genesis

src/routes/admin.js

@@ -0,0 +1,110 @@
+const express = require('express');
+const { authenticateToken } = require('../middleware/auth');
+const { checkAuthorizedEmail } = require('../middleware/emailAuth');
+const fs = require('fs');
+const path = require('path');
+
+const router = express.Router();
+
+// Check if user is admin (first email in the list or specific admin email)
+const checkAdminAccess = (req, res, next) => {
+  const authorizedEmails = process.env.AUTHORIZED_EMAILS;
+  if (!authorizedEmails || authorizedEmails.trim() === '') {
+    return res.status(403).json({ error: 'No authorized emails configured' });
+  }
+  
+  const emailList = authorizedEmails.split(',').map(email => email.trim().toLowerCase());
+  const userEmail = req.user?.email?.toLowerCase();
+  
+  // First email in the list is considered admin, or check for specific admin emails
+  const adminEmails = [emailList[0]]; // First email is admin
+  
+  if (!adminEmails.includes(userEmail)) {
+    return res.status(403).json({ 
+      error: 'Admin access required',
+      message: 'Only administrators can access this resource'
+    });
+  }
+  
+  next();
+};
+
+// Get current authorized emails (admin only)
+router.get('/authorized-emails', authenticateToken, checkAdminAccess, (req, res) => {
+  const authorizedEmails = process.env.AUTHORIZED_EMAILS;
+  if (!authorizedEmails) {
+    return res.json({ emails: [] });
+  }
+  
+  const emailList = authorizedEmails.split(',').map(email => email.trim());
+  res.json({ emails: emailList });
+});
+
+// Add authorized email (admin only)
+router.post('/authorized-emails', authenticateToken, checkAdminAccess, (req, res) => {
+  const { email } = req.body;
+  
+  if (!email || !email.includes('@')) {
+    return res.status(400).json({ error: 'Valid email address required' });
+  }
+  
+  const authorizedEmails = process.env.AUTHORIZED_EMAILS || '';
+  const emailList = authorizedEmails.split(',').map(e => e.trim()).filter(e => e);
+  
+  const newEmail = email.trim().toLowerCase();
+  if (emailList.map(e => e.toLowerCase()).includes(newEmail)) {
+    return res.status(400).json({ error: 'Email already authorized' });
+  }
+  
+  emailList.push(email.trim());
+  
+  // Note: This only updates the runtime environment variable
+  // For persistent changes, you'd need to update the .env file
+  process.env.AUTHORIZED_EMAILS = emailList.join(',');
+  
+  res.json({ 
+    message: 'Email added successfully',
+    emails: emailList,
+    note: 'Changes are temporary. Update .env file for permanent changes.'
+  });
+});
+
+// Remove authorized email (admin only)
+router.delete('/authorized-emails/:email', authenticateToken, checkAdminAccess, (req, res) => {
+  const emailToRemove = req.params.email.toLowerCase();
+  const authorizedEmails = process.env.AUTHORIZED_EMAILS || '';
+  const emailList = authorizedEmails.split(',').map(e => e.trim()).filter(e => e);
+  
+  const filteredEmails = emailList.filter(email => email.toLowerCase() !== emailToRemove);
+  
+  if (filteredEmails.length === emailList.length) {
+    return res.status(404).json({ error: 'Email not found in authorized list' });
+  }
+  
+  // Don't allow removing the last admin email
+  if (filteredEmails.length === 0) {
+    return res.status(400).json({ error: 'Cannot remove all authorized emails' });
+  }
+  
+  // Note: This only updates the runtime environment variable
+  process.env.AUTHORIZED_EMAILS = filteredEmails.join(',');
+  
+  res.json({ 
+    message: 'Email removed successfully',
+    emails: filteredEmails,
+    note: 'Changes are temporary. Update .env file for permanent changes.'
+  });
+});
+
+// Get system info (admin only)
+router.get('/system-info', authenticateToken, checkAdminAccess, (req, res) => {
+  res.json({
+    authorizedEmailsConfigured: !!process.env.AUTHORIZED_EMAILS,
+    totalAuthorizedEmails: process.env.AUTHORIZED_EMAILS ? process.env.AUTHORIZED_EMAILS.split(',').length : 0,
+    currentUser: req.user.email,
+    isAdmin: true,
+    environment: process.env.NODE_ENV || 'development'
+  });
+});
+
+module.exports = router;