feat: add basic cookie authorisation handler and route

Relates #34

package.json

@@ -44,6 +44,7 @@
 		]
 	},
 	"devDependencies": {
-		"airtable": "^0.10.0"
+		"airtable": "^0.10.0",
+		"cookie-parser": "^1.4.5"
 	}
 }

src/app.js

@@ -13,13 +13,16 @@ const {
 	displayAllCountries,
 } = require("./handlers/tableHandlers");
 const handleErrors = require("./middleware/error");
+const { checkBasicAuth, setCookie } = require("./middleware/auth");
+const cookieParser = require("cookie-parser");
 
 const app = express();
 app.use(handleErrors);
 
 app.use(express.json());
 
 app.use(cors());
+app.use(cookieParser());
 
 ////// NON-ADMIN ROUTES //////
 app.get("/countries", displayAllCountries);
@@ -32,8 +35,9 @@ app.post("/countries/:id/businesses", addBusinessHandler);
 app.post("/countries/:id/things_to_do", addThingsToDoHandler);
 
 ////// ADMIN ROUTES FOR PAULA //////
-app.put("/admin/:table/:postId", approvePostHandler);
-app.delete("/admin/:table/:postId", deletePostHandler);
-app.get("/admin/:table", getUnapprovedPostsHandler);
+app.post("/admin", setCookie);
+app.put("/admin/:table/:postId", checkBasicAuth, approvePostHandler);
+app.delete("/admin/:table/:postId", checkBasicAuth, deletePostHandler);
+app.get("/admin/:table", checkBasicAuth, getUnapprovedPostsHandler);
 
 module.exports = app;

src/middleware/auth.js

@@ -0,0 +1,16 @@
+function checkBasicAuth(req, res, next) {
+	const { username, password } = req.cookies;
+	if (username === "admin" && password === "password") return next();
+	else res.send("not authorised");
+}
+
+function setCookie(req, res, next) {
+	const { username, password } = req.body;
+	if (username === "admin" && password === "password") {
+		res
+			.cookie("username", req.body.username)
+			.cookie("password", req.body.password);
+		res.status(200).send("loggedin");
+	} else res.send("wrong credentials");
+}
+module.exports = { checkBasicAuth, setCookie };