Notes/src/routes/api/options.js

"use strict";

const sql = require('../../services/sql');
const options = require('../../services/options');

// options allowed to be updated directly in options dialog
const ALLOWED_OPTIONS = ['protected_session_timeout', 'note_revision_snapshot_time_interval'];

async function getAllOptions() {
    return await sql.getMap("SELECT name, value FROM options");
}

async function getAllowedOptions() {
    const options = await sql.getMap("SELECT name, value FROM options WHERE name IN ("
        + ALLOWED_OPTIONS.map(x => '?').join(",") + ")", ALLOWED_OPTIONS);

    return options;
}

async function updateOption(req) {
    const body = req.body;

    if (!ALLOWED_OPTIONS.includes(body['name'])) {
        return [400, "not allowed option to set"];
    }

    await options.setOption(body['name'], body['value']);
}

module.exports = {
    getAllowedOptions,
    getAllOptions,
    updateOption
};