73 lines
2.3 KiB
JavaScript
73 lines
2.3 KiB
JavaScript
const express = require('express');
|
|
const router = express.Router();
|
|
const db = require('../db');
|
|
const { requireAuth } = require('../middleware/auth');
|
|
|
|
// ── Ghosts (public read) ──────────────────────────────
|
|
|
|
// Alle Geister laden
|
|
router.get('/ghosts', async (req, res) => {
|
|
try {
|
|
const rows = await db.query('SELECT * FROM ghosts ORDER BY name ASC');
|
|
const ghosts = rows.map(row => ({
|
|
...row,
|
|
evidence: typeof row.evidence === 'string' ? JSON.parse(row.evidence) : row.evidence,
|
|
tells: typeof row.tells === 'string' ? JSON.parse(row.tells) : row.tells,
|
|
}));
|
|
res.json(ghosts);
|
|
} catch (e) {
|
|
console.error(e);
|
|
res.status(500).json({ error: 'DB-Fehler' });
|
|
}
|
|
});
|
|
|
|
// ── Submissions (auth required) ───────────────────────
|
|
|
|
// Eigene Submissions laden
|
|
router.get('/submissions/mine', requireAuth, async (req, res) => {
|
|
try {
|
|
const rows = await db.query(
|
|
'SELECT * FROM submissions WHERE discord_id = ? ORDER BY created_at DESC',
|
|
[req.user.id]
|
|
);
|
|
res.json(rows);
|
|
} catch (e) {
|
|
res.status(500).json({ error: 'DB-Fehler' });
|
|
}
|
|
});
|
|
|
|
// Neue Submission einreichen
|
|
router.post('/submissions', requireAuth, async (req, res) => {
|
|
const { ghost_name, type, content } = req.body;
|
|
if (!content?.trim()) return res.status(400).json({ error: 'Inhalt fehlt' });
|
|
if (!['tip', 'edit', 'new'].includes(type)) return res.status(400).json({ error: 'Ungültiger Typ' });
|
|
|
|
try {
|
|
await db.query(
|
|
`INSERT INTO submissions (ghost_name, type, username, discord_id, content)
|
|
VALUES (?, ?, ?, ?, ?)`,
|
|
[ghost_name || '', type, req.user.username, req.user.id, content.trim()]
|
|
);
|
|
res.json({ ok: true });
|
|
} catch (e) {
|
|
console.error(e);
|
|
res.status(500).json({ error: 'DB-Fehler' });
|
|
}
|
|
});
|
|
|
|
module.exports = router;
|
|
|
|
// ── Credits (public read) ─────────────────────────────
|
|
|
|
router.get('/credits', async (req, res) => {
|
|
try {
|
|
const rows = await db.query(
|
|
'SELECT * FROM credits ORDER BY type DESC, sort_order ASC, created_at ASC'
|
|
);
|
|
res.json(rows);
|
|
} catch (e) {
|
|
console.error(e);
|
|
res.status(500).json({ error: 'DB-Fehler' });
|
|
}
|
|
});
|