reorganization of source code

routes/api/settings.js

@@ -0,0 +1,43 @@
+const express = require('express');
+const router = express.Router();
+const sql = require('../../services/sql');
+const audit_category = require('../../services/audit_category');
+const auth = require('../../services/auth');
+
+const ALLOWED_OPTIONS = ['encryption_session_timeout', 'history_snapshot_time_interval'];
+
+router.get('/', auth.checkApiAuth, async (req, res, next) => {
+    const dict = {};
+
+    const settings = await sql.getResults("SELECT opt_name, opt_value FROM options WHERE opt_name IN ("
+        + ALLOWED_OPTIONS.map(x => '?').join(",") + ")", ALLOWED_OPTIONS);
+
+    for (const set of settings) {
+        dict[set['opt_name']] = set['opt_value'];
+    }
+
+    res.send(dict);
+});
+
+router.post('/', async (req, res, next) => {
+    body = req.body;
+
+    if (ALLOWED_OPTIONS.includes(body['name'])) {
+        const optionName = await sql.getOption(body['name']);
+
+        await sql.beginTransaction();
+
+        await sql.addAudit(audit_category.SETTINGS, req, null, optionName, body['value'], body['name']);
+
+        await sql.setOption(body['name'], body['value']);
+
+        await sql.commit();
+
+        res.send({});
+    }
+    else {
+        res.send("not allowed option to set");
+    }
+});
+
+module.exports = router;