Notes/src/routes/api/options.js

"use strict";

const sql = require('../../services/sql');
const options = require('../../services/options');

// options allowed to be updated directly in options dialog
const ALLOWED_OPTIONS = ['protected_session_timeout', 'note_revision_snapshot_time_interval'];

async function getOptions() {
    const options = await sql.getMap("SELECT name, value FROM options WHERE name IN ("
        + ALLOWED_OPTIONS.map(x => '?').join(",") + ")", ALLOWED_OPTIONS);

    return options;
}

async function updateOption(req) {
    const {name, value} = req.params;

    if (!ALLOWED_OPTIONS.includes(name)) {
        return [400, "not allowed option to set"];
    }

    await options.setOption(name, value);
}

module.exports = {
    getOptions,
    updateOption
};