1var express = require("express"),
 2    app = express(),
 3    bodyParser = require("body-parser"),
 4    methodOverride = require("method-override"),
 5    mongoose = require('mongoose');
 6
 7var morgan = require('morgan');
 8var jwt = require('jsonwebtoken'); // used to create, sign, and verify tokens
 9var config = require('./config'); // get our config file
10
11mongoose.Promise = global.Promise;
12// Connection to DB
13mongoose.connect(config.database, function(err, res) {
14    if (err) throw err;
15    console.log('Connected to Database');
16});
17app.set('superSecret', config.secret); // secret variable
18
19// Middlewares
20app.use(bodyParser.urlencoded({
21    extended: false
22}));
23app.use(bodyParser.json());
24app.use(methodOverride());
25
26// use morgan to log requests to the console
27app.use(morgan('dev'));
28
29
30
31var userMdl = require('./models/userModel')(app, mongoose);
32var userCtrl = require('./controllers/userController');
33var eventMdl = require('./models/eventModel')(app, mongoose);
34//var eventCtrl = require('./controllers/eventController');
35var alertMdl = require('./models/alertModel')(app, mongoose);
36//var alertCtrl = require('./controllers/alertController');
37
38//CORS
39app.use(function(req, res, next) {
40    res.header("Access-Control-Allow-Origin", "*");
41    res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
42    res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, X-Access-Token");
43    next();
44});
45
46
47// API routes ------------------------------------------------------
48var apiRoutes = express.Router();
49
50apiRoutes.route('/login')
51    .post(userCtrl.login);
52apiRoutes.route('/signup')
53    .post(userCtrl.signup);
54
55apiRoutes.route('/users')
56    .get(userCtrl.getAllUsers);
57apiRoutes.route('/users/id/:userid')
58    .get(userCtrl.getUserById);
59
60// route middleware to verify a token
61apiRoutes.use(function(req, res, next) {
62    // check header or url parameters or post parameters for token
63    var token = req.body.token || req.query.token || req.headers['x-access-token'];
64    // decode token
65    if (token) {
66        // verifies secret and checks exp
67        jwt.verify(token, app.get('superSecret'), function(err, decoded) {
68            if (err) {
69                return res.send(204, {
70                    success: false,
71                    message: 'Failed to authenticate token.'
72                });
73            } else {
74                // if everything is good, save to request for use in other routes
75                req.decoded = decoded;
76                //console.log("decoded " + decoded);
77                next();
78            }
79        });
80    } else {
81        // if there is no token
82        // return an error
83        return res.status(204).send({
84            success: false,
85            message: 'No token provided.'
86        });
87
88    }
89}); //fi verificació de token
90
91app.use('/api', apiRoutes);
92// end of API routes -------------------------------------
93
94// Start server
95app.listen(config.port, function() {
96    console.log("Node server running on http://localhost:3000");
97});