include author in posts and exclude password with typesafe function

src/api/posts/index.ts

@@ -1,10 +1,10 @@
-import postsRoute from './posts';
+import getPosts from './posts';
-import createPost from './new';
+import postPost from './new';
 import { Router } from 'express';
 
 const posts = Router();
 
-posts.get('/', postsRoute);
+posts.get('/', getPosts);
-posts.post('/new', createPost);
+posts.post('/new', postPost);
 
 export default posts;

src/api/posts/new.ts

@@ -5,6 +5,7 @@ import { Request, Response } from 'express';
 
 export default async (req: Request, res: Response) => {
   try {
+    req.body.authorId = 1; // hardcoded for now, use userId from token
     const post: Post = Post.parse(req.body);
     const newPost: PrismaPost = await createPost(post);
 

src/api/posts/posts.ts

@@ -6,8 +6,8 @@ const posts = Router();
 
 posts.get('/', async (req, res) => {
   try {
-    const postList: Post[] = await getAllPosts();
+    const postsList: Post[] = await getAllPosts();
-    return res.status(200).send(postList);
+    return res.status(200).send(postsList);
   } catch (error) {
     res.status(500).send(error);
   }

src/controller/PostController.ts

@@ -1,11 +1,28 @@
-import { PrismaClient } from '@prisma/client';
+import { PrismaClient, Post as PrismaPost } from '@prisma/client';
 import { Post } from '@/models/PostModel';
 
 const prisma = new PrismaClient();
 
-const getAllPosts = () => prisma.post.findMany();
+function exclude<User, Key extends keyof User>(user: User, ...keys: Key[]): User {
+  for (let key of keys) {
+    delete user[key];
+  }
+  return user;
+}
 
-const createPost = async (post: Post) => {
+const getAllPosts = async (): Promise<PrismaPost[]> => {
+  const posts = prisma.post.findMany({
+    include: {
+      author: true,
+    },
+  });
+  return (await posts).map((post) => {
+    post.author = exclude(post.author, 'password');
+    return post;
+  });
+};
+
+const createPost = async (post: Post): Promise<PrismaPost> => {
   const newPost = await prisma.post.create({
     data: {
       title: post.title,