openEventsPlatformServer/server.js
server.jsRaw
1var express = require("express"),
2 app = express(),
3 bodyParser = require("body-parser"),
4 methodOverride = require("method-override"),
5 mongoose = require('mongoose');
6
7var morgan = require('morgan');
8var jwt = require('jsonwebtoken'); // used to create, sign, and verify tokens
9var config = require('./config'); // get our config file
10
11mongoose.Promise = global.Promise;
12// Connection to DB
13mongoose.connect(config.database, function(err, res) {
14 if (err) throw err;
15 console.log('Connected to Database');
16});
17app.set('superSecret', config.secret); // secret variable
18
19// Middlewares
20app.use(bodyParser.urlencoded({
21 extended: false
22}));
23app.use(bodyParser.json());
24app.use(methodOverride());
25
26// use morgan to log requests to the console
27app.use(morgan('dev'));
28
29
30
31var userMdl = require('./models/userModel')(app, mongoose);
32var userCtrl = require('./controllers/userController');
33var eventMdl = require('./models/eventModel')(app, mongoose);
34var eventCtrl = require('./controllers/eventController');
35//var alertMdl = require('./models/alertModel')(app, mongoose);
36//var alertCtrl = require('./controllers/alertController');
37
38//CORS
39app.use(function(req, res, next) {
40 res.header("Access-Control-Allow-Origin", "*");
41 res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
42 res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, X-Access-Token");
43 next();
44});
45
46
47// API routes ------------------------------------------------------
48var apiRoutes = express.Router();
49
50apiRoutes.route('/login')
51 .post(userCtrl.login);
52apiRoutes.route('/signup')
53 .post(userCtrl.signup);
54
55apiRoutes.route('/users')
56 .get(userCtrl.getAllUsers);
57apiRoutes.route('/users/id/:userid')
58 .get(userCtrl.getUserById);
59
60apiRoutes.route('/events')
61 .get(eventCtrl.getAllEvents);
62apiRoutes.route('/alerts')
63 .get(eventCtrl.getAllAlerts);
64apiRoutes.route('/events/id/:eventid')
65 .get(eventCtrl.getEventById);
66apiRoutes.route('/events/following')
67 .post(eventCtrl.getEventsByFollowingArray);
68apiRoutes.route('/events/category/:category')
69 .get(eventCtrl.getEventsByCategory);
70apiRoutes.route('/events/day/:day')
71 .get(eventCtrl.getEventsByDay);
72
73apiRoutes.route('/categoriesList')
74 .get(eventCtrl.getCategoriesList);
75// route middleware to verify a token
76apiRoutes.use(function(req, res, next) {
77 // check header or url parameters or post parameters for token
78 var token = req.body.token || req.query.token || req.headers['x-access-token'];
79 // decode token
80 if (token) {
81 // verifies secret and checks exp
82 jwt.verify(token, app.get('superSecret'), function(err, decoded) {
83 if (err) {
84 return res.send(204, {
85 success: false,
86 message: 'Failed to authenticate token.'
87 });
88 } else {
89 // if everything is good, save to request for use in other routes
90 req.decoded = decoded;
91 //console.log("decoded " + decoded);
92 next();
93 }
94 });
95 } else {
96 // if there is no token
97 // return an error
98 return res.status(204).send({
99 success: false,
100 message: 'No token provided.'
101 });
102
103 }
104}); //fi verificació de token
105
106
107apiRoutes.route('/events')
108 .post(eventCtrl.addEvent);
109apiRoutes.route('/alerts')
110 .post(eventCtrl.addAlert);
111apiRoutes.route('/events/id/:eventid')
112 .delete(eventCtrl.deleteEvent);
113
114app.use('/api', apiRoutes);
115// end of API routes -------------------------------------
116
117// Start server
118app.listen(config.port, function() {
119 console.log("Node server running on http://localhost:3000");
120});