Update index.js

index.js

@@ -14,6 +14,8 @@ app.use(express.static(path.join(path.resolve(), 'public')));
 let comments = [];
 let commentId = 1;
 
+const ADMIN_KEY = 'yoshino12345';
+
 function findCommentById(id, commentsList = comments) {
     for (let comment of commentsList) {
         if (comment.id === id) {
@@ -29,17 +31,20 @@ function findCommentById(id, commentsList = comments) {
     return null;
 }
 
+// Get all comments
 app.get('/comments', (req, res) => {
     res.json(comments);
 });
 
-// Add new comment
 app.post('/comments', (req, res) => {
+    const isAdmin = req.headers['x-admin'] === 'true';
+
     const comment = {
         id: commentId++,
         content: req.body.content,
         timestamp: req.body.timestamp,
         sessionId: req.headers['x-session-id'],
+        isAdmin: isAdmin,
         replies: []
     };
     
@@ -47,9 +52,9 @@ app.post('/comments', (req, res) => {
     res.status(201).json(comment);
 });
 
-// Add reply to a comment
 app.post('/comments/:id/reply', (req, res) => {
     const parentId = parseInt(req.params.id);
+    const isAdmin = req.headers['x-admin'] === 'true';
     const result = findCommentById(parentId);
     
     if (!result) {
@@ -61,6 +66,7 @@ app.post('/comments/:id/reply', (req, res) => {
         content: req.body.content,
         timestamp: req.body.timestamp,
         sessionId: req.headers['x-session-id'],
+        isAdmin: isAdmin,
         replies: []
     };
 
@@ -72,21 +78,17 @@ app.post('/comments/:id/reply', (req, res) => {
 app.delete('/comments/:id', (req, res) => {
     const id = parseInt(req.params.id);
     const sessionId = req.headers['x-session-id'];
-    
+    const isAdmin = req.headers['x-admin'] === 'true';
     const result = findCommentById(id);
-    
     if (!result) {
         return res.status(404).json({ error: 'Comment not found' });
     }
 
     const { comment, parent } = result;
-
-    // Check if the user is the author of the comment
-    if (comment.sessionId !== sessionId) {
+    if (!isAdmin && comment.sessionId !== sessionId) {
         return res.status(403).json({ error: 'Unauthorized to delete this comment' });
     }
 
-    // Remove the comment from its parent array
     const index = parent.findIndex(c => c.id === id);
     if (index !== -1) {
         parent.splice(index, 1);
@@ -102,7 +104,6 @@ app.get('/api/proxy-image', (req, res) => {
     return res.status(400).send('Image URL is required');
   }
 
-  // Choose protocol (HTTP or HTTPS)
   const protocol = imageUrl.startsWith('https') ? https : http;
 
   protocol.get(imageUrl, (imageResponse) => {
@@ -160,7 +161,6 @@ app.get('/api/anime/:id', async (req, res) => {
       .map((i, el) => $(el).text().trim())
       .get();
 
-    // Detail tambahan anime
     const details = {};
     $('.spe span').each((i, el) => {
       const label = $(el).find('b').text().trim();
@@ -168,15 +168,12 @@ app.get('/api/anime/:id', async (req, res) => {
       details[label.replace(':', '')] = value;
     });
 
-    // List episode
     const episodes = [];
     $('.lstepsiode ul li').each((i, el) => {
       const episodeNumber = $(el).find('.eps a').text().trim();
       const episodeTitle = $(el).find('.lchx a').text().trim();
       const episodeLink = $(el).find('.lchx a').attr('href');
       const episodeDate = $(el).find('.date').text().trim();
-
-      // Extract the episode ID (from URL trimming process)
       const episodeId = episodeLink.split('/').slice(-2, -1)[0];
 
       episodes.push({
@@ -188,7 +185,6 @@ app.get('/api/anime/:id', async (req, res) => {
       });
     });
 
-    // Kirim response JSON
     res.json({
       title: animeTitle,
       image: `https://xinoooo-sme.hf.space/api/proxy-image?url=${encodeURIComponent(animeImage)}`,