project-startup 1.2.1 → 1.2.2

package/.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+    "postman.settings.dotenv-detection-notification-visibility": false
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "project-startup",
-  "version": "1.2.1",
+  "version": "1.2.2",
   "description": "Minimal session-based auth starter using Express, MySQL, React, Vite, and React Router.",
   "main": "index.js",
   "bin": {

package/template/Logics/Booking/requireRole.js

@@ -0,0 +1,12 @@
+function requireRole(...roles) {
+    return (req, res, next) => {
+        if (!roles.includes(req.user.role)) {
+            return res.status(403).json({
+                error: `Access denied. Requires role: ${roles.join(" or ")}`,
+            });
+        }
+        next();
+    };
+}
+
+module.exports = requireRole;

package/template/Logics/Booking/routes/bookingRoutes.js

@@ -0,0 +1,28 @@
+const express = require("express");
+
+const router = express.Router();
+
+const bookingController = require("../controllers/bookingController");
+
+const {
+    requireAuth,
+    requireRole,
+} = require("../middleware/authMiddleware");
+
+router.get("/", requireAuth, bookingController.getBookings);
+
+router.post(
+    "/",
+    requireAuth,
+    requireRole("customer"),
+    bookingController.createBooking
+);
+
+router.delete(
+    "/:id",
+    requireAuth,
+    requireRole("customer"),
+    bookingController.cancelBooking
+);
+
+module.exports = router;

package/template/Logics/Booking/routes/busRoutes.js

@@ -0,0 +1,37 @@
+const express = require("express");
+
+const router = express.Router();
+
+const busController = require("../controllers/busController");
+
+const {
+    requireAuth,
+    requireRole,
+} = require("../middleware/authMiddleware");
+
+router.get("/", requireAuth, busController.getAllBuses);
+
+router.get("/:id", requireAuth, busController.getBusById);
+
+router.post(
+    "/",
+    requireAuth,
+    requireRole("manager"),
+    busController.createBus
+);
+
+router.put(
+    "/:id",
+    requireAuth,
+    requireRole("manager"),
+    busController.updateBus
+);
+
+router.delete(
+    "/:id",
+    requireAuth,
+    requireRole("manager"),
+    busController.deleteBus
+);
+
+module.exports = router;