1var express         = require("express"),
  2    app             = express(),
  3    bodyParser      = require("body-parser"),
  4    methodOverride  = require("method-override"),
  5    mongoose        = require('mongoose');
  6
  7
  8var morgan      = require('morgan');
  9var jwt    = require('jsonwebtoken'); // used to create, sign, and verify tokens
 10var config = require('./config'); // get our config file
 11
 12mongoose.Promise = global.Promise;
 13// Connection to DB
 14mongoose.connect(config.database, function(err, res) {
 15  if(err) throw err;
 16  console.log('Connected to Database');
 17});
 18app.set('superSecret', config.secret); // secret variable
 19
 20// Middlewares
 21app.use(bodyParser.urlencoded({ extended: false }));
 22app.use(bodyParser.json());
 23app.use(methodOverride());
 24
 25// use morgan to log requests to the console
 26app.use(morgan('dev'));
 27
 28// Import Models and controllers
 29var userMdl     = require('./models/userModel')(app, mongoose);
 30var userCtrl = require('./controllers/userController');
 31
 32var travelMdl     = require('./models/travelModel')(app, mongoose);
 33var travelCtrl = require('./controllers/travelController');
 34
 35/*// Example Route
 36var router = express.Router();
 37router.get('/', function(req, res) {
 38  res.send("Hello world!");
 39});
 40app.use(router);*/
 41app.use(express.static(__dirname + '/web'));
 42
 43
 44//CORS
 45app.use(function(req, res, next) {
 46  res.header("Access-Control-Allow-Origin", "*");
 47  res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
 48  res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, X-Access-Token");
 49  next();
 50});
 51
 52// API routes ------------------------------------------------------
 53var apiRoutes = express.Router();
 54
 55apiRoutes.route('/users')
 56  .get(userCtrl.findAllUsers)
 57  .post(userCtrl.addUser);
 58apiRoutes.route('/users/:id')
 59    .get(userCtrl.findById);
 60apiRoutes.route('/users/byusername/:username')
 61    .get(userCtrl.findUserByUsername);
 62apiRoutes.route('/travels/user/:username')
 63    .get(travelCtrl.findAllTravelsFromUsername);
 64
 65apiRoutes.route('/auth')
 66    .post(userCtrl.login);
 67
 68apiRoutes.route('/travels')
 69  .get(travelCtrl.findAllTravels);
 70
 71apiRoutes.route('/travels/:id')
 72.get(travelCtrl.findById)
 73
 74// OJU AQUÏ TREC la verificació de token temporalment, per fer les proves des de l'app
 75// route middleware to verify a token
 76apiRoutes.use(function(req, res, next) {
 77
 78  // check header or url parameters or post parameters for token
 79  var token = req.body.token || req.query.token || req.headers['x-access-token'];
 80
 81  // decode token
 82  if (token) {
 83
 84    // verifies secret and checks exp
 85    jwt.verify(token, app.get('superSecret'), function(err, decoded) {
 86      if (err) {
 87        return res.json({ success: false, message: 'Failed to authenticate token.' });
 88      } else {
 89        // if everything is good, save to request for use in other routes
 90        req.decoded = decoded;
 91        //console.log("decoded " + decoded);
 92        next();
 93      }
 94    });
 95
 96  } else {
 97
 98    // if there is no token
 99    // return an error
100    return res.status(201).send({
101        success: false,
102        message: 'No token provided.'
103    });
104
105  }
106}); //fi verificació de token
107
108
109apiRoutes.route('/users/:id')
110  .put(userCtrl.updateUser)
111  .delete(userCtrl.deleteUser);
112
113apiRoutes.route('/travels')
114  .post(travelCtrl.addTravel);
115
116apiRoutes.route('/travels/:id')
117  .put(travelCtrl.updateTravel)
118  .delete(travelCtrl.deleteTravel);
119
120app.use('/api', apiRoutes);
121// end of API routes -------------------------------------
122
123// Start server
124app.listen(config.port, function() {
125  console.log("Node server running on http://localhost:3000");
126});