|
|
@@ -17,9 +17,9 @@ const PAGE_ITEMS = 30;
|
|
|
* name: Revisions
|
|
|
*/
|
|
|
module.exports = (crowi) => {
|
|
|
- const certifySharedPage = require('../../middlewares/certify-shared-file')(crowi);
|
|
|
+ const certifySharedPage = require('../../middlewares/certify-shared-page')(crowi);
|
|
|
const accessTokenParser = require('../../middlewares/access-token-parser')(crowi);
|
|
|
- const loginRequired = require('../../middlewares/login-required')(crowi);
|
|
|
+ const loginRequired = require('../../middlewares/login-required')(crowi, true);
|
|
|
const apiV3FormValidator = require('../../middlewares/apiv3-form-validator')(crowi);
|
|
|
|
|
|
const {
|
|
|
@@ -30,11 +30,11 @@ module.exports = (crowi) => {
|
|
|
|
|
|
const validator = {
|
|
|
retrieveRevisions: [
|
|
|
- query('pageId').isMongoId().withMessage('pageId is required'),
|
|
|
+ query('page_id').isMongoId().withMessage('pageId is required'),
|
|
|
query('selectedPage').isInt({ min: 0 }).withMessage('selectedPage must be int'),
|
|
|
],
|
|
|
retrieveRevisionById: [
|
|
|
- query('pageId').isMongoId().withMessage('pageId is required'),
|
|
|
+ query('page_id').isMongoId().withMessage('pageId is required'),
|
|
|
param('id').isMongoId().withMessage('id is required'),
|
|
|
],
|
|
|
};
|
|
|
@@ -58,18 +58,18 @@ module.exports = (crowi) => {
|
|
|
*
|
|
|
*/
|
|
|
router.get('/list', certifySharedPage, accessTokenParser, loginRequired, validator.retrieveRevisions, apiV3FormValidator, async(req, res) => {
|
|
|
- const { pageId } = req.query;
|
|
|
+ const { page_id } = req.query;
|
|
|
const { isSharedPage } = req;
|
|
|
|
|
|
const selectedPage = parseInt(req.query.selectedPage) || 1;
|
|
|
|
|
|
// check whether accessible
|
|
|
- if (!isSharedPage && !(await Page.isAccessiblePageByViewer(pageId, req.user))) {
|
|
|
+ if (!isSharedPage && !(await Page.isAccessiblePageByViewer(page_id, req.user))) {
|
|
|
return res.apiv3Err(new ErrorV3('Current user is not accessible to this page.', 'forbidden-page'), 403);
|
|
|
}
|
|
|
|
|
|
try {
|
|
|
- const page = await Page.findOne({ _id: pageId });
|
|
|
+ const page = await Page.findOne({ _id: page_id });
|
|
|
|
|
|
const paginateResult = await Revision.paginate(
|
|
|
{ path: page.path },
|
|
|
@@ -120,11 +120,11 @@ module.exports = (crowi) => {
|
|
|
*/
|
|
|
router.get('/:id', certifySharedPage, accessTokenParser, loginRequired, validator.retrieveRevisionById, apiV3FormValidator, async(req, res) => {
|
|
|
const revisionId = req.params.id;
|
|
|
- const { pageId } = req.query;
|
|
|
+ const { page_id } = req.query;
|
|
|
const { isSharedPage } = req;
|
|
|
|
|
|
// check whether accessible
|
|
|
- if (!isSharedPage && !(await Page.isAccessiblePageByViewer(pageId, req.user))) {
|
|
|
+ if (!isSharedPage && !(await Page.isAccessiblePageByViewer(page_id, req.user))) {
|
|
|
return res.apiv3Err(new ErrorV3('Current user is not accessible to this page.', 'forbidden-page'), 403);
|
|
|
}
|
|
|
|