1var express = require("express"),
  2    app = express(),
  3    bodyParser = require("body-parser"),
  4    methodOverride = require("method-override"),
  5    mongoose = require('mongoose');
  6
  7
  8var morgan = require('morgan');
  9var jwt = require('jsonwebtoken'); // used to create, sign, and verify tokens
 10var config = require('./config'); // get our config file
 11
 12mongoose.Promise = global.Promise;
 13// Connection to DB
 14mongoose.connect(config.database, function(err, res) {
 15    if (err) throw err;
 16    console.log('Connected to Database');
 17});
 18app.set('superSecret', config.secret); // secret variable
 19
 20// Middlewares
 21app.use(bodyParser.urlencoded({
 22    extended: false
 23}));
 24app.use(bodyParser.json());
 25app.use(methodOverride());
 26
 27// use morgan to log requests to the console
 28app.use(morgan('dev'));
 29
 30// Import Models and controllers
 31var userMdl = require('./models/userModel')(app, mongoose);
 32var userCtrl = require('./controllers/userController');
 33
 34var travelMdl = require('./models/travelModel')(app, mongoose);
 35var commentMdl = require('./models/commentModel')(app, mongoose);
 36var travelCtrl = require('./controllers/travelController');
 37
 38/*// Example Route
 39var router = express.Router();
 40router.get('/', function(req, res) {
 41  res.send("Hello world!");
 42});
 43app.use(router);*/
 44app.use(express.static(__dirname + '/www'));
 45
 46
 47//CORS
 48app.use(function(req, res, next) {
 49    res.header("Access-Control-Allow-Origin", "*");
 50    res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
 51    res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, X-Access-Token");
 52    next();
 53});
 54
 55// API routes ------------------------------------------------------
 56var apiRoutes = express.Router();
 57
 58apiRoutes.route('/login')
 59    .post(userCtrl.login);
 60apiRoutes.route('/signup')
 61    .post(userCtrl.signup);
 62apiRoutes.route('/users')
 63    .get(userCtrl.getAllUsers);
 64apiRoutes.route('/users/getById/:userid')
 65    .get(userCtrl.getUserById);
 66apiRoutes.route('/travels')
 67    .get(travelCtrl.getAllTravels);
 68apiRoutes.route('/travels/getById/:travelid')
 69    .get(travelCtrl.getTravelById);
 70
 71
 72// OJU AQUÏ TREC la verificació de token temporalment, per fer les proves des de l'app
 73// route middleware to verify a token
 74apiRoutes.use(function(req, res, next) {
 75
 76    // check header or url parameters or post parameters for token
 77    var token = req.body.token || req.query.token || req.headers['x-access-token'];
 78
 79    // decode token
 80    if (token) {
 81        // verifies secret and checks exp
 82        jwt.verify(token, app.get('superSecret'), function(err, decoded) {
 83            if (err) {
 84                return res.json({
 85                    success: false,
 86                    message: 'Failed to authenticate token.'
 87                });
 88            } else {
 89                // if everything is good, save to request for use in other routes
 90                req.decoded = decoded;
 91                //console.log("decoded " + decoded);
 92                next();
 93            }
 94        });
 95
 96    } else {
 97
 98        // if there is no token
 99        // return an error
100        return res.status(201).send({
101            success: false,
102            message: 'No token provided.'
103        });
104
105    }
106}); //fi verificació de token
107
108
109apiRoutes.route('/users/getByToken')
110    .get(userCtrl.getUserByToken);
111apiRoutes.route('/users')//agafa l'user a partir del token
112    .put(userCtrl.updateUser)//no comprovat
113    .delete(userCtrl.deleteUser);
114apiRoutes.route('/travels')
115    .post(travelCtrl.addTravel);
116apiRoutes.route('/travels/modifyById/:travelid')
117    .put(travelCtrl.updateTravel)//no comprovat
118    .delete(travelCtrl.deleteTravel);
119apiRoutes.route('/travels/join/:travelid')
120    .get(travelCtrl.addJoinPetition);
121apiRoutes.route('/travels/unjoin/:travelid')
122    .get(travelCtrl.unJoin);
123//FINS AQUÏ COMPROVAT
124
125apiRoutes.route('/travels/comment/:travelid')
126    .get(travelCtrl.getCommentsByTravelId);
127
128/*apiRoutes.route('/travels/join/:travelId')
129    .post(travelCtrl.addJoin);
130apiRoutes.route('/travels/unjoin/:travelId')
131    .post(travelCtrl.doUnjoin);*/
132
133/*apiRoutes.route('/travels/:travelId/join')
134    .post(travelCtrl.addJoin);
135apiRoutes.route('/travels/:travelId/unjoin')
136    .post(travelCtrl.doUnjoin);
137*/
138apiRoutes.route('/users/:userId/fav')
139    .post(userCtrl.addFav);
140apiRoutes.route('/users/:userId/unfav')
141    .post(userCtrl.doUnfav);
142
143apiRoutes.route('/travels/:travelId/comment')
144    .post(travelCtrl.addComment);
145
146app.use('/api', apiRoutes);
147// end of API routes -------------------------------------
148
149// Start server
150app.listen(config.port, function() {
151    console.log("Node server running on http://localhost:3000");
152});