jpg             binary
+*.jpeg            binary
+*.pdf             binary
+*.png             binary
+# SVG treated as an asset (binary) by default.
+*.svg             text
+# If you want to treat it as binary,
+# use the following line instead.
+# *.svg           binary
+*.webp            binary
+
+# Ignore files (like .npmignore or .gitignore)
+*.*ignore         text

.gitignore

@@ -42,6 +42,7 @@ build/Release
 # Dependency directories
 node_modules/
 jspm_packages/
+temp/
 
 # TypeScript v1 declaration files
 typings/
@@ -84,4 +85,6 @@ typings/
 .fusebox/
 
 # DynamoDB Local files
-.dynamodb/
+.dynamodb/
+
+

Procfile

@@ -0,0 +1 @@
+web: NODE_ENV=production node app.js

README.md

@@ -0,0 +1,67 @@
+# Simple Twitter
+![markdown](https://i.imgur.com/w40859T.png "Home Page")
+## 介紹
+利用前後端分離的方式，打造一個類Twitter的社群平台"Alphitter"，前端使用React框架，後端使用Express框架與MySQL關聯式資料庫，使用者可在平台建立帳號，新增、瀏覽、更新、刪除貼文，並追蹤其他使用者。
+## Features功能
+•	使用者可註冊帳號登入，編輯自己資料
+•	新增、瀏覽、更新、刪除貼文
+•	於貼文按讚或留言
+•	追蹤其他使用者
+## 前端網站連結
+https://tales91817.github.io/simple-twitter
+## API - 接口文件
+提供每個API的使用方式與所回應格式與資訊
+https://www.notion.so/Twitter_api_2020-80b7a66e89514f638eea161d028e765b
+## Environment Setup 環境建置
+•	Node.js 18.16.0
+•	nodemon
+
+## Install安裝與使用
+1.	確認安裝Node.js和npm之後，將專案 clone 到本地
+```
+https://github.com/mamadoujiaohao/twitter-api-2020.git
+```
+2.	透過終端機進入此專案資料夾，安裝所需NPM Packages：
+```
+npm install
+```
+3.	在SQL WorkBench 建立資料庫 (在workBench內輸入)：
+```
+create database ac_twitter_workspace
+```
+4.	建立資料庫Table：
+```
+npx sequelize db:migrate
+```
+5.	在資料庫建立種子資料：
+```
+npx sequelize db:seed:all
+```
+6.	在.env檔案中放入密碼(參考.env.example)：
+```
+IMGUR_CLIENT_ID= 你的密碼
+JWT_SECRET= 你的密碼
+```
+7.	啟動伺服器
+```
+npm run start
+```
+8.	若看見此行訊息則代表順利運行，打開瀏覽器進入到以下網址
+```
+Example app listening on http://localhost:3000
+```
+9.	若欲暫停使用
+```
+ctrl + c
+```
+10.	測試帳號
+```
+•	管理者帳號-後台
+account: root
+email: [email protected]
+password: 12345678
+•	使用者帳號-前台
+account: user0~user4
+email: [email protected] ~ [email protected]
+password: 12345678
+```

_helpers.js

@@ -1,8 +1,7 @@
-
-function getUser(req) {
-  return req.user;
+function getUser (req) {
+  return req.user
 }
 
 module.exports = {
-  getUser,
-};
+  getUser
+}

app.js

@@ -1,15 +1,32 @@
+if (process.env.NODE_ENV !== 'production') {
+  require('dotenv').config()
+}
 const express = require('express')
-const helpers = require('./_helpers');
+const session = require('express-session')
+const SESSION_SECRET = 'secret'
+const passport = require('./config/passport')
+const methodOverride = require('method-override')
+const cors = require('cors')
+const routes = require('./routes')
+
+const corsOptions = {
+  origin: '*',
+  methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH'],
+  allowedHeaders: ['Content-Type', 'Authorization']
+}
 
 const app = express()
-const port = 3000
+const port = process.env.PORT || 3000
 
-// use helpers.getUser(req) to replace req.user
-function authenticated(req, res, next){
-  // passport.authenticate('jwt', { ses...
-};
+app.use(express.urlencoded({ extened: true }))
+app.use(express.json())
+app.use(session({ secret: SESSION_SECRET, resave: false, saveUninitialized: false }))
+app.use(passport.initialize())
+app.use(passport.session())
+app.use(methodOverride('_method'))
+app.use(cors(corsOptions))
+app.use(routes)
 
-app.get('/', (req, res) => res.send('Hello World!'))
 app.listen(port, () => console.log(`Example app listening on port ${port}!`))
 
 module.exports = app

config/config.json

@@ -15,11 +15,7 @@
     "logging": false
   },
   "production": {
-    "username": "root",
-    "password": null,
-    "database": "database_production",
-    "host": "127.0.0.1",
-    "dialect": "mysql"
+    "use_env_variable": "CLEARDB_DATABASE_URL"
   },
   "travis": {
     "username": "travis",

config/passport.js

@@ -1,5 +1,71 @@
 const passport = require('passport')
+const LocalStrategy = require('passport-local')
+const bcrypt = require('bcryptjs')
+const { User, Tweet, Followship } = require('../models') // 之後要改成{ User } = require('../models')
+const passportJWT = require('passport-jwt')
+const JWTStrategy = passportJWT.Strategy
+const ExtractJWT = passportJWT.ExtractJwt
 
+passport.use(new LocalStrategy(
+  // customize user field
+  {
+    usernameField: 'account',
+    passwordField: 'password',
+    secretOrKey: process.env.JWT_SECRET || 'alphacamp',
+    passReqToCallback: true // 如果需要在 verify callback 中取得 req
+  },
+  // authenticate user
+  // 因為上面有註明 passReqToCallback: true，所以第一個參數會是 req
+  async (req, account, password, cb) => {
+    try {
+      const user = await User.findOne({ where: { account } })
+      if (!user) throw new Error('帳號不存在!')
+      const comparePassword = await bcrypt.compare(password, user.password)
+      if (!comparePassword) throw new Error('密碼錯誤!')
+      return cb(null, user)
+    } catch (err) {
+      return cb(err, null)
+    }
+  }
+))
 
+const jwtOptions = {
+  jwtFromRequest: ExtractJWT.fromAuthHeaderAsBearerToken(),
+  secretOrKey: process.env.JWT_SECRET || 'alphacamp'
+}
 
-module.exports = passport
+passport.use(new JWTStrategy(jwtOptions, async (jwtPayload, cb) => {
+  try {
+    const user = await User.findByPk(jwtPayload.id, {
+      include: [
+        { model: Tweet, as: 'LikedTweets' },
+        { model: User, as: 'Followers' },
+        { model: User, as: 'Followings' }
+      ]
+    })
+    return cb(null, user)
+  } catch (err) {
+    return cb(err, null)
+  }
+}))
+
+passport.serializeUser((user, cb) => {
+  cb(null, user.id)
+})
+
+passport.deserializeUser(async (id, cb) => {
+  try {
+    const user = await User.findByPk(id, {
+      include: [
+        { model: Tweet, as: 'Tweets' },
+        { model: Followship, as: 'Followers' },
+        { model: Followship, as: 'Followings' }
+      ]
+    })
+    return cb(null, user.toJSON())
+  } catch (err) {
+    return cb(err, null)
+  }
+})
+
+module.exports = passport