feat:menambahkan fitur superadmin

database.sql

@@ -10,6 +10,7 @@ CREATE TABLE IF NOT EXISTS users (
   email VARCHAR(160) NOT NULL UNIQUE,
   whatsapp VARCHAR(30) NOT NULL,
   password_hash VARCHAR(255) NOT NULL,
+  role ENUM('user', 'superadmin') NOT NULL DEFAULT 'user',
   created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
 );
 

server/server.js

@@ -58,7 +58,8 @@ function publicUser(user) {
     id: user.id,
     name: user.name,
     email: user.email,
-    whatsapp: user.whatsapp
+    whatsapp: user.whatsapp,
+    role: user.role || "user"
   }
 }
 
@@ -116,7 +117,7 @@ app.post("/api/auth/register", async (req, res, next) => {
       [name, email.toLowerCase(), whatsapp, passwordHash]
     )
 
-    const user = { id: result.insertId, name, email: email.toLowerCase(), whatsapp }
+    const user = { id: result.insertId, name, email: email.toLowerCase(), whatsapp, role: "user" }
     res.status(201).json({ token: signUser(user), user: publicUser(user) })
   } catch (error) {
     if (error.code === "ER_DUP_ENTRY") {
@@ -152,7 +153,7 @@ app.post("/api/auth/login", async (req, res, next) => {
 
 app.get("/api/auth/me", auth, async (req, res, next) => {
   try {
-    const [rows] = await pool.query("SELECT id, name, email, whatsapp FROM users WHERE id = ?", [req.user.id])
+    const [rows] = await pool.query("SELECT id, name, email, whatsapp, role FROM users WHERE id = ?", [req.user.id])
     if (!rows[0]) {
       res.status(404).json({ message: "User tidak ditemukan." })
       return
@@ -261,6 +262,28 @@ app.delete("/api/products/:id", auth, async (req, res, next) => {
   }
 })
 
+app.delete("/api/admin/products/:id", auth, superadminOnly, async (req, res, next) => {
+  try {
+    const product = await findProductById(req.params.id)
+
+    if (!product) {
+      res.status(404).json({ message: "Produk tidak ditemukan." })
+      return
+    }
+
+    await pool.query("DELETE FROM products WHERE id = ?", [req.params.id])
+
+    if (product.image.startsWith("/uploads/")) {
+      fs.rm(path.join(uploadsDir, path.basename(product.image)), { force: true }, () => {})
+    }
+
+    res.json({ message: "Produk berhasil dihapus oleh superadmin." })
+  } catch (error) {
+    next(error)
+  }
+})
+
+
 app.use((error, req, res, next) => {
   if (error instanceof multer.MulterError) {
     res.status(400).json({ message: "Upload gagal. Ukuran foto maksimal 3MB." })
@@ -279,3 +302,22 @@ app.use((error, req, res, next) => {
 app.listen(port, () => {
   console.log(`SecondTech API berjalan di http://localhost:${port}`)
 })
+
+
+async function superadminOnly(req, res, next) {
+  try {
+    const [rows] = await pool.query(
+      "SELECT role FROM users WHERE id = ?",
+      [req.user.id]
+    )
+
+    if (!rows[0] || rows[0].role !== "superadmin") {
+      res.status(403).json({ message: "Hanya superadmin yang boleh mengakses fitur ini." })
+      return
+    }
+
+    next()
+  } catch (error) {
+    next(error)
+  }
+}

src/components/DashboardSidebar.vue

@@ -1,8 +1,25 @@
 <template>
   <aside class="card p-4">
     <div class="mb-6">
-      <p class="text-xs font-bold uppercase tracking-wider text-slate-500">Menu User</p>
+      <p class="text-xs font-bold uppercase tracking-wider text-slate-500">
+        Menu User
+      </p>
       <h2 class="mt-1 text-lg font-extrabold">Dashboard</h2>
+
+      <div v-if="currentUser" class="mt-4 rounded-xl bg-slate-50 p-3">
+        <p class="text-sm font-bold text-slate-800">
+          {{ currentUser.name }}
+        </p>
+        <p class="mt-1 text-xs text-slate-500">
+          {{ currentUser.email }}
+        </p>
+        <p
+          v-if="isSuperadmin"
+          class="mt-2 inline-flex rounded-full bg-red-50 px-3 py-1 text-xs font-bold text-red-700"
+        >
+          Superadmin
+        </p>
+      </div>
     </div>
 
     <nav class="grid gap-2">
@@ -10,18 +27,31 @@
         <LayoutDashboard size="18" />
         Barang Saya
       </RouterLink>
+
       <RouterLink class="side-link" to="/jual">
         <PlusCircle size="18" />
         Jual Barang
       </RouterLink>
+
       <RouterLink class="side-link" to="/marketplace">
         <Store size="18" />
         Marketplace
       </RouterLink>
+
       <RouterLink class="side-link" to="/tersimpan">
         <Heart size="18" />
         Barang Tersimpan
       </RouterLink>
+
+      <RouterLink
+        v-if="isSuperadmin"
+        class="side-link admin-link"
+        to="/admin/products"
+      >
+        <ShieldCheck size="18" />
+        Admin Marketplace
+      </RouterLink>
+
       <button class="side-link text-left" type="button" @click="logout">
         <LogOut size="18" />
         Logout
@@ -31,22 +61,66 @@
 </template>
 
 <script setup>
-import { useRouter } from "vue-router"
-import { Heart, LayoutDashboard, LogOut, PlusCircle, Store } from "lucide-vue-next"
-import { clearAuth } from "../utils"
+import { computed, onMounted, ref, watch } from "vue"
+import { useRoute, useRouter } from "vue-router"
+import {
+  Heart,
+  LayoutDashboard,
+  LogOut,
+  PlusCircle,
+  ShieldCheck,
+  Store
+} from "lucide-vue-next"
+import { clearAuth, fetchCurrentUser, getCurrentUser, getToken, setAuth } from "../utils"
 
 const router = useRouter()
+const route = useRoute()
+const currentUser = ref(getCurrentUser())
+
+const isSuperadmin = computed(() => {
+  return currentUser.value?.role === "superadmin"
+})
+
+watch(
+  () => route.fullPath,
+  () => {
+    currentUser.value = getCurrentUser()
+  }
+)
+
+async function refreshCurrentUser() {
+  if (!getToken()) return
+
+  try {
+    const data = await fetchCurrentUser()
+    setAuth({
+      token: getToken(),
+      user: data.user
+    })
+    currentUser.value = getCurrentUser()
+  } catch {
+    clearAuth()
+    currentUser.value = null
+  }
+}
 
 function logout() {
   clearAuth()
   router.push("/login")
 }
+
+onMounted(refreshCurrentUser)
 </script>
 
 <style scoped>
 .side-link {
   @apply flex w-full items-center gap-3 rounded-xl px-3 py-3 text-sm font-semibold text-slate-700 transition hover:bg-slate-100;
 }
+
+.admin-link {
+  @apply bg-red-50 text-red-700 hover:bg-red-100;
+}
+
 .router-link-active {
   @apply bg-brand-50 text-brand-700;
 }

src/components/Navbar.vue

@@ -2,12 +2,8 @@
   <header class="sticky top-0 z-50 border-b border-slate-200 bg-white/90 backdrop-blur">
     <div class="container-page flex h-16 items-center justify-between">
       <RouterLink to="/" class="flex items-center gap-2">
-        <div class="flex items-center justify-center">
-          <img 
-            src="/round-logo-sija.png" 
-            alt="SecondTech Logo" 
-            class="h-10 w-10 object-contain"
-          />
+        <div class="flex h-9 w-9 items-center justify-center rounded-xl bg-brand-600 text-white">
+          <Cpu size="20" />
         </div>
         <span class="text-lg font-extrabold tracking-tight">SecondTech</span>
       </RouterLink>
@@ -18,16 +14,41 @@
         <RouterLink class="nav-link" to="/jual">Jual Barang</RouterLink>
         <RouterLink class="nav-link" to="/dashboard">Dashboard</RouterLink>
         <RouterLink class="nav-link" to="/tersimpan">Tersimpan</RouterLink>
+
+        <RouterLink
+          v-if="isSuperadmin"
+          class="nav-link"
+          to="/admin/products"
+        >
+          Admin Marketplace
+        </RouterLink>
       </nav>
 
       <div class="hidden items-center gap-3 md:flex">
         <template v-if="currentUser">
-          <span class="text-sm font-bold text-slate-700">{{ currentUser.name }}</span>
-          <button class="btn-secondary !px-4 !py-2" @click="logout">Logout</button>
+          <span class="text-sm font-bold text-slate-700">
+            {{ currentUser.name }}
+          </span>
+
+          <span
+            v-if="isSuperadmin"
+            class="rounded-full bg-red-50 px-3 py-1 text-xs font-bold text-red-700"
+          >
+            Superadmin
+          </span>
+
+          <button class="btn-secondary !px-4 !py-2" @click="logout">
+            Logout
+          </button>
         </template>
+
         <template v-else>
-          <RouterLink to="/login" class="btn-secondary !px-4 !py-2">Login</RouterLink>
-          <RouterLink to="/register" class="btn-primary !px-4 !py-2">Register</RouterLink>
+          <RouterLink to="/login" class="btn-secondary !px-4 !py-2">
+            Login
+          </RouterLink>
+          <RouterLink to="/register" class="btn-primary !px-4 !py-2">
+            Register
+          </RouterLink>
         </template>
       </div>
 
@@ -43,12 +64,37 @@
         <RouterLink class="mobile-link" to="/jual" @click="open = false">Jual Barang</RouterLink>
         <RouterLink class="mobile-link" to="/dashboard" @click="open = false">Dashboard</RouterLink>
         <RouterLink class="mobile-link" to="/tersimpan" @click="open = false">Tersimpan</RouterLink>
+
+        <RouterLink
+          v-if="isSuperadmin"
+          class="mobile-link"
+          to="/admin/products"
+          @click="open = false"
+        >
+          Admin Marketplace
+        </RouterLink>
+
         <div v-if="currentUser" class="mt-2 grid gap-2">
-          <button class="btn-secondary !py-2 text-center" @click="logout">Logout</button>
+          <div class="rounded-xl bg-slate-50 px-3 py-2">
+            <p class="text-sm font-bold text-slate-800">{{ currentUser.name }}</p>
+            <p class="text-xs text-slate-500">{{ currentUser.email }}</p>
+            <p v-if="isSuperadmin" class="mt-1 text-xs font-bold text-red-700">
+              Superadmin
+            </p>
           </div>
+
+          <button class="btn-secondary !py-2 text-center" @click="logout">
+            Logout
+          </button>
+        </div>
+
         <div v-else class="mt-2 grid grid-cols-2 gap-2">
-          <RouterLink to="/login" class="btn-secondary !py-2 text-center" @click="open=false">Login</RouterLink>
-          <RouterLink to="/register" class="btn-primary !py-2 text-center" @click="open=false">Register</RouterLink>
+          <RouterLink to="/login" class="btn-secondary !py-2 text-center" @click="open = false">
+            Login
+          </RouterLink>
+          <RouterLink to="/register" class="btn-primary !py-2 text-center" @click="open = false">
+            Register
+          </RouterLink>
         </div>
       </div>
     </div>
@@ -56,16 +102,20 @@
 </template>
 
 <script setup>
-import { ref, watch } from "vue"
+import { computed, onMounted, ref, watch } from "vue"
 import { useRoute, useRouter } from "vue-router"
 import { Cpu, Menu } from "lucide-vue-next"
-import { clearAuth, getCurrentUser } from "../utils"
+import { clearAuth, fetchCurrentUser, getCurrentUser, getToken, setAuth } from "../utils"
 
 const open = ref(false)
 const route = useRoute()
 const router = useRouter()
 const currentUser = ref(getCurrentUser())
 
+const isSuperadmin = computed(() => {
+  return currentUser.value?.role === "superadmin"
+})
+
 watch(
   () => route.fullPath,
   () => {
@@ -73,21 +123,41 @@ watch(
   }
 )
 
+async function refreshCurrentUser() {
+  if (!getToken()) return
+
+  try {
+    const data = await fetchCurrentUser()
+    setAuth({
+      token: getToken(),
+      user: data.user
+    })
+    currentUser.value = getCurrentUser()
+  } catch {
+    clearAuth()
+    currentUser.value = null
+  }
+}
+
 function logout() {
   clearAuth()
   currentUser.value = null
   open.value = false
   router.push("/login")
 }
+
+onMounted(refreshCurrentUser)
 </script>
 
 <style scoped>
 .nav-link {
   @apply text-sm font-semibold text-slate-600 transition hover:text-brand-700;
 }
+
 .router-link-active {
   @apply text-brand-700;
 }
+
 .mobile-link {
   @apply rounded-xl px-3 py-2 text-sm font-semibold text-slate-700 hover:bg-slate-100;
 }

src/router/index.js

@@ -8,7 +8,8 @@ import DashboardView from "../views/DashboardView.vue"
 import SavedView from "../views/SavedView.vue"
 import LoginView from "../views/LoginView.vue"
 import RegisterView from "../views/RegisterView.vue"
-import { getToken } from "../utils"
+import AdminProductsView from "../views/AdminProductsView.vue"
+import { getCurrentUser, getToken } from "../utils"
 
 const routes = [
   { path: "/", name: "home", component: HomeView },
@@ -17,6 +18,12 @@ const routes = [
   { path: "/jual", name: "sell-product", component: SellProductView, meta: { requiresAuth: true } },
   { path: "/dashboard", name: "dashboard", component: DashboardView, meta: { requiresAuth: true } },
   { path: "/tersimpan", name: "saved", component: SavedView, meta: { requiresAuth: true } },
+  {
+    path: "/admin/products",
+    name: "admin-products",
+    component: AdminProductsView,
+    meta: { requiresAuth: true, requiresSuperadmin: true }
+  },
   { path: "/login", name: "login", component: LoginView },
   { path: "/register", name: "register", component: RegisterView }
 ]
@@ -30,6 +37,12 @@ router.beforeEach((to) => {
   if (to.meta.requiresAuth && !getToken()) {
     return "/login"
   }
+
+  const user = getCurrentUser()
+
+  if (to.meta.requiresSuperadmin && user?.role !== "superadmin") {
+    return "/dashboard"
+  }
 })
 
 export default router

src/utils.js

@@ -31,7 +31,14 @@ export function getCurrentUser() {
 
 export function setAuth({ token, user }) {
   localStorage.setItem("secondtech_token", token)
-  setLocal("secondtech_user", user)
+
+  setLocal("secondtech_user", {
+    id: user.id,
+    name: user.name,
+    email: user.email,
+    whatsapp: user.whatsapp,
+    role: user.role || "user"
+  })
 }
 
 export function clearAuth() {
@@ -56,6 +63,7 @@ async function requestJson(path, options = {}) {
     ...options,
     headers
   })
+
   const data = await response.json().catch(() => ({}))
 
   if (!response.ok) {
@@ -79,6 +87,10 @@ export function loginUser(payload) {
   })
 }
 
+export function fetchCurrentUser() {
+  return requestJson("/api/auth/me")
+}
+
 export function fetchProducts() {
   return requestJson("/api/products")
 }
@@ -111,6 +123,12 @@ export function deleteProductById(id) {
   })
 }
 
+export function deleteProductAsAdmin(id) {
+  return requestJson(`/api/admin/products/${id}`, {
+    method: "DELETE"
+  })
+}
+
 export function getSavedProducts() {
   return getLocal("secondtech_saved", [])
 }

src/views/AdminProductsView.vue

@@ -0,0 +1,113 @@
+<template>
+  <section class="container-page py-10">
+    <div class="mb-8">
+      <h1 class="text-3xl font-extrabold">Admin Marketplace</h1>
+      <p class="mt-2 text-slate-600">Kelola semua produk yang tampil di marketplace.</p>
+    </div>
+
+    <p v-if="errorMessage" class="mb-5 rounded-xl bg-red-50 px-4 py-3 text-sm font-semibold text-red-700">
+      {{ errorMessage }}
+    </p>
+
+    <div v-if="loading" class="card p-10 text-center">
+      <h2 class="text-xl font-extrabold">Memuat produk...</h2>
+    </div>
+
+    <div v-else-if="products.length" class="grid gap-4">
+      <div
+        v-for="product in products"
+        :key="product.id"
+        class="card grid gap-4 p-4 md:grid-cols-[140px_1fr_auto] md:items-center"
+      >
+        <img
+          :src="getProductImageUrl(product.image)"
+          :alt="product.title"
+          class="aspect-[4/3] w-full rounded-xl object-cover md:w-36"
+        />
+
+        <div>
+          <div class="flex flex-wrap items-center gap-2">
+            <span class="rounded-full bg-brand-50 px-3 py-1 text-xs font-bold text-brand-700">
+              {{ product.category }}
+            </span>
+            <span class="rounded-full bg-emerald-50 px-3 py-1 text-xs font-bold text-emerald-700">
+              {{ product.status }}
+            </span>
+          </div>
+
+          <h3 class="mt-3 font-extrabold">{{ product.title }}</h3>
+          <p class="mt-1 text-sm text-slate-500">
+            {{ product.seller }} • {{ product.location }} • {{ product.condition }}
+          </p>
+          <p class="mt-2 font-extrabold text-brand-700">
+            {{ formatRupiah(product.price) }}
+          </p>
+        </div>
+
+        <div class="flex flex-wrap gap-2 md:flex-col">
+          <RouterLink :to="`/produk/${product.id}`" class="btn-secondary !px-3 !py-2">
+            Detail
+          </RouterLink>
+          <button
+            class="rounded-xl bg-red-50 px-3 py-2 text-sm font-bold text-red-700 hover:bg-red-100"
+            @click="deleteAsAdmin(product.id)"
+          >
+            Hapus
+          </button>
+        </div>
+      </div>
+    </div>
+
+    <div v-else class="card p-10 text-center">
+      <h2 class="text-xl font-extrabold">Belum ada produk</h2>
+    </div>
+  </section>
+</template>
+
+<script setup>
+import { onMounted, ref } from "vue"
+import { API_BASE_URL, fetchProducts, formatRupiah, getProductImageUrl, getToken } from "../utils"
+
+const products = ref([])
+const loading = ref(true)
+const errorMessage = ref("")
+
+async function loadProducts() {
+  loading.value = true
+  errorMessage.value = ""
+
+  try {
+    const data = await fetchProducts()
+    products.value = data.products
+  } catch (error) {
+    errorMessage.value = error.message
+  } finally {
+    loading.value = false
+  }
+}
+
+async function deleteAsAdmin(id) {
+  if (!confirm("Yakin ingin menghapus produk ini dari marketplace?")) return
+
+  try {
+    const response = await fetch(`${API_BASE_URL}/api/admin/products/${id}`, {
+      method: "DELETE",
+      headers: {
+        Authorization: `Bearer ${getToken()}`
+      }
+    })
+
+    const data = await response.json().catch(() => ({}))
+
+    if (!response.ok) {
+      throw new Error(data.message || "Gagal menghapus produk.")
+    }
+
+    products.value = products.value.filter((product) => product.id !== id)
+  } catch (error) {
+    errorMessage.value = error.message
+  }
+}
+
+onMounted(loadProducts)
+</script>

src/views/HomeView.vue

@@ -6,10 +6,10 @@
           Marketplace Barang Bekas Teknologi
         </span>
         <h1 class="mt-6 text-4xl font-extrabold tracking-tight text-slate-950 sm:text-5xl lg:text-6xl">
-          Jual beli perangkat Teknologi bekas.
+          Jual beli perangkat IT bekas jadi lebih mudah.
         </h1>
         <p class="mt-6 max-w-xl text-lg leading-8 text-slate-600">
-          Temukan laptop bekas, PC, monitor, keyboard, router, switch, access point, dan server bekas untuk berbagai kebutuhan.
+          Temukan laptop bekas, PC, monitor, keyboard, router, switch, access point, dan server bekas untuk kebutuhan belajar SIJA/TKJ.
         </p>
         <div class="mt-8 flex flex-wrap gap-3">
           <RouterLink to="/jual" class="btn-primary">Jual Barang Sekarang</RouterLink>

src/views/LoginView.vue

@@ -1,8 +1,8 @@
 <template>
   <section class="container-page grid min-h-[70vh] place-items-center py-10">
     <div class="card w-full max-w-md p-6">
-      <h1 class="text-2xl font-extrabold">Selamat Datang Kembali!</h1>
-      <p class="mt-2 text-sm text-slate-600">Masuk dan lanjutkan jualanmu.</p>
+      <h1 class="text-2xl font-extrabold">Login</h1>
+      <p class="mt-2 text-sm text-slate-600">Masuk untuk mengelola barang jualanmu.</p>
 
       <form class="mt-6 grid gap-4" @submit.prevent="login">
         <p v-if="errorMessage" class="rounded-xl bg-red-50 px-4 py-3 text-sm font-semibold text-red-700">
@@ -17,10 +17,6 @@
           <input v-model="password" type="password" class="input mt-2" placeholder="••••••••" required />
         </div>
         <button class="btn-primary w-full" :disabled="loading">
-            <svg v-if="loading" class="mr-3 h-5 w-5 animate-spin" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24">
-              <circle class="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" stroke-width="4"></circle>
-              <path class="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4zm2 5.291A7.962 7.962 0 014 12H0c0 3.042 1.135 5.824 3 7.938l3-2.647z"></path>
-            </svg>
           {{ loading ? "Memproses..." : "Masuk" }}
         </button>
       </form>

src/views/ProductDetailView.vue

@@ -45,7 +45,7 @@
         </div>
 
         <div class="mt-8 flex flex-wrap gap-3">
-          <a :href="waLink" target="_blank" class="btn-WA">Hubungi via WhatsApp</a>
+          <a :href="waLink" target="_blank" class="btn-primary">Hubungi via WhatsApp</a>
           <button class="btn-secondary" @click="toggleSave">
             {{ saved ? "Hapus dari Tersimpan" : "Simpan Barang" }}
           </button>

src/views/RegisterView.vue

@@ -25,10 +25,6 @@
           <input v-model="form.password" type="password" class="input mt-2" placeholder="••••••••" required />
         </div>
         <button class="btn-primary w-full" :disabled="loading">
-            <svg v-if="loading" class="mr-3 h-5 w-5 animate-spin" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24">
-              <circle class="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" stroke-width="4"></circle>
-                <path class="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4zm2 5.291A7.962 7.962 0 014 12H0c0 3.042 1.135 5.824 3 7.938l3-2.647z"></path>
-             </svg>
           {{ loading ? "Memproses..." : "Daftar" }}
         </button>
       </form>