Backend: auth for bookmarks and categories

controllers/bookmarks/getAllBookmarks.js

@@ -6,8 +6,12 @@ const { Sequelize } = require('sequelize');
 // @route     GET /api/bookmarks
 // @access    Public
 const getAllBookmarks = asyncWrapper(async (req, res, next) => {
+  // bookmarks visibility
+  const where = req.isAuthenticated ? {} : { isPublic: true };
+
   const bookmarks = await Bookmark.findAll({
     order: [[Sequelize.fn('lower', Sequelize.col('name')), 'ASC']],
+    where,
   });
 
   res.status(200).json({

controllers/bookmarks/getSingleBookmark.js

@@ -6,8 +6,10 @@ const Bookmark = require('../../models/Bookmark');
 // @route     GET /api/bookmarks/:id
 // @access    Public
 const getSingleBookmark = asyncWrapper(async (req, res, next) => {
+  const visibility = req.isAuthenticated ? {} : { isPublic: true };
+
   const bookmark = await Bookmark.findOne({
-    where: { id: req.params.id },
+    where: { id: req.params.id, ...visibility },
   });
 
   if (!bookmark) {

controllers/categories/getAllCategories.js

@@ -12,15 +12,20 @@ const getAllCategories = asyncWrapper(async (req, res, next) => {
 
   let categories;
 
+  // categories visibility
+  const where = req.isAuthenticated ? {} : { isPublic: true };
+
   if (orderType == 'name') {
     categories = await Category.findAll({
       include: [
         {
           model: Bookmark,
           as: 'bookmarks',
+          where,
         },
       ],
       order: [[Sequelize.fn('lower', Sequelize.col('Category.name')), 'ASC']],
+      where,
     });
   } else {
     categories = await Category.findAll({
@@ -28,9 +33,11 @@ const getAllCategories = asyncWrapper(async (req, res, next) => {
         {
           model: Bookmark,
           as: 'bookmarks',
+          where,
         },
       ],
       order: [[orderType, 'ASC']],
+      where,
     });
   }
 

controllers/categories/getSingleCategory.js

@@ -7,12 +7,15 @@ const Bookmark = require('../../models/Bookmark');
 // @route     GET /api/categories/:id
 // @access    Public
 const getSingleCategory = asyncWrapper(async (req, res, next) => {
+  const visibility = req.isAuthenticated ? {} : { isPublic: true };
+
   const category = await Category.findOne({
-    where: { id: req.params.id },
+    where: { id: req.params.id, ...visibility },
     include: [
       {
         model: Bookmark,
         as: 'bookmarks',
+        where: visibility,
       },
     ],
   });