//const web_version = require("unsafe_encrypt").web_version import { web_version } from 'unsafe_encrypt' export const setup = function (router, con, server) { router.get('/api/getPersonalPosts', function (req, res) { res.set('Access-Control-Allow-Origin', '') let otherperson = encodeURIComponent(req.query.otherperson || '') if ( typeof otherperson !== 'string' || otherperson.length > 100 || otherperson === '' ) { res.status(410).json({ error: 'invalid otherperson given' }) return } const columns = [ 'dms_user_name', 'dms_text', 'dms_time', 'dms_special_text', 'dms_id', 'dms_from_bot', 'dms_reply_id', ] //dms_user_name = sender //dms_receiver = receiver //if (sender == current and receiver == other) or (receiver == current and sender == other) let sql = `select ${columns.join(',')} from ipost.dms where ((dms_receiver = ? and dms_user_name = ?) or (dms_receiver = ? and dms_user_name = ?)) order by dms_id desc limit 50;` con.query( sql, [ otherperson, encodeURIComponent(res.locals.username), encodeURIComponent(res.locals.username), otherperson, ], function (err, result) { if (err) throw err res.json(result) } ) /* #swagger.security = [{ "appTokenAuthHeader": [] }] */ }) router.get('/api/dms/conversations', function (req, res) { res.set('Access-Control-Allow-Origin', '*') let uriencusername = encodeURIComponent(res.locals.username) let sql = `select dms_user_name, dms_receiver from ipost.dms where ((dms_receiver = ?) or (dms_user_name = ?)) group by dms_receiver,dms_user_name;` con.query( sql, [uriencusername, uriencusername], function (err, result) { if (err) throw err res.json(result) } ) /* #swagger.security = [{ "appTokenAuthHeader": [] }] */ }) router.get('/api/dms/encrypt.js', function (req, res) { res.set('Access-Control-Allow-Origin', '*') res.send(web_version()) /* #swagger.security = [{ "appTokenAuthHeader": [] }] */ }) // router.get('/api/dms/getDM', function (req, res) { res.set('Access-Control-Allow-Origin', '*') let arg = req.query.id let uriencusername = encodeURIComponent(res.locals.username) let sql = `select dms_user_name,dms_text,dms_time,dms_special_text,dms_id,dms_from_bot,dms_reply_id,dms_receiver from ipost.dms where dms_id=? and (dms_user_name=? or dms_receiver=?);` con.query( sql, [arg, uriencusername, uriencusername], function (err, result) { if (err) throw err if (result[0]) { res.set('Cache-Control', 'public, max-age=2592000') //cache it for one month-ish res.json(result[0]) } else { res.json({ error: 'there is no such dm!' }) } } ) /* #swagger.security = [{ "appTokenAuthHeader": [] }] */ }) } export default { setup, }