Deleting a Post (Authorized)

Lecture 328:- Deleting a Post (Authorized)

To delete a post, we first need to ensure that only the authorized user can delete their own post. We can do this by checking if the logged-in user is the same as the author of the post. Once we've confirmed this, we can delete the post from the database using Mongoose's findOneAndDelete method.

Here's an example code snippet that demonstrates how to delete a post:

javascriptCopy code

// import the Post model const Post = require('../models/Post'); // delete a post by id const deletePost = async (req, res) => {  const postId = req.params.id;  try {    // find the post by id    const post = await Post.findOne({ _id: postId });    // check if the post exists    if (!post) {      return res.status(404).json({ message: 'Post not found' });    }    // check if the logged-in user is the author of the post    if (post.author.toString() !== req.user.id) {      return res.status(401).json({ message: 'Unauthorized' });    }    // delete the post    await Post.findOneAndDelete({ _id: postId });    res.status(200).json({ message: 'Post deleted successfully' });  } catch (err) {    console.error(err);    res.status(500).json({ message: 'Server Error' });  } };

In this example, we first extract the post ID from the request parameters (req.params.id). We then use Mongoose's findOne method to find the post in the database. If the post does not exist, we return a 404 response. If the logged-in user is not the author of the post, we return a 401 response. Otherwise, we use Mongoose's findOneAndDelete method to delete the post from the database. Finally, we return a 200 response to indicate that the post was deleted successfully.