From 499dd1b3076a5ce171730f89f327eb2428921218 Mon Sep 17 00:00:00 2001
From: alex <alex@alexloehr.net>
Date: Tue, 03 Jun 2025 15:06:07 +0000
Subject: [PATCH] adding API Token Management

---
 lib/db.js |  102 +++++++++++++++++++++++++++++++++++++++++++++++---
 1 files changed, 95 insertions(+), 7 deletions(-)

diff --git a/lib/db.js b/lib/db.js
index e849ebd..1b4d92d 100644
--- a/lib/db.js
+++ b/lib/db.js
@@ -28,11 +28,21 @@
 
    getObjIdFromRefId,
    getRefIdFromObjId,
+
+   getKurse,
+   getKurs,
+   getKursItems,
+   // getKursByObjId,
+   // getKursByRefId,
+   getKursTeilnehmer,
+   getKursTeilnehmerCount,
 }
 
 /////////////////////////////////////////////////////////////////////////
 
 async function getUsers (offset = 0, limit = 10) {
+   limit = Number(limit) || 10
+   offset = Number(offset) || 0
    const sel = `usr_id, login, firstname, lastname, gender, email, institution, street, city, zipcode, country, department, active`
    // TODO user defined fields
    // TODO check args for SQL Injection
@@ -98,8 +108,8 @@
    const pool = await poolP
    const [results] = await pool.query(
       `SELECT ut.usr_id, ud.field_name, ut.value
-        FROM ${database}.udf_definition ud  
-        JOIN ${database}.udf_text ut ON ut.field_id = ud.field_id`
+       FROM ${database}.udf_definition ud
+                JOIN ${database}.udf_text ut ON ut.field_id = ud.field_id`
    )
    return results
 }
@@ -108,10 +118,10 @@
    const pool = await poolP
    const [results] = await pool.query(
       `SELECT ut.usr_id, ud.field_name, ut.value
-        FROM ${database}.udf_definition ud  
-        JOIN ${database}.udf_text ut ON ut.field_id = ud.field_id
-        WHERE ut.usr_id = '${usr_id}'
-        `
+       FROM ${database}.udf_definition ud
+                JOIN ${database}.udf_text ut ON ut.field_id = ud.field_id
+       WHERE ut.usr_id = '${usr_id}'
+      `
    )
    return results
 }
@@ -147,9 +157,87 @@
 }
 
 async function joinUDF (user) {
+   if(!user) return user
    const fields = await getUserDefinedField(user.usr_id)
-   for(const field of fields) {
+   for (const field of fields) {
       user[field.field_name] = field.value
    }
    return user
 }
+
+/////// Kurs ////////////////////////////////////////////////////////////////
+
+async function getKurse () {
+   const pool = await poolP
+   const q = `SELECT or2.ref_id, or2.obj_id, od.title, od.description, od.type
+              FROM ${database}.object_reference or2
+              INNER JOIN ${database}.object_data od ON od.obj_id = or2.obj_id
+              WHERE od.type = 'crs' AND or2.deleted IS NULL
+   `
+   const [results] = await pool.query(q)
+   return results
+}
+
+// async function getKursByRefId (refId) {
+//    const {ref_id, obj_id} = await getObjIdFromRefId(refId)
+//    return getKursByObjId(obj_id)
+// }
+
+async function getKurs (ref_id) {
+   const pool = await poolP
+   const q = `SELECT or2.ref_id, or2.obj_id, od.title, od.description, od.type
+              FROM ${database}.object_reference or2
+                       INNER JOIN ${database}.object_data od ON od.obj_id = or2.obj_id
+              WHERE or2.ref_id = '${ref_id}'
+   `
+   let [results] = await pool.query(q)
+   results = results.length? results[0] : undefined
+   return results
+}
+async function getKursItems (ref_id) {
+   const pool = await poolP
+   // const q = `SELECT or2.ref_id, or2.obj_id, od.title, od.description, od.type
+   //            FROM ${database}.object_reference or2
+   //            INNER JOIN ${database}.object_data od ON od.obj_id = or2.obj_id
+   //            WHERE or2.obj_id = '${obj_id}'
+   // `
+   const q = `SELECT ci.parent_id, or2.ref_id, or2.obj_id, od.title, od.type
+              FROM ${database}.crs_items ci
+                       INNER JOIN ${database}.object_reference or2 ON or2.ref_id = ci.obj_id
+                       INNER JOIN ${database}.object_data od ON od.obj_id = or2.obj_id
+              WHERE or2.ref_id = ${ref_id}
+                 OR parent_id = ${ref_id}
+                  AND or2.deleted is NULL
+   `
+   const [results] = await pool.query(q)
+   return results
+}
+
+async function getKursTeilnehmer (ref_id) {
+   const pool = await poolP
+   const q = `SELECT ci.parent_id, or2.ref_id, or2.obj_id, od.title, od.type, om.usr_id, ud.login, ud.firstname, ud.lastname, ud.active#, ulm.status
+              FROM ${database}.crs_items ci
+              INNER JOIN ${database}.object_reference or2 ON or2.ref_id = ci.obj_id
+              INNER JOIN ${database}.object_data od ON od.obj_id = or2.obj_id
+              INNER JOIN ${database}.obj_members om ON om.obj_id = or2.obj_id
+              INNER JOIN ${database}.usr_data ud ON ud.usr_id = om.usr_id
+              WHERE (or2.ref_id = ${ref_id} OR parent_id = ${ref_id}) 
+   `
+   const [results] = await pool.query(q)
+   return results
+}
+
+async function getKursTeilnehmerCount (ref_id) {
+   const pool = await poolP
+   const q = `SELECT COUNT(*) as count
+              FROM ${database}.crs_items ci
+              INNER JOIN ${database}.object_reference or2 ON or2.ref_id = ci.obj_id
+              INNER JOIN ${database}.object_data od ON od.obj_id = or2.obj_id
+              INNER JOIN ${database}.obj_members om ON om.obj_id = or2.obj_id
+              INNER JOIN ${database}.usr_data ud ON ud.usr_id = om.usr_id
+              WHERE (or2.ref_id = ${ref_id} OR parent_id = ${ref_id}) 
+   `
+   let [results] = await pool.query(q)
+   results = results.length? results[0] : undefined
+   return { ref_id, count: results.count }
+}

--
Gitblit v1.8.0