1var express         = require("express"),
  2    app             = express(),
  3    bodyParser      = require("body-parser"),
  4    methodOverride  = require("method-override"),
  5    mongoose        = require('mongoose');
  6
  7
  8var morgan      = require('morgan');
  9var jwt    = require('jsonwebtoken'); // used to create, sign, and verify tokens
 10var config = require('./config'); // get our config file
 11
 12
 13// Connection to DB
 14mongoose.connect(config.database, function(err, res) {
 15  if(err) throw err;
 16  console.log('Connected to Database');
 17});
 18app.set('superSecret', config.secret); // secret variable
 19
 20// Middlewares
 21app.use(bodyParser.urlencoded({ extended: false }));
 22app.use(bodyParser.json());
 23app.use(methodOverride());
 24
 25// use morgan to log requests to the console
 26app.use(morgan('dev'));
 27
 28// Import Models and controllers
 29var userMdl     = require('./models/userModel')(app, mongoose);
 30var userCtrl = require('./controllers/userController');
 31
 32var travelMdl     = require('./models/travelModel')(app, mongoose);
 33var travelCtrl = require('./controllers/travelController');
 34
 35/*// Example Route
 36var router = express.Router();
 37router.get('/', function(req, res) {
 38  res.send("Hello world!");
 39});
 40app.use(router);*/
 41app.use(express.static(__dirname + '/web'));
 42
 43
 44//CORS
 45app.use(function(req, res, next) {
 46  res.header("Access-Control-Allow-Origin", "*");
 47  res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
 48  res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
 49  next();
 50});
 51
 52// API routes ------------------------------------------------------
 53var apiRoutes = express.Router();
 54
 55apiRoutes.route('/users')
 56  .get(userCtrl.findAllUsers)
 57  .post(userCtrl.addUser);
 58apiRoutes.route('/users/:id')
 59    .get(userCtrl.findById);
 60apiRoutes.route('/users/byusername/:username')
 61    .get(userCtrl.findUserByUsername);
 62apiRoutes.route('/travels/user/:userid')
 63    .get(travelCtrl.findAllTravelsFromUsername);
 64
 65apiRoutes.route('/auth')
 66    .post(userCtrl.login);
 67
 68apiRoutes.route('/travels')
 69  .get(travelCtrl.findAllTravels);
 70
 71apiRoutes.route('/travels/:id')
 72.get(travelCtrl.findById)
 73
 74// route middleware to verify a token
 75apiRoutes.use(function(req, res, next) {
 76
 77  // check header or url parameters or post parameters for token
 78  var token = req.body.token || req.query.token || req.headers['x-access-token'];
 79
 80  // decode token
 81  if (token) {
 82
 83    // verifies secret and checks exp
 84    jwt.verify(token, app.get('superSecret'), function(err, decoded) {
 85      if (err) {
 86        return res.json({ success: false, message: 'Failed to authenticate token.' });
 87      } else {
 88        // if everything is good, save to request for use in other routes
 89        req.decoded = decoded;
 90        next();
 91      }
 92    });
 93
 94  } else {
 95
 96    // if there is no token
 97    // return an error
 98    return res.status(403).send({
 99        success: false,
100        message: 'No token provided.'
101    });
102
103  }
104});
105
106apiRoutes.route('/users/:id')
107  .put(userCtrl.updateUser)
108  .delete(userCtrl.deleteUser);
109
110apiRoutes.route('/travels')
111  .post(travelCtrl.addTravel);
112
113apiRoutes.route('/travels/:id')
114  .put(travelCtrl.updateTravel)
115  .delete(travelCtrl.deleteTravel);
116
117app.use('/api', apiRoutes);
118// end of API routes -------------------------------------
119
120// Start server
121app.listen(config.port, function() {
122  console.log("Node server running on http://localhost:3000");
123});