xssbook/public/js/api.js

const endpoint = '/api'

const fileRequest = async (url, file, method) => {
    if (method === undefined) method = 'POST'
    const response =  await fetch(endpoint + url, {
        method,
        body: file,
        headers: {}
    });
    if (response.status == 401) {
        location.href = 'login'
    }
    const contentType = response.headers.get("content-type");
    if (contentType && contentType.indexOf("application/json") !== -1) {
        const json = await response.json()
        return { status: response.status, msg: json.msg, json }
    } else {
        const msg = await response.text();
        return { status: response.status, msg }
    }
}

const request = async (url, body, method) => {
    
    if (method === undefined) method = 'POST'
    const response =  await fetch(endpoint + url, {
        method,
        body: JSON.stringify(body),
        headers: {
            'Content-Type': 'application/json'
        }
    });
    if (response.status == 401) {
        location.href = 'login'
    }
    const contentType = response.headers.get("content-type");
    if (contentType && contentType.indexOf("application/json") !== -1) {
        const json = await response.json()
        return { status: response.status, msg: json.msg, json }
    } else {
        const msg = await response.text();
        return { status: response.status, msg }
    }
}

const login = async (email, password) => {
    return await request('/auth/login', {email, password})
}

const register = async (firstname, lastname, email, password, gender, day, month, year) => {
    return await request('/auth/register', {firstname, lastname, email, password, gender, day, month, year})
}

const logout = async () => {
    return await request('/auth/logout', {})
}

const loadpostspage = async (page) => {
    return await request('/posts/page', {page})
}

const loadusersposts = async (user_id, page) => {
    return await request('/posts/user', {user_id, page})
}

const loadusers = async (ids) => {
    return await request('/users/load', {ids})
}

const loaduserspage = async (page) => {
    return await request('/users/page', {page})
}

const loadself = async () => {
    return await request("/users/self", {})
}

const postcomment = async (post_id, content) => {
    return await request('/posts/comment', {post_id, content}, 'PATCH')
}

const postlike = async (post_id, state) => {
    return await request('/posts/like', {post_id, state}, 'PATCH')
}

const createpost = async (content) => {
    return await request('/posts/create', {content})
}

const adminauth = async (secret) => {
    return await request('/admin/auth', {secret})
}

const admincheck = async () => {
    return await request('/admin/check', {})
}

const adminquery = async (query) => {
    return await request('/admin/query', {query})
}

const adminposts = async () => {
    return await request('/admin/posts', {})
}

const adminusers = async () => {
    return await request('/admin/users', {})
}

const adminsessions = async () => {
    return await request('/admin/sessions', {})
}

const updateavatar = async (file) => {
    return await fileRequest('/users/avatar', file, 'PUT')
}

const updatebanner = async (file) => {
    return await fileRequest('/users/banner', file, 'PUT')
}