Fixes to db connection and house permissions

server/database/database.js

@@ -5,15 +5,16 @@ const ENV = require('../settings');
 const db = {}
 
 db.connectDB = async () =>{
-    const connection = await MySQL.createConnection({
-        host:     ENV.DB_HOST,
-        port:     ENV.DB_PORT,
-        user:     ENV.DB_USER,
-        password: ENV.DB_PASS,
-        database: ENV.DB_NAME
+    const pool = await MySQL.createPool({
+        host:               ENV.DB_HOST,
+        port:               ENV.DB_PORT,
+        user:               ENV.DB_USER,
+        password:           ENV.DB_PASS,
+        database:           ENV.DB_NAME,
+        connectionLimit:    10
     });
     console.log('Database connected');
-    db.con = connection;
+    db.pool = pool;
 }
 
 module.exports = db;
\ No newline at end of file

server/house/route.js

@@ -18,7 +18,7 @@ const HOUSE_ROLES = {
 }
 
 function checkPermissions(context, ROLE){
-    if(ROLE < context.user.lk_permission_level){
+    if(!hasHouseNoThrow(context) || ROLE < context.user.lk_permission_level){
         context.throw(403, "No Permissions")
     }
 }
@@ -38,6 +38,9 @@ function hasHouse(context){
         context.throw(400, 'No house');
     }
 }
+function hasHouseNoThrow(context){
+    return context.user.house_id;
+}
 
 router.get('/all', async (context, next) => {
     try{
@@ -301,7 +304,9 @@ authRouter.put('/', async (context, next) => {
 });
 
 authRouter.delete('/', async (context, next) => {
+    hasHouse(context);
     checkPermissions(context, HOUSE_ROLES.lg);
+    console.log('asd')
     try{
         await houseModel.deleteHouse(context.user.house_id, context.user.id);
         context.response.status = 204;

server/unit/model.js

@@ -8,7 +8,7 @@ const unit_columns = ['name', 'unit_type', 'stars', 'hp', 'pap', 'pd', 'sap', 's
 
 unitModel.getAll = async () =>{
     const sql_text = 'SELECT * FROM units ORDER BY name ASC;';
-    const data = await db.con.query(sql_text);
+    const data = await db.pool.query(sql_text);
     return data
 }
 
@@ -22,7 +22,7 @@ unitModel.getUnit = async (term) =>{
 }
 unitModel.getUnitById = async (id) =>{
     const sql_text = 'SELECT * FROM units WHERE id= ?;';
-    const data = await db.con.query(sql_text, [id]);
+    const data = await db.pool.query(sql_text, [id]);
     if(!data[0]){
         throw Error('Unit Not Found')
     }
@@ -31,7 +31,7 @@ unitModel.getUnitById = async (id) =>{
 
 unitModel.getUnitByName = async(name) =>{
     const sql_text = 'SELECT * FROM units WHERE name LIKE ?;';
-    const data = await db.con.query(sql_text, [`%${name}%`]);
+    const data = await db.pool.query(sql_text, [`%${name}%`]);
     if(!data[0]){
         throw Error('Unit Not Found')
     }
@@ -40,16 +40,16 @@ unitModel.getUnitByName = async(name) =>{
 
 unitModel.insertUnit = async (body) =>{
     let column_text = 'name';
-    let value_text = `${db.con.escape(body.name)}`;
+    let value_text = `${db.pool.escape(body.name)}`;
     for (let i = 1; i < unit_columns.length; i++) {
         const element = unit_columns[i];
         if(body[element]!==undefined){
             column_text += ', ' + element;
-            value_text += ', ' + db.con.escape(body[element]);
+            value_text += ', ' + db.pool.escape(body[element]);
         }
     }
     const sql_query = `INSERT INTO units (${column_text}) VALUES (${value_text});`; 
-    const data = await db.con.query(sql_query);
+    const data = await db.pool.query(sql_query);
     return data;
     
 }
@@ -61,9 +61,9 @@ unitModel.modifyUnit = async (id, body) => {
         const element = unit_columns[i];
         if(body[element]!==undefined && body[element]!==null){
             if(set_text===''){
-                set_text += `${element} = ${db.con.escape(body[element])}`;
+                set_text += `${element} = ${db.pool.escape(body[element])}`;
             }else{
-                set_text += `, ${element} = ${db.con.escape(body[element])}`;
+                set_text += `, ${element} = ${db.pool.escape(body[element])}`;
             }
         }
     }
@@ -71,7 +71,7 @@ unitModel.modifyUnit = async (id, body) => {
         throw Execption('No Update Arguments');
     }
     const sql_query = `UPDATE units SET ${set_text} WHERE id = ?;`;
-    const data = await db.con.query(sql_query, [id]);
+    const data = await db.pool.query(sql_query, [id]);
     return data;
 }
 

server/user/model.js

@@ -10,12 +10,12 @@ const uu_columns = ['unit_level', 'elite_flg'];
 
 userModel.getUserFromId = async (id) => {
     const sql_text = 'SELECT id, discord_id, house_id, leadership FROM users WHERE id = ? LIMIT 1;';
-    const data = await db.con.query(sql_text,[id]);
+    const data = await db.pool.query(sql_text,[id]);
     return data[0];
 }
 userModel.getUserFromDiscord = async (discordId) =>{
     const sql_text = 'SELECT id, discord_id, house_id, leadership FROM users WHERE discord_id = ? LIMIT 1;';
-    const data = await db.con.query(sql_text, [discordId]);
+    const data = await db.pool.query(sql_text, [discordId]);
     return data[0];
 }
 
@@ -33,7 +33,7 @@ userModel.getUserFullFromId = async (id) => {
                       FROM users as u
                       LEFT JOIN house_role_lk as r ON r.lk_key = u.lk_house_role
                       WHERE u.id = ? LIMIT 1;`;
-    const data = await db.con.query(sql_text, [id]);
+    const data = await db.pool.query(sql_text, [id]);
 
     return data[0];
 }
@@ -44,7 +44,7 @@ userModel.getUserUnits = async(id) => {
                      LEFT JOIN users_units as uu ON us.id = uu.user_id
                      LEFT JOIN units as u ON uu.unit_id = u.id
                      WHERE us.id = ? ORDER BY u.name ASC;`
-    const data = await db.con.query(sql_txt, [id]);
+    const data = await db.pool.query(sql_txt, [id]);
     return data;
 }
 
@@ -57,7 +57,7 @@ userModel.getUserUnitsInverse = async(id) => {
                                 LEFT JOIN units as u ON uu.unit_id = u.id
                                 WHERE us.id = ? ORDER BY u.name ASC) as e ON e.uid = u.id
                      WHERE e.uid IS NULL;`
-    const data = await db.con.query(sql_txt, [id]);
+    const data = await db.pool.query(sql_txt, [id]);
     return data;
 }
 
@@ -76,7 +76,7 @@ userModel.getUserUnitById = async (id, unit_id) =>{
                      LEFT JOIN users_units as uu ON us.id = uu.user_id
                      LEFT JOIN units as u ON uu.unit_id = u.id
                      WHERE us.id = ? AND uu.unit_id = ? ORDER BY u.name ASC;`;
-    const data = await db.con.query(sql_text, [id, unit_id]);
+    const data = await db.pool.query(sql_text, [id, unit_id]);
     if(!data[0]){
         throw Error('Unit Not Found')
     }
@@ -89,7 +89,7 @@ userModel.getUserUnitByName = async(id, name) =>{
                      LEFT JOIN users_units as uu ON us.id = uu.user_id
                      LEFT JOIN units as u ON uu.unit_id = u.id
                      WHERE us.id = ? AND u.name LIKE ? ORDER BY u.name ASC;`
-    const data = await db.con.query(sql_text, [id, `%${name}%`]);
+    const data = await db.pool.query(sql_text, [id, `%${name}%`]);
     if(!data[0]){
         throw Error('Unit Not Found')
     }
@@ -100,18 +100,18 @@ userModel.assignUserUnit = async(id, unit_id, body) =>{
     const unit = await unitModel.getUnitById(unit_id);
 
     let column_text = 'user_id, unit_id';
-    let value_text = `${db.con.escape(id)}, ${db.con.escape(unit_id)}`
+    let value_text = `${db.pool.escape(id)}, ${db.pool.escape(unit_id)}`
     if(body){
         for (let i = 0; i < uu_columns.length; i++) {
             const element = uu_columns[i];
             if(body[element]!==undefined && body[element]!==null){
                 column_text += ', ' + element;
-                value_text += ', ' + db.con.escape(body[element]);
+                value_text += ', ' + db.pool.escape(body[element]);
             }
         }
     }
     const sql_text = `INSERT INTO users_units (${column_text}) VALUES (${value_text});`
-    const data = await db.con.query(sql_text);
+    const data = await db.pool.query(sql_text);
 }
 
 userModel.modifyUserUnit = async(id, unit_id, body) =>{
@@ -122,9 +122,9 @@ userModel.modifyUserUnit = async(id, unit_id, body) =>{
         const element = uu_columns[i];
         if(body[element]!==undefined && body[element]!==null){
             if(set_text===''){
-                set_text += `${element} = ${db.con.escape(body[element])}`;
+                set_text += `${element} = ${db.pool.escape(body[element])}`;
             }else{
-                set_text += `, ${element} = ${db.con.escape(body[element])}`;
+                set_text += `, ${element} = ${db.pool.escape(body[element])}`;
             }
         }
     }
@@ -132,38 +132,38 @@ userModel.modifyUserUnit = async(id, unit_id, body) =>{
         throw Error('No Params to Update')
     }
     const sql_text = `UPDATE users_units SET ${set_text} WHERE user_id = ? AND unit_id = ?`
-    const data = await db.con.query(sql_text, [id, unit_id]);
+    const data = await db.pool.query(sql_text, [id, unit_id]);
 }
 
 userModel.deleteUserUnit = async (id, unit_id) => {
     const unit = await unitModel.getUnitById(unit_id);
 
     const sql_text = `DELETE FROM users_units WHERE user_id = ? AND unit_id = ?;`
-    const data = await db.con.query(sql_text, [id, unit_id]);
+    const data = await db.pool.query(sql_text, [id, unit_id]);
 }
 
 userModel.addDiscordIdToUser = async (user_id, discord_id) =>{
     const sql_text = 'UPDATE users SET discord_id = ? WHERE id = ?;';
-    const data = await db.con.query(sql_text, [discordId, user_id])
+    const data = await db.pool.query(sql_text, [discordId, user_id])
 }
 
 userModel.createUserWithDiscord = async (discord_id, username, password) =>{
     const hashPassword = await crypto.hash(password);
     const sql_text = 'INSERT INTO users (discord_id, username, password) VALUES (?, ?, ?);';
-    await db.con.query(sql_text, [discord_id, username, hashPassword]);
+    await db.pool.query(sql_text, [discord_id, username, hashPassword]);
 }
 
 userModel.registerUser = async (username, password) =>{
     const hashPassword = await crypto.hash(password);
 
     const sql_text = 'INSERT INTO users (username, password) VALUES (?, ?)';
-    await db.con.query(sql_text, [username, hashPassword])
+    await db.pool.query(sql_text, [username, hashPassword])
 }
 
 userModel.loginUser = async (username, password) =>{
     const hashPassword = await crypto.hash(password);
     const sql_text = 'SELECT id, username from users WHERE username = ? AND password = ?';
-    const data = await db.con.query(sql_text, [username, hashPassword]);
+    const data = await db.pool.query(sql_text, [username, hashPassword]);
 
     return data[0];
 }

server/util/auth.js

@@ -6,7 +6,7 @@ const crypto = require('./crypto');
 async function discordAuth(context, id){
     let sql_text = `SELECT TOP 1 * FROM users WHERE discordId='${id}'`;
     try{
-        let data = await db.con.query(sql_text);
+        let data = await db.pool.query(sql_text);
         console.log(data);
     }catch(error){
         console.log(error);