commonroutesServer/server.js
server.jsRaw
1var express = require("express"),
2 app = express(),
3 bodyParser = require("body-parser"),
4 methodOverride = require("method-override"),
5 mongoose = require('mongoose');
6
7
8var morgan = require('morgan');
9var jwt = require('jsonwebtoken'); // used to create, sign, and verify tokens
10var config = require('./config'); // get our config file
11
12mongoose.Promise = global.Promise;
13// Connection to DB
14mongoose.connect(config.database, function(err, res) {
15 if (err) throw err;
16 console.log('Connected to Database');
17});
18app.set('superSecret', config.secret); // secret variable
19
20// Middlewares
21app.use(bodyParser.json({limit: '50mb'}));
22app.use(bodyParser.urlencoded({limit: '50mb', extended: true}));
23app.use(methodOverride());
24
25// use morgan to log requests to the console
26app.use(morgan('dev'));
27
28// Import Models and controllers
29/*
30var userMdl = require('./models/userModel')(app, mongoose);
31*/
32var userMdl = require('./models/userModel');
33var notificationMdl = require('./models/notificationModel');
34var travelMdl = require('./models/travelModel');
35var commentMdl = require('./models/commentModel');
36var adminMdl = require('./models/adminModel');
37var userCtrl = require('./controllers/userController');
38var searchCtrl = require('./controllers/searchController');
39var travelCtrl = require('./controllers/travelController');
40var adminCtrl = require('./controllers/adminController');
41
42app.use(express.static(__dirname + '/www'));
43
44
45//CORS
46app.use(function(req, res, next) {
47 res.header("Access-Control-Allow-Origin", "*");
48 res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
49 res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, X-Access-Token");
50 next();
51});
52
53// API routes ------------------------------------------------------
54var apiRoutes = express.Router();
55
56// public routes
57apiRoutes.route('/login')
58 .post(userCtrl.login);
59apiRoutes.route('/signup')
60 .post(userCtrl.signup);
61apiRoutes.route('/users')
62 .get(userCtrl.getAllUsers);
63apiRoutes.route('/users/id/:userid')
64 .get(userCtrl.getUserById);
65apiRoutes.route('/travels')
66 .get(travelCtrl.getAllTravels);
67apiRoutes.route('/travels/id/:travelid')
68 .get(travelCtrl.getTravelById);
69
70
71apiRoutes.route('/admin/login')
72 .post(adminCtrl.login);
73/*apiRoutes.route('/admin/signup')
74 .post(adminCtrl.signup);*/
75
76
77// route middleware to verify the token
78apiRoutes.use(function(req, res, next) {
79 // check header or url parameters or post parameters for token
80 var token = req.body.token || req.query.token || req.headers['x-access-token'];
81 // decode token
82 if (token) {// verifies secret and checks exp
83 jwt.verify(token, app.get('superSecret'), function(err, decoded) {
84 if (err) {
85 return res.send(204,
86 {
87 success: false,
88 message: 'Failed to authenticate token.'
89 });
90 } else {// if everything is good, save to request for use in other routes
91 req.decoded = decoded;
92 next();
93 }
94 });
95 } else {
96 // if there is no token, return an error
97 return res.status(204).send({
98 success: false,
99 message: 'No token provided.'
100 });
101
102 }
103}); //end token verification middleware
104
105
106// private routes (needs to be logged)
107
108//admin routes
109apiRoutes.route('/admins')
110 .get(adminCtrl.getAllAdmins);
111apiRoutes.route('/admin/network')
112 .get(adminCtrl.network);
113apiRoutes.route('/admin/user/network/:userid')
114 .get(adminCtrl.getUserNetwork);
115apiRoutes.route('/admin/travels/id/:travelid')
116 .delete(adminCtrl.deleteTravel);
117apiRoutes.route('/admin/users/id/:userid')
118 .delete(adminCtrl.deleteUser);
119apiRoutes.route('/admin/users/validate/id/:userid')
120 .post(adminCtrl.validateUser);
121apiRoutes.route('/admin/users/unvalidate/id/:userid')
122 .post(adminCtrl.unvalidateUser);
123
124// general routes
125apiRoutes.route('/search/:searchstring')
126 .get(searchCtrl.searchByString);
127apiRoutes.route('/numnotifications')
128 .get(userCtrl.getNumNotificationsByToken);
129apiRoutes.route('/notifications')
130 .get(userCtrl.getNotifications);
131
132// user routes
133apiRoutes.route('/users/token')
134 .get(userCtrl.getUserByToken);
135apiRoutes.route('/users')//agafa l'user a partir del token
136 .put(userCtrl.updateUser)//no comprovat
137 .delete(userCtrl.deleteUser);
138apiRoutes.route('/changePassword')//agafa l'user a partir del token
139 .put(userCtrl.changePassword);
140apiRoutes.route('/users/id/likes/:userid')
141 .get(userCtrl.getUserLikes);
142apiRoutes.route('/users/id/like/:userid')
143 .post(userCtrl.likeUser);
144apiRoutes.route('/users/id/unlike/:userid')
145 .post(userCtrl.unlikeUser);
146
147//travels routes
148apiRoutes.route('/users/id/travels/:userid')
149 .get(userCtrl.getTravelsByUserId);
150apiRoutes.route('/travels')
151 .post(travelCtrl.addTravel);
152apiRoutes.route('/travels/id/modify/:travelid')
153 .put(travelCtrl.updateTravel)
154 .delete(travelCtrl.deleteTravel);
155apiRoutes.route('/travels/join/:travelid')
156 .post(travelCtrl.addJoinPetition);
157apiRoutes.route('/travels/unjoin/:travelid')
158 .post(travelCtrl.unJoin);
159apiRoutes.route('/travels/leave/:travelid')
160 .post(travelCtrl.leave);
161apiRoutes.route('/travels/declineJoin/:travelid')
162 .post(travelCtrl.declineJoin);
163apiRoutes.route('/travels/acceptJoin/:travelid')
164 .post(travelCtrl.acceptJoin);
165
166
167
168//not yet used routes
169apiRoutes.route('/travels/comment/:travelid')
170 .get(travelCtrl.getCommentsByTravelId);
171/*apiRoutes.route('/travels/join/:travelId')
172 .post(travelCtrl.addJoin);
173apiRoutes.route('/travels/unjoin/:travelId')
174 .post(travelCtrl.doUnjoin);*/
175
176/*apiRoutes.route('/travels/:travelId/join')
177 .post(travelCtrl.addJoin);
178apiRoutes.route('/travels/:travelId/unjoin')
179 .post(travelCtrl.doUnjoin);
180*/
181apiRoutes.route('/users/:userId/fav')
182 .post(userCtrl.addFav);
183apiRoutes.route('/users/:userId/unfav')
184 .post(userCtrl.doUnfav);
185
186apiRoutes.route('/travels/:travelId/comment')
187 .post(travelCtrl.addComment);
188
189
190
191
192app.use('/api', apiRoutes);
193// end of API routes -------------------------------------
194
195// Start server
196app.listen(config.port, function() {
197 console.log("Node server running on http://localhost:" + config.port);
198});