1var express = require("express"),
  2    app = express(),
  3    bodyParser = require("body-parser"),
  4    methodOverride = require("method-override"),
  5    mongoose = require('mongoose');
  6
  7var morgan = require('morgan');
  8var jwt = require('jsonwebtoken'); // used to create, sign, and verify tokens
  9var config = require('./config'); // get our config file
 10
 11mongoose.Promise = global.Promise;
 12// Connection to DB
 13mongoose.connect(config.database, function(err, res) {
 14    if (err) throw err;
 15    console.log('Connected to Database');
 16});
 17app.set('superSecret', config.secret); // secret variable
 18
 19// Middlewares
 20app.use(bodyParser.urlencoded({
 21    extended: false
 22}));
 23app.use(bodyParser.json());
 24app.use(methodOverride());
 25
 26// use morgan to log requests to the console
 27app.use(morgan('dev'));
 28
 29
 30
 31var userMdl = require('./models/userModel')(app, mongoose);
 32var userCtrl = require('./controllers/userController');
 33var eventMdl = require('./models/eventModel')(app, mongoose);
 34var eventCtrl = require('./controllers/eventController');
 35//var alertMdl = require('./models/alertModel')(app, mongoose);
 36//var alertCtrl = require('./controllers/alertController');
 37
 38//CORS
 39app.use(function(req, res, next) {
 40    res.header("Access-Control-Allow-Origin", "*");
 41    res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
 42    res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, X-Access-Token");
 43    next();
 44});
 45
 46
 47// API routes ------------------------------------------------------
 48var apiRoutes = express.Router();
 49
 50apiRoutes.route('/login')
 51    .post(userCtrl.login);
 52apiRoutes.route('/signup')
 53    .post(userCtrl.signup);
 54
 55apiRoutes.route('/users')
 56    .get(userCtrl.getAllUsers);
 57apiRoutes.route('/users/id/:userid')
 58    .get(userCtrl.getUserById);
 59
 60apiRoutes.route('/events')
 61    .get(eventCtrl.getAllEvents);
 62apiRoutes.route('/alerts')
 63    .get(eventCtrl.getAllAlerts);
 64apiRoutes.route('/events/id/:eventid')
 65    .get(eventCtrl.getEventById);
 66apiRoutes.route('/events/following')
 67    .post(eventCtrl.getEventsByFollowingArray);
 68apiRoutes.route('/events/category/:category')
 69    .get(eventCtrl.getEventsByCategory);
 70
 71apiRoutes.route('/categoriesList')
 72    .get(eventCtrl.getCategoriesList);
 73// route middleware to verify a token
 74apiRoutes.use(function(req, res, next) {
 75    // check header or url parameters or post parameters for token
 76    var token = req.body.token || req.query.token || req.headers['x-access-token'];
 77    // decode token
 78    if (token) {
 79        // verifies secret and checks exp
 80        jwt.verify(token, app.get('superSecret'), function(err, decoded) {
 81            if (err) {
 82                return res.send(204, {
 83                    success: false,
 84                    message: 'Failed to authenticate token.'
 85                });
 86            } else {
 87                // if everything is good, save to request for use in other routes
 88                req.decoded = decoded;
 89                //console.log("decoded " + decoded);
 90                next();
 91            }
 92        });
 93    } else {
 94        // if there is no token
 95        // return an error
 96        return res.status(204).send({
 97            success: false,
 98            message: 'No token provided.'
 99        });
100
101    }
102}); //fi verificació de token
103
104
105apiRoutes.route('/events')
106    .post(eventCtrl.addEvent);
107apiRoutes.route('/alerts')
108    .post(eventCtrl.addAlert);
109apiRoutes.route('/events/id/:eventid')
110    .delete(eventCtrl.deleteEvent);
111
112app.use('/api', apiRoutes);
113// end of API routes -------------------------------------
114
115// Start server
116app.listen(config.port, function() {
117    console.log("Node server running on http://localhost:3000");
118});