Function httpPost

cloud-sql/sqlserver/mssql/index.js:186–227

(req, res)

// Handle incoming vote requests and inserting them into the database.
const httpPost = async (req, res) => {
  const {team} = req.body;
  const timestamp = new Date();

  if (!team || (team !== 'TABS' && team !== 'SPACES')) {
    return res.status(400).send('Invalid team specified.').end();
  }

  // [START cloud_sql_sqlserver_mssql_connection]
  try {
    const stmt =
      'INSERT INTO votes (time_cast, candidate) VALUES (@timestamp, @team)';
    // Using a prepared statement protects against SQL injection attacks.
    // When prepare is called, a single connection is acquired from the connection pool
    // and all subsequent executions are executed exclusively on this connection.
    const ps = new mssql.PreparedStatement(pool);
    ps.input('timestamp', mssql.DateTime);
    ps.input('team', mssql.VarChar(6));
    await ps.prepare(stmt);
    await ps.execute({
      timestamp: timestamp,
      team: team,
    });
    await ps.unprepare();
  } catch (err) {
    // If something goes wrong, handle the error in this section. This might
    // involve retrying or adjusting parameters depending on the situation.
    // [START_EXCLUDE]

    logger.error(err);
    return res
      .status(500)
      .send(
        'Unable to successfully cast vote! Please check the application logs for more details.'
      )
      .end();
    // [END_EXCLUDE]
  }
  // [END cloud_sql_sqlserver_mssql_connection]

  res.status(200).send(`Successfully voted for ${team} at ${timestamp}`).end();
};

app.post('*', httpPost);