freeplanet_serverside/src/server/router/dashboard_router.js

const express = require('express');
const router = express.Router();

const tools = require('../tools/general');

const server_constants = require('../tools/server_constants');

const { authenticate } = require('../middleware/authenticate');

const { User } = require('../models/user');

const mongoose = require('mongoose');
const Subscription = mongoose.model('subscribers');

const _ = require('lodash');

const { ObjectID } = require('mongodb');

router.post('/', authenticate, async (req, res) => {
  const idapp = req.body.idapp;
  let username = req.body.username;

  if ((!User.isAdmin(req.user.perm) && !User.isManager(req.user.perm)) && (username) !== req.user.username) {
    // If without permissions, exit
    return res.status(404).send({ code: server_constants.RIS_CODE_ERR_UNAUTHORIZED, msg: '' });
  }
  let aportador_solidario = req.user.aportador_solidario;
  let aportador_solidario_nome_completo = req.user.aportador_solidario_nome_completo;

  // if (User.isAdmin(req.user.perm) || User.isManager(req.user.perm)) {
  //   const recuser = await User.findByUsername(idapp, username);
  //   if (recuser) {
  //     aportador_solidario_nome_completo = recuser.name + ' ' + recuser.surname;
  //   }
  // }

  if (username) {
    aportador_solidario = await User.getAportadorSolidarioByUsername(idapp, username);
    aportador_solidario_nome_completo = await User.getNameSurnameByUsername(idapp, username);
  } else {
    username = req.user.username;
  }

  const dashboard = await User.getDashboard(idapp, aportador_solidario, username, aportador_solidario_nome_completo);
  if (dashboard)
    res.send({ dashboard });
  else
    res.status(400).send(e);

});

module.exports = router;