1//File: controllers/userController.js
  2var mongoose = require('mongoose');
  3var userModel  = mongoose.model('userModel');
  4
  5/* */
  6var jwt    = require('jsonwebtoken'); // used to create, sign, and verify tokens
  7var express         = require("express");
  8var app             = express();
  9var config = require('../config'); // get our config file
 10app.set('superSecret', config.secret); // secret variable
 11/* */
 12
 13//GET - Return all Users in the DB
 14exports.findAllUsers = function(req, res) {
 15	userModel.find(function(err, users) {
 16    if(err) res.send(500, err.message);
 17
 18	//password deletion
 19	for(var i=0; i<users.length; i++)
 20	{
 21		users[i].password="";
 22		console.log(users[i].password);
 23	}
 24
 25    console.log('GET /users');
 26		res.status(200).jsonp(users);
 27	});
 28};
 29
 30//GET - Return a User with specified ID
 31exports.findById = function(req, res) {
 32	userModel.findById(req.params.id, function(err, user) {
 33    if(err) return res.send(500, err.message);
 34
 35    console.log('GET /users/' + req.params.id);
 36	//password deletion
 37
 38		user.password="";
 39		res.status(200).jsonp(user);
 40	});
 41};
 42
 43exports.findUserByUsername = function(req, res) {
 44    userModel.find({
 45      username: req.params.username
 46  }, function(err, user) {
 47
 48      if (err) throw err;
 49
 50      if (!user) {
 51        res.json({ success: false, message: 'no user found' });
 52    } else if (user) {
 53          // return the information including token as JSON
 54          //res.jsonp(user);
 55		  user.password="";
 56          console.log(user);
 57	  		res.status(200).jsonp(user[0]);
 58
 59
 60      }
 61
 62    });
 63};
 64
 65//POST - Insert a new User in the DB
 66exports.addUser = function(req, res) {
 67	console.log('POST new user, name: ' + req.body.username);
 68	//console.log(req.body);
 69
 70	var user = new userModel({
 71		username: req.body.username,
 72		password: req.body.password,
 73	    description:   req.body.description,
 74	    avatar:   req.body.avatar,
 75	    mail:   req.body.mail,
 76		phone: req.body.phone,
 77		telegram: req.body.telegram
 78	});
 79
 80	user.save(function(err, user) {
 81		if(err) return res.send(500, err.message);
 82    res.status(200).jsonp(user);
 83	});
 84};
 85
 86//PUT - Update a user already exists
 87exports.updateUser = function(req, res) {
 88	userModel.findById(req.params.id, function(err, user) {
 89		user.username   = req.body.username;
 90		user.password    = req.body.password;
 91		user.description = req.body.description;
 92		user.avatar  = req.body.avatar;
 93		user.mail = req.body.mail;
 94		user.phone   = req.body.phone;
 95		user.telegram = req.body.telegram;
 96
 97		user.save(function(err) {
 98			if(err) return res.send(500, err.message);
 99			user.password="";
100      	res.status(200).jsonp(user);
101		});
102	});
103};
104
105//DELETE - Delete a user with specified ID
106exports.deleteUser = function(req, res) {
107	userModel.findById(req.params.id, function(err, user) {
108		user.remove(function(err) {
109			if(err) return res.send(500, err.message);
110      		res.status(200).jsonp(req.params.id);
111		    console.log('DELETE /users/' + req.params.id);
112		})
113	});
114};
115
116
117//POST - auth user
118exports.login = function(req, res) {
119	// find the user
120  userModel.findOne({
121    username: req.body.username
122  }, function(err, user) {
123
124    if (err) throw err;
125
126    if (!user) {
127      res.json({ success: false, message: 'Authentication failed. User not found.' });
128    } else if (user) {
129
130      // check if password matches
131      if (user.password != req.body.password) {
132        res.json({ success: false, message: 'Authentication failed. Wrong password.' });
133      } else {
134
135        // if user is found and password is right
136        // create a token
137        var token = jwt.sign(user, app.get('superSecret'), {
138          //expiresInMinutes: 1440 // expires in 24 hours
139		  expiresIn: '60m'
140        });
141console.log(user);
142        // return the information including token as JSON
143        res.json({
144          success: true,
145          message: 'Enjoy your token!',
146          token: token,
147		  avatar: user.avatar
148        });
149      }
150
151    }
152
153  });
154};