1var express         = require("express"),
  2    app             = express(),
  3    bodyParser      = require("body-parser"),
  4    methodOverride  = require("method-override"),
  5    mongoose        = require('mongoose');
  6
  7
  8var morgan      = require('morgan');
  9var jwt    = require('jsonwebtoken'); // used to create, sign, and verify tokens
 10var config = require('./config'); // get our config file
 11
 12mongoose.Promise = global.Promise;
 13// Connection to DB
 14mongoose.connect(config.database, function(err, res) {
 15  if(err) throw err;
 16  console.log('Connected to Database');
 17});
 18app.set('superSecret', config.secret); // secret variable
 19
 20// Middlewares
 21app.use(bodyParser.urlencoded({ extended: false }));
 22app.use(bodyParser.json());
 23app.use(methodOverride());
 24
 25// use morgan to log requests to the console
 26app.use(morgan('dev'));
 27
 28// Import Models and controllers
 29var userMdl     = require('./models/userModel')(app, mongoose);
 30var userCtrl = require('./controllers/userController');
 31
 32var travelMdl     = require('./models/travelModel')(app, mongoose);
 33var joinMdl     = require('./models/joinModel')(app, mongoose);
 34var commentMdl     = require('./models/commentModel')(app, mongoose);
 35var travelCtrl = require('./controllers/travelController');
 36
 37/*// Example Route
 38var router = express.Router();
 39router.get('/', function(req, res) {
 40  res.send("Hello world!");
 41});
 42app.use(router);*/
 43app.use(express.static(__dirname + '/www'));
 44
 45
 46//CORS
 47app.use(function(req, res, next) {
 48  res.header("Access-Control-Allow-Origin", "*");
 49  res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
 50  res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, X-Access-Token");
 51  next();
 52});
 53
 54// API routes ------------------------------------------------------
 55var apiRoutes = express.Router();
 56
 57apiRoutes.route('/users')
 58  .get(userCtrl.findAllUsers)
 59  .post(userCtrl.addUser);
 60apiRoutes.route('/users/:id')
 61    .get(userCtrl.findById);
 62apiRoutes.route('/users/byusername/:username')
 63    .get(userCtrl.findUserByUsername);
 64apiRoutes.route('/travels/user/:username')
 65    .get(travelCtrl.findAllTravelsFromUsername);
 66
 67apiRoutes.route('/auth')
 68    .post(userCtrl.login);
 69
 70apiRoutes.route('/travels')
 71  .get(travelCtrl.findAllTravels);
 72
 73apiRoutes.route('/travels/:id')
 74    .get(travelCtrl.findById);
 75apiRoutes.route('/travels/join/:travelId')
 76    .get(travelCtrl.getJoinsByTravelId);
 77apiRoutes.route('/travels/comment/:travelId')
 78    .get(travelCtrl.getCommentsByTravelId);
 79
 80// OJU AQUÏ TREC la verificació de token temporalment, per fer les proves des de l'app
 81// route middleware to verify a token
 82apiRoutes.use(function(req, res, next) {
 83
 84  // check header or url parameters or post parameters for token
 85  var token = req.body.token || req.query.token || req.headers['x-access-token'];
 86
 87  // decode token
 88  if (token) {
 89    // verifies secret and checks exp
 90    jwt.verify(token, app.get('superSecret'), function(err, decoded) {
 91      if (err) {
 92        return res.json({ success: false, message: 'Failed to authenticate token.' });
 93      } else {
 94        // if everything is good, save to request for use in other routes
 95        req.decoded = decoded;
 96        //console.log("decoded " + decoded);
 97        next();
 98      }
 99    });
100
101  } else {
102
103    // if there is no token
104    // return an error
105    return res.status(201).send({
106        success: false,
107        message: 'No token provided.'
108    });
109
110  }
111}); //fi verificació de token
112
113
114apiRoutes.route('/users/:id')
115  .put(userCtrl.updateUser)
116  .delete(userCtrl.deleteUser);
117
118apiRoutes.route('/travels')
119  .post(travelCtrl.addTravel);
120
121apiRoutes.route('/travels/:id')
122  .put(travelCtrl.updateTravel)
123  .delete(travelCtrl.deleteTravel);
124
125apiRoutes.route('/travels/join/:travelId')
126    .post(travelCtrl.addJoin);
127apiRoutes.route('/travels/unjoin/:travelId')
128    .post(travelCtrl.doUnjoin);
129
130apiRoutes.route('/travels/comment/:travelId')
131    .post(travelCtrl.addComment);
132
133app.use('/api', apiRoutes);
134// end of API routes -------------------------------------
135
136// Start server
137app.listen(config.port, function() {
138  console.log("Node server running on http://localhost:3000");
139});