Create index.js
Browse files
index.js
ADDED
|
@@ -0,0 +1,82 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
const express = require('express');
|
| 2 |
+
const rateLimit = require('express-rate-limit');
|
| 3 |
+
const helmet = require('helmet');
|
| 4 |
+
const cors = require('cors');
|
| 5 |
+
const mongoose = require('mongoose');
|
| 6 |
+
require('dotenv').config();
|
| 7 |
+
|
| 8 |
+
const app = express();
|
| 9 |
+
const PORT = 7870;
|
| 10 |
+
const API_KEY = process.env.API_KEY;
|
| 11 |
+
const MONGO_URI = process.env.MONGO_URI;
|
| 12 |
+
|
| 13 |
+
app.use(express.json());
|
| 14 |
+
app.use(helmet());
|
| 15 |
+
app.use(cors());
|
| 16 |
+
|
| 17 |
+
const limiter = rateLimit({
|
| 18 |
+
windowMs: 10 * 60 * 1000,
|
| 19 |
+
max: 100,
|
| 20 |
+
message: { error: 'Too many requests, slow down.' }
|
| 21 |
+
});
|
| 22 |
+
|
| 23 |
+
app.use(limiter);
|
| 24 |
+
|
| 25 |
+
mongoose.connect(MONGO_URI, {
|
| 26 |
+
useNewUrlParser: true,
|
| 27 |
+
useUnifiedTopology: true
|
| 28 |
+
}).then(() => console.log('MongoDB connected'))
|
| 29 |
+
.catch(err => {
|
| 30 |
+
console.error('MongoDB error:', err);
|
| 31 |
+
process.exit(1);
|
| 32 |
+
});
|
| 33 |
+
|
| 34 |
+
const Ad = mongoose.model('Ad', new mongoose.Schema({
|
| 35 |
+
link: String,
|
| 36 |
+
message: String,
|
| 37 |
+
image: String,
|
| 38 |
+
createdAt: { type: Date, default: Date.now }
|
| 39 |
+
}));
|
| 40 |
+
|
| 41 |
+
function auth(req, res, next) {
|
| 42 |
+
const key = req.headers['x-api-key'];
|
| 43 |
+
if (key !== API_KEY) return res.status(403).json({ error: 'Forbidden' });
|
| 44 |
+
next();
|
| 45 |
+
}
|
| 46 |
+
|
| 47 |
+
app.post('/ads', auth, async (req, res) => {
|
| 48 |
+
const { link, message, image } = req.body;
|
| 49 |
+
if (typeof link !== 'string' || typeof message !== 'string') {
|
| 50 |
+
return res.status(400).json({ error: 'Invalid input' });
|
| 51 |
+
}
|
| 52 |
+
|
| 53 |
+
const ad = new Ad({ link, message, image });
|
| 54 |
+
await ad.save();
|
| 55 |
+
res.json({ success: true, data: ad });
|
| 56 |
+
});
|
| 57 |
+
|
| 58 |
+
app.get('/ads', async (req, res) => {
|
| 59 |
+
const ads = await Ad.find().sort({ createdAt: -1 });
|
| 60 |
+
res.json(ads);
|
| 61 |
+
});
|
| 62 |
+
|
| 63 |
+
app.delete('/ads', auth, async (req, res) => {
|
| 64 |
+
const result = await Ad.deleteMany({});
|
| 65 |
+
res.json({ success: true, deleted: result.deletedCount });
|
| 66 |
+
});
|
| 67 |
+
|
| 68 |
+
app.delete('/ads/:id', auth, async (req, res) => {
|
| 69 |
+
try {
|
| 70 |
+
const result = await Ad.findByIdAndDelete(req.params.id);
|
| 71 |
+
if (!result) {
|
| 72 |
+
return res.status(404).json({ error: 'Ad not found' });
|
| 73 |
+
}
|
| 74 |
+
res.json({ success: true, deletedId: req.params.id });
|
| 75 |
+
} catch (err) {
|
| 76 |
+
res.status(400).json({ error: 'Invalid ID' });
|
| 77 |
+
}
|
| 78 |
+
});
|
| 79 |
+
|
| 80 |
+
app.listen(PORT, () => {
|
| 81 |
+
console.log(`Server Active:${PORT}`);
|
| 82 |
+
});
|