update starter files

7 files changed, 3 insertions, 550 deletions

diff --git a/sick-fits/backend/src/createServer.js b/sick-fits/backend/src/createServer.js
deleted file mode 100644
index 036d15a..0000000
--- a/sick-fits/backend/src/createServer.js
+++ /dev/null
@@ -1,20 +0,0 @@
-const { GraphQLServer } = require('graphql-yoga');
-const Mutation = require('./resolvers/Mutation');
-const Query = require('./resolvers/Query');
-const db = require('./db');
-
-function createServer() {
-  return new GraphQLServer({
-    typeDefs: 'src/schema.graphql',
-    resolverValidationOptions: {
-      requireResolversForResolveType: false,
-    },
-    resolvers: {
-      Mutation,
-      Query,
-    },
-    context: req => ({ ...req, db }),
-  });
-}
-
-module.exports = createServer;
diff --git a/sick-fits/backend/src/db.js b/sick-fits/backend/src/db.js
deleted file mode 100644
index e8caa14..0000000
--- a/sick-fits/backend/src/db.js
+++ /dev/null
@@ -1,10 +0,0 @@
-const { Prisma } = require('prisma-binding');
-
-const db = new Prisma({
-  typeDefs: 'src/generated/prisma.graphql',
-  endpoint: process.env.PRISMA_ENDPOINT, // the endpoint of the Prisma DB service (value is set in variables.env)
-  secret: process.env.PRISMA_SECRET, // taken from prisma/prisma.yml (value is set in .env)
-  debug: false, // log all GraphQL queries & mutations
-});
-
-module.exports = db;
\ No newline at end of file
diff --git a/sick-fits/backend/src/index.js b/sick-fits/backend/src/index.js
index 94911ec..23d06db 100644
--- a/sick-fits/backend/src/index.js
+++ b/sick-fits/backend/src/index.js
@@ -1,41 +1 @@
-/* eslint-disable */
-require('dotenv').config({ path: 'variables.env' });
-/* eslint-enable */
-const jwt = require('jsonwebtoken');
-const createServer = require('./createServer');
-const db = require('./db');
-const cookieParser = require('cookie-parser');
-
-const server = createServer();
-
-server.express.use(cookieParser());
-
-server.express.use((req, res, next) => {
-  const { token } = req.cookies;
-  if (token) {
-    const { userId } = jwt.verify(token, process.env.APP_SECRET);
-    req.userId = userId;
-  }
-  next();
-});
-
-// 2. Get User from their ID
-server.express.use(async (req, res, next) => {
-  if (!req.userId) return next();
-  const user = await db.query.user({ where: { id: req.userId } }, `{ id, permissions, email, name }`);
-  req.user = user;
-  next();
-});
-
-server.start(
-  {
-    cors: {
-      credentials: true,
-      origin: process.env.FRONTEND_URL,
-    },
-    port: 4444,
-  },
-  deets => {
-    console.log(`Server is running on http://localhost:${deets.port}`);
-  }
-);
+// lets go!
diff --git a/sick-fits/backend/src/mail.js b/sick-fits/backend/src/mail.js
deleted file mode 100644
index fc4a47b..0000000
--- a/sick-fits/backend/src/mail.js
+++ /dev/null
@@ -1,28 +0,0 @@
-const nodemailer = require('nodemailer');
-
-const transport = nodemailer.createTransport({
-  host: 'smtp.mailtrap.io',
-  port: 2525,
-  auth: {
-    user: 'c41bab08214808',
-    pass: '04992d4af4bdcf',
-  },
-});
-
-const makeANiceEmail = text => `
-  <div className="email" style="
-    border:1px solid black;
-    padding: 20px;
-    font-family: sans-serif;
-    line-height: 2;
-    font-size: 20px;
-  ">
-    <h2>Hello There</h2>
-    <p>${text}</p>
-
-    <p>😘 Wes Bos</p>
-  </div>
-`;
-
-exports.transport = transport;
-exports.makeANiceEmail = makeANiceEmail;
diff --git a/sick-fits/backend/src/resolvers/Mutation.js b/sick-fits/backend/src/resolvers/Mutation.js
index 0f1d9ba..3992a30 100644
--- a/sick-fits/backend/src/resolvers/Mutation.js
+++ b/sick-fits/backend/src/resolvers/Mutation.js
@@ -1,354 +1,3 @@
-const bcrypt = require('bcryptjs');
-const jwt = require('jsonwebtoken');
-const { hasPermission } = require('../utils');
-const { randomBytes } = require('crypto');
-const { promisify } = require('util');
-const mail = require('../mail');
-const stripe = require('../stripe');
-
-const mutations = {
-  // Signup Mutations
-  async signup(parent, args, ctx, info) {
-    args.email = args.email.toLowerCase();
-    const password = await bcrypt.hash(args.password, 10);
-    const user = await ctx.db.mutation.createUser(
-      {
-        data: {
-          ...args,
-          password,
-          permissions: { set: ['USER'] },
-        },
-      },
-      info
-    );
-    const token = jwt.sign({ userId: user.id }, process.env.APP_SECRET);
-    ctx.response.cookie('token', token, {
-      maxAge: 1000 * 60 * 60 * 24 * 365,
-      httpOnly: true,
-    });
-    return user;
-  },
-
-  async signout(parent, args, ctx, info) {
-    ctx.response.clearCookie('token');
-    return { message: 'goodbye!' };
-  },
-
-  async signin(parent, { email, password }, ctx, info) {
-    const user = await ctx.db.query.user({ where: { email } });
-    if (!user) {
-      throw new Error(`No such user found for email: ${email}`);
-    }
-
-    const valid = await bcrypt.compare(password, user.password);
-    if (!valid) {
-      throw new Error('Invalid password');
-    }
-    // set the cookie
-    const token = jwt.sign({ userId: user.id }, process.env.APP_SECRET);
-    ctx.response.cookie('token', token, {
-      maxAge: 1000 * 60 * 60 * 24 * 365,
-      httpOnly: true,
-    });
-    return user;
-  },
-
-  // Create An Item
-  async createItem(parent, args, ctx, info) {
-    if (!ctx.request.userId) {
-      throw new Error('You must be logged in to create an item');
-    }
-
-    const item = await ctx.db.mutation.createItem(
-      {
-        data: {
-          user: {
-            connect: {
-              id: ctx.request.userId,
-            },
-          },
-          ...args,
-        },
-      },
-      info
-    );
-    return item;
-  },
-
-  async deleteItem(parent, args, ctx, info) {
-    const where = {
-      id: args.id,
-    };
-    // 1. find the item
-    const item = await ctx.db.query.item({ where }, `{ user {id}, title, id, description }`);
-    // 2. if they 1. Don't own it AND 2. aren't an admin
-    if (item.user.id !== ctx.request.user.id && !ctx.request.user.permissions.includes('ADMIN')) {
-      throw new Error("You aren't allowed to delete that item!");
-    }
-
-    // 3. remove any orderItems this item is in
-
-    return ctx.db.mutation.deleteItem({ where }, info);
-  },
-
-  async updateItem(parent, args, ctx, info) {
-    const user = ctx.request.user;
-    const item = await ctx.db.query.item({ where: { id: args.id } }, `{ user { id } }`);
-
-    if (item.user.id !== user.id || !hasPermission(user, ['ADMIN'])) {
-      throw new Error('You are not allowed to update that item!');
-    }
-
-    const updates = { ...args };
-    // remove the ID because you can't update that
-    delete updates.id;
-    return ctx.db.mutation.updateItem(
-      {
-        where: { id: args.id },
-        data: {
-          ...updates,
-        },
-      },
-      info
-    );
-  },
-
-  // Send password request
-  async requestReset(parent, args, ctx, info) {
-    // 1. find if there is a user with that email
-    const user = await ctx.db.query.user({ where: { email: args.email } });
-
-    if (!user) {
-      throw new Error(`No user with the email ${args.email}`);
-    }
-    // 2. Set a reset token, and a reset date
-    const resetToken = (await promisify(randomBytes)(20)).toString('hex');
-    const resetTokenExpiry = Date.now() + 3600000; // 1 hour from now
-    console.log({ resetToken, resetTokenExpiry });
-    const res = await ctx.db.mutation.updateUser({
-      where: { email: args.email },
-      data: { resetToken, resetTokenExpiry },
-    });
-
-    // 3. Send them their token via email
-    const mailRes = await mail.transport.sendMail({
-      from: 'wesbos@gmail.com',
-      to: user.email,
-      subject: 'Your password reset token',
-      html: mail.makeANiceEmail(
-        `Your password reset link is here! \n\n<a href="${process.env
-          .FRONTEND_URL}/reset?resetToken=${resetToken}">Click Here to reset</a>`
-      ),
-    });
-    return res.updateUser;
-  },
-
-  async resetPassword(parent, args, ctx, info) {
-    // 1. Check that the passwords match
-    if (args.password !== args.confirmPassword) {
-      throw new Error('Passwords do not match');
-    }
-
-    // 2. Check that this is a legit resetToken
-    // 3. Check that it's not expired
-    // Note: If we didn't need the user here, we could also use db.exists()
-    const [user] = await ctx.db.query.users({
-      where: {
-        resetToken: args.resetToken,
-        resetTokenExpiry_gte: Date.now() - 3600000, // within the last hour
-      },
-    });
-
-    if (!user) {
-      throw new Error('This token is either invalid or expired.');
-    }
-
-    // 4. Hash the password
-    const password = await bcrypt.hash(args.password, 10);
-
-    // 5. Update the users password
-    // clean up the resetToken fields at the same time
-    const updatedUser = await ctx.db.mutation.updateUser({
-      where: { email: user.email },
-      data: {
-        password,
-        resetToken: null,
-        resetTokenExpiry: null,
-      },
-    });
-    const token = jwt.sign({ userId: updatedUser.id }, process.env.APP_SECRET);
-    ctx.response.cookie('token', token, {
-      maxAge: 1000 * 60 * 60 * 24 * 365,
-      httpOnly: true,
-    });
-
-    // 6. send back the User for the GraphQL request on the client
-    return updatedUser;
-  },
-  /*
-    Add to cart
-  */
-  async addToCart(parent, args, ctx, info) {
-    const userId = ctx.request.userId;
-
-    if (!userId) {
-      throw new Error('You must be signed in to add to cart!');
-    }
-
-    // 1. Check if there is a CartItem for this user and item already
-    const [existingCartItem] = await ctx.db.query.cartItems({
-      where: {
-        user: { id: userId },
-        item: { id: args.id },
-      },
-    });
-
-    if (existingCartItem) {
-      return ctx.db.mutation.updateCartItem(
-        {
-          where: { id: existingCartItem.id },
-          data: { quantity: existingCartItem.quantity + 1 },
-        },
-        info
-      );
-    }
-
-    // Otherwise create a new cartItem
-    return ctx.db.mutation.createCartItem(
-      {
-        data: {
-          user: {
-            connect: {
-              id: userId,
-            },
-          },
-          item: {
-            connect: { id: args.id },
-          },
-        },
-      },
-      info
-    );
-  },
-
-  // delete that cart item
-  async removeFromCart(parent, args, ctx, info) {
-    console.log(args.id);
-    // 1. Find the CartItem
-    const cartItem = await ctx.db.query.cartItem(
-      {
-        where: { id: args.id },
-      },
-      `{ id, user { id, permissions }}`
-    );
-    // 2. Check they own it
-    if (cartItem.user.id !== ctx.request.userId) {
-      throw new Error("Cheatin' huh");
-    }
-    // 3. Delete it
-    return ctx.db.mutation.deleteCartItem(
-      {
-        where: {
-          id: args.id,
-        },
-      },
-      info
-    );
-  },
-
-  async createOrder(parent, args, ctx, info) {
-    const userId = ctx.request.userId;
-    const user = await ctx.db.query.user(
-      { where: { id: userId } },
-      '{ id, name, email, cart { id, quantity, item { title, price, id, description, image } }}'
-    );
-    // 1. Recalculate the total for the price
-    const amount = user.cart.reduce(
-      (tally, cartItem) => tally + cartItem.item.price * cartItem.quantity,
-      0
-    );
-    // 2. Create a stripe charge
-    const charge = await stripe.charges.create({
-      amount,
-      currency: 'usd',
-      source: args.token,
-    });
-
-    // 3. convert the items they want to OrderItems
-    const orderItems = user.cart.map(cartItem => {
-      const orderItem = {
-        quantity: cartItem.quantity,
-        // copy all the item details so it's there forever
-        ...cartItem.item,
-        item: {
-          // relationship to the Item incase we need it
-          connect: { id: cartItem.item.id },
-        },
-        user: { connect: { id: user.id } },
-      };
-      // scrub the ID from it because the orderItem will have it's own ID
-      delete orderItem.id;
-      return orderItem;
-    });
-
-    // 4. Create the Order
-    const order = await ctx.db.mutation.createOrder({
-      data: {
-        total: charge.amount,
-        charge: charge.id,
-        items: {
-          create: orderItems,
-        },
-        user: {
-          connect: {
-            id: user.id,
-          },
-        },
-      },
-    });
-
-    // 5. Clean up, clear the users cart and send back { user, order }
-    // Delete the users current cart items
-    const cartItemIds = user.cart.map(cartItem => cartItem.id);
-    await ctx.db.mutation.deleteManyCartItems({
-      where: {
-        id_in: cartItemIds,
-      },
-    });
-
-    // 6. Send the order back to the client
-    return order;
-  },
-
-  async updateUser(parent, args, ctx, info) {
-    const userId = ctx.request.userId;
-    const updatedUser = await ctx.db.mutation.updateUser(
-      {
-        data: args,
-        where: { id: userId },
-      },
-      info
-    );
-    return updatedUser;
-  },
-
-  async updatePermissions(parent, args, ctx, info) {
-    const userId = ctx.request.userId;
-    const currentUser = await ctx.db.query.user({ where: { id: userId } }, info);
-    if (!currentUser) throw new Error('You Must be logged in to updat permissions!');
-    hasPermission(currentUser, ['ADMIN', 'PERMISSIONUPDATE']);
-    return ctx.db.mutation.updateUser(
-      {
-        data: {
-          permissions: {
-            set: args.permissions,
-          },
-        },
-        where: { id: args.userId },
-      },
-      info
-    );
-  },
-};
+const mutations = {};
 
 module.exports = mutations;
diff --git a/sick-fits/backend/src/resolvers/Query.js b/sick-fits/backend/src/resolvers/Query.js
index 51c2c42..eebe788 100644
--- a/sick-fits/backend/src/resolvers/Query.js
+++ b/sick-fits/backend/src/resolvers/Query.js
@@ -1,62 +1,3 @@
-const { hasPermission } = require('../utils');
-
-const { forwardTo } = require('prisma-binding');
-
-const Query = {
-  items: forwardTo('db'),
-  itemsConnection: forwardTo('db'),
-
-  async order(parent, args, ctx, info) {
-    // 1. make sure they are signed in
-    if (!ctx.request.userId) {
-      throw new Error('You Must be signed in to view an order');
-    }
-
-    // 2. Create the query
-    const where = {
-      id: args.id,
-      user: {
-        id: ctx.request.userId,
-      },
-    };
-    // 3. Fire off the query
-    const [order] = await ctx.db.query.orders({ where }, info);
-
-    // 4. Check that they are allowed to view the order
-    if (order.user.id !== ctx.request.userId || hasPermission(ctx.request.user, ['ADMIN'])) {
-      throw new Error("You don't have permission");
-    }
-    // 5. If everything checks out, return the order
-    return order;
-  },
-
-  me(parent, args, ctx, info) {
-    if (!ctx.request.userId) {
-      return null; // don't error out, just return nothing
-    }
-
-    return ctx.db.query.user(
-      {
-        where: { id: ctx.request.userId },
-      },
-      info
-    );
-  },
-
-  async orders(parent, args, ctx, info) {
-    const { userId } = ctx.request;
-    if (!userId) {
-      throw new Error('You must be signed in to see your orders');
-    }
-    return ctx.db.query.orders(
-      {
-        where: {
-          user: { id: userId },
-        },
-      },
-      info
-    );
-  },
-};
+const Query = {};
 
 module.exports = Query;
diff --git a/sick-fits/backend/src/schema.graphql b/sick-fits/backend/src/schema.graphql
deleted file mode 100644
index 07533eb..0000000
--- a/sick-fits/backend/src/schema.graphql
+++ /dev/null
@@ -1,39 +0,0 @@
-# The Below line looks like a comment, but it's not!
-# import * from './generated/prisma.graphql'
-
-type Query {
-  me: User
-  order(id: ID!): Order!
-  orders(where: OrderWhereInput, orderBy: OrderOrderByInput, skip: Int, after: String, before: String, first: Int, last: Int): [Order]!
-  items(where: ItemWhereInput, orderBy: ItemOrderByInput, skip: Int, after: String, before: String, first: Int, last: Int): [Item]!
-  itemsConnection(where: ItemWhereInput, orderBy: ItemOrderByInput, first: Int, last: Int, skip: Int): ItemConnection!
-}
-
-type Mutation {
-  signup(email: String!, password: String!, name: String!): User!
-  signin(email: String!, password: String!): User!
-  requestReset(email: String!): User
-  resetPassword(resetToken: String!, password: String!, confirmPassword: String!): User!
-  createItem(title: String, description: String, price: Int, image: String, largeImage: String): Item!
-  deleteItem(id: ID!): Item!
-  updateItem(id: ID!, title: String, description: String, price: Int): Item!
-  addToCart(id: ID!): CartItem
-  removeFromCart(id: ID!): CartItem
-  createOrder(token: String!): Order!
-  updateUser(name: String): User
-  signout: SuccessMessage
-  updatePermissions(permissions: [Permission], userId: ID!): User
-}
-
-type SuccessMessage {
-  message: String
-}
-
-type User {
-  id: ID!
-  email: String!
-  name: String!
-  orders: [Order!]!
-  cart: [CartItem!]!
-  permissions: [Permission]!
-}