dc749ed5503cfc872898068ba5776607fb903142
[qomet.git] / routes / assessments.js
1 let router = require("express").Router();
2 const access = require("../utils/access");
3 const UserModel = require("../models/user");
4 const AssessmentModel = require("../models/assessment");
5 const AssessmentEntity = require("../entities/assessment");
6 const CourseModel = require("../models/course");
7 const params = require("../config/parameters");
8 const validator = require("../public/javascripts/utils/validation");
9 const ObjectId = require("bson-objectid");
10 const sanitizeHtml = require('sanitize-html');
11 const sanitizeOpts = {
12 allowedTags: sanitizeHtml.defaults.allowedTags.concat([ 'img' ]),
13 allowedAttributes: { code: [ 'class' ] },
14 };
15
16 router.get("/add/assessment", access.ajax, access.logged, (req,res) => {
17 const name = req.query["name"];
18 const cid = req.query["cid"];
19 let error = validator({cid:cid, name:name}, "Assessment");
20 if (error.length > 0)
21 return res.json({errmsg:error});
22 AssessmentModel.add(req.user._id, ObjectId(cid), name, (err,assessment) => {
23 access.checkRequest(res, err, assessment, "Assessment addition failed", () => {
24 res.json(assessment);
25 });
26 });
27 });
28
29 router.post("/update/assessment", access.ajax, access.logged, (req,res) => {
30 const assessment = JSON.parse(req.body["assessment"]);
31 let error = validator(assessment, "Assessment");
32 if (error.length > 0)
33 return res.json({errmsg:error});
34 assessment.introduction = sanitizeHtml(assessment.introduction, sanitizeOpts);
35 assessment.conclusion = sanitizeHtml(assessment.conclusion, sanitizeOpts);
36 assessment.questions.forEach( q => {
37 q.wording = sanitizeHtml(q.wording, sanitizeOpts);
38 //q.answer = sanitizeHtml(q.answer); //if text (TODO: it's an array in this case?!)
39 for (let i=0; i<q.options.length; i++) //if QCM
40 q.options[i] = sanitizeHtml(q.options[i], sanitizeOpts);
41 });
42 AssessmentModel.update(req.user._id, assessment, (err,ret) => {
43 access.checkRequest(res, err, ret, "Assessment update failed", () => {
44 res.json({});
45 });
46 });
47 });
48
49 // Generate and set student password, return it
50 router.get("/start/assessment", access.ajax, (req,res) => {
51 let number = req.query["number"];
52 let aid = req.query["aid"];
53 let password = req.cookies["password"]; //potentially from cookies, resuming
54 let error = validator({ _id:aid, papers:[{number:number,password:password || "samplePwd"}] }, "Assessment");
55 if (error.length > 0)
56 return res.json({errmsg:error});
57 AssessmentModel.startSession(ObjectId(aid), number, password, (err,ret) => {
58 access.checkRequest(res,err,ret,"Failed session initialization", () => {
59 if (!password)
60 {
61 // Set password
62 res.cookie("password", ret.password, {
63 httpOnly: true,
64 maxAge: params.cookieExpire,
65 });
66 }
67 res.json(ret); //contains questions+password(or paper if resuming)
68 });
69 });
70 });
71
72 router.get("/send/answer", access.ajax, (req,res) => {
73 let aid = req.query["aid"];
74 let number = req.query["number"];
75 let password = req.query["password"];
76 let input = JSON.parse(req.query["answer"]);
77 let error = validator({ _id:aid, papers:[{number:number,password:password,inputs:[input]}] }, "Assessment");
78 if (error.length > 0)
79 return res.json({errmsg:error});
80 AssessmentModel.newAnswer(ObjectId(aid), number, password, input, (err,ret) => {
81 access.checkRequest(res,err,ret,"Cannot send answer", () => {
82 res.json({});
83 });
84 });
85 });
86
87 router.get("/end/assessment", access.ajax, (req,res) => {
88 let aid = req.query["aid"];
89 let number = req.query["number"];
90 let password = req.query["password"];
91 let error = validator({ _id:aid, papers:[{number:number,password:password}] }, "Assessment");
92 if (error.length > 0)
93 return res.json({errmsg:error});
94 // Destroy pwd, set endTime, return conclusion
95 AssessmentModel.endSession(ObjectId(aid), number, password, (err,conclusion) => {
96 access.checkRequest(res,err,conclusion,"Cannot end assessment", () => {
97 res.clearCookie('password');
98 res.json(conclusion);
99 });
100 });
101 });
102
103 module.exports = router;