Dicken Dock v1.0.0

backend/src/routes/dashboard.js

@@ -0,0 +1,70 @@
+const express = require('express');
+const db = require('../db');
+const { authenticate } = require('../middleware/auth');
+const router = express.Router();
+const uid = req => req.user.id;
+
+// ── Quick Links ───────────────────────────────────────────────────────────────
+router.get('/links', authenticate, (req, res) => {
+  res.json(db.prepare('SELECT * FROM quick_links WHERE user_id=? ORDER BY sort_order,id').all(uid(req)));
+});
+router.post('/links', authenticate, (req, res) => {
+  const { title, url, icon = '🔗' } = req.body;
+  if (!title || !url) return res.status(400).json({ error: 'Titel und URL erforderlich' });
+  const max = db.prepare('SELECT MAX(sort_order) m FROM quick_links WHERE user_id=?').get(uid(req));
+  const r = db.prepare('INSERT INTO quick_links (user_id,title,url,icon,sort_order) VALUES (?,?,?,?,?)')
+    .run(uid(req), title, url, icon, (max?.m ?? -1) + 1);
+  res.json(db.prepare('SELECT * FROM quick_links WHERE id=?').get(r.lastInsertRowid));
+});
+router.put('/links/:id', authenticate, (req, res) => {
+  const ex = db.prepare('SELECT * FROM quick_links WHERE id=? AND user_id=?').get(req.params.id, uid(req));
+  if (!ex) return res.status(404).json({ error: 'Nicht gefunden' });
+  const { title=ex.title, url=ex.url, icon=ex.icon } = req.body;
+  db.prepare('UPDATE quick_links SET title=?,url=?,icon=? WHERE id=? AND user_id=?')
+    .run(title, url, icon, req.params.id, uid(req));
+  res.json(db.prepare('SELECT * FROM quick_links WHERE id=?').get(req.params.id));
+});
+router.delete('/links/:id', authenticate, (req, res) => {
+  const r = db.prepare('DELETE FROM quick_links WHERE id=? AND user_id=?').run(req.params.id, uid(req));
+  if (!r.changes) return res.status(404).json({ error: 'Nicht gefunden' });
+  res.json({ success: true });
+});
+
+// ── Todos ─────────────────────────────────────────────────────────────────────
+router.get('/todos', authenticate, (req, res) => {
+  res.json(db.prepare('SELECT * FROM todos WHERE user_id=? ORDER BY done,sort_order,id').all(uid(req)));
+});
+router.post('/todos', authenticate, (req, res) => {
+  const { text } = req.body;
+  if (!text?.trim()) return res.status(400).json({ error: 'Text erforderlich' });
+  const max = db.prepare('SELECT MAX(sort_order) m FROM todos WHERE user_id=?').get(uid(req));
+  const r = db.prepare('INSERT INTO todos (user_id,text,sort_order) VALUES (?,?,?)')
+    .run(uid(req), text.trim(), (max?.m ?? -1) + 1);
+  res.json(db.prepare('SELECT * FROM todos WHERE id=?').get(r.lastInsertRowid));
+});
+router.put('/todos/:id', authenticate, (req, res) => {
+  const ex = db.prepare('SELECT * FROM todos WHERE id=? AND user_id=?').get(req.params.id, uid(req));
+  if (!ex) return res.status(404).json({ error: 'Nicht gefunden' });
+  const text = req.body.text ?? ex.text;
+  const done = req.body.done !== undefined ? (req.body.done ? 1 : 0) : ex.done;
+  db.prepare('UPDATE todos SET text=?,done=? WHERE id=? AND user_id=?').run(text, done, req.params.id, uid(req));
+  res.json(db.prepare('SELECT * FROM todos WHERE id=?').get(req.params.id));
+});
+router.delete('/todos/:id', authenticate, (req, res) => {
+  const r = db.prepare('DELETE FROM todos WHERE id=? AND user_id=?').run(req.params.id, uid(req));
+  if (!r.changes) return res.status(404).json({ error: 'Nicht gefunden' });
+  res.json({ success: true });
+});
+
+// ── Notizen ───────────────────────────────────────────────────────────────────
+router.get('/note', authenticate, (req, res) => {
+  res.json(db.prepare('SELECT * FROM notes WHERE user_id=?').get(uid(req)) || { content: '', updated_at: null });
+});
+router.put('/note', authenticate, (req, res) => {
+  db.prepare(`INSERT INTO notes (user_id,content,updated_at) VALUES (?,?,CURRENT_TIMESTAMP)
+    ON CONFLICT(user_id) DO UPDATE SET content=excluded.content,updated_at=CURRENT_TIMESTAMP`)
+    .run(uid(req), req.body.content ?? '');
+  res.json({ success: true, updated_at: new Date().toISOString() });
+});
+
+module.exports = router;