1var express = require("express"),
  2    app = express(),
  3    bodyParser = require("body-parser"),
  4    methodOverride = require("method-override"),
  5    mongoose = require('mongoose');
  6
  7
  8var morgan = require('morgan');
  9var jwt = require('jsonwebtoken'); // used to create, sign, and verify tokens
 10var config = require('./config'); // get our config file
 11
 12mongoose.Promise = global.Promise;
 13// Connection to DB
 14mongoose.connect(config.database, function(err, res) {
 15    if (err) throw err;
 16    console.log('Connected to Database');
 17});
 18app.set('superSecret', config.secret); // secret variable
 19
 20// Middlewares
 21app.use(bodyParser.urlencoded({
 22    extended: false
 23}));
 24app.use(bodyParser.json());
 25app.use(methodOverride());
 26
 27// use morgan to log requests to the console
 28app.use(morgan('dev'));
 29
 30// Import Models and controllers
 31var userMdl = require('./models/userModel')(app, mongoose);
 32var notificationMdl = require('./models/notificationModel')(app, mongoose);
 33var travelMdl = require('./models/travelModel')(app, mongoose);
 34var commentMdl = require('./models/commentModel')(app, mongoose);
 35var userCtrl = require('./controllers/userController');
 36var travelCtrl = require('./controllers/travelController');
 37
 38/*// Example Route
 39var router = express.Router();
 40router.get('/', function(req, res) {
 41  res.send("Hello world!");
 42});
 43app.use(router);*/
 44app.use(express.static(__dirname + '/www'));
 45
 46
 47//CORS
 48app.use(function(req, res, next) {
 49    res.header("Access-Control-Allow-Origin", "*");
 50    res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
 51    res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, X-Access-Token");
 52    next();
 53});
 54
 55// API routes ------------------------------------------------------
 56var apiRoutes = express.Router();
 57
 58apiRoutes.route('/login')
 59    .post(userCtrl.login);
 60apiRoutes.route('/signup')
 61    .post(userCtrl.signup);
 62apiRoutes.route('/users')
 63    .get(userCtrl.getAllUsers);
 64apiRoutes.route('/users/id/:userid')
 65    .get(userCtrl.getUserById);
 66apiRoutes.route('/travels')
 67    .get(travelCtrl.getAllTravels);
 68apiRoutes.route('/travels/id/:travelid')
 69    .get(travelCtrl.getTravelById);
 70
 71
 72// OJU AQUÏ TREC la verificació de token temporalment, per fer les proves des de l'app
 73// route middleware to verify a token
 74apiRoutes.use(function(req, res, next) {
 75
 76    // check header or url parameters or post parameters for token
 77    var token = req.body.token || req.query.token || req.headers['x-access-token'];
 78
 79    // decode token
 80    if (token) {
 81        // verifies secret and checks exp
 82        jwt.verify(token, app.get('superSecret'), function(err, decoded) {
 83            if (err) {
 84                return res.send(204,
 85                {
 86                    success: false,
 87                    message: 'Failed to authenticate token.'
 88                });
 89            } else {
 90                // if everything is good, save to request for use in other routes
 91                req.decoded = decoded;
 92                //console.log("decoded " + decoded);
 93                next();
 94            }
 95        });
 96
 97    } else {
 98
 99        // if there is no token
100        // return an error
101        return res.status(204).send({
102            success: false,
103            message: 'No token provided.'
104        });
105
106    }
107}); //fi verificació de token
108
109
110apiRoutes.route('/users/token')
111    .get(userCtrl.getUserByToken);
112apiRoutes.route('/users')//agafa l'user a partir del token
113    .put(userCtrl.updateUser)//no comprovat
114    .delete(userCtrl.deleteUser);
115apiRoutes.route('/travels')
116    .post(travelCtrl.addTravel);
117apiRoutes.route('/travels/id/modify/:travelid')
118    .put(travelCtrl.updateTravel)//no comprovat
119    .delete(travelCtrl.deleteTravel);
120apiRoutes.route('/travels/join/:travelid')
121    .get(travelCtrl.addJoinPetition);
122apiRoutes.route('/travels/unjoin/:travelid')
123    .get(travelCtrl.unJoin);
124apiRoutes.route('/travels/byuser/id/:userid')
125    .get(travelCtrl.getTravelsByUserId);
126//FINS AQUÏ COMPROVAT
127
128apiRoutes.route('/travels/comment/:travelid')
129    .get(travelCtrl.getCommentsByTravelId);
130
131/*apiRoutes.route('/travels/join/:travelId')
132    .post(travelCtrl.addJoin);
133apiRoutes.route('/travels/unjoin/:travelId')
134    .post(travelCtrl.doUnjoin);*/
135
136/*apiRoutes.route('/travels/:travelId/join')
137    .post(travelCtrl.addJoin);
138apiRoutes.route('/travels/:travelId/unjoin')
139    .post(travelCtrl.doUnjoin);
140*/
141apiRoutes.route('/users/:userId/fav')
142    .post(userCtrl.addFav);
143apiRoutes.route('/users/:userId/unfav')
144    .post(userCtrl.doUnfav);
145
146apiRoutes.route('/travels/:travelId/comment')
147    .post(travelCtrl.addComment);
148
149app.use('/api', apiRoutes);
150// end of API routes -------------------------------------
151
152// Start server
153app.listen(config.port, function() {
154    console.log("Node server running on http://localhost:3000");
155});