v1.3: Serverseitige Datenbank (PostgreSQL + Node-API) ersetzt localStorage
- server/: Express-API (Auth, Bootstrap, Tickets, Threads, Benutzerverwaltung, Codes) mit pg-Schema (11 Tabellen), idempotem Seed (50 Wohnungen, 552 Buchungen) - mp-db (PostgreSQL 16, Volume mp_pgdata) + mp-api im Compose-Stack, nginx proxiet /api/ an mp-api; deploy.sh baut API-Image auf dem Server - Frontend: Store laedt /api/bootstrap, Schreibzugriff async, kein localStorage mehr (ausser Theme), Ladebildschirm beim Session-Check, vite-Proxy fuer Dev - Rollenrechte serverseitig: Mieter nur eigene Wohnung (getestet, 403-Verweis) - Mail-Benachrichtigungen komplett serverseitig (server/src/mail.js) - beispieldaten.py schreibt server/seed/generated.json; Verwaltungs-Mail = axel@hocks.eu - E2E live verifiziert: Login, Scoping, Ticket + Zustellung (status=sent), Registrierung, Codes; Testdaten bereinigt; Doku nachgefuehrt
This commit is contained in:
@@ -0,0 +1,129 @@
|
||||
/** PostgreSQL-Verbindung + Schema für das Mieterportal.
|
||||
*
|
||||
* Tabellen werden beim Start idempotent angelegt (CREATE TABLE IF NOT EXISTS),
|
||||
* danach lädt seed.js die Demo-Daten, falls die Datenbank leer ist.
|
||||
*/
|
||||
|
||||
const { Pool } = require('pg')
|
||||
|
||||
const pool = new Pool({
|
||||
connectionString:
|
||||
process.env.DATABASE_URL || 'postgres://mp:mp@localhost:5432/mieterportal',
|
||||
max: 10,
|
||||
})
|
||||
|
||||
const SCHEMA = `
|
||||
CREATE TABLE IF NOT EXISTS units (
|
||||
id TEXT PRIMARY KEY,
|
||||
building TEXT NOT NULL,
|
||||
number TEXT NOT NULL,
|
||||
floor INT NOT NULL,
|
||||
size NUMERIC(8,2) NOT NULL,
|
||||
cold_rent NUMERIC(10,2) NOT NULL,
|
||||
warm_rent NUMERIC(10,2) NOT NULL,
|
||||
tenant TEXT,
|
||||
status TEXT NOT NULL CHECK (status IN ('vermietet','frei'))
|
||||
);
|
||||
|
||||
CREATE TABLE IF NOT EXISTS transactions (
|
||||
id TEXT PRIMARY KEY,
|
||||
unit_id TEXT NOT NULL REFERENCES units(id),
|
||||
tenant TEXT NOT NULL,
|
||||
month TEXT NOT NULL,
|
||||
year INT NOT NULL,
|
||||
amount NUMERIC(10,2) NOT NULL,
|
||||
type TEXT NOT NULL,
|
||||
status TEXT NOT NULL CHECK (status IN ('bezahlt','offen','überfällig')),
|
||||
paid_at TEXT
|
||||
);
|
||||
CREATE INDEX IF NOT EXISTS idx_transactions_unit ON transactions(unit_id);
|
||||
|
||||
CREATE TABLE IF NOT EXISTS tickets (
|
||||
id TEXT PRIMARY KEY,
|
||||
unit_id TEXT NOT NULL REFERENCES units(id),
|
||||
tenant TEXT NOT NULL,
|
||||
title TEXT NOT NULL,
|
||||
description TEXT NOT NULL DEFAULT '',
|
||||
category TEXT NOT NULL,
|
||||
priority TEXT NOT NULL CHECK (priority IN ('niedrig','mittel','hoch')),
|
||||
status TEXT NOT NULL DEFAULT 'offen'
|
||||
CHECK (status IN ('offen','in Bearbeitung','erledigt')),
|
||||
created_at TEXT NOT NULL
|
||||
);
|
||||
CREATE INDEX IF NOT EXISTS idx_tickets_unit ON tickets(unit_id);
|
||||
|
||||
CREATE TABLE IF NOT EXISTS documents (
|
||||
id TEXT PRIMARY KEY,
|
||||
unit_id TEXT REFERENCES units(id), -- NULL = Hausdokument für alle
|
||||
title TEXT NOT NULL,
|
||||
category TEXT NOT NULL,
|
||||
size TEXT NOT NULL,
|
||||
date TEXT NOT NULL
|
||||
);
|
||||
|
||||
CREATE TABLE IF NOT EXISTS threads (
|
||||
id TEXT PRIMARY KEY,
|
||||
unit_id TEXT NOT NULL REFERENCES units(id),
|
||||
tenant TEXT NOT NULL,
|
||||
subject TEXT NOT NULL,
|
||||
unread_by_admin BOOLEAN NOT NULL DEFAULT FALSE,
|
||||
unread_by_tenant BOOLEAN NOT NULL DEFAULT FALSE
|
||||
);
|
||||
CREATE INDEX IF NOT EXISTS idx_threads_unit ON threads(unit_id);
|
||||
|
||||
CREATE TABLE IF NOT EXISTS messages (
|
||||
id TEXT PRIMARY KEY,
|
||||
thread_id TEXT NOT NULL REFERENCES threads(id) ON DELETE CASCADE,
|
||||
from_role TEXT NOT NULL CHECK (from_role IN ('tenant','admin')),
|
||||
author TEXT NOT NULL,
|
||||
text TEXT NOT NULL,
|
||||
at TEXT NOT NULL
|
||||
);
|
||||
CREATE INDEX IF NOT EXISTS idx_messages_thread ON messages(thread_id);
|
||||
|
||||
CREATE TABLE IF NOT EXISTS announcements (
|
||||
id TEXT PRIMARY KEY,
|
||||
title TEXT NOT NULL,
|
||||
text TEXT NOT NULL,
|
||||
date TEXT NOT NULL,
|
||||
tag TEXT NOT NULL
|
||||
);
|
||||
|
||||
CREATE TABLE IF NOT EXISTS users (
|
||||
id TEXT PRIMARY KEY,
|
||||
benutzername TEXT NOT NULL UNIQUE,
|
||||
name TEXT NOT NULL,
|
||||
passwort_hash TEXT NOT NULL,
|
||||
rolle TEXT NOT NULL CHECK (rolle IN ('verwaltung','mieter')),
|
||||
email TEXT NOT NULL,
|
||||
einheit_id TEXT REFERENCES units(id),
|
||||
aktiv BOOLEAN NOT NULL DEFAULT TRUE,
|
||||
erstellt_am TEXT NOT NULL,
|
||||
letzter_login TEXT
|
||||
);
|
||||
|
||||
CREATE TABLE IF NOT EXISTS registration_codes (
|
||||
code TEXT PRIMARY KEY,
|
||||
einheit_id TEXT REFERENCES units(id),
|
||||
erstellt_am TEXT NOT NULL,
|
||||
verwendet_am TEXT
|
||||
);
|
||||
|
||||
CREATE TABLE IF NOT EXISTS sessions (
|
||||
token TEXT PRIMARY KEY,
|
||||
user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
|
||||
expires TIMESTAMPTZ NOT NULL
|
||||
);
|
||||
CREATE INDEX IF NOT EXISTS idx_sessions_user ON sessions(user_id);
|
||||
`
|
||||
|
||||
async function init() {
|
||||
await pool.query(SCHEMA)
|
||||
}
|
||||
|
||||
/** Aufräumen abgelaufener Sessions (gelegentlich aufgerufen). */
|
||||
async function sessionsAufraeumen() {
|
||||
await pool.query('DELETE FROM sessions WHERE expires < now()')
|
||||
}
|
||||
|
||||
module.exports = { pool, init, sessionsAufraeumen }
|
||||
@@ -0,0 +1,474 @@
|
||||
/** Hinterstein Mieterportal – Node-API (Express + PostgreSQL).
|
||||
*
|
||||
* Authentifizierung: Session-Cookie mp_session (HttpOnly, 8 h), Passwörter als
|
||||
* SHA-256-Hash (wie bisher im Browser berechnet, Vergleich serverseitig).
|
||||
* Rollenrechte: Mieter sehen nur Daten ihrer Wohnung, Verwaltung alles.
|
||||
* Benachrichtigungen (Ticket/Nachricht) werden serverseitig per Mail verschickt.
|
||||
*/
|
||||
|
||||
const express = require('express')
|
||||
const crypto = require('crypto')
|
||||
const { pool, init, sessionsAufraeumen } = require('./db')
|
||||
const { seed } = require('./seed')
|
||||
const mail = require('./mail')
|
||||
|
||||
const PORT = Number(process.env.PORT || 3000)
|
||||
const SESSION_DAUER_MS = 8 * 60 * 60 * 1000
|
||||
const COOKIE_NAME = 'mp_session'
|
||||
|
||||
const app = express()
|
||||
app.use(express.json({ limit: '256kb' }))
|
||||
app.set('trust proxy', true)
|
||||
|
||||
// ── Cookie-Helfer (bewusst ohne Dependency) ──────────────────
|
||||
function cookieLesen(req, name) {
|
||||
const raw = req.headers.cookie || ''
|
||||
for (const teil of raw.split(';')) {
|
||||
const i = teil.indexOf('=')
|
||||
if (i > -1 && teil.slice(0, i).trim() === name) return decodeURIComponent(teil.slice(i + 1).trim())
|
||||
}
|
||||
return null
|
||||
}
|
||||
|
||||
function cookieSetzen(res, token, maxAgeMs, secure) {
|
||||
res.append(
|
||||
'Set-Cookie',
|
||||
`${COOKIE_NAME}=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Lax; ` +
|
||||
`Max-Age=${Math.floor(maxAgeMs / 1000)}${secure ? '; Secure' : ''}`,
|
||||
)
|
||||
}
|
||||
|
||||
// ── Auth-Middleware ──────────────────────────────────────────
|
||||
async function auth(req, res, next) {
|
||||
try {
|
||||
const token = cookieLesen(req, COOKIE_NAME)
|
||||
if (token) {
|
||||
const { rows } = await pool.query(
|
||||
`SELECT u.* FROM sessions s JOIN users u ON u.id = s.user_id
|
||||
WHERE s.token = $1 AND s.expires > now() AND u.aktiv`,
|
||||
[token],
|
||||
)
|
||||
if (rows.length) {
|
||||
req.user = rows[0]
|
||||
req.sessionToken = token
|
||||
return next()
|
||||
}
|
||||
}
|
||||
res.status(401).json({ fehler: 'Nicht angemeldet.' })
|
||||
} catch (e) {
|
||||
next(e)
|
||||
}
|
||||
}
|
||||
|
||||
function adminOnly(req, res, next) {
|
||||
if (req.user.rolle !== 'verwaltung') return res.status(403).json({ fehler: 'Nur für die Verwaltung.' })
|
||||
next()
|
||||
}
|
||||
|
||||
const oeffentlicherBenutzer = (b) => ({
|
||||
id: b.id,
|
||||
benutzername: b.benutzername,
|
||||
name: b.name,
|
||||
rolle: b.rolle,
|
||||
email: b.email,
|
||||
einheitId: b.einheit_id,
|
||||
aktiv: b.aktiv,
|
||||
erstelltAm: b.erstellt_am,
|
||||
letzterLogin: b.letzter_login ?? undefined,
|
||||
})
|
||||
|
||||
async function sessionAnlegen(res, userId, req) {
|
||||
const token = crypto.randomBytes(32).toString('hex')
|
||||
await pool.query(
|
||||
'INSERT INTO sessions (token, user_id, expires) VALUES ($1, $2, now() + $3 * interval \'1 millisecond\')',
|
||||
[token, userId, SESSION_DAUER_MS],
|
||||
)
|
||||
cookieSetzen(res, token, SESSION_DAUER_MS, req.secure)
|
||||
}
|
||||
|
||||
// ── Mapping-Helfer (snake_case → camelCase) ──────────────────
|
||||
const mapUnit = (u) => ({
|
||||
id: u.id, building: u.building, number: u.number, floor: u.floor,
|
||||
size: Number(u.size), coldRent: Number(u.cold_rent), warmRent: Number(u.warm_rent),
|
||||
tenant: u.tenant, status: u.status,
|
||||
})
|
||||
const mapTransaction = (t) => ({
|
||||
id: t.id, unitId: t.unit_id, tenant: t.tenant, month: t.month, year: t.year,
|
||||
amount: Number(t.amount), type: t.type, status: t.status, paidAt: t.paid_at ?? undefined,
|
||||
})
|
||||
const mapTicket = (t) => ({
|
||||
id: t.id, unitId: t.unit_id, tenant: t.tenant, title: t.title,
|
||||
description: t.description, category: t.category, priority: t.priority,
|
||||
status: t.status, createdAt: t.created_at,
|
||||
})
|
||||
const mapDocument = (d) => ({
|
||||
id: d.id, unitId: d.unit_id, title: d.title, category: d.category, size: d.size, date: d.date,
|
||||
})
|
||||
const mapMessage = (m) => ({ id: m.id, from: m.from_role, author: m.author, text: m.text, at: m.at })
|
||||
const mapThread = (t) => ({
|
||||
id: t.id, unitId: t.unit_id, tenant: t.tenant, subject: t.subject,
|
||||
unreadByAdmin: t.unread_by_admin, unreadByTenant: t.unread_by_tenant,
|
||||
})
|
||||
const mapCode = (c) => ({ code: c.code, einheitId: c.einheit_id, erstelltAm: c.erstellt_am, verwendetAm: c.verwendet_am ?? undefined })
|
||||
const mapAnnouncement = (a) => ({ id: a.id, title: a.title, text: a.text, date: a.date, tag: a.tag })
|
||||
|
||||
const deutschesDatum = () => new Date().toLocaleDateString('de-DE')
|
||||
const deutschesDatumZeit = () => new Date().toLocaleString('de-DE')
|
||||
|
||||
// ── Health ───────────────────────────────────────────────────
|
||||
app.get('/api/healthz', async (_req, res) => {
|
||||
try {
|
||||
await pool.query('SELECT 1')
|
||||
res.json({ ok: true, dienst: 'mp-api', datenbank: true })
|
||||
} catch {
|
||||
res.status(503).json({ ok: false, datenbank: false })
|
||||
}
|
||||
})
|
||||
|
||||
// ── Auth ─────────────────────────────────────────────────────
|
||||
app.post('/api/auth/login', async (req, res, next) => {
|
||||
try {
|
||||
const { benutzername, passwortHash } = req.body || {}
|
||||
const { rows } = await pool.query(
|
||||
'SELECT * FROM users WHERE lower(benutzername) = lower($1)',
|
||||
[String(benutzername || '').trim()],
|
||||
)
|
||||
const b = rows[0]
|
||||
if (!b || String(passwortHash || '') !== b.passwort_hash)
|
||||
return res.status(401).json({ fehler: 'Benutzername oder Passwort falsch.' })
|
||||
if (!b.aktiv)
|
||||
return res.status(403).json({ fehler: 'Dieses Konto ist deaktiviert – bitte die Verwaltung kontaktieren.' })
|
||||
await pool.query('UPDATE users SET letzter_login = $1 WHERE id = $2', [deutschesDatumZeit(), b.id])
|
||||
await sessionAnlegen(res, b.id, req)
|
||||
res.json({ benutzer: oeffentlicherBenutzer(b) })
|
||||
} catch (e) { next(e) }
|
||||
})
|
||||
|
||||
app.post('/api/auth/logout', async (req, res) => {
|
||||
const token = cookieLesen(req, COOKIE_NAME)
|
||||
if (token) await pool.query('DELETE FROM sessions WHERE token = $1', [token])
|
||||
cookieSetzen(res, '', 0, req.secure)
|
||||
res.json({ ok: true })
|
||||
})
|
||||
|
||||
app.get('/api/auth/me', auth, (req, res) => {
|
||||
res.json({ benutzer: oeffentlicherBenutzer(req.user) })
|
||||
})
|
||||
|
||||
app.post('/api/auth/register', async (req, res, next) => {
|
||||
try {
|
||||
const { code, benutzername, name, email, passwortHash } = req.body || {}
|
||||
const codeNorm = String(code || '').trim().toUpperCase()
|
||||
const benutzernameNorm = String(benutzername || '').trim()
|
||||
// Erst Benutzername prüfen, dann Code atomar verbrauchen (sonst wäre der
|
||||
// Code bei einem vergebenen Benutzernamen trotzdem verbraucht)
|
||||
const vorhanden = await pool.query('SELECT 1 FROM users WHERE lower(benutzername) = lower($1)', [benutzernameNorm])
|
||||
if (vorhanden.rows.length)
|
||||
return res.status(400).json({ fehler: 'Dieser Benutzername ist bereits vergeben.' })
|
||||
const { rows: codeRows } = await pool.query(
|
||||
`UPDATE registration_codes SET verwendet_am = $1
|
||||
WHERE code = $2 AND verwendet_am IS NULL
|
||||
RETURNING einheit_id`,
|
||||
[deutschesDatum(), codeNorm],
|
||||
)
|
||||
if (!codeRows.length)
|
||||
return res.status(400).json({ fehler: 'Der Registrierungscode ist ungültig oder bereits verwendet.' })
|
||||
const id = `b-${Date.now()}`
|
||||
const { rows } = await pool.query(
|
||||
`INSERT INTO users (id, benutzername, name, passwort_hash, rolle, email, einheit_id, aktiv, erstellt_am)
|
||||
VALUES ($1,$2,$3,$4,'mieter',$5,$6,TRUE,$7) RETURNING *`,
|
||||
[id, benutzernameNorm, String(name || '').trim(), String(passwortHash || ''),
|
||||
String(email || '').trim(), codeRows[0].einheit_id, deutschesDatum()],
|
||||
)
|
||||
await sessionAnlegen(res, id, req)
|
||||
res.json({ benutzer: oeffentlicherBenutzer(rows[0]) })
|
||||
} catch (e) { next(e) }
|
||||
})
|
||||
|
||||
// ── Bootstrap (alle Stammdaten in einem Rutsch) ──────────────
|
||||
app.get('/api/bootstrap', auth, async (req, res, next) => {
|
||||
try {
|
||||
const istAdmin = req.user.rolle === 'verwaltung'
|
||||
const einheit = req.user.einheit_id
|
||||
const [units, transactions, documents, tickets, threads, messages, announcements, users, codes] =
|
||||
await Promise.all([
|
||||
pool.query('SELECT * FROM units ORDER BY id'),
|
||||
istAdmin
|
||||
? pool.query('SELECT * FROM transactions ')
|
||||
: pool.query('SELECT * FROM transactions WHERE unit_id = $1 ', [einheit]),
|
||||
istAdmin
|
||||
? pool.query('SELECT * FROM documents ORDER BY date DESC')
|
||||
: pool.query('SELECT * FROM documents WHERE unit_id = $1 OR unit_id IS NULL ORDER BY date DESC', [einheit]),
|
||||
istAdmin
|
||||
? pool.query('SELECT * FROM tickets ORDER BY created_at DESC')
|
||||
: pool.query('SELECT * FROM tickets WHERE unit_id = $1 ORDER BY created_at DESC', [einheit]),
|
||||
istAdmin
|
||||
? pool.query('SELECT * FROM threads ORDER BY id DESC')
|
||||
: pool.query('SELECT * FROM threads WHERE unit_id = $1 ORDER BY id DESC', [einheit]),
|
||||
istAdmin
|
||||
? pool.query('SELECT * FROM messages')
|
||||
: pool.query('SELECT m.* FROM messages m JOIN threads t ON t.id = m.thread_id WHERE t.unit_id = $1', [einheit]),
|
||||
pool.query('SELECT * FROM announcements ORDER BY date DESC'),
|
||||
istAdmin
|
||||
? pool.query('SELECT * FROM users ORDER BY name')
|
||||
: { rows: [] },
|
||||
istAdmin
|
||||
? pool.query('SELECT * FROM registration_codes ORDER BY erstellt_am DESC')
|
||||
: { rows: [] },
|
||||
])
|
||||
// Threads mit ihren Nachrichten zusammenführen
|
||||
const nachrichtenProThread = {}
|
||||
for (const m of messages.rows) {
|
||||
;(nachrichtenProThread[m.thread_id] ??= []).push(mapMessage(m))
|
||||
}
|
||||
const threadListe = threads.rows.map((t) => ({
|
||||
...mapThread(t),
|
||||
messages: nachrichtenProThread[t.id] ?? [],
|
||||
}))
|
||||
res.json({
|
||||
units: units.rows.map(mapUnit),
|
||||
transactions: transactions.rows.map(mapTransaction),
|
||||
documents: documents.rows.map(mapDocument),
|
||||
tickets: tickets.rows.map(mapTicket),
|
||||
threads: threadListe,
|
||||
announcements: announcements.rows.map(mapAnnouncement),
|
||||
benutzer: users.rows.map(oeffentlicherBenutzer),
|
||||
codes: codes.rows.map(mapCode),
|
||||
})
|
||||
} catch (e) { next(e) }
|
||||
})
|
||||
|
||||
// ── Tickets ──────────────────────────────────────────────────
|
||||
app.post('/api/tickets', auth, async (req, res, next) => {
|
||||
try {
|
||||
const { title, description, category, priority } = req.body || {}
|
||||
if (!String(title || '').trim()) return res.status(400).json({ fehler: 'Titel fehlt.' })
|
||||
const unitId = req.user.rolle === 'verwaltung'
|
||||
? String((req.body || {}).unitId || 'hs-1')
|
||||
: req.user.einheit_id
|
||||
const { rows: unitRows } = await pool.query('SELECT * FROM units WHERE id = $1', [unitId])
|
||||
if (!unitRows.length) return res.status(400).json({ fehler: 'Wohnung unbekannt.' })
|
||||
const id = `t-${Date.now()}`
|
||||
const mieterName = req.user.rolle === 'verwaltung' ? 'Hinterstein Immobilien (intern)' : req.user.name
|
||||
const { rows } = await pool.query(
|
||||
`INSERT INTO tickets (id, unit_id, tenant, title, description, category, priority, status, created_at)
|
||||
VALUES ($1,$2,$3,$4,$5,$6,$7,'offen',$8) RETURNING *`,
|
||||
[id, unitId, mieterName, String(title).trim(), String(description || '–').trim(),
|
||||
String(category || 'Sonstiges'), ['niedrig', 'mittel', 'hoch'].includes(priority) ? priority : 'mittel',
|
||||
deutschesDatum()],
|
||||
)
|
||||
const label = mail.einheitLabel(mapUnit(unitRows[0]))
|
||||
mail.benachrichtigeVerwaltung(
|
||||
`Neue Schadensmeldung: ${String(title).trim()} (${label})`,
|
||||
`Im Mieterportal wurde eine neue Schadensmeldung erstellt.\n\n` +
|
||||
`Wohnung: ${label}\nMeldung von: ${mieterName}\nKategorie: ${String(category || 'Sonstiges')}\n\n` +
|
||||
`${String(title).trim()}\n${String(description || '–').trim()}`,
|
||||
)
|
||||
res.json({ ticket: mapTicket(rows[0]) })
|
||||
} catch (e) { next(e) }
|
||||
})
|
||||
|
||||
app.patch('/api/tickets/:id', auth, adminOnly, async (req, res, next) => {
|
||||
try {
|
||||
const status = String((req.body || {}).status || '')
|
||||
if (!['offen', 'in Bearbeitung', 'erledigt'].includes(status))
|
||||
return res.status(400).json({ fehler: 'Ungültiger Status.' })
|
||||
const { rows } = await pool.query(
|
||||
'UPDATE tickets SET status = $1 WHERE id = $2 RETURNING *', [status, req.params.id],
|
||||
)
|
||||
if (!rows.length) return res.status(404).json({ fehler: 'Ticket nicht gefunden.' })
|
||||
res.json({ ticket: mapTicket(rows[0]) })
|
||||
} catch (e) { next(e) }
|
||||
})
|
||||
|
||||
// ── Nachrichten (Threads) ────────────────────────────────────
|
||||
app.post('/api/threads', auth, async (req, res, next) => {
|
||||
try {
|
||||
const { subject, text, unitId: gewuenschteEinheit } = req.body || {}
|
||||
if (!String(subject || '').trim() || !String(text || '').trim())
|
||||
return res.status(400).json({ fehler: 'Betreff und Nachricht fehlen.' })
|
||||
const unitId = req.user.rolle === 'verwaltung'
|
||||
? String(gewuenschteEinheit || 'hs-1')
|
||||
: req.user.einheit_id
|
||||
const { rows: unitRows } = await pool.query('SELECT * FROM units WHERE id = $1', [unitId])
|
||||
if (!unitRows.length) return res.status(400).json({ fehler: 'Wohnung unbekannt.' })
|
||||
const id = `m-${Date.now()}`
|
||||
const vonRolle = req.user.rolle === 'verwaltung' ? 'admin' : 'tenant'
|
||||
const autor = req.user.name
|
||||
await pool.query(
|
||||
`INSERT INTO threads (id, unit_id, tenant, subject, unread_by_admin, unread_by_tenant)
|
||||
VALUES ($1,$2,$3,$4,$5,$6)`,
|
||||
[id, unitId, req.user.rolle === 'verwaltung' ? autor : (unitRows[0].tenant ?? autor),
|
||||
String(subject).trim(), vonRolle === 'tenant', vonRolle === 'admin'],
|
||||
)
|
||||
await pool.query(
|
||||
`INSERT INTO messages (id, thread_id, from_role, author, text, at) VALUES ($1,$2,$3,$4,$5,$6)`,
|
||||
[`${id}-1`, id, vonRolle, autor, String(text).trim(), deutschesDatumZeit()],
|
||||
)
|
||||
const betreff = vonRolle === 'tenant'
|
||||
? `Neue Nachricht im Mieterportal: ${String(subject).trim()}`
|
||||
: `Nachricht der Verwaltung: ${String(subject).trim()}`
|
||||
const inhalt = `Neue Unterhaltung von ${autor}:\n\n„${String(text).trim()}“`
|
||||
if (vonRolle === 'tenant') mail.benachrichtigeVerwaltung(betreff, inhalt)
|
||||
else mail.benachrichtigeMieter(unitId, betreff, inhalt)
|
||||
const { rows } = await pool.query('SELECT * FROM threads WHERE id = $1', [id])
|
||||
const { rows: msgRows } = await pool.query('SELECT * FROM messages WHERE thread_id = $1 ORDER BY at', [id])
|
||||
res.json({ thread: { ...mapThread(rows[0]), messages: msgRows.map(mapMessage) } })
|
||||
} catch (e) { next(e) }
|
||||
})
|
||||
|
||||
app.post('/api/threads/:id/messages', auth, async (req, res, next) => {
|
||||
try {
|
||||
const text = String((req.body || {}).text || '').trim()
|
||||
if (!text) return res.status(400).json({ fehler: 'Nachricht fehlt.' })
|
||||
const { rows: threadRows } = await pool.query('SELECT * FROM threads WHERE id = $1', [req.params.id])
|
||||
const th = threadRows[0]
|
||||
if (!th) return res.status(404).json({ fehler: 'Unterhaltung nicht gefunden.' })
|
||||
if (req.user.rolle === 'mieter' && th.unit_id !== req.user.einheit_id)
|
||||
return res.status(403).json({ fehler: 'Kein Zugriff auf diese Unterhaltung.' })
|
||||
const vonRolle = req.user.rolle === 'verwaltung' ? 'admin' : 'tenant'
|
||||
const autor = req.user.name
|
||||
const msgId = `${th.id}-${Date.now()}`
|
||||
await pool.query(
|
||||
`INSERT INTO messages (id, thread_id, from_role, author, text, at) VALUES ($1,$2,$3,$4,$5,$6)`,
|
||||
[msgId, th.id, vonRolle, autor, text, deutschesDatumZeit()],
|
||||
)
|
||||
await pool.query(
|
||||
`UPDATE threads SET unread_by_admin = $1, unread_by_tenant = $2 WHERE id = $3`,
|
||||
[vonRolle === 'tenant', vonRolle === 'admin', th.id],
|
||||
)
|
||||
const betreff = vonRolle === 'tenant'
|
||||
? `Neue Antwort im Mieterportal: ${th.subject}`
|
||||
: `Antwort der Verwaltung: ${th.subject}`
|
||||
const inhalt = `Neue Nachricht von ${autor} in der Unterhaltung „${th.subject}“:\n\n„${text}“`
|
||||
if (vonRolle === 'tenant') mail.benachrichtigeVerwaltung(betreff, inhalt)
|
||||
else mail.benachrichtigeMieter(th.unit_id, betreff, inhalt)
|
||||
const { rows: msgRows } = await pool.query('SELECT * FROM messages WHERE thread_id = $1 ORDER BY at', [th.id])
|
||||
const { rows } = await pool.query('SELECT * FROM threads WHERE id = $1', [th.id])
|
||||
res.json({ thread: { ...mapThread(rows[0]), messages: msgRows.map(mapMessage) } })
|
||||
} catch (e) { next(e) }
|
||||
})
|
||||
|
||||
app.post('/api/threads/:id/read', auth, async (req, res, next) => {
|
||||
try {
|
||||
const { rows: threadRows } = await pool.query('SELECT unit_id FROM threads WHERE id = $1', [req.params.id])
|
||||
const th = threadRows[0]
|
||||
if (!th) return res.status(404).json({ fehler: 'Unterhaltung nicht gefunden.' })
|
||||
if (req.user.rolle === 'mieter' && th.unit_id !== req.user.einheit_id)
|
||||
return res.status(403).json({ fehler: 'Kein Zugriff auf diese Unterhaltung.' })
|
||||
if (req.user.rolle === 'verwaltung')
|
||||
await pool.query('UPDATE threads SET unread_by_admin = FALSE WHERE id = $1', [req.params.id])
|
||||
else
|
||||
await pool.query('UPDATE threads SET unread_by_tenant = FALSE WHERE id = $1', [req.params.id])
|
||||
res.json({ ok: true })
|
||||
} catch (e) { next(e) }
|
||||
})
|
||||
|
||||
// ── Benutzerverwaltung (nur Verwaltung) ──────────────────────
|
||||
app.get('/api/users', auth, adminOnly, async (_req, res, next) => {
|
||||
try {
|
||||
const { rows } = await pool.query('SELECT * FROM users ORDER BY name')
|
||||
res.json({ benutzer: rows.map(oeffentlicherBenutzer) })
|
||||
} catch (e) { next(e) }
|
||||
})
|
||||
|
||||
app.post('/api/users', auth, adminOnly, async (req, res, next) => {
|
||||
try {
|
||||
const { benutzername, name, rolle, email, passwortHash, einheitId } = req.body || {}
|
||||
if (!['verwaltung', 'mieter'].includes(rolle)) return res.status(400).json({ fehler: 'Ungültige Rolle.' })
|
||||
const benutzernameNorm = String(benutzername || '').trim()
|
||||
const vorhanden = await pool.query('SELECT 1 FROM users WHERE lower(benutzername) = lower($1)', [benutzernameNorm])
|
||||
if (vorhanden.rows.length) return res.status(400).json({ fehler: 'Dieser Benutzername ist bereits vergeben.' })
|
||||
const id = `b-${Date.now()}`
|
||||
const { rows } = await pool.query(
|
||||
`INSERT INTO users (id, benutzername, name, passwort_hash, rolle, email, einheit_id, aktiv, erstellt_am)
|
||||
VALUES ($1,$2,$3,$4,$5,$6,$7,TRUE,$8) RETURNING *`,
|
||||
[id, benutzernameNorm, String(name || '').trim(), String(passwortHash || ''), rolle,
|
||||
String(email || '').trim(), rolle === 'mieter' ? (einheitId || null) : null, deutschesDatum()],
|
||||
)
|
||||
res.json({ benutzer: oeffentlicherBenutzer(rows[0]) })
|
||||
} catch (e) { next(e) }
|
||||
})
|
||||
|
||||
app.patch('/api/users/:id', auth, adminOnly, async (req, res, next) => {
|
||||
try {
|
||||
const b = req.body || {}
|
||||
const { rows } = await pool.query('SELECT * FROM users WHERE id = $1', [req.params.id])
|
||||
if (!rows.length) return res.status(404).json({ fehler: 'Benutzer nicht gefunden.' })
|
||||
if (b.passwortHash !== undefined)
|
||||
await pool.query('UPDATE users SET passwort_hash = $1 WHERE id = $2', [String(b.passwortHash), req.params.id])
|
||||
if (b.aktiv !== undefined)
|
||||
await pool.query('UPDATE users SET aktiv = $1 WHERE id = $2', [Boolean(b.aktiv), req.params.id])
|
||||
if (b.einheitId !== undefined)
|
||||
await pool.query('UPDATE users SET einheit_id = $1 WHERE id = $2', [b.einheitId || null, req.params.id])
|
||||
const { rows: neu } = await pool.query('SELECT * FROM users WHERE id = $1', [req.params.id])
|
||||
res.json({ benutzer: oeffentlicherBenutzer(neu[0]) })
|
||||
} catch (e) { next(e) }
|
||||
})
|
||||
|
||||
// ── Registrierungscodes (nur Verwaltung) ─────────────────────
|
||||
app.get('/api/codes', auth, adminOnly, async (_req, res, next) => {
|
||||
try {
|
||||
const { rows } = await pool.query('SELECT * FROM registration_codes ORDER BY erstellt_am DESC')
|
||||
res.json({ codes: rows.map(mapCode) })
|
||||
} catch (e) { next(e) }
|
||||
})
|
||||
|
||||
app.post('/api/codes', auth, adminOnly, async (req, res, next) => {
|
||||
try {
|
||||
const anzahl = Math.min(Math.max(parseInt((req.body || {}).anzahl, 10) || 1, 1), 50)
|
||||
const einheitId = (req.body || {}).einheitId || null
|
||||
if (einheitId) {
|
||||
const u = await pool.query('SELECT 1 FROM units WHERE id = $1', [einheitId])
|
||||
if (!u.rows.length) return res.status(400).json({ fehler: 'Wohnung unbekannt.' })
|
||||
}
|
||||
const teil = () =>
|
||||
Array.from(crypto.randomBytes(2)).map((b) => b.toString(16).padStart(2, '0')).join('').toUpperCase()
|
||||
const neu = []
|
||||
for (let i = 0; i < anzahl; i++) {
|
||||
const code = `MP-${teil()}-${teil()}`
|
||||
await pool.query(
|
||||
'INSERT INTO registration_codes (code, einheit_id, erstellt_am) VALUES ($1,$2,$3)',
|
||||
[code, einheitId, deutschesDatum()],
|
||||
)
|
||||
neu.push({ code, einheitId, erstelltAm: deutschesDatum() })
|
||||
}
|
||||
res.json({ codes: neu })
|
||||
} catch (e) { next(e) }
|
||||
})
|
||||
|
||||
// ── Fehlerbehandlung ─────────────────────────────────────────
|
||||
app.use((err, _req, res, _next) => {
|
||||
console.error('[api]', err)
|
||||
res.status(500).json({ fehler: 'Interner Serverfehler.' })
|
||||
})
|
||||
|
||||
// ── Start ────────────────────────────────────────────────────
|
||||
async function warteAufDatenbank() {
|
||||
let letzterFehler = null
|
||||
for (let versuch = 1; versuch <= 30; versuch++) {
|
||||
try {
|
||||
await init()
|
||||
return
|
||||
} catch (e) {
|
||||
letzterFehler = e
|
||||
console.log(`[api] Datenbank nicht bereit (Versuch ${versuch}/30) …`)
|
||||
await new Promise((r) => setTimeout(r, 2000))
|
||||
}
|
||||
}
|
||||
throw letzterFehler
|
||||
}
|
||||
|
||||
async function start() {
|
||||
// Warten, bis die Datenbank erreichbar ist (Container-Start-Reihenfolge)
|
||||
await warteAufDatenbank()
|
||||
const geseedet = await seed()
|
||||
if (geseedet) console.log('[api] Demo-Daten eingespielt (50 Wohnungen, 552 Buchungen, …)')
|
||||
setInterval(sessionsAufraeumen, 60 * 60 * 1000).unref()
|
||||
app.listen(PORT, () => console.log(`[api] mp-api lauscht auf :${PORT}`))
|
||||
}
|
||||
|
||||
start().catch((e) => {
|
||||
console.error('[api] Start fehlgeschlagen:', e)
|
||||
process.exit(1)
|
||||
})
|
||||
@@ -0,0 +1,49 @@
|
||||
/** Serverseitiger E-Mail-Versand über die Portal-Mail-API (mp-mail-api).
|
||||
*
|
||||
* Fire-and-forget: Ein Fehler (Mail-API down, Relay-Fehler) beeinträchtigt
|
||||
* die auslösende Portal-Aktion nie. Die Mail-API selbst puffert im Fehlerfall
|
||||
* in ihrer Outbox und versucht es erneut.
|
||||
*/
|
||||
|
||||
const MAIL_API_URL = process.env.MAIL_API_URL || '' // z. B. http://mp-mail-api:8080
|
||||
const MAIL_API_TOKEN = process.env.MAIL_API_TOKEN || ''
|
||||
|
||||
const FUSSZEILE =
|
||||
'\n\n— Automatische Benachrichtigung aus dem Mieterportal der Hinterstein Immobilien'
|
||||
|
||||
async function sendeMail(an, betreff, text) {
|
||||
if (!MAIL_API_URL || !MAIL_API_TOKEN || !an) return
|
||||
try {
|
||||
const res = await fetch(`${MAIL_API_URL}/send`, {
|
||||
method: 'POST',
|
||||
headers: { 'Content-Type': 'application/json', 'X-Api-Token': MAIL_API_TOKEN },
|
||||
body: JSON.stringify({ to: an, subject: betreff, text: `${text}${FUSSZEILE}` }),
|
||||
})
|
||||
if (!res.ok) console.warn(`[mail] Versand an ${an} fehlgeschlagen: HTTP ${res.status}`)
|
||||
} catch (e) {
|
||||
console.warn(`[mail] Versand an ${an} fehlgeschlagen:`, e.message)
|
||||
}
|
||||
}
|
||||
|
||||
/** Alle aktiven Verwaltungsnutzer benachrichtigen. */
|
||||
async function benachrichtigeVerwaltung(betreff, text) {
|
||||
const { rows } = await require('./db').pool.query(
|
||||
`SELECT email FROM users WHERE rolle = 'verwaltung' AND aktiv AND email <> ''`,
|
||||
)
|
||||
for (const r of rows) sendeMail(r.email, betreff, text)
|
||||
}
|
||||
|
||||
/** Mieter einer bestimmten Wohnung benachrichtigen. */
|
||||
async function benachrichtigeMieter(einheitId, betreff, text) {
|
||||
const { rows } = await require('./db').pool.query(
|
||||
`SELECT email FROM users WHERE rolle = 'mieter' AND aktiv AND einheit_id = $1 AND email <> ''`,
|
||||
[einheitId],
|
||||
)
|
||||
for (const r of rows) sendeMail(r.email, betreff, text)
|
||||
}
|
||||
|
||||
function einheitLabel(u) {
|
||||
return u ? `${u.building}, Whg. ${u.number}` : ''
|
||||
}
|
||||
|
||||
module.exports = { sendeMail, benachrichtigeVerwaltung, benachrichtigeMieter, einheitLabel }
|
||||
@@ -0,0 +1,144 @@
|
||||
/** Handgeschriebene Demo-Daten (vormals src/data/seed.ts).
|
||||
*
|
||||
* units + transactions kommen maschinell aus seed/generated.json
|
||||
* (beispieldaten.py). Die Verwaltungs-E-Mail ist bewusst ein echtes,
|
||||
* zustellbares Postfach (axel@hocks.eu), damit Benachrichtigungen ankommen;
|
||||
* im Portal änderbar (Benutzerverwaltung).
|
||||
*/
|
||||
|
||||
const DEMO_HASH = 'c57a5df4f97ed6914116e5fd1348406064834f22503d890eb571af442ac4b4c3' // sha256("0815")
|
||||
|
||||
const users = [
|
||||
{
|
||||
id: 'b-joseph',
|
||||
benutzername: 'j.hinterstein',
|
||||
name: 'Joseph Hinterstein',
|
||||
passwort_hash: DEMO_HASH,
|
||||
rolle: 'verwaltung',
|
||||
email: 'axel@hocks.eu',
|
||||
einheit_id: null,
|
||||
aktiv: true,
|
||||
erstellt_am: '01.03.2024',
|
||||
},
|
||||
{
|
||||
id: 'b-anna',
|
||||
benutzername: 'a.berger',
|
||||
name: 'Anna Berger',
|
||||
passwort_hash: DEMO_HASH,
|
||||
rolle: 'mieter',
|
||||
email: 'anna.berger@example.de',
|
||||
einheit_id: 'hs-7',
|
||||
aktiv: true,
|
||||
erstellt_am: '01.03.2024',
|
||||
letzter_login: '02.10.2026, 09:12',
|
||||
},
|
||||
{
|
||||
id: 'b-jonas',
|
||||
benutzername: 'm.wolf',
|
||||
name: 'Jonas Klein',
|
||||
passwort_hash: DEMO_HASH,
|
||||
rolle: 'mieter',
|
||||
email: 'jonas.klein@example.de',
|
||||
einheit_id: 'rw-4',
|
||||
aktiv: true,
|
||||
erstellt_am: '15.08.2025',
|
||||
},
|
||||
]
|
||||
|
||||
const registrationCodes = [
|
||||
{ code: 'MP-2026-0815', einheit_id: 'ap-2', erstellt_am: '02.10.2026', verwendet_am: null },
|
||||
]
|
||||
|
||||
const tickets = [
|
||||
{
|
||||
id: 't-1', unit_id: 'hs-7', tenant: 'Anna Berger',
|
||||
title: 'Wasserhahn im Bad tropft',
|
||||
description: 'Der Wasserhahn am Waschbecken tropft seit einigen Tagen permanent, auch bei ganz zugedrehtem Ventil.',
|
||||
category: 'Sanitär', priority: 'mittel', status: 'in Bearbeitung', created_at: '28.09.2026',
|
||||
},
|
||||
{
|
||||
id: 't-2', unit_id: 'hs-7', tenant: 'Anna Berger',
|
||||
title: 'Briefkastenschlüssel defekt',
|
||||
description: 'Der Schlüssel für den Briefkasten lässt sich nicht mehr drehen, vermutlich Schloss verklebt.',
|
||||
category: 'Schlüssel', priority: 'niedrig', status: 'offen', created_at: '30.09.2026',
|
||||
},
|
||||
{
|
||||
id: 't-3', unit_id: 'rw-4', tenant: 'Jonas Klein',
|
||||
title: 'Heizkörper wird nicht warm',
|
||||
description: 'Der Heizkörper im Wohnzimmer bleibt kalt, obwohl das Thermostat voll aufgedreht ist.',
|
||||
category: 'Heizung', priority: 'hoch', status: 'offen', created_at: '01.10.2026',
|
||||
},
|
||||
{
|
||||
id: 't-4', unit_id: 'ap-2', tenant: 'Anja Roth',
|
||||
title: 'Rollladen im Schlafzimmer klemmt',
|
||||
description: 'Der elektrische Rollladen fährt nur noch zur Hälfte hoch.',
|
||||
category: 'Fenster / Rollladen', priority: 'mittel', status: 'in Bearbeitung', created_at: '25.09.2026',
|
||||
},
|
||||
{
|
||||
id: 't-5', unit_id: 'hs-14', tenant: 'Markus Lange',
|
||||
title: 'Flurbeleuchtung im Treppenhaus defekt',
|
||||
description: 'Im 3. OG ist die Bewegungsmelder-Leuchte ausgefallen.',
|
||||
category: 'Elektrik', priority: 'hoch', status: 'erledigt', created_at: '18.09.2026',
|
||||
},
|
||||
{
|
||||
id: 't-6', unit_id: 'rw-9', tenant: 'Sandra Weiß',
|
||||
title: 'Schimmel im Bad – Lüftungsproblem?',
|
||||
description: 'In der Fensterfalz des Bades sammelt sich Kondenswasser, bitte um Prüfung der Lüftung.',
|
||||
category: 'Sanitär', priority: 'hoch', status: 'in Bearbeitung', created_at: '22.09.2026',
|
||||
},
|
||||
{
|
||||
id: 't-7', unit_id: 'ap-11', tenant: 'Thomas Neumann',
|
||||
title: 'Markise auf dem Balkon lose',
|
||||
description: 'Die Befestigung der Markise wackelt bei Wind deutlich.',
|
||||
category: 'Balkon / Außenanlage', priority: 'hoch', status: 'offen', created_at: '29.09.2026',
|
||||
},
|
||||
{
|
||||
id: 't-8', unit_id: 'hs-3', tenant: 'Petra Hoffmann',
|
||||
title: 'Spülmaschinen-Anschluss undicht',
|
||||
description: 'Unter der Spüle steht Wasser, vermutlich kommt es vom Geräteanschluss.',
|
||||
category: 'Sanitär', priority: 'mittel', status: 'erledigt', created_at: '10.09.2026',
|
||||
},
|
||||
]
|
||||
|
||||
// Mieter-Namen für tickets der fremden Wohnungen stammen aus generated.json;
|
||||
// seed.js ersetzt leere/Platzhalter-Namen beim Einfügen aus der units-Tabelle.
|
||||
|
||||
const documents = [
|
||||
{ id: 'd-1', unit_id: 'hs-7', title: 'Mietvertrag Anna Berger – Hauptstraße 12, Whg. 7', category: 'Mietvertrag', size: '1,8 MB', date: '01.03.2024' },
|
||||
{ id: 'd-2', unit_id: 'hs-7', title: 'Nebenkostenabrechnung 2025', category: 'Nebenkostenabrechnung', size: '640 KB', date: '31.05.2026' },
|
||||
{ id: 'd-3', unit_id: 'hs-7', title: 'Heizkostenabrechnung 2025', category: 'Nebenkostenabrechnung', size: '410 KB', date: '31.05.2026' },
|
||||
{ id: 'd-4', unit_id: null, title: 'Hausordnung – gültige Fassung 2026', category: 'Hausordnung', size: '220 KB', date: '01.01.2026' },
|
||||
{ id: 'd-5', unit_id: null, title: 'Protokoll Hausversammlung 14.06.2026', category: 'Protokoll', size: '350 KB', date: '14.06.2026' },
|
||||
{ id: 'd-6', unit_id: null, title: 'Mülltonnen-Belegungsplan & Abfuhrtermine 2026', category: 'Sonstiges', size: '180 KB', date: '02.01.2026' },
|
||||
{ id: 'd-7', unit_id: 'rw-4', title: 'Mietvertrag – Ringweg 3, Whg. 4', category: 'Mietvertrag', size: '1,6 MB', date: '15.08.2025' },
|
||||
{ id: 'd-8', unit_id: 'ap-2', title: 'Mietvertrag – Am Park 5, Whg. 2', category: 'Mietvertrag', size: '1,7 MB', date: '01.06.2024' },
|
||||
]
|
||||
|
||||
const threads = [
|
||||
{
|
||||
id: 'm-1', unit_id: 'hs-7', tenant: 'Anna Berger',
|
||||
subject: 'Mietkaution – Rückzahlungsnachweis',
|
||||
unread_by_admin: false, unread_by_tenant: true,
|
||||
messages: [
|
||||
{ id: 'm-1-a', from_role: 'tenant', author: 'Anna Berger', text: 'Guten Tag, könnten Sie mir bitte den aktuellen Stand meiner Mietkaution mit Nachweis der Verzinsung zusenden?', at: '27.09.2026, 10:12' },
|
||||
{ id: 'm-1-b', from_role: 'admin', author: 'Joseph Hinterstein', text: 'Guten Tag Frau Berger, die Kaution wurde mit 1.500,00 € auf dem Treuhandkonto verbucht. Die Verzinsung für 2025 beträgt 18,40 € – den Nachweis finden Sie ab sofort auch unter Dokumente.', at: '29.09.2026, 09:03' },
|
||||
],
|
||||
},
|
||||
{
|
||||
id: 'm-2', unit_id: 'rw-9', tenant: 'Sandra Weiß',
|
||||
subject: 'Terminabstimmung Wohnungsbegehung (Schimmel)',
|
||||
unread_by_admin: true, unread_by_tenant: false,
|
||||
messages: [
|
||||
{ id: 'm-2-a', from_role: 'tenant', author: 'Sandra Weiß', text: 'Aufgrund der Schadensmeldung schlage ich einen Begehungstermin nächste Woche vor. Passt Mittwoch oder Freitag Nachmittag?', at: '01.10.2026, 08:45' },
|
||||
],
|
||||
},
|
||||
]
|
||||
|
||||
const announcements = [
|
||||
{ id: 'a-1', title: 'Wasserabschaltung Hauptstraße 12', text: 'Am Donnerstag, 08.10.2026, 09:00–13:00 Uhr findet eine Druckerhöhungs-Pumpen-Wartung statt. In dieser Zeit steht kein Wasser zur Verfügung.', date: '02.10.2026', tag: 'Technik' },
|
||||
{ id: 'a-2', title: 'Herbst-Hausbegehung mit Hausmeister', text: 'Am Samstag, 17.10.2026, 10:00 Uhr geht es gemeinsam durch alle Häuser. Anschließend gibt es Kaffee im Hof von Am Park 5.', date: '28.09.2026', tag: 'Termin' },
|
||||
{ id: 'a-3', title: 'Tiefgarage Ringweg 3: Reinigung', text: 'Die Tiefgarage wird am 21.10.2026 gereinigt. Bitte Fahrzeuge bis 07:30 Uhr entfernen, sonst erfolgt ein kostenpflichtiges Versetzen.', date: '20.09.2026', tag: 'Hinweis' },
|
||||
{ id: 'a-4', title: 'Nebenkostenabrechnungen 2025 versandt', text: 'Alle Abrechnungen liegen digital im Dokumentenbereich vor. Nachzahlungen sind bis 31.10.2026 überwiesen.', date: '31.05.2026', tag: 'Abrechnung' },
|
||||
]
|
||||
|
||||
module.exports = { users, registrationCodes, tickets, documents, threads, announcements }
|
||||
@@ -0,0 +1,100 @@
|
||||
/** Idempotenter Seed: füllt die Datenbank beim ersten Start mit den
|
||||
* Demo-Daten (50 Wohnungen, 552 Buchungen, Tickets, Dokumente, Threads,
|
||||
* Ankündigungen, Demo-Benutzer, Registrierungscode). Läuft nur, wenn die
|
||||
* users-Tabelle leer ist – bestehende Daten werden nie überschrieben.
|
||||
*/
|
||||
|
||||
const { pool } = require('./db')
|
||||
const { users, registrationCodes, tickets, documents, threads, announcements } = require('./seed-data')
|
||||
const generated = require('../seed/generated.json')
|
||||
|
||||
async function seed() {
|
||||
const { rows } = await pool.query('SELECT COUNT(*)::int AS n FROM users')
|
||||
if (rows[0].n > 0) return false
|
||||
|
||||
const client = await pool.connect()
|
||||
try {
|
||||
await client.query('BEGIN')
|
||||
|
||||
for (const u of generated.units) {
|
||||
await client.query(
|
||||
`INSERT INTO units (id, building, number, floor, size, cold_rent, warm_rent, tenant, status)
|
||||
VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9)`,
|
||||
[u.id, u.building, u.number, u.floor, u.size, u.coldRent, u.warmRent, u.tenant, u.status],
|
||||
)
|
||||
}
|
||||
|
||||
for (const t of generated.transactions) {
|
||||
await client.query(
|
||||
`INSERT INTO transactions (id, unit_id, tenant, month, year, amount, type, status, paid_at)
|
||||
VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9)`,
|
||||
[t.id, t.unitId, t.tenant, t.month, t.year, t.amount, t.type, t.status, t.paidAt ?? null],
|
||||
)
|
||||
}
|
||||
|
||||
// Mieter-Namen in Tickets/Threads aus der units-Tabelle nachziehen
|
||||
const { rows: unitRows } = await client.query('SELECT id, tenant FROM units')
|
||||
const mieterVon = Object.fromEntries(unitRows.map((u) => [u.id, u.tenant]))
|
||||
|
||||
for (const t of tickets) {
|
||||
await client.query(
|
||||
`INSERT INTO tickets (id, unit_id, tenant, title, description, category, priority, status, created_at)
|
||||
VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9)`,
|
||||
[t.id, t.unit_id, mieterVon[t.unit_id] ?? t.tenant, t.title, t.description, t.category, t.priority, t.status, t.created_at],
|
||||
)
|
||||
}
|
||||
|
||||
for (const d of documents) {
|
||||
await client.query(
|
||||
`INSERT INTO documents (id, unit_id, title, category, size, date) VALUES ($1,$2,$3,$4,$5,$6)`,
|
||||
[d.id, d.unit_id, d.title, d.category, d.size, d.date],
|
||||
)
|
||||
}
|
||||
|
||||
for (const th of threads) {
|
||||
await client.query(
|
||||
`INSERT INTO threads (id, unit_id, tenant, subject, unread_by_admin, unread_by_tenant)
|
||||
VALUES ($1,$2,$3,$4,$5,$6)`,
|
||||
[th.id, th.unit_id, mieterVon[th.unit_id] ?? th.tenant, th.subject, th.unread_by_admin, th.unread_by_tenant],
|
||||
)
|
||||
for (const m of th.messages) {
|
||||
await client.query(
|
||||
`INSERT INTO messages (id, thread_id, from_role, author, text, at) VALUES ($1,$2,$3,$4,$5,$6)`,
|
||||
[m.id, th.id, m.from_role, m.author, m.text, m.at],
|
||||
)
|
||||
}
|
||||
}
|
||||
|
||||
for (const a of announcements) {
|
||||
await client.query(
|
||||
`INSERT INTO announcements (id, title, text, date, tag) VALUES ($1,$2,$3,$4,$5)`,
|
||||
[a.id, a.title, a.text, a.date, a.tag],
|
||||
)
|
||||
}
|
||||
|
||||
for (const b of users) {
|
||||
await client.query(
|
||||
`INSERT INTO users (id, benutzername, name, passwort_hash, rolle, email, einheit_id, aktiv, erstellt_am, letzter_login)
|
||||
VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10)`,
|
||||
[b.id, b.benutzername, b.name, b.passwort_hash, b.rolle, b.email, b.einheit_id, b.aktiv, b.erstellt_am, b.letzter_login ?? null],
|
||||
)
|
||||
}
|
||||
|
||||
for (const c of registrationCodes) {
|
||||
await client.query(
|
||||
`INSERT INTO registration_codes (code, einheit_id, erstellt_am, verwendet_am) VALUES ($1,$2,$3,$4)`,
|
||||
[c.code, c.einheit_id, c.erstellt_am, c.verwendet_am],
|
||||
)
|
||||
}
|
||||
|
||||
await client.query('COMMIT')
|
||||
return true
|
||||
} catch (e) {
|
||||
await client.query('ROLLBACK')
|
||||
throw e
|
||||
} finally {
|
||||
client.release()
|
||||
}
|
||||
}
|
||||
|
||||
module.exports = { seed }
|
||||
Reference in New Issue
Block a user