Xóa scene con mà không xóa scene cha
This commit is contained in:
@@ -0,0 +1,125 @@
|
||||
const express = require('express');
|
||||
const router = express.Router();
|
||||
const path = require('path');
|
||||
const fs = require('fs');
|
||||
const AdmZip = require('adm-zip');
|
||||
const multer = require('multer');
|
||||
|
||||
const User = require('../models/User');
|
||||
const Asset = require('../models/Asset');
|
||||
const Scene = require('../models/Scene');
|
||||
const Hotspot = require('../models/Hotspot');
|
||||
const Setting = require('../models/Setting');
|
||||
const { protect } = require('../middlewares/authMiddleware');
|
||||
const { logActivity } = require('../utils/logger');
|
||||
|
||||
const uploadDir = process.env.UPLOAD_DIR ? path.resolve(process.env.UPLOAD_DIR) : path.join(__dirname, '../uploads');
|
||||
const tempDir = path.join(uploadDir, 'temp');
|
||||
const upload = multer({ dest: tempDir });
|
||||
|
||||
// Helper: Dọn dẹp dữ liệu mồ côi
|
||||
const runOrphanedCleanup = async (performer = 'System') => {
|
||||
const validUserIds = await User.distinct('_id');
|
||||
const orphanedScenes = await Scene.find({ createdBy: { $nin: validUserIds } });
|
||||
const orphanedSceneIds = orphanedScenes.map(s => s._id);
|
||||
|
||||
if (orphanedSceneIds.length > 0) {
|
||||
await Hotspot.deleteMany({ $or: [{ parent_scene_id: { $in: orphanedSceneIds } }, { target_scene_id: { $in: orphanedSceneIds } }] });
|
||||
await Scene.deleteMany({ _id: { $in: orphanedSceneIds } });
|
||||
}
|
||||
|
||||
const usedAssetIds = await Scene.distinct('assetId');
|
||||
const safeDate = new Date(Date.now() - 2 * 3600 * 1000);
|
||||
const orphanedAssets = await Asset.find({ $or: [{ uploadedBy: { $nin: validUserIds } }, { $and: [{ _id: { $nin: usedAssetIds } }, { createdAt: { $lt: safeDate } }] }] });
|
||||
|
||||
for (const asset of orphanedAssets) {
|
||||
if (asset.filePath) await fs.promises.unlink(asset.filePath).catch(() => {});
|
||||
await Asset.findByIdAndDelete(asset._id);
|
||||
}
|
||||
await logActivity('SYSTEM_ORPHAN_CLEANUP', { scenesDeleted: orphanedSceneIds.length, assetsDeleted: orphanedAssets.length }, performer);
|
||||
return { scenesDeleted: orphanedSceneIds.length, assetsDeleted: orphanedAssets.length };
|
||||
};
|
||||
|
||||
// @route POST /api/admin/backup
|
||||
router.post('/backup', protect, async (req, res) => {
|
||||
if (req.user.role !== 'admin' && req.user.role !== 'Chủ sở hữu') return res.status(403).json({ message: 'Forbidden' });
|
||||
try {
|
||||
const zip = new AdmZip();
|
||||
const dbData = {
|
||||
users: await User.find().lean(),
|
||||
assets: await Asset.find().lean(),
|
||||
scenes: await Scene.find().lean(),
|
||||
hotspots: await Hotspot.find().lean(),
|
||||
settings: await Setting.find().lean()
|
||||
};
|
||||
zip.addFile("database.json", Buffer.from(JSON.stringify(dbData, null, 2), "utf8"));
|
||||
if (fs.existsSync(uploadDir)) zip.addLocalFolder(uploadDir, "uploads");
|
||||
res.set({ 'Content-Type': 'application/zip', 'Content-Disposition': 'attachment; filename="backup.zip"' });
|
||||
res.send(zip.toBuffer());
|
||||
} catch (error) { res.status(500).json({ message: error.message }); }
|
||||
});
|
||||
|
||||
// @route GET /api/admin/maintenance/stray-files
|
||||
router.get('/maintenance/stray-files', protect, async (req, res) => {
|
||||
if (req.user.role !== 'admin' && req.user.role !== 'Chủ sở hữu') return res.status(403).json({ message: 'Forbidden' });
|
||||
try {
|
||||
const entries = await fs.promises.readdir(uploadDir, { withFileTypes: true });
|
||||
const assets = await Asset.find().select('filePath').lean();
|
||||
const dbFileNames = new Set(assets.map(a => path.basename(a.filePath)));
|
||||
const strayFiles = entries.filter(e => e.isFile() && !e.name.startsWith('.') && !dbFileNames.has(e.name)).map(e => e.name);
|
||||
res.json({ count: strayFiles.length, files: strayFiles });
|
||||
} catch (error) { res.status(500).json({ message: error.message }); }
|
||||
});
|
||||
|
||||
// @route POST /api/admin/maintenance/cleanup
|
||||
router.post('/maintenance/cleanup', protect, async (req, res) => {
|
||||
if (req.user.role !== 'admin' && req.user.role !== 'Chủ sở hữu') return res.status(403).json({ message: 'Forbidden' });
|
||||
try {
|
||||
const report = await runOrphanedCleanup(req.user.username);
|
||||
res.json({ message: 'Cleanup completed', report });
|
||||
} catch (error) { res.status(500).json({ message: error.message }); }
|
||||
});
|
||||
|
||||
// @route GET /api/admin/users
|
||||
router.get('/users', protect, async (req, res) => {
|
||||
if (req.user.role !== 'admin' && req.user.role !== 'Chủ sở hữu') return res.status(403).json({ message: 'Forbidden' });
|
||||
try {
|
||||
const page = parseInt(req.query.page) || 1;
|
||||
const limit = parseInt(req.query.limit) || 10;
|
||||
const skip = (page - 1) * limit;
|
||||
const users = await User.find().sort({ createdAt: -1 }).skip(skip).limit(limit).select('-password');
|
||||
const total = await User.countDocuments();
|
||||
res.json({ users, totalPages: Math.ceil(total / limit), currentPage: page });
|
||||
} catch (error) { res.status(500).json({ message: error.message }); }
|
||||
});
|
||||
|
||||
// @route PUT /api/admin/users/:id
|
||||
router.put('/users/:id', protect, async (req, res) => {
|
||||
if (req.user.role !== 'admin' && req.user.role !== 'Chủ sở hữu') return res.status(403).json({ message: 'Forbidden' });
|
||||
try {
|
||||
const { fullName, email, role, password } = req.body;
|
||||
const user = await User.findById(req.params.id);
|
||||
if (!user) return res.status(404).json({ message: 'User not found' });
|
||||
if (fullName) user.fullName = fullName;
|
||||
if (email) user.email = email;
|
||||
if (role && user.role !== 'admin') user.role = role;
|
||||
if (password) user.password = password;
|
||||
await user.save();
|
||||
res.json({ message: 'User updated' });
|
||||
} catch (error) { res.status(500).json({ message: error.message }); }
|
||||
});
|
||||
|
||||
// @route DELETE /api/admin/users/:id
|
||||
router.delete('/users/:id', protect, async (req, res) => {
|
||||
if (req.user.role !== 'admin' && req.user.role !== 'Chủ sở hữu') return res.status(403).json({ message: 'Forbidden' });
|
||||
try {
|
||||
const user = await User.findById(req.params.id);
|
||||
if (!user || user.role === 'admin') return res.status(400).json({ message: 'Invalid request' });
|
||||
await User.findByIdAndDelete(req.params.id);
|
||||
await logActivity('USER_PERMANENT_DELETE', { userId: user._id, username: user.username }, req.user.username);
|
||||
await runOrphanedCleanup(req.user.username);
|
||||
res.json({ message: 'User deleted' });
|
||||
} catch (error) { res.status(500).json({ message: error.message }); }
|
||||
});
|
||||
|
||||
module.exports = router;
|
||||
+17
-1450
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,186 @@
|
||||
const express = require('express');
|
||||
const router = express.Router();
|
||||
const path = require('path');
|
||||
const fs = require('fs');
|
||||
const sharp = require('sharp');
|
||||
|
||||
const Asset = require('../models/Asset');
|
||||
const Scene = require('../models/Scene');
|
||||
const Hotspot = require('../models/Hotspot');
|
||||
const { protect, optionalAuth } = require('../middlewares/authMiddleware');
|
||||
const { verifyReferer } = require('../middlewares/securityMiddleware');
|
||||
const { deleteSceneCascade } = require('../utils/sceneHelper');
|
||||
const { logActivity } = require('../utils/logger');
|
||||
|
||||
// Chuẩn hóa đường dẫn uploads (Giai đoạn 1)
|
||||
const uploadDir = process.env.UPLOAD_DIR
|
||||
? path.resolve(process.env.UPLOAD_DIR)
|
||||
: path.join(__dirname, '../uploads');
|
||||
|
||||
/**
|
||||
* @route GET /api/assets/view/:assetId
|
||||
* @desc Stream ảnh panorama (Có Referer & Token Verification)
|
||||
*/
|
||||
router.get('/assets/view/:assetId', verifyReferer, optionalAuth, async (req, res) => {
|
||||
try {
|
||||
const asset = await Asset.findById(req.params.assetId);
|
||||
if (!asset) return res.status(404).json({ message: 'Asset not found' });
|
||||
|
||||
// Kiểm tra quyền truy cập dựa trên Privacy của Scene liên kết
|
||||
const scene = await Scene.findOne({ assetId: asset._id });
|
||||
if (!scene) {
|
||||
// Asset mồ côi, chỉ chủ sở hữu được xem
|
||||
if (!req.user || req.user._id.toString() !== asset.uploadedBy.toString()) {
|
||||
return res.status(403).json({ message: 'Access denied' });
|
||||
}
|
||||
} else {
|
||||
const isTokenValid = scene.shareToken && (!scene.shareTokenExpires || new Date() < scene.shareTokenExpires);
|
||||
const userEmail = req.user ? req.user.email : null;
|
||||
const hasAccess = scene.privacy === 'public' ||
|
||||
(scene.privacy === 'member' && req.user && (scene.sharedWith.includes(req.user._id) || (userEmail && scene.sharedEmails.includes(userEmail)))) ||
|
||||
(req.user && scene.createdBy.toString() === req.user._id.toString()) ||
|
||||
(scene.privacy === 'shared' && req.query.token === scene.shareToken && isTokenValid);
|
||||
|
||||
if (!hasAccess) return res.status(403).json({ message: 'Access denied' });
|
||||
}
|
||||
|
||||
// Kiểm tra file vật lý (Giai đoạn 2 - Async)
|
||||
try {
|
||||
await fs.promises.access(asset.filePath);
|
||||
} catch (e) {
|
||||
return res.status(404).json({ message: 'Physical file not found on disk' });
|
||||
}
|
||||
|
||||
const resolvedPath = path.resolve(asset.filePath);
|
||||
|
||||
// Xử lý Watermark cho mạng xã hội hoặc yêu cầu thủ công
|
||||
const userAgent = req.headers['user-agent'] || '';
|
||||
const isSocialBot = /facebookexternalhit|Facebot|ZaloBot|Twitterbot|Slackbot|LinkedInBot|Embedly/i.test(userAgent);
|
||||
|
||||
if (isSocialBot || req.query.watermark === 'true') {
|
||||
const iconPath = path.join(__dirname, '../assets/static/360-badge.png');
|
||||
if (fs.existsSync(iconPath)) {
|
||||
try {
|
||||
const buffer = await sharp(resolvedPath)
|
||||
.resize(1200, 1200, { fit: 'cover' })
|
||||
.composite([{ input: iconPath, gravity: 'center' }])
|
||||
.jpeg({ quality: 90 })
|
||||
.toBuffer();
|
||||
res.set({
|
||||
'Content-Type': 'image/jpeg',
|
||||
'Cache-Control': 'public, max-age=2592000'
|
||||
});
|
||||
return res.send(buffer);
|
||||
} catch (e) {
|
||||
console.error("[Assets] Watermark processing failed:", e.message);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Stream file với caching tốt
|
||||
res.sendFile(resolvedPath, {
|
||||
maxAge: 2592000000, // 30 ngày
|
||||
headers: {
|
||||
'Content-Type': 'image/jpeg',
|
||||
'Cache-Control': 'public, max-age=2592000, immutable'
|
||||
}
|
||||
});
|
||||
} catch (error) {
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
/**
|
||||
* @route GET /api/assets/view_avatar/:filename
|
||||
* @desc Stream ảnh đại diện
|
||||
*/
|
||||
router.get('/assets/view_avatar/:filename', async (req, res) => {
|
||||
try {
|
||||
const avatarPath = path.join(uploadDir, req.params.filename);
|
||||
try {
|
||||
await fs.promises.access(avatarPath);
|
||||
} catch (e) {
|
||||
return res.status(404).json({ message: 'Avatar not found' });
|
||||
}
|
||||
res.sendFile(avatarPath, {
|
||||
maxAge: 2592000000,
|
||||
headers: { 'Content-Type': 'image/jpeg' }
|
||||
});
|
||||
} catch (error) {
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
/**
|
||||
* @route GET /api/me/assets
|
||||
* @desc Kho ảnh của tôi (Dùng cho Dashboard Media Library)
|
||||
*/
|
||||
router.get('/me/assets', protect, async (req, res) => {
|
||||
try {
|
||||
const query = (req.user.role === 'admin' || req.user.role === 'Chủ sở hữu') ? {} : { uploadedBy: req.user._id };
|
||||
|
||||
const assets = await Asset.aggregate([
|
||||
{ $match: query },
|
||||
{ $lookup: { from: 'scenes', localField: '_id', foreignField: 'assetId', as: 'linkedScene' } },
|
||||
{ $unwind: { path: '$linkedScene', preserveNullAndEmptyArrays: true } },
|
||||
{ $lookup: { from: 'hotspots', localField: 'linkedScene._id', foreignField: 'target_scene_id', as: 'incomingHotspots' } },
|
||||
{ $lookup: { from: 'scenes', localField: 'incomingHotspots.parent_scene_id', foreignField: '_id', as: 'parentScenes' } },
|
||||
{ $project: { filePath: 0 } },
|
||||
{ $sort: { createdAt: -1 } }
|
||||
]);
|
||||
res.json(assets);
|
||||
} catch (error) {
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
/**
|
||||
* @route GET /api/me/assets/top-large
|
||||
* @desc Thống kê 5 file chiếm dung lượng lớn nhất
|
||||
*/
|
||||
router.get('/me/assets/top-large', protect, async (req, res) => {
|
||||
try {
|
||||
const topAssets = await Asset.aggregate([
|
||||
{ $match: { uploadedBy: req.user._id } },
|
||||
{ $sort: { fileSize: -1 } },
|
||||
{ $limit: 5 },
|
||||
{ $lookup: { from: 'scenes', localField: '_id', foreignField: 'assetId', as: 'scene' } },
|
||||
{ $unwind: { path: '$scene', preserveNullAndEmptyArrays: true } },
|
||||
{ $project: { fileSize: 1, createdAt: 1, 'scene.name': 1, 'scene.title': 1, 'scene._id': 1 } }
|
||||
]);
|
||||
res.json(topAssets);
|
||||
} catch (error) {
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
/**
|
||||
* @route DELETE /api/assets/:id
|
||||
* @desc Xóa file vật lý và bản ghi (kèm Scene liên quan)
|
||||
*/
|
||||
router.delete('/assets/:id', protect, async (req, res) => {
|
||||
try {
|
||||
const asset = await Asset.findById(req.params.id);
|
||||
if (!asset) return res.status(404).json({ message: 'Asset not found' });
|
||||
|
||||
if (asset.uploadedBy.toString() !== req.user._id.toString() && req.user.role !== 'admin') {
|
||||
return res.status(403).json({ message: 'Bạn không có quyền xóa tập tin này' });
|
||||
}
|
||||
|
||||
const linkedScene = await Scene.findOne({ assetId: asset._id });
|
||||
if (linkedScene) {
|
||||
await deleteSceneCascade(linkedScene._id, req.user.username);
|
||||
} else {
|
||||
// Nếu là asset mồ côi (không gắn scene)
|
||||
if (asset.filePath) await fs.promises.unlink(asset.filePath).catch(() => {});
|
||||
await Asset.findByIdAndDelete(req.params.id);
|
||||
await logActivity('ORPHAN_ASSET_DELETE', { assetId: req.params.id }, req.user.username);
|
||||
}
|
||||
|
||||
res.json({ message: 'Đã xóa ảnh và dữ liệu liên quan thành công' });
|
||||
} catch (error) {
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
module.exports = router;
|
||||
@@ -0,0 +1,132 @@
|
||||
const express = require('express');
|
||||
const router = express.Router();
|
||||
const Hotspot = require('../models/Hotspot');
|
||||
const Scene = require('../models/Scene');
|
||||
const { protect } = require('../middlewares/authMiddleware');
|
||||
const { calculateReverseYaw } = require('../utils/hotspotHelper');
|
||||
|
||||
/**
|
||||
* @route GET /api/hotspots/:scene_id
|
||||
* @desc Lấy toàn bộ danh sách hotspot của một cảnh
|
||||
*/
|
||||
router.get('/:scene_id', async (req, res) => {
|
||||
try {
|
||||
const hotspots = await Hotspot.find({ parent_scene_id: req.params.scene_id })
|
||||
.populate({
|
||||
path: 'target_scene_id',
|
||||
select: 'name title assetId privacy shareToken',
|
||||
populate: { path: 'assetId', select: '_id' }
|
||||
})
|
||||
.lean();
|
||||
|
||||
res.json(hotspots);
|
||||
} catch (error) {
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
/**
|
||||
* @route POST /api/hotspots/create
|
||||
* @desc Tạo mới Hotspot và tự động tạo liên kết quay lại
|
||||
*/
|
||||
router.post('/create', protect, async (req, res) => {
|
||||
try {
|
||||
const { parent_scene_id, target_scene_id, title, description, coordinates } = req.body;
|
||||
|
||||
const parentScene = await Scene.findById(parent_scene_id);
|
||||
if (!parentScene || parentScene.createdBy.toString() !== req.user._id.toString()) {
|
||||
return res.status(403).json({ message: 'Không có quyền tạo hotspot cho scene này' });
|
||||
}
|
||||
|
||||
const hotspot = new Hotspot({
|
||||
parent_scene_id,
|
||||
target_scene_id,
|
||||
title,
|
||||
description,
|
||||
coordinates: {
|
||||
yaw: Number(coordinates?.yaw) || 0,
|
||||
pitch: Number(coordinates?.pitch) || 0
|
||||
},
|
||||
is_auto_return: false
|
||||
});
|
||||
await hotspot.save();
|
||||
|
||||
// Logic tạo liên kết quay lại tự động nếu có scene đích
|
||||
if (target_scene_id) {
|
||||
const targetScene = await Scene.findById(target_scene_id);
|
||||
if (targetScene) {
|
||||
const reverseYaw = calculateReverseYaw(coordinates.yaw);
|
||||
const reverseHotspot = new Hotspot({
|
||||
parent_scene_id: target_scene_id,
|
||||
target_scene_id: parent_scene_id,
|
||||
title: `Quay lại ${parentScene.name || parentScene.title}`,
|
||||
coordinates: { yaw: reverseYaw, pitch: 0 },
|
||||
is_auto_return: true
|
||||
});
|
||||
await reverseHotspot.save();
|
||||
}
|
||||
}
|
||||
|
||||
res.status(201).json(hotspot);
|
||||
} catch (error) {
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
/**
|
||||
* @route PUT /api/hotspots/update/:id
|
||||
* @desc Cập nhật thông tin/vị trí hotspot
|
||||
*/
|
||||
router.put('/update/:id', protect, async (req, res) => {
|
||||
try {
|
||||
const { title, description, coordinates } = req.body;
|
||||
const hotspot = await Hotspot.findById(req.params.id);
|
||||
if (!hotspot) return res.status(404).json({ message: 'Hotspot không tồn tại' });
|
||||
|
||||
const parentScene = await Scene.findById(hotspot.parent_scene_id);
|
||||
if (parentScene.createdBy.toString() !== req.user._id.toString()) {
|
||||
return res.status(403).json({ message: 'Không có quyền cập nhật' });
|
||||
}
|
||||
|
||||
if (title) hotspot.title = title;
|
||||
if (description) hotspot.description = description;
|
||||
if (coordinates) hotspot.coordinates = coordinates;
|
||||
|
||||
await hotspot.save();
|
||||
res.json(hotspot);
|
||||
} catch (error) {
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
/**
|
||||
* @route DELETE /api/hotspots/delete/:id
|
||||
* @desc Xóa hotspot và liên kết quay lại tự động nếu có
|
||||
*/
|
||||
router.delete('/delete/:id', protect, async (req, res) => {
|
||||
try {
|
||||
const hotspot = await Hotspot.findById(req.params.id);
|
||||
if (!hotspot) return res.status(404).json({ message: 'Hotspot không tồn tại' });
|
||||
|
||||
const parentScene = await Scene.findById(hotspot.parent_scene_id);
|
||||
if (parentScene.createdBy.toString() !== req.user._id.toString()) {
|
||||
return res.status(403).json({ message: 'Không có quyền xóa' });
|
||||
}
|
||||
|
||||
// Xóa liên kết ngược nếu đây là cặp đôi tự động tạo
|
||||
if (hotspot.target_scene_id) {
|
||||
await Hotspot.deleteOne({
|
||||
parent_scene_id: hotspot.target_scene_id,
|
||||
target_scene_id: hotspot.parent_scene_id,
|
||||
is_auto_return: true
|
||||
});
|
||||
}
|
||||
|
||||
await Hotspot.findByIdAndDelete(req.params.id);
|
||||
res.json({ message: 'Hotspot deleted successfully' });
|
||||
} catch (error) {
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
module.exports = router;
|
||||
@@ -32,7 +32,7 @@ const imageWorker = new Worker('image-processing', async (job) => {
|
||||
});
|
||||
|
||||
// 5. Dọn dẹp file tạm
|
||||
if (fs.existsSync(tempFilePath)) fs.unlinkSync(tempFilePath);
|
||||
await fs.promises.unlink(tempFilePath).catch(() => {});
|
||||
|
||||
console.log(`[Worker] Hoàn tất xử lý Job ${job.id}`);
|
||||
return { success: true };
|
||||
|
||||
@@ -0,0 +1,191 @@
|
||||
const express = require('express');
|
||||
const router = express.Router();
|
||||
const path = require('path');
|
||||
const fs = require('fs');
|
||||
const crypto = require('crypto');
|
||||
const multer = require('multer');
|
||||
|
||||
const Scene = require('../models/Scene');
|
||||
const Asset = require('../models/Asset');
|
||||
const Hotspot = require('../models/Hotspot');
|
||||
const { protect, optionalAuth } = require('../middlewares/authMiddleware');
|
||||
const { checkQuota } = require('../middlewares/quotaMiddleware');
|
||||
const { resizeTo8K } = require('../utils/imageHelper');
|
||||
const { injectGPSCoordinates } = require('../utils/exifHelper');
|
||||
const { imageQueue } = require('./imageQueue');
|
||||
const { deleteSceneCascade } = require('../utils/sceneHelper');
|
||||
|
||||
const uploadDir = process.env.UPLOAD_DIR ? path.resolve(process.env.UPLOAD_DIR) : path.join(__dirname, '../uploads');
|
||||
const tempDir = path.join(uploadDir, 'temp');
|
||||
|
||||
const storage = multer.diskStorage({
|
||||
destination: (req, file, cb) => cb(null, tempDir),
|
||||
filename: (req, file, cb) => cb(null, `${Date.now()}_${crypto.randomBytes(4).toString('hex')}${path.extname(file.originalname)}`)
|
||||
});
|
||||
const upload = multer({ storage });
|
||||
|
||||
const uploadSinglePanorama = (req, res, next) => {
|
||||
upload.single('panorama')(req, res, (err) => {
|
||||
if (err) return res.status(400).json({ message: err.message });
|
||||
next();
|
||||
});
|
||||
};
|
||||
|
||||
// @route POST /api/scenes
|
||||
router.post('/', protect, uploadSinglePanorama, checkQuota, async (req, res) => {
|
||||
try {
|
||||
const { title, lat, lng, privacy, sharedWithUsers } = req.body;
|
||||
if (!req.file) return res.status(400).json({ message: 'Please upload a panorama image' });
|
||||
|
||||
const latitude = Number(lat) || 0;
|
||||
const longitude = Number(lng) || 0;
|
||||
const tempFilePath = req.file.path;
|
||||
const processedFileName = `processed_${req.file.filename}.jpg`;
|
||||
const processedFilePath = path.join(uploadDir, processedFileName);
|
||||
|
||||
const asset = new Asset({
|
||||
filePath: tempFilePath,
|
||||
fileSize: req.file.size,
|
||||
uploadedBy: req.user._id,
|
||||
coordinates: { lat: latitude, lng: longitude }
|
||||
});
|
||||
await asset.save();
|
||||
|
||||
let shareToken = privacy === 'shared' ? crypto.randomBytes(24).toString('hex') : undefined;
|
||||
let parsedSharedWith = [];
|
||||
try { if (sharedWithUsers) parsedSharedWith = JSON.parse(sharedWithUsers); } catch (e) {}
|
||||
|
||||
const scene = new Scene({
|
||||
name: title,
|
||||
assetId: asset._id,
|
||||
scene_url: tempFilePath,
|
||||
gps: { lat: latitude, lng: longitude },
|
||||
createdBy: req.user._id,
|
||||
privacy: privacy || 'private',
|
||||
shareToken,
|
||||
sharedWith: parsedSharedWith,
|
||||
status: 'processing'
|
||||
});
|
||||
await scene.save();
|
||||
|
||||
await imageQueue.add('process-panorama', {
|
||||
tempFilePath, processedFilePath, latitude, longitude, assetId: asset._id, sceneId: scene._id
|
||||
});
|
||||
|
||||
res.status(201).json({ message: 'Scene đã được tạo! Ảnh đang được xử lý 8K ngầm...', scene });
|
||||
} catch (error) {
|
||||
if (req.file) await fs.promises.unlink(req.file.path).catch(() => {});
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
// @route GET /api/scenes
|
||||
router.get('/', optionalAuth, async (req, res) => {
|
||||
try {
|
||||
let query = req.user
|
||||
? { $or: [{ privacy: 'public' }, { createdBy: req.user._id }, { sharedWith: req.user._id }, { sharedEmails: req.user.email }] }
|
||||
: { privacy: 'public' };
|
||||
|
||||
const scenes = await Scene.find(query).populate('createdBy', 'username').lean();
|
||||
res.json(scenes);
|
||||
} catch (error) {
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
// @route GET /api/scenes/:id
|
||||
router.get('/:id', optionalAuth, async (req, res) => {
|
||||
try {
|
||||
const scene = await Scene.findById(req.params.id).populate('createdBy', 'username').populate('assetId');
|
||||
if (!scene) return res.status(404).json({ message: 'Scene not found' });
|
||||
|
||||
const isTokenValid = scene.shareToken && (!scene.shareTokenExpires || new Date() < scene.shareTokenExpires);
|
||||
const userEmail = req.user ? req.user.email : null;
|
||||
const hasAccess = scene.privacy === 'public' ||
|
||||
(scene.privacy === 'member' && req.user && (scene.sharedWith.includes(req.user._id) || (userEmail && scene.sharedEmails.includes(userEmail)))) ||
|
||||
(req.user && scene.createdBy._id.toString() === req.user._id.toString()) ||
|
||||
(scene.privacy === 'shared' && req.query.token === scene.shareToken && isTokenValid);
|
||||
|
||||
if (!hasAccess) return res.status(403).json({ message: 'Access denied' });
|
||||
|
||||
const isChildScene = await Hotspot.exists({ target_scene_id: scene._id });
|
||||
res.json({ ...scene.toObject(), isChildScene: !!isChildScene });
|
||||
} catch (error) {
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
// @route PUT /api/scenes/:id
|
||||
router.put('/:id', protect, uploadSinglePanorama, async (req, res) => {
|
||||
try {
|
||||
const { title, description, privacy, sharedWithUsers, sharedEmails, shareExpireDays, lat, lng } = req.body;
|
||||
const scene = await Scene.findById(req.params.id);
|
||||
|
||||
if (!scene || scene.createdBy.toString() !== req.user._id.toString()) {
|
||||
return res.status(403).json({ message: 'Not authorized' });
|
||||
}
|
||||
|
||||
const oldPrivacy = scene.privacy;
|
||||
scene.name = title || scene.name;
|
||||
scene.description = description !== undefined ? description : scene.description;
|
||||
scene.privacy = privacy || scene.privacy;
|
||||
if (lat) scene.gps.lat = parseFloat(lat);
|
||||
if (lng) scene.gps.lng = parseFloat(lng);
|
||||
|
||||
if (sharedWithUsers) try { scene.sharedWith = JSON.parse(sharedWithUsers); } catch (e) {}
|
||||
if (sharedEmails) try { scene.sharedEmails = JSON.parse(sharedEmails); } catch (e) {}
|
||||
|
||||
if (privacy === 'shared') {
|
||||
if (!scene.shareToken) scene.shareToken = crypto.randomBytes(24).toString('hex');
|
||||
if (shareExpireDays && shareExpireDays !== 'never') {
|
||||
const expires = new Date();
|
||||
expires.setDate(expires.getDate() + parseInt(shareExpireDays));
|
||||
scene.shareTokenExpires = expires;
|
||||
} else if (shareExpireDays === 'never') {
|
||||
scene.shareTokenExpires = null;
|
||||
}
|
||||
}
|
||||
|
||||
if (req.file) {
|
||||
const processedFileName = `processed_${req.file.filename}.jpg`;
|
||||
const processedFilePath = path.join(uploadDir, processedFileName);
|
||||
await resizeTo8K(req.file.path, processedFilePath);
|
||||
await injectGPSCoordinates(processedFilePath, scene.gps.lat, scene.gps.lng);
|
||||
|
||||
const asset = new Asset({ filePath: processedFilePath, uploadedBy: req.user._id });
|
||||
await asset.save();
|
||||
scene.assetId = asset._id;
|
||||
await fs.promises.unlink(req.file.path).catch(() => {});
|
||||
}
|
||||
|
||||
await scene.save();
|
||||
res.json({ message: 'Scene updated', scene });
|
||||
} catch (error) {
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
// @route DELETE /api/scenes/:id
|
||||
router.delete('/:id', protect, async (req, res) => {
|
||||
try {
|
||||
const rootSceneId = req.params.id;
|
||||
const rootScene = await Scene.findById(rootSceneId);
|
||||
if (!rootScene) return res.status(404).json({ message: 'Scene không tồn tại' });
|
||||
|
||||
if (req.user.role !== 'admin' && rootScene.createdBy.toString() !== req.user._id.toString()) {
|
||||
return res.status(403).json({ message: 'Forbidden' });
|
||||
}
|
||||
|
||||
const { deletedCount } = await deleteSceneCascade(rootSceneId, req.user.username);
|
||||
|
||||
res.json({
|
||||
message: deletedCount > 1
|
||||
? `Đã xóa scene cha và ${deletedCount - 1} scene con liên quan.`
|
||||
: 'Đã xóa scene thành công.'
|
||||
});
|
||||
} catch (error) {
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
module.exports = router;
|
||||
@@ -0,0 +1,93 @@
|
||||
const express = require('express');
|
||||
const router = express.Router();
|
||||
const path = require('path');
|
||||
const fs = require('fs');
|
||||
const multer = require('multer');
|
||||
const sharp = require('sharp');
|
||||
|
||||
const User = require('../models/User');
|
||||
const Asset = require('../models/Asset');
|
||||
const Scene = require('../models/Scene');
|
||||
const Hotspot = require('../models/Hotspot');
|
||||
const { protect } = require('../middlewares/authMiddleware');
|
||||
const { ROLE_QUOTAS } = require('../middlewares/quotaMiddleware');
|
||||
|
||||
const uploadDir = process.env.UPLOAD_DIR ? path.resolve(process.env.UPLOAD_DIR) : path.join(__dirname, '../uploads');
|
||||
const upload = multer({ dest: path.join(uploadDir, 'temp') });
|
||||
|
||||
// @route GET /api/users/search
|
||||
router.get('/search', protect, async (req, res) => {
|
||||
const query = req.query.q;
|
||||
if (!query || query.length < 2) return res.json([]);
|
||||
try {
|
||||
const users = await User.find({
|
||||
_id: { $ne: req.user._id },
|
||||
$or: [{ username: { $regex: query, $options: 'i' } }, { email: { $regex: query, $options: 'i' } }]
|
||||
}).select('username email').limit(10);
|
||||
res.json(users);
|
||||
} catch (error) { res.status(500).json({ message: error.message }); }
|
||||
});
|
||||
|
||||
// @route GET /api/me/scenes
|
||||
// @desc Lấy danh sách các cảnh do chính người dùng hiện tại tạo
|
||||
router.get('/scenes', protect, async (req, res) => {
|
||||
try {
|
||||
const scenes = await Scene.find({ createdBy: req.user._id })
|
||||
.populate('createdBy', 'username')
|
||||
.populate('assetId')
|
||||
.select('+views') // Đảm bảo lấy được trường views để hiển thị thống kê
|
||||
.sort({ createdAt: -1 })
|
||||
.lean();
|
||||
|
||||
// Kiểm tra xem mỗi scene có phải là scene con (được trỏ tới bởi hotspot khác) hay không
|
||||
// Điều này giúp Frontend quyết định quyền thay đổi Privacy
|
||||
for (let i = 0; i < scenes.length; i++) {
|
||||
const isChild = await Hotspot.exists({ target_scene_id: scenes[i]._id });
|
||||
scenes[i].isChildScene = !!isChild;
|
||||
}
|
||||
|
||||
res.json(scenes);
|
||||
} catch (error) {
|
||||
res.status(500).json({ message: error.message });
|
||||
}
|
||||
});
|
||||
|
||||
// @route GET /api/me/profile
|
||||
router.get('/profile', protect, async (req, res) => {
|
||||
try {
|
||||
const user = await User.findById(req.user._id).select('-password').lean();
|
||||
const usage = await Asset.aggregate([{ $match: { uploadedBy: req.user._id } }, { $group: { _id: null, total: { $sum: "$fileSize" } } }]);
|
||||
const currentUsage = usage.length > 0 ? usage[0].total : 0;
|
||||
res.json({ ...user, storage: { used: currentUsage, quota: ROLE_QUOTAS[user.role] || ROLE_QUOTAS['Thành viên'] } });
|
||||
} catch (error) { res.status(500).json({ message: error.message }); }
|
||||
});
|
||||
|
||||
// @route PUT /api/me/profile
|
||||
router.put('/profile', protect, upload.single('avatar'), async (req, res) => {
|
||||
try {
|
||||
const user = await User.findById(req.user._id);
|
||||
const { fullName, email, username, password } = req.body;
|
||||
|
||||
if (fullName) user.fullName = fullName;
|
||||
if (email) user.email = email;
|
||||
if (username) user.username = username;
|
||||
if (password && password.trim() !== '') user.password = password;
|
||||
|
||||
if (req.file) {
|
||||
if (user.avatarUrl && user.avatarUrl.includes('avatar_')) {
|
||||
const oldPath = path.join(uploadDir, user.avatarUrl.split('/').pop());
|
||||
await fs.promises.unlink(oldPath).catch(() => {});
|
||||
}
|
||||
const avatarName = `avatar_${user._id}${path.extname(req.file.originalname)}`;
|
||||
const avatarPath = path.join(uploadDir, avatarName);
|
||||
await sharp(req.file.path).resize(200, 200).toFile(avatarPath);
|
||||
user.avatarUrl = `/api/assets/view_avatar/${avatarName}`;
|
||||
await fs.promises.unlink(req.file.path).catch(() => {});
|
||||
}
|
||||
|
||||
await user.save({ validateBeforeSave: false });
|
||||
res.json({ message: 'Hồ sơ đã được cập nhật', user: { id: user._id, username: user.username, role: user.role } });
|
||||
} catch (error) { res.status(400).json({ message: error.message }); }
|
||||
});
|
||||
|
||||
module.exports = router;
|
||||
Reference in New Issue
Block a user