Fix admin route access and backend configuration

- Added /admin redirect to login page in nginx config
- Fixed backend server.js route ordering for proper admin handling
- Updated authentication middleware and routes
- Added user management routes
- Configured PostgreSQL integration
- Updated environment configuration
This commit is contained in:
Local Server
2025-12-13 22:34:11 -06:00
parent 8bb6430a70
commit 703ab57984
253 changed files with 29870 additions and 157 deletions

View File

@@ -1,79 +1,97 @@
const express = require('express');
const { query } = require('../config/database');
const { requireAuth } = require('../middleware/auth');
const express = require("express");
const { query } = require("../config/database");
const { requireAuth } = require("../middleware/auth");
const router = express.Router();
router.get('/dashboard', requireAuth, async (req, res) => {
// Dashboard stats API
router.get("/dashboard/stats", requireAuth, async (req, res) => {
try {
const productsCount = await query('SELECT COUNT(*) FROM products');
const ordersCount = await query('SELECT COUNT(*) FROM orders');
const usersCount = await query('SELECT COUNT(*) FROM appusers');
const pagesCount = await query('SELECT COUNT(*) FROM pages');
const recentOrders = await query(
'SELECT id, ordernumber, totalamount, status, createdat FROM orders ORDER BY createdat DESC LIMIT 5'
);
res.render('admin/dashboard', {
title: 'Dashboard - SkyArtShop Admin',
user: req.session,
const productsCount = await query("SELECT COUNT(*) FROM products");
const projectsCount = await query("SELECT COUNT(*) FROM portfolioprojects");
const blogCount = await query("SELECT COUNT(*) FROM blogposts");
const pagesCount = await query("SELECT COUNT(*) FROM pages");
res.json({
success: true,
stats: {
products: productsCount.rows[0].count,
orders: ordersCount.rows[0].count,
users: usersCount.rows[0].count,
pages: pagesCount.rows[0].count
products: parseInt(productsCount.rows[0].count),
projects: parseInt(projectsCount.rows[0].count),
blog: parseInt(blogCount.rows[0].count),
pages: parseInt(pagesCount.rows[0].count),
},
user: {
name: req.session.name,
email: req.session.email,
role: req.session.role,
},
recentOrders: recentOrders.rows
});
} catch (error) {
console.error('Dashboard error:', error);
res.status(500).send('Server error');
console.error("Dashboard error:", error);
res.status(500).json({ success: false, message: "Server error" });
}
});
router.get('/products', requireAuth, async (req, res) => {
// Products API
router.get("/products", requireAuth, async (req, res) => {
try {
const result = await query(
'SELECT id, name, price, stockquantity, isactive, createdat FROM products ORDER BY createdat DESC'
"SELECT id, name, price, stockquantity, isactive, createdat FROM products ORDER BY createdat DESC"
);
res.render('admin/products', {
title: 'Products - SkyArtShop Admin',
user: req.session,
products: result.rows
res.json({
success: true,
products: result.rows,
});
} catch (error) {
console.error('Products error:', error);
res.status(500).send('Server error');
console.error("Products error:", error);
res.status(500).json({ success: false, message: "Server error" });
}
});
router.get('/orders', requireAuth, async (req, res) => {
// Portfolio Projects API
router.get("/portfolio/projects", requireAuth, async (req, res) => {
try {
const result = await query(
'SELECT id, ordernumber, totalamount, status, createdat FROM orders ORDER BY createdat DESC'
"SELECT id, title, description, imageurl, categoryid, createdat FROM portfolioprojects ORDER BY createdat DESC"
);
res.render('admin/orders', {
title: 'Orders - SkyArtShop Admin',
user: req.session,
orders: result.rows
res.json({
success: true,
projects: result.rows,
});
} catch (error) {
console.error('Orders error:', error);
res.status(500).send('Server error');
console.error("Portfolio error:", error);
res.status(500).json({ success: false, message: "Server error" });
}
});
router.get('/users', requireAuth, async (req, res) => {
// Blog Posts API
router.get("/blog", requireAuth, async (req, res) => {
try {
const result = await query(
'SELECT id, email, name, role, createdat, lastlogin FROM adminusers ORDER BY createdat DESC'
"SELECT id, title, slug, excerpt, ispublished, createdat FROM blogposts ORDER BY createdat DESC"
);
res.render('admin/users', {
title: 'Admin Users - SkyArtShop Admin',
user: req.session,
users: result.rows
res.json({
success: true,
posts: result.rows,
});
} catch (error) {
console.error('Users error:', error);
res.status(500).send('Server error');
console.error("Blog error:", error);
res.status(500).json({ success: false, message: "Server error" });
}
});
// Pages API
router.get("/pages", requireAuth, async (req, res) => {
try {
const result = await query(
"SELECT id, title, slug, ispublished, createdat FROM pages ORDER BY createdat DESC"
);
res.json({
success: true,
pages: result.rows,
});
} catch (error) {
console.error("Pages error:", error);
res.status(500).json({ success: false, message: "Server error" });
}
});