Spaces:
Running
Running
| const express = require("express"); | |
| const { body } = require("express-validator"); | |
| const { validate } = require("../middleware/validate"); | |
| const { requireAuth, requireRole } = require("../middleware/auth"); | |
| const { upload } = require("../middleware/upload"); | |
| const ctrl = require("../controllers/admin.controller"); | |
| const contentCtrl = require("../controllers/content.controller"); | |
| const voucherCtrl = require("../controllers/voucher.controller"); | |
| const router = express.Router(); | |
| router.use(requireAuth, requireRole("admin")); | |
| router.get("/dashboard", ctrl.dashboardStats); | |
| router.get("/users", ctrl.listUsers); | |
| router.get("/orders", ctrl.listOrders); | |
| router.get("/orders/:id", ctrl.getOrderDetail); | |
| router.post("/orders/:id/confirm", ctrl.confirmOrder); | |
| router.post( | |
| "/orders/:id/reject", | |
| [body("reason").optional({ nullable: true }).trim().isLength({ max: 500 })], | |
| validate, | |
| ctrl.rejectOrder | |
| ); | |
| // --- Course content management (admin-only; only admins may ever | |
| // upload or modify study materials, per course requirements) ---------- | |
| router.get("/courses/:id/curriculum", contentCtrl.getCourseCurriculumForAdmin); | |
| router.post( | |
| "/courses/:id/sections", | |
| [body("title").trim().isLength({ min: 1, max: 200 })], | |
| validate, | |
| contentCtrl.createSection | |
| ); | |
| router.put("/courses/:id/sections/:sectionId", contentCtrl.updateSection); | |
| router.delete("/courses/:id/sections/:sectionId", contentCtrl.deleteSection); | |
| router.post( | |
| "/courses/:id/sections/:sectionId/lessons", | |
| upload.single("file"), | |
| [body("title").trim().isLength({ min: 1, max: 200 })], | |
| validate, | |
| contentCtrl.uploadLesson | |
| ); | |
| router.put("/courses/:id/sections/:sectionId/lessons/:lessonId", contentCtrl.updateLesson); | |
| router.delete("/courses/:id/sections/:sectionId/lessons/:lessonId", contentCtrl.deleteLesson); | |
| router.post("/courses/:id/thumbnail", upload.single("file"), contentCtrl.uploadThumbnail); | |
| // --- Vouchers: admins issue free-access codes for a specific course ---- | |
| router.get("/vouchers", voucherCtrl.listVouchers); | |
| router.get("/vouchers/:id", voucherCtrl.getVoucher); | |
| router.post( | |
| "/vouchers", | |
| [ | |
| body("courseId").isMongoId().withMessage("A valid course must be selected."), | |
| body("code").optional({ nullable: true }).trim().isLength({ min: 3, max: 40 }), | |
| body("maxRedemptions").optional({ nullable: true }).isInt({ min: 1, max: 10000 }), | |
| body("restrictedToEmails").optional({ nullable: true }).isArray(), | |
| body("restrictedToEmails.*").optional().isEmail(), | |
| body("expiresAt").optional({ nullable: true }).isISO8601(), | |
| body("note").optional({ nullable: true }).trim().isLength({ max: 500 }), | |
| ], | |
| validate, | |
| voucherCtrl.createVoucher | |
| ); | |
| router.post("/vouchers/:id/deactivate", voucherCtrl.deactivateVoucher); | |
| router.post("/vouchers/:id/reactivate", voucherCtrl.reactivateVoucher); | |
| module.exports = router; | |