add PROMO server-side validation route

controllers/orders/index.js

@@ -1,4 +1,5 @@
 module.exports = require('./orders');
 module.exports.orderItems = require('./order-items');
 module.exports.notifications = require('./notifications');
-module.exports.deliveryServices = require('./delivery-services');
+module.exports.deliveryServices = require('./delivery-services');
+module.exports.promos = require('./promos');

controllers/orders/promos.js

@@ -0,0 +1,30 @@
+var db      = require('../../db');
+var errors  = require('../../errors');
+
+module.exports.validate = function(req, res) {
+  const promo_code = req.body.promo_code;
+  const order_id = req.params.oid;
+
+  var where = { promo_code };
+
+  db.promos.findOne( where, (err, result) => {
+
+    if( !result ) {
+      res.error( errors.promos.DOES_NOT_EXIST );
+      return;
+    }
+
+    var where = { promo_id: promo_code, order_id };
+
+    db.promos_applied.findOne( where, (err, result) => {
+
+      if( result ) {
+        res.error( errors.promos.ALREADY_APPLIED );
+        return;
+      }
+
+      res.sendStatus(200);
+    });
+
+  });
+};

errors.js

@@ -319,3 +319,25 @@ errors.notifications.NOT_AVAILABLE = {
 , name: 'NOT_AVAILABLE'
 , message: 'The requested notification is not available.'
 };
+
+/**
+ * Promo Errors
+ */
+
+errors.promos = { };
+
+ errors.promos.DOES_NOT_EXIST = {
+   type: 'promos'
+ , code: '0901'
+ , httpCode: '400'
+ , name: 'DOES_NOT_EXIST'
+ , message: 'The requested promo code does not exist.'
+ };
+
+errors.promos.ALREADY_APPLIED = {
+   type: 'promos'
+ , code: '0902'
+ , httpCode: '400'
+ , name: 'ALREADY_APPLIED'
+ , message: 'The requested promo code has already been applied to the order.'
+ };

routes/orders/index.js

@@ -316,3 +316,7 @@ route.get('/:oid/payment', m.getOrder2({
   deliveryService: true,
   restaurantDbModelFind: true
 }), m.restrict(['admin', 'order-owner']), m.view('order-payment', {}));
+
+route.post('/:oid/promo/validate'
+, m.restrict(['admin', 'order-owner'])
+, controllers.orders.promos.validate);