arnaucube
arnaucube/openworktimePublic Self-hosted repository
openworktime/server.js
server.jsRaw
  1var express         = require("express"),
  2    app             = express(),
  3    bodyParser      = require("body-parser"),
  4    methodOverride  = require("method-override"),
  5    mongoose        = require('mongoose');
  6
  7
  8var morgan      = require('morgan');
  9var jwt    = require('jsonwebtoken'); // used to create, sign, and verify tokens
 10var config = require('./config'); // get our config file
 11
 12mongoose.Promise = global.Promise;
 13// Connection to DB
 14mongoose.connect(config.database, function(err, res) {
 15  if(err) throw err;
 16  console.log('Connected to Database');
 17});
 18app.set('superSecret', config.secret); // secret variable
 19
 20// Middlewares
 21app.use(bodyParser.urlencoded({ extended: false }));
 22app.use(bodyParser.json());
 23app.use(methodOverride());
 24
 25// use morgan to log requests to the console
 26app.use(morgan('dev'));
 27
 28// Import Models and controllers
 29var userMdl     = require('./models/userModel')(app, mongoose);
 30var userCtrl = require('./controllers/userController');
 31
 32var projectMdl     = require('./models/projectModel')(app, mongoose);
 33var projectCtrl = require('./controllers/projectController');
 34
 35/*// Example Route
 36var router = express.Router();
 37router.get('/', function(req, res) {
 38  res.send("Hello world!");
 39});
 40app.use(router);*/
 41app.use(express.static(__dirname + '/webapp'));
 42
 43
 44//CORS
 45app.use(function(req, res, next) {
 46  res.header("Access-Control-Allow-Origin", "*");
 47  res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
 48  res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, X-Access-Token");
 49  next();
 50});
 51
 52// API routes ------------------------------------------------------
 53var apiRoutes = express.Router();
 54
 55apiRoutes.route('/users')
 56  .post(userCtrl.addUser);
 57apiRoutes.route('/auth')
 58    .post(userCtrl.login);
 59
 60// OJU AQUÏ TREC la verificació de token temporalment, per fer les proves des de l'app
 61// route middleware to verify a token
 62apiRoutes.use(function(req, res, next) {
 63
 64  // check header or url parameters or post parameters for token
 65  var token = req.body.token || req.query.token || req.headers['x-access-token'];
 66
 67  // decode token
 68  if (token) {
 69
 70    // verifies secret and checks exp
 71    jwt.verify(token, app.get('superSecret'), function(err, decoded) {
 72      if (err) {
 73        return res.json({ success: false, message: 'Failed to authenticate token.' });
 74      } else {
 75        // if everything is good, save to request for use in other routes
 76        req.decoded = decoded;
 77        //console.log("decoded " + decoded);
 78        next();
 79      }
 80    });
 81
 82  } else {
 83
 84    // if there is no token
 85    // return an error
 86    return res.status(201).send({
 87        success: false,
 88        message: 'No token provided.'
 89    });
 90
 91  }
 92}); //fi verificació de token
 93
 94apiRoutes.route('/logout')
 95    .post(userCtrl.logout);
 96
 97apiRoutes.route('/users')
 98  .get(userCtrl.findAllUsers);
 99
100
101apiRoutes.route('/users/:id')
102    .get(userCtrl.findById);
103apiRoutes.route('/users/byusername/:username')
104    .get(userCtrl.findUserByUsername);
105apiRoutes.route('/projects/user/:username')
106    .get(projectCtrl.findAllProjectsFromUsername);
107
108
109apiRoutes.route('/projects')
110  .get(projectCtrl.findAllProjects);
111
112apiRoutes.route('/projects/:id')
113    .get(projectCtrl.findById);
114
115
116apiRoutes.route('/users/:id')
117  .put(userCtrl.updateUser)
118  .delete(userCtrl.deleteUser);
119
120apiRoutes.route('/projects')
121  .post(projectCtrl.addProject);
122
123apiRoutes.route('/projects/:id')
124  .put(projectCtrl.updateProject)
125  .delete(projectCtrl.deleteProject);
126
127apiRoutes.route('/projects/:id/adduser')
128    .put(projectCtrl.addUserToProject);
129
130app.use('/api', apiRoutes);
131// end of API routes -------------------------------------
132
133// Start server
134app.listen(config.port, function() {
135  console.log("Node server running on http://localhost:3000");
136});