1//File: controllers/userController.js
  2var mongoose = require('mongoose');
  3var userModel  = mongoose.model('userModel');
  4
  5var md5 = require('md5');
  6
  7/* */
  8var jwt    = require('jsonwebtoken'); // used to create, sign, and verify tokens
  9var express         = require("express");
 10var app             = express();
 11var config = require('../config'); // get our config file
 12app.set('superSecret', config.secret); // secret variable
 13/* */
 14
 15//GET - Return all Users in the DB
 16exports.findAllUsers = function(req, res) {
 17	userModel.find(function(err, users) {
 18    if(err) res.send(500, err.message);
 19
 20	//password deletion
 21	for(var i=0; i<users.length; i++)
 22	{
 23		users[i].password="";
 24		console.log(users[i].password);
 25	}
 26
 27    console.log('GET /users');
 28		res.status(200).jsonp(users);
 29	});
 30};
 31
 32//GET - Return a User with specified ID
 33exports.findById = function(req, res) {
 34	userModel.findById(req.params.id, function(err, user) {
 35    if(err) return res.send(500, err.message);
 36
 37    console.log('GET /users/' + req.params.id);
 38	//password deletion
 39	if(user!=null){
 40		user.password="";
 41	}
 42		res.status(200).jsonp(user);
 43	});
 44};
 45
 46exports.findUserByUsername = function(req, res) {
 47    userModel.find({
 48      username: req.params.username
 49  }, function(err, user) {
 50
 51      if (err) throw err;
 52
 53      if (!user) {
 54        res.json({ success: false, message: 'no user found' });
 55    } else if (user) {
 56          // return the information including token as JSON
 57          //res.jsonp(user);
 58		  user.password="";
 59          console.log(user);
 60	  		res.status(200).jsonp(user[0]);
 61
 62
 63      }
 64
 65    });
 66};
 67
 68//POST - Insert a new User in the DB
 69exports.addUser = function(req, res) {
 70	console.log('POST new user, name: ' + req.body.username);
 71	//console.log(req.body);
 72
 73	var user = new userModel({
 74		username: req.body.username,
 75		password: md5(req.body.password),
 76	    description:   req.body.description,
 77	    avatar:   req.body.avatar,
 78	    mail:   req.body.mail,
 79		phone: req.body.phone,
 80		telegram: req.body.telegram
 81	});
 82	if(user.username==undefined)
 83	{
 84		return res.status(500).jsonp("empty inputs");
 85	}else if(user.password==undefined)
 86	{
 87		return res.status(500).jsonp("empty inputs");
 88	}else if(user.description==undefined)
 89	{
 90		return res.status(500).jsonp("empty inputs");
 91	}else if(user.avatar==undefined)
 92	{
 93		return res.status(500).jsonp("empty inputs");
 94	}else if(user.mail==undefined)
 95	{
 96		return res.status(500).jsonp("empty inputs");
 97	}
 98	
 99	user.save(function(err, user) {
100		if(err) return res.send(500, err.message);
101    res.status(200).jsonp(user);
102	});
103};
104
105/* fav */
106exports.addFav = function(req, res) {
107	userModel.findById(req.params.userId, function(err, user){
108
109		// first search if user have already said like
110		var favRepeated=false;
111		for(var i=0; i<user.favs.length; i++)
112		{
113			if(user.favs[i].username==req.body.username)
114			{
115				favRepeated=true;
116			}
117		}
118		console.log("favRepeated: " + favRepeated);
119		if(favRepeated==false)
120		{
121			var fav = {
122				userId: req.body.userId,
123				username: req.body.username,
124				avatar: req.body.avatar
125			};
126			user.favs.push(fav);
127
128			user.save(function(err, user) {
129				if(err) return res.send(500, err.message);
130		    //res.status(200).jsonp(travel);
131				userModel.find(function(err, users) {
132				    if(err) res.send(500, err.message);
133						res.status(200).jsonp(users);
134				});
135			});
136		}else{
137			userModel.find(function(err, users) {
138					if(err) res.send(500, err.message);
139					res.status(200).jsonp(users);
140			});
141		}
142
143	});
144};
145exports.doUnfav = function(req, res) {
146
147	userModel.findById(req.params.userId, function(err, user){
148		for(var i=0; i<user.favs.length; i++)
149		{
150			if(user.favs[i].username==req.body.username)
151			{
152				user.favs.splice(i, 1);
153			}
154		}
155
156		user.save(function(err, travel) {
157			if(err) return res.send(500, err.message);
158			//res.status(200).jsonp(travel);
159			userModel.find(function(err, users) {
160			    if(err) res.send(500, err.message);
161					res.status(200).jsonp(users);
162			});
163		});
164	});
165};
166
167//PUT - Update a user already exists
168exports.updateUser = function(req, res) {
169	userModel.findById(req.params.id, function(err, user) {
170		user.username   = req.body.username;
171		user.password    = md5(req.body.password);
172		user.description = req.body.description;
173		user.avatar  = req.body.avatar;
174		user.mail = req.body.mail;
175		user.phone   = req.body.phone;
176		user.telegram = req.body.telegram;
177
178		user.save(function(err) {
179			if(err) return res.send(500, err.message);
180			user.password="";
181      	res.status(200).jsonp(user);
182		});
183	});
184};
185
186//DELETE - Delete a user with specified ID
187exports.deleteUser = function(req, res) {
188	userModel.findById(req.params.id, function(err, user) {
189		user.remove(function(err) {
190			if(err) return res.send(500, err.message);
191      		res.status(200).jsonp(req.params.id);
192		    console.log('DELETE /users/' + req.params.id);
193		})
194	});
195};
196
197
198//POST - auth user
199exports.login = function(req, res) {
200	// find the user
201  userModel.findOne({
202    username: req.body.username
203  }, function(err, user) {
204
205    if (err) throw err;
206
207    if (!user) {
208      res.json({ success: false, message: 'Authentication failed. User not found.' });
209    } else if (user) {
210
211			req.body.password=md5(req.body.password);
212
213      // check if password matches
214      if (user.password != req.body.password) {
215        res.json({ success: false, message: 'Authentication failed. Wrong password.' });
216      } else {
217
218        // if user is found and password is right
219        // create a token
220        var token = jwt.sign(user, app.get('superSecret'), {
221          //expiresInMinutes: 1440 // expires in 24 hours
222		  //expiresIn: '60m'
223        });
224console.log(user);
225        // return the information including token as JSON
226				user.password="";
227        res.json({
228          success: true,
229          message: 'Enjoy your token!',
230          token: token,
231		  avatar: user.avatar,
232		  userid: user._id,
233			userdata: user
234        });
235      }
236
237    }
238
239  });
240};