9.7.인증구현-접근제어

main.js

@@ -70,6 +70,10 @@ var app = http.createServer(function (request, response) {
       });
     }
   } else if (pathname === '/create') {
+    if(authIsOwner(request, response) === false){
+      response.end('Login required!!');
+      return false;
+    }
     fs.readdir('./data', function (error, filelist) {
       var title = 'WEB - create';
       var list = template.list(filelist);
@@ -88,6 +92,10 @@ var app = http.createServer(function (request, response) {
       response.end(html);
     });
   } else if (pathname === '/create_process') {
+    if(authIsOwner(request, response) === false){
+      response.end('Login required!!');
+      return false;
+    }
     var body = '';
     request.on('data', function (data) {
       body = body + data;
@@ -104,6 +112,10 @@ var app = http.createServer(function (request, response) {
       })
     });
   } else if (pathname === '/update') {
+    if(authIsOwner(request, response) === false){
+      response.end('Login required!!');
+      return false;
+    }
     fs.readdir('./data', function (error, filelist) {
       var filteredId = path.parse(queryData.id).base;
       fs.readFile(`data/${filteredId}`, 'utf8', function (err, description) {
@@ -130,6 +142,10 @@ var app = http.createServer(function (request, response) {
       });
     });
   } else if (pathname === '/update_process') {
+    if(authIsOwner(request, response) === false){
+      response.end('Login required!!');
+      return false;
+    }
     var body = '';
     request.on('data', function (data) {
       body = body + data;
@@ -149,6 +165,10 @@ var app = http.createServer(function (request, response) {
       });
     });
   } else if (pathname === '/delete_process') {
+    if(authIsOwner(request, response) === false){
+      response.end('Login required!!');
+      return false;
+    }
     var body = '';
     request.on('data', function (data) {
       body = body + data;
@@ -196,10 +216,16 @@ var app = http.createServer(function (request, response) {
           ],
           Location: `/`
         });
+        response.end();
+      } else {
+        response.end('Who?');
       }
-      response.end();
     });
   } else if (pathname === '/logout_process') {
+    if(authIsOwner(request, response) === false){
+      response.end('Login required!!');
+      return false;
+    }
     var body = '';
     request.on('data', function (data) {
       body = body + data;