var express = require("express"), app = express(), bodyParser = require("body-parser"), methodOverride = require("method-override"), mongoose = require('mongoose'); var morgan = require('morgan'); var jwt = require('jsonwebtoken'); // used to create, sign, and verify tokens var config = require('./config'); // get our config file mongoose.Promise = global.Promise; // Connection to DB mongoose.connect(config.database, function(err, res) { if(err) throw err; console.log('Connected to Database'); }); app.set('superSecret', config.secret); // secret variable // Middlewares app.use(bodyParser.urlencoded({ extended: false })); app.use(bodyParser.json()); app.use(methodOverride()); // use morgan to log requests to the console app.use(morgan('dev')); // Import Models and controllers var userMdl = require('./models/userModel')(app, mongoose); var userCtrl = require('./controllers/userController'); var projectMdl = require('./models/projectModel')(app, mongoose); var projectCtrl = require('./controllers/projectController'); var intervalComprovations = require('./intervalComprovations'); intervalComprovations.lastConnectionUser(); /*// Example Route var router = express.Router(); router.get('/', function(req, res) { res.send("Hello world!"); }); app.use(router);*/ app.use(express.static(__dirname + '/webapp')); //CORS app.use(function(req, res, next) { res.header("Access-Control-Allow-Origin", "*"); res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS'); res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, X-Access-Token"); next(); }); // API routes ------------------------------------------------------ var apiRoutes = express.Router(); apiRoutes.route('/users') .post(userCtrl.addUser); apiRoutes.route('/auth') .post(userCtrl.login); // OJU AQUÏ TREC la verificació de token temporalment, per fer les proves des de l'app // route middleware to verify a token apiRoutes.use(function(req, res, next) { // check header or url parameters or post parameters for token var token = req.body.token || req.query.token || req.headers['x-access-token']; // decode token if (token) { // verifies secret and checks exp jwt.verify(token, app.get('superSecret'), function(err, decoded) { if (err) { return res.json({ success: false, message: 'Failed to authenticate token.' }); } else { // if everything is good, save to request for use in other routes req.decoded = decoded; //console.log("decoded " + decoded); next(); } }); } else { // if there is no token // return an error return res.status(201).send({ success: false, message: 'No token provided.' }); } }); //fi verificació de token apiRoutes.route('/logout') .post(userCtrl.logout); apiRoutes.route('/users') .get(userCtrl.findAllUsers); apiRoutes.route('/users/:id') .get(userCtrl.findById); apiRoutes.route('/users/loggeduser/:username') .get(userCtrl.findLoggedUserByUsername); apiRoutes.route('/projects/user/:username') .get(projectCtrl.findAllProjectsFromUsername); apiRoutes.route('/projects') .get(projectCtrl.findAllProjects); apiRoutes.route('/projects/:id') .get(projectCtrl.findById); apiRoutes.route('/users/:id') .put(userCtrl.updateUser) .delete(userCtrl.deleteUser); apiRoutes.route('/projects') .post(projectCtrl.addProject); apiRoutes.route('/projects/:id') .put(projectCtrl.updateProject) .delete(projectCtrl.deleteProject); apiRoutes.route('/projects/:id/adduser') .put(projectCtrl.addUserToProject); apiRoutes.route('/projects/:id/startworking') .put(projectCtrl.userStartWorking); apiRoutes.route('/projects/:id/stopworking') .put(projectCtrl.userStopWorking); app.use('/api', apiRoutes); // end of API routes ------------------------------------- // Start server app.listen(config.port, "localhost", function() { console.log("Node server running on http://localhost:3000"); });