definma-api/src/routes/root.ts

import express from 'express';
import globals from '../globals';
import RootValidate from './validate/root';
import res400 from './validate/res400';
import ChangelogModel from '../models/changelog';
import mongoose from 'mongoose';
import _ from 'lodash';

const router = express.Router();

router.get('/', (req, res) => {
  res.json({status: 'API server up and running!'});
});

router.get('/authorized', (req, res) => {
  if (!req.auth(res, globals.levels)) return;
  res.json({status: 'Authorization successful', method: req.authDetails.method, level: req.authDetails.level});
});

// TODO: evaluate exact changelog functionality (restoring, delting after time, etc.)
router.get('/changelog/:timestamp/:page?/:pagesize?', (req, res, next) => {
  if (!req.auth(res, ['maintain', 'admin'], 'basic')) return;

  const {error, value: options} = RootValidate.changelogParams({timestamp: req.params.timestamp, page: req.params.page, pagesize: req.params.pagesize});
  if (error) return res400(error, res);

  const id = new mongoose.Types.ObjectId(Math.floor(new Date(options.timestamp).getTime() / 1000).toString(16) + '0000000000000000');
  ChangelogModel.find({_id: {$lte: id}}).sort({_id: -1}).skip(options.page * options.pagesize).limit(options.pagesize).lean().exec((err, data) => {
    if (err) return next(err);

    res.json(_.compact(data.map(e => RootValidate.changelogOutput(e))));  // validate all and filter null values from validation errors
  });
});

module.exports = router;