Rafi Athallah
325 lines
13 KiB
JavaScript
Executable File
325 lines
13 KiB
JavaScript
Executable File
const express = require('express');
|
|
const { authController } = require('../modules/auth');
|
|
const { verifyJWT } = require('../middleware/verifyJWT');
|
|
const multer = require('../middleware/multer');
|
|
const { multerErrorHandler, checkFileSizes } = require('../middleware/multer');
|
|
const { authLimiter } = require('../middleware/rateLimiter');
|
|
|
|
const router = express.Router();
|
|
|
|
/**
|
|
* @swagger
|
|
* /auth-api/login:
|
|
* post:
|
|
* summary: Admin login
|
|
* tags: [Auth]
|
|
* requestBody:
|
|
* required: true
|
|
* content:
|
|
* application/json:
|
|
* schema:
|
|
* type: object
|
|
* properties:
|
|
* email:
|
|
* type: string
|
|
* example: "admin@example.com"
|
|
* password:
|
|
* type: string
|
|
* example: "password123"
|
|
* responses:
|
|
* 200:
|
|
* description: Login successful
|
|
* content:
|
|
* application/json:
|
|
* schema:
|
|
* type: object
|
|
* properties:
|
|
* message:
|
|
* type: string
|
|
* example: "Login successful"
|
|
* token:
|
|
* type: string
|
|
* example: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
|
|
* 400:
|
|
* description: Invalid email or password
|
|
* 500:
|
|
* description: Internal server error
|
|
*/
|
|
router.post("/login", authLimiter, authController.login);
|
|
|
|
/**
|
|
* @swagger
|
|
* /auth-api/me:
|
|
* get:
|
|
* summary: Get authenticated user details
|
|
* description: Retrieve the currently authenticated user profile. Response data depends on the authenticated user's role.
|
|
* tags: [Auth]
|
|
* security:
|
|
* - bearerAuth: []
|
|
* responses:
|
|
* 200:
|
|
* description: Get authenticated user details successfully
|
|
* content:
|
|
* application/json:
|
|
* schema:
|
|
* oneOf:
|
|
* - type: object
|
|
* properties:
|
|
* status:
|
|
* type: boolean
|
|
* example: true
|
|
* data:
|
|
* type: object
|
|
* description: Intern profile data
|
|
* properties:
|
|
* id:
|
|
* type: integer
|
|
* example: 1
|
|
* id_mahasiswa:
|
|
* type: integer
|
|
* nullable: true
|
|
* example: 1
|
|
* id_lamaran_magang:
|
|
* type: integer
|
|
* nullable: true
|
|
* example: 1
|
|
* full_name:
|
|
* type: string
|
|
* example: "Rafi Athallah"
|
|
* email:
|
|
* type: string
|
|
* example: "rafi@student.com"
|
|
* role:
|
|
* type: string
|
|
* example: "intern"
|
|
* professional_bio:
|
|
* type: string
|
|
* nullable: true
|
|
* example: null
|
|
* intern_position:
|
|
* type: string
|
|
* nullable: true
|
|
* example: null
|
|
* intern_interest_group:
|
|
* type: string
|
|
* nullable: true
|
|
* example: null
|
|
* changes:
|
|
* type: integer
|
|
* example: 0
|
|
* description: Number of times the intern has changed their full name.
|
|
* is_active:
|
|
* type: boolean
|
|
* example: true
|
|
* created_at:
|
|
* type: string
|
|
* format: date-time
|
|
* example: "2026-07-10T22:45:24.305Z"
|
|
* updated_at:
|
|
* type: string
|
|
* format: date-time
|
|
* example: "2026-07-10T22:45:24.305Z"
|
|
* lamaran_magang:
|
|
* type: object
|
|
* nullable: true
|
|
* properties:
|
|
* id:
|
|
* type: integer
|
|
* example: 1
|
|
* id_mahasiswa:
|
|
* type: integer
|
|
* example: 1
|
|
* id_lowongan_magang:
|
|
* type: string
|
|
* example: "LOW-001"
|
|
* status:
|
|
* type: string
|
|
* example: "diterima"
|
|
* batch:
|
|
* type: integer
|
|
* example: 3
|
|
* created_at:
|
|
* type: string
|
|
* format: date-time
|
|
* example: "2026-07-10T22:45:24.186Z"
|
|
* update_at:
|
|
* type: string
|
|
* format: date-time
|
|
* example: "2026-07-10T22:45:24.185Z"
|
|
* lowongan_magang:
|
|
* type: object
|
|
* nullable: true
|
|
* properties:
|
|
* posisi:
|
|
* type: string
|
|
* example: "Web Developer"
|
|
* kelompok_peminatan:
|
|
* type: string
|
|
* example: "Software Engineering"
|
|
* position:
|
|
* type: string
|
|
* nullable: true
|
|
* example: "Web Developer"
|
|
* kelompok_peminatan:
|
|
* type: string
|
|
* nullable: true
|
|
* example: "Software Engineering"
|
|
* message:
|
|
* type: string
|
|
* example: "Pengguna berhasil diambil"
|
|
* code:
|
|
* type: integer
|
|
* example: 200
|
|
* - type: object
|
|
* properties:
|
|
* status:
|
|
* type: boolean
|
|
* example: true
|
|
* data:
|
|
* type: object
|
|
* description: Admin or mentor profile data
|
|
* properties:
|
|
* id:
|
|
* type: integer
|
|
* example: 1
|
|
* nama_depan:
|
|
* type: string
|
|
* example: "Admin"
|
|
* nama_belakang:
|
|
* type: string
|
|
* nullable: true
|
|
* example: "One"
|
|
* role:
|
|
* type: string
|
|
* example: "admin"
|
|
* email:
|
|
* type: string
|
|
* example: "admin1@internify.com"
|
|
* signature:
|
|
* type: string
|
|
* nullable: true
|
|
* example: "Admin-One-1783723523926"
|
|
* profile_picture:
|
|
* type: string
|
|
* nullable: true
|
|
* example: "https://placehold.co/150"
|
|
* professional_bio:
|
|
* type: string
|
|
* nullable: true
|
|
* example: "Senior Program Manager at Internify."
|
|
* message:
|
|
* type: string
|
|
* example: "Pengguna berhasil diambil"
|
|
* code:
|
|
* type: integer
|
|
* example: 200
|
|
* examples:
|
|
* intern:
|
|
* summary: Intern response
|
|
* value:
|
|
* status: true
|
|
* data:
|
|
* id: 1
|
|
* id_mahasiswa: 1
|
|
* id_lamaran_magang: 1
|
|
* full_name: "Rafi Athallah"
|
|
* email: "rafi@student.com"
|
|
* role: "intern"
|
|
* professional_bio: null
|
|
* intern_position: null
|
|
* intern_interest_group: null
|
|
* changes: 0
|
|
* is_active: true
|
|
* created_at: "2026-07-10T22:45:24.305Z"
|
|
* updated_at: "2026-07-10T22:45:24.305Z"
|
|
* lamaran_magang:
|
|
* id: 1
|
|
* id_mahasiswa: 1
|
|
* id_lowongan_magang: "LOW-001"
|
|
* status: "diterima"
|
|
* batch: 3
|
|
* created_at: "2026-07-10T22:45:24.186Z"
|
|
* update_at: "2026-07-10T22:45:24.185Z"
|
|
* lowongan_magang:
|
|
* posisi: "Web Developer"
|
|
* kelompok_peminatan: "Software Engineering"
|
|
* position: "Web Developer"
|
|
* kelompok_peminatan: "Software Engineering"
|
|
* message: "Pengguna berhasil diambil"
|
|
* code: 200
|
|
* admin:
|
|
* summary: Admin response
|
|
* value:
|
|
* status: true
|
|
* data:
|
|
* id: 1
|
|
* nama_depan: "Admin"
|
|
* nama_belakang: "One"
|
|
* role: "admin"
|
|
* email: "admin1@internify.com"
|
|
* signature: "Admin-One-1783723523926"
|
|
* profile_picture: "https://placehold.co/150"
|
|
* professional_bio: "Senior Program Manager at Internify."
|
|
* message: "Pengguna berhasil diambil"
|
|
* code: 200
|
|
* 401:
|
|
* description: Authorization header missing or invalid
|
|
* 403:
|
|
* description: Invalid or expired token
|
|
* 404:
|
|
* description: User not found
|
|
* 500:
|
|
* description: Internal server error
|
|
*/
|
|
router.get("/me", verifyJWT, authController.me);
|
|
|
|
/**
|
|
* @swagger
|
|
* /auth-api/update-profile:
|
|
* patch:
|
|
* summary: Update authenticated user profile
|
|
* description: Update profile details (full name, email, password, professional bio). Admins can also upload a profile picture. Interns can only change full_name once.
|
|
* tags: [Auth]
|
|
* security:
|
|
* - bearerAuth: []
|
|
* requestBody:
|
|
* required: true
|
|
* content:
|
|
* multipart/form-data:
|
|
* schema:
|
|
* type: object
|
|
* properties:
|
|
* full_name:
|
|
* type: string
|
|
* example: "Jonathan Kristina"
|
|
* email:
|
|
* type: string
|
|
* example: "jonathan.kristina@example.com"
|
|
* password:
|
|
* type: string
|
|
* example: "newSecurePassword123"
|
|
* professional_bio:
|
|
* type: string
|
|
* example: "Experienced UI/UX Designer and Engineer"
|
|
* profile_picture:
|
|
* type: string
|
|
* format: binary
|
|
* description: Admin only. Optional profile picture upload.
|
|
* responses:
|
|
* 200:
|
|
* description: Profile successfully updated
|
|
* 400:
|
|
* description: Bad Request (Validation error)
|
|
* 401:
|
|
* description: Unauthorized
|
|
* 403:
|
|
* description: Forbidden (Interns uploading images)
|
|
* 409:
|
|
* description: Conflict. Email already in use or intern has already changed full name once.
|
|
* 500:
|
|
* description: Internal server error
|
|
*/
|
|
router.patch('/update-profile', verifyJWT, multer.single('profile_picture'), checkFileSizes, multerErrorHandler, authController.updateProfile);
|
|
|
|
module.exports = router;
|