added securing_routes code

Author: lorenseanstewart

2_crud_api/18_securing_routes/.gitignore

@@ -0,0 +1,6 @@
+# package directories
+node_modules
+jspm_packages
+
+# Serverless directories
+.serverless

2_crud_api/18_securing_routes/db.js

@@ -0,0 +1,18 @@
+const Sequelize = require("sequelize");
+
+// elephantsql endpoint
+const sequelize = new Sequelize(
+  "postgres://pxdowepn:[email protected]:5432/pxdowepn"
+);
+
+const todo = require("./models/todo")(sequelize, Sequelize);
+
+const db = {
+  Sequelize,
+  sequelize,
+  todo
+};
+
+db.sequelize.sync(/*{ force: true }*/);
+
+module.exports = db;

2_crud_api/18_securing_routes/features/create.js

@@ -0,0 +1,34 @@
+const db = require("../db.js");
+
+module.exports.createTodo = (event, context, callback) => {
+  const body = JSON.parse(event.body);
+  const { task } = body;
+  if (!task) {
+    return callback(null, {
+      statusCode: 500,
+      body: JSON.stringify({
+        error: 'The property "task" is required.'
+      })
+    });
+  }
+  db.todo
+    .create({
+      task: body.task
+    })
+    .then(todo => {
+      return callback(null, {
+        statusCode: 200,
+        body: JSON.stringify({
+          todo: todo
+        })
+      });
+    })
+    .catch(error => {
+      return callback(null, {
+        statusCode: 500,
+        body: JSON.stringify({
+          error: "There was an error creating your todo."
+        })
+      });
+    });
+};

2_crud_api/18_securing_routes/features/delete.js

@@ -0,0 +1,23 @@
+const db = require("../db.js");
+
+module.exports.deleteTodo = (event, context, callback) => {
+  const todo_id = event.pathParameters.id;
+  db.todo
+    .destroy({ where: { id: todo_id } })
+    .then(num_deleted => {
+      return callback(null, {
+        statusCode: 200,
+        body: JSON.stringify({
+          num_deleted: num_deleted
+        })
+      });
+    })
+    .catch(error => {
+      callback(null, {
+        statusCode: 500,
+        body: JSON.stringify({
+          error: `There was an error deleting your todo with id: ${todo_id}.`
+        })
+      });
+    });
+};

2_crud_api/18_securing_routes/features/read.js

@@ -0,0 +1,55 @@
+"use strict";
+
+const db = require("../db.js");
+
+module.exports.getTodo = (event, context, callback) => {
+  const todo_id = event.pathParameters.id;
+  db.todo
+    .findOne({
+      where: { id: todo_id },
+      attributes: ["id", "task", "completed"]
+    })
+    .then(todo => {
+      const response = {
+        statusCode: 200,
+        body: JSON.stringify({
+          todo: todo
+        })
+      };
+
+      callback(null, response);
+    })
+    .catch(error => {
+      callback(null, {
+        statusCode: 500,
+        body: JSON.stringify({
+          error: `There was an error fetching your todo with id: ${todo_id}.`
+        })
+      });
+    });
+};
+
+module.exports.listTodos = (event, context, callback) => {
+  db.todo
+    .findAll({
+      attributes: ["id", "task", "completed"]
+    })
+    .then(todos => {
+      const response = {
+        statusCode: 200,
+        body: JSON.stringify({
+          todos: todos
+        })
+      };
+
+      callback(null, response);
+    })
+    .catch(error => {
+      callback(null, {
+        statusCode: 500,
+        body: JSON.stringify({
+          error: `There was an error fetching your todos.`
+        })
+      });
+    });
+};

2_crud_api/18_securing_routes/features/update.js

@@ -0,0 +1,36 @@
+const db = require("../db.js");
+
+module.exports.updateTodo = (event, context, callback) => {
+  const todo_id = event.pathParameters.id;
+
+  const body = JSON.parse(event.body);
+
+  db.todo
+    .update(body, {
+      where: { id: todo_id },
+      returning: true
+    })
+    .then(resArr => {
+      console.log(resArr);
+      const [rowsAffected, todoArr] = resArr;
+      console.log(
+        `${rowsAffected} row(s) were updated with this obj: ${JSON.stringify(
+          body
+        )}`
+      );
+      return callback(null, {
+        statusCode: 200,
+        body: JSON.stringify({
+          todo: todoArr[0]
+        })
+      });
+    })
+    .catch(error => {
+      return callback(null, {
+        statusCode: 500,
+        body: JSON.stringify({
+          error: `There was an error updating todo id ${todo_id}`
+        })
+      });
+    });
+};

2_crud_api/18_securing_routes/models/todo.js

@@ -0,0 +1,37 @@
+module.exports = (sequelize, DataTypes) => {
+  return sequelize.define(
+    "todo",
+    {
+      id: {
+        type: DataTypes.INTEGER,
+        allowNull: false,
+        autoIncrement: true,
+        primaryKey: true
+      },
+      task: {
+        type: DataTypes.STRING
+      },
+      completed: {
+        type: DataTypes.BOOLEAN,
+        defaultValue: false
+      },
+      created_at: {
+        type: DataTypes.DATE,
+        defaultValue: new Date(),
+        allowNull: false
+      },
+      updated_at: {
+        type: DataTypes.DATE,
+        defaultValue: new Date(),
+        allowNull: false
+      },
+      deleted_at: {
+        type: DataTypes.DATE
+      }
+    },
+    {
+      paranoid: true,
+      underscored: true
+    }
+  );
+};

2_crud_api/18_securing_routes/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "securing_routes",
+  "version": "1.0.0",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC",
+  "devDependencies": {
+    "serverless-offline": "^3.15.3"
+  },
+  "dependencies": {
+    "pg": "6.4.2",
+    "sequelize": "3.30.4"
+  }
+}

2_crud_api/18_securing_routes/serverless.yml

@@ -0,0 +1,54 @@
+service: crud-api
+
+plugins:
+  - serverless-offline
+
+provider:
+  name: aws
+  runtime: nodejs6.10
+  stage: dev
+  region: us-west-2
+  timeout: 300
+
+
+package:
+  include:
+    - features/**
+    - models/**
+
+
+functions:
+  listTodos:
+    handler: features/read.listTodos
+    events:
+      - http:
+          path: todos
+          method: get
+
+  getTodo:
+    handler: features/read.getTodo
+    events:
+      - http:
+          path: todo/{id}
+          method: get
+
+  createTodo:
+    handler: features/create.createTodo
+    events:
+      - http:
+          path: todo
+          method: post
+
+  deleteTodo:
+    handler: features/delete.deleteTodo
+    events:
+      - http:
+          path: todo/{id}
+          method: delete
+
+  updateTodo:
+    handler: features/update.updateTodo
+    events:
+      - http:
+          path: todo/{id}
+          method: patch