Merge pull request #73 from RustyRory/feat/72-serveur-express

feat(backend): Fixes #72 - Modèle Users

Author: RustyRory

app/backend/package.json

@@ -13,6 +13,7 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
+    "bcrypt": "^6.0.0",
     "cors": "^2.8.5",
     "dotenv": "^17.2.3",
     "express": "^5.2.1",

app/backend/server.js

@@ -0,0 +1,17 @@
+const dotenv = require('dotenv');
+dotenv.config();
+
+const app = require('./src/app');
+const mongoose = require('mongoose');
+
+const PORT = process.env.PORT ;
+const MONGO_URI = process.env.MONGO_URI;
+
+mongoose.connect(MONGO_URI)
+  .then(() => {
+    console.log('MongoDB connecté');
+    app.listen(PORT, () => {
+      console.log(`Serveur lancé sur http://localhost:${PORT}`);
+    });
+  })
+  .catch(err => console.error(err));

app/backend/src/app.js

@@ -0,0 +1,19 @@
+const express = require('express');
+const cors = require('cors');
+
+const app = express();
+
+app.use(cors());
+app.use(express.json());
+
+// Route test
+app.get('/', (req, res) => {
+  res.send('API Volley fonctionne !');
+});
+
+// Importer les routes
+const usersRoutes = require('./routes/users');
+app.use('/api/users', usersRoutes);
+
+
+module.exports = app;

app/backend/src/controllers/usersController.js

@@ -0,0 +1,67 @@
+const User = require('../models/User');
+
+// GET all users
+exports.getAllUsers = async (req, res) => {
+  try {
+    const users = await User.find().select('-passwordHash'); // Ne jamais renvoyer les passwords
+    res.json(users);
+  } catch (err) {
+    res.status(500).json({ message: err.message });
+  }
+};
+
+// GET single user
+exports.getUserById = async (req, res) => {
+  try {
+    const user = await User.findById(req.params.id).select('-passwordHash');
+    if (!user) return res.status(404).json({ message: 'Utilisateur non trouvé' });
+    res.json(user);
+  } catch (err) {
+    res.status(500).json({ message: err.message });
+  }
+};
+
+// POST create user
+exports.createUser = async (req, res) => {
+  try {
+    const { email, password, role, firstName, lastName } = req.body;
+    const user = new User({ email, role, firstName, lastName });
+    await user.setPassword(password);
+    await user.save();
+    res.status(201).json({ message: 'Utilisateur créé', userId: user._id });
+  } catch (err) {
+    res.status(400).json({ message: err.message });
+  }
+};
+
+// PUT update user
+exports.updateUser = async (req, res) => {
+  try {
+    const { email, role, firstName, lastName, isActive, password } = req.body;
+    const user = await User.findById(req.params.id);
+    if (!user) return res.status(404).json({ message: 'Utilisateur non trouvé' });
+
+    if (email) user.email = email;
+    if (role) user.role = role;
+    if (firstName) user.firstName = firstName;
+    if (lastName) user.lastName = lastName;
+    if (isActive !== undefined) user.isActive = isActive;
+    if (password) await user.setPassword(password);
+
+    await user.save();
+    res.json({ message: 'Utilisateur mis à jour' });
+  } catch (err) {
+    res.status(400).json({ message: err.message });
+  }
+};
+
+// DELETE user
+exports.deleteUser = async (req, res) => {
+  try {
+    const user = await User.findByIdAndDelete(req.params.id);
+    if (!user) return res.status(404).json({ message: 'Utilisateur non trouvé' });
+    res.json({ message: 'Utilisateur supprimé' });
+  } catch (err) {
+    res.status(500).json({ message: err.message });
+  }
+};

app/backend/src/models/User.js

@@ -0,0 +1,33 @@
+const mongoose = require('mongoose');
+const bcrypt = require('bcrypt');
+
+const UserSchema = new mongoose.Schema({
+  email: {
+    type: String,
+    required: true,
+    unique: true,
+    lowercase: true,
+    trim: true
+  },
+  passwordHash: { type: String, required: true },
+  role: { type: String, enum: ['admin', 'editor'], default: 'editor' },
+  firstName: { type: String, required: true },
+  lastName: { type: String, required: true },
+  isActive: { type: Boolean, default: true },
+  lastLoginAt: { type: Date, default: null },
+  passwordUpdatedAt: { type: Date, default: null }
+}, { timestamps: true });
+
+// Comparer un mot de passe
+UserSchema.methods.comparePassword = async function(password) {
+  return await bcrypt.compare(password, this.passwordHash);
+};
+
+// Définir ou changer le mot de passe
+UserSchema.methods.setPassword = async function(password) {
+  const salt = await bcrypt.genSalt(10);
+  this.passwordHash = await bcrypt.hash(password, salt);
+  this.passwordUpdatedAt = new Date();
+};
+
+module.exports = mongoose.model('User', UserSchema);

app/backend/src/routes/users.js

@@ -0,0 +1,12 @@
+const express =require('express');
+const router = express.Router();
+const usersController =require('../controllers/usersController');
+
+// Routes CRUD utilisateurs
+router.get('/', usersController.getAllUsers);
+router.get('/:id', usersController.getUserById);
+router.post('/', usersController.createUser);
+router.put('/:id', usersController.updateUser);
+router.delete('/:id', usersController.deleteUser);
+
+module.exports = router;