v1.1: Add CIDR subnet filtering and Agent filter in Devices page

backend/routes/dashboard/blacklist.js

@@ -0,0 +1,99 @@
+const express = require('express');
+const router  = express.Router();
+const { BlacklistRule } = require('../../models/Schemas');
+const { getBaseFilter } = require('./helpers');
+
+// GET /api/dashboard/blacklist
+router.get('/blacklist', async (req, res) => {
+  try {
+    const filter = getBaseFilter(req);
+    const site_uuid = filter.site_uuid;
+    if (!site_uuid) {
+      return res.status(400).json({ error: 'Site UUID is required' });
+    }
+
+    const query = { site_uuid };
+    if (filter.agent_uuid) {
+      query.agent_uuid = filter.agent_uuid;
+    }
+
+    const rules = await BlacklistRule.find(query).sort({ created_at: -1 }).lean();
+    return res.json({ ok: true, data: rules });
+  } catch (err) {
+    console.error('[Blacklist GET] Error:', err.message);
+    return res.status(500).json({ error: 'Internal server error' });
+  }
+});
+
+// POST /api/dashboard/blacklist
+router.post('/blacklist', async (req, res) => {
+  try {
+    if (req.user?.role !== 'AGENT_VIEWER') {
+      return res.status(403).json({ error: 'Only Network Agents (or Admins in View As mode) can modify blacklist rules.' });
+    }
+    const filter = getBaseFilter(req);
+    const site_uuid = filter.site_uuid;
+    const agent_uuid = filter.agent_uuid;
+    if (!site_uuid) {
+      return res.status(400).json({ error: 'Site UUID is required' });
+    }
+    if (!agent_uuid) {
+      return res.status(400).json({ error: 'Agent UUID is required' });
+    }
+
+    const { type, value } = req.body;
+    if (!type || !value) {
+      return res.status(400).json({ error: 'Type and value are required' });
+    }
+
+    if (!['category', 'domain'].includes(type)) {
+      return res.status(400).json({ error: 'Invalid blacklist type' });
+    }
+
+    // Upsert or create rule isolated per agent
+    const rule = await BlacklistRule.findOneAndUpdate(
+      { site_uuid, agent_uuid, type, value: value.trim() },
+      { site_uuid, agent_uuid, type, value: value.trim(), is_active: true },
+      { upsert: true, new: true }
+    );
+
+    return res.json({ ok: true, data: rule });
+  } catch (err) {
+    console.error('[Blacklist POST] Error:', err.message);
+    if (err.code === 11000) {
+      return res.status(400).json({ error: 'Rule already exists' });
+    }
+    return res.status(500).json({ error: 'Internal server error' });
+  }
+});
+
+// DELETE /api/dashboard/blacklist/:id
+router.delete('/blacklist/:id', async (req, res) => {
+  try {
+    if (req.user?.role !== 'AGENT_VIEWER') {
+      return res.status(403).json({ error: 'Only Network Agents (or Admins in View As mode) can modify blacklist rules.' });
+    }
+    const filter = getBaseFilter(req);
+    const site_uuid = filter.site_uuid;
+    const agent_uuid = filter.agent_uuid;
+    if (!site_uuid) {
+      return res.status(400).json({ error: 'Site UUID is required' });
+    }
+    if (!agent_uuid) {
+      return res.status(400).json({ error: 'Agent UUID is required' });
+    }
+
+    const ruleId = req.params.id;
+    const result = await BlacklistRule.deleteOne({ _id: ruleId, site_uuid, agent_uuid });
+    if (result.deletedCount === 0) {
+      return res.status(404).json({ error: 'Blacklist rule not found' });
+    }
+
+    return res.json({ ok: true, message: 'Blacklist rule deleted' });
+  } catch (err) {
+    console.error('[Blacklist DELETE] Error:', err.message);
+    return res.status(500).json({ error: 'Internal server error' });
+  }
+});
+
+module.exports = router;