UnknownSec Bypass 403

: /var/www/stp-bhaktisagar-backend/src/routes/ [ drwxrwxr-x ]
name : api.routes.js const express = require("express"); const apiController = require("../controllers/api.controller"); const router = express.Router(); const checkAuth = require("../middleware/check-auth"); const multer = require("multer"); const path = require("path"); const fs = require("fs"); const storage = multer.diskStorage({ destination: (req, file, cb) => { // console.log('d',file) cb(null, path.resolve("public/images")); }, filename: (req, file, cb) => { // console.log(file) // var filetype = ""; // if (file.mimetype === "image/gif") { // filetype = "gif"; // } // if (file.mimetype === "image/png") { // filetype = "png"; // } // if (file.mimetype === "image/jpeg") { // filetype = "jpg"; // } // cb(null, 'image-' + Date.now() + '.' + filetype); // fs.promises.exists(path.resolve("public/images", file.originalname)); cb( null, path.parse(file.originalname).name + "-" + Date.now() + path.extname(file.originalname) ); }, }); const upload = multer({ storage: storage }); router .route("/video") .get(apiController.getVideo) .post(checkAuth(), apiController.addVideo); router .route("/video/:id") .get(apiController.getVideoDetail) .delete(checkAuth(), apiController.deleteVideo); router .route("/audio") .get(apiController.getAudio) .post(checkAuth(), apiController.addAudio); router .route("/audio/:id") .get(apiController.getAudioDetail) .delete(checkAuth(), apiController.deleteAudio); router .route("/playlist") .get(apiController.getPlaylist) .post(checkAuth(), apiController.addPlaylist); router .route("/playlist/:id") .get(apiController.getPlaylistDetail) .delete(checkAuth(), apiController.deletePlaylist); router .route("/collections") .get(apiController.getCollections) .post(checkAuth(), apiController.addCollection); router .route("/collection/:id") .get(apiController.getCollectionDetail) .delete(checkAuth(), apiController.deleteCollection); router .route("/metadata/:code") .get(apiController.getMetadata) .post(checkAuth(), apiController.addMetadata); router.route("/all-audio").get(apiController.getAllAudio); router.route("/all-video").get(apiController.getAllVideo); router.route("/images").get(apiController.getImages); router.route("/images/:name").delete(apiController.deleteImage); router .route("/upload-image") .post(upload.single("image"), apiController.uploadImage); router .route("/events") .get(apiController.getEvents) .post(checkAuth(), apiController.addEvent); router .route("/event/:id") .get(apiController.getEventDetail) .delete(checkAuth(), apiController.deleteEvent); router .route("/event/send-notification/:id") .get(checkAuth(), apiController.sendEventNotification); router .route("/book") .get(apiController.getBook) .post(checkAuth(), apiController.addBook); router .route("/book/:id") .get(apiController.getBookDetail) .delete(checkAuth(), apiController.deleteBook); router .route("/book-category") .get(apiController.getBookCategory) .post(checkAuth(), apiController.addBookCategory); router .route("/book-category/:id") .get(apiController.getBookCategoryDetail) .delete(checkAuth(), apiController.deleteBookCategory); router .route("/book-collections") .get(apiController.getBookCollections) .post(checkAuth(), apiController.addBookCollection); router .route("/book-collection/:id") .get(apiController.getBookCollectionDetail) .delete(checkAuth(), apiController.deleteBookCollection); router.route("/all-books").get(apiController.getAllBook); router.route("/send-notification-zenithentcare").post(apiController.sendNotificationZenithentcare); module.exports = router;