Tell us what’s happening:
These are codes in my api.js. I am not passing test 8 and 11 and I thought I have trouble shooted everything already. Could someone please take a look? Thank you!!
Your code so far
"use strict";
const { Board: BoardModel, Thread: ThreadModel, Reply: ReplyModel } = require("../models.js");
module.exports = function (app) {
app
.route("/api/threads/:board")
.get(async (req, res) => {
try {
const board = req.params.board;
const data = await BoardModel.findOne({ name: board });
if (!data) {
return res.json({ error: "No board with this name" });
}
// Sort threads by bumped_on (most recent first) and get the 10 most recent threads
const threads = data.threads
.sort((a, b) => new Date(b.bumped_on) - new Date(a.bumped_on)) // Sort by bumped_on date
.slice(0, 10) // Only return the 10 most recent threads
.map((thread) => {
// Get the 3 most recent replies
const { _id, text, created_on, bumped_on, replies } = thread;
return {
_id,
text,
created_on,
bumped_on,
replies: replies.slice(0, 3).map((reply) => {
const { _id, text, created_on } = reply; // Exclude reported and delete_password
return {
_id,
text,
created_on,
};
}),
replycount: thread.replies.length, // Total number of replies
};
});
res.json(threads);
} catch (err) {
console.log(err);
res.json({ error: "There was an error fetching threads" });
}
})
.post(async (req, res) => {
try {
const { text, delete_password } = req.body;
let board = req.body.board || req.params.board;
const timestamp = new Date().toISOString(); // Create a fixed timestamp
const newThread = new ThreadModel({
text: text,
delete_password: delete_password,
replies: [],
created_on: timestamp, // Use fixed timestamp
bumped_on: timestamp, // Use fixed timestamp
});
const boardData = await BoardModel.findOne({ name: board });
if (!boardData) {
const newBoard = new BoardModel({
name: board,
threads: [newThread],
});
const savedBoard = await newBoard.save();
return res.json(newThread);
}
boardData.threads.push(newThread);
await boardData.save();
res.json(newThread);
} catch (err) {
console.log(err);
res.send("There was an error saving in post");
}
})
.put(async (req, res) => {
try {
const { report_id } = req.body;
const board = req.params.board;
const boardData = await BoardModel.findOne({ name: board });
if (!boardData) {
return res.json({ error: "Board not found" });
}
const timestamp = new Date().toISOString(); // Use fixed timestamp
const reportedThread = boardData.threads.id(report_id);
if (reportedThread) {
reportedThread.reported = true;
reportedThread.bumped_on = timestamp;
await boardData.save();
res.send("reported"); // Ensure response is 'reported'
} else {
res.json({ error: "Thread not found" });
}
} catch (err) {
console.log(err);
res.json({ error: "There was an error reporting the thread" });
}
})
.delete(async (req, res) => {
try {
const { thread_id, delete_password } = req.body;
const board = req.params.board;
const boardData = await BoardModel.findOne({ name: board });
if (!boardData) {
return res.json({ error: "Board not found" });
}
const threadToDelete = boardData.threads.id(thread_id);
if (threadToDelete.delete_password === delete_password) {
// Mark the thread as deleted (instead of just setting 'text' to '[deleted]')
threadToDelete.text = "[deleted]";
await boardData.save();
res.send("success"); // Return 'success' after deletion
} else {
res.send("incorrect password");
}
} catch (err) {
console.log(err);
res.json({ error: "There was an error deleting the thread" });
}
});
app
.route("/api/replies/:board")
.post(async (req, res) => {
try {
const { thread_id, text, delete_password } = req.body;
const board = req.params.board;
const timestamp = new Date().toISOString(); // Create a fixed timestamp for replies
const newReply = new ReplyModel({
text: text,
delete_password: delete_password,
created_on: timestamp, // Use fixed timestamp
});
const boardData = await BoardModel.findOne({ name: board });
if (!boardData) {
return res.json({ error: "Board not found" });
}
const threadToAddReply = boardData.threads.id(thread_id);
threadToAddReply.bumped_on = timestamp; // Ensure bumped_on date is updated with the same timestamp
threadToAddReply.replies.push(newReply);
await boardData.save();
res.json(boardData);
} catch (err) {
console.log(err);
res.json({ error: "There was an error adding the reply" });
}
})
.get(async (req, res) => {
try {
const board = req.params.board;
const data = await BoardModel.findOne({ name: board });
if (!data) {
return res.json({ error: "No board with this name" });
}
const thread = data.threads.id(req.query.thread_id);
if (!thread) {
return res.json({ error: "Thread not found" });
}
res.json(thread);
} catch (err) {
console.log(err);
res.json({ error: "There was an error fetching the reply" });
}
})
.put(async (req, res) => {
try {
const { thread_id, reply_id } = req.body;
const board = req.params.board;
const data = await BoardModel.findOne({ name: board });
if (!data) {
return res.json({ error: "No board with this name" });
}
const thread = data.threads.id(thread_id);
const reply = thread.replies.id(reply_id);
if (reply) {
reply.reported = true;
reply.bumped_on = new Date().toISOString(); // Consistent ISO format for replies
await data.save();
res.send("reported"); // Ensure response is 'reported' after reporting
} else {
res.json({ error: "Reply not found" });
}
} catch (err) {
console.log(err);
res.json({ error: "There was an error reporting the reply" });
}
})
.delete(async (req, res) => {
try {
const { thread_id, reply_id, delete_password } = req.body;
const board = req.params.board;
const data = await BoardModel.findOne({ name: board });
if (!data) {
return res.json({ error: "No board with this name" });
}
const thread = data.threads.id(thread_id);
const reply = thread.replies.id(reply_id);
if (!reply) {
return res.json({ error: "Reply not found" });
}
if (reply.delete_password === delete_password) {
// Mark the reply as deleted instead of just removing it
reply.text = "[deleted]";
await data.save();
res.send("success"); // Return 'success' after deletion
} else {
res.send("incorrect password");
}
} catch (err) {
console.log(err);
res.json({ error: "There was an error deleting the reply" });
}
});
};
Your browser information:
User Agent is: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Challenge Information:
Information Security Projects - Anonymous Message Board
