modify

Author: wayne-th

config/express.js

@@ -4,7 +4,10 @@ var config = require('./config'),
     compress = require('compression'),
     bodyParser = require('body-parser'),
     methodOverride = require('method-override')
-    passport = require('passport');
+    passport = require('passport'),
+    helmet = require('helmet'),
+    cors = require('cors'),
+    ApiRoutes = require('./routes');
 
 module.exports = function () {
     var app = express();
@@ -29,9 +32,13 @@ module.exports = function () {
 
     app.use(passport.initialize());
     app.use(passport.session());
+    app.use(helmet());
+    app.use(cors());
 
-    require('../app/routes/index.routes.js') (app);
-    require('../app/routes/users.routes.js') (app);
+    app.use('/api', ApiRoutes);
+
+    // require('../app/routes/index.routes.js') (app);
+    // require('../app/routes/users.routes.js') (app);
 
     app.use(express.static('./public'));
 

config/mongoose.js

@@ -2,7 +2,24 @@ var config = require('./config'),
     mongoose = require('mongoose');
 
 module.exports = function() {
-    var db = mongoose.connect(config.db);
+    // Remove the warning with Promise
+    mongoose.Promise = global.Promise;
+    
+    // If debug run the mongoose debug options
+    mongoose.set('debug', process.env.MONGOOSE_DEBUG);
+    
+    // Connect the db with the url provide
+    try {
+        var db = mongoose.connect(config.db);
+    } catch (err) {
+        var db = mongoose.createConnection(config.db);
+    }
+    
+    mongoose.connection
+      .once('open', () => console.log('MongoDB Running'))
+      .on('error', e => {
+        throw e;
+      });
 
     require('../models/user.models');
 

config/passport.js

@@ -17,4 +17,5 @@ module.exports = function() {
     });
 
     require('./strategies/local.js')();
+    require('./strategies/jwt.js')();
 }

config/strategies/jwt.js

@@ -0,0 +1,31 @@
+var passport = require('passport'),
+    User = require('mongoose').model('User');
+
+import { Strategy as JWTStrategy, ExtractJwt } from 'passport-jwt';
+
+
+/**
+ * JWT Strategy Auth
+ */
+const jwtOpts = {
+    // Telling Passport to check authorization headers for JWT
+    jwtFromRequest: ExtractJwt.fromAuthHeaderWithScheme('JWT'),
+    // Telling Passport where to find the secret
+    secretOrKey: constants.JWT_SECRET,
+};
+
+module.exports = function() {
+    passport.use(new JWTStrategy(jwtOpts, function(payload, done){
+        User.findById(payload._id , function(err, user) {
+            if (err) {
+                return done(err, false);
+            }
+
+            if (!user) {
+              return done(null, false);
+            }
+
+            return done(null, user);
+        });
+    }));
+};

config/strategies/local.js

@@ -3,7 +3,7 @@ var passport = require('passport'),
     User = require('mongoose').model('User');
 
 module.exports = function() {
-    passport.use(new LocalStrategy(function(username, password, done){
+    passport.use(new LocalStrategy({ usernameField: 'email' }, function(username, password, done){
         User.findOne({
             username: username
         }, function(err, user) {

controllers/auth.controller.js

@@ -1,38 +1,109 @@
-var User = require('mongoose').model('User'),
-    passport = require('passport');
+import User from '../models/user.model';
 
-var getErrorMessage = function(err) {
-    var message = '';
-
-    if (err.code) {
-        switch (err.code) {
-            case 11000:
-            case 11001:
-                message = 'Username already exists';
-                break;
-            default:
-                message = 'Something went wrong';
-        }
-    } else {
-        for (var errName in err.errors) {
-            if (err.erros[errName].message)
-                message = err.erros[errName].message;
-        }
-    }
-
-    return message;
+import HTTPStatus from 'http-status';
+import Joi from 'joi';
+ 
+export const validation = {
+  login: {
+    body: {
+      email: Joi.string()
+        .email()
+        .required(),
+      password: Joi.string()
+        .regex(/^[a-zA-Z0-9]{3,30}$/)
+        .required(),
+    },
+  },
+  create: {
+    body: {
+      email: Joi.string()
+        .email()
+        .required(),
+      password: Joi.string()
+        .min(6)
+        .regex(/^(?=.*[0-9])(?=.*[a-zA-Z])([a-zA-Z0-9]+)$/)
+        .required(),
+      username: Joi.string()
+        .min(3)
+        .max(20)
+        .required(),
+    },
+  },
 };
 
-exports.signup = function(req, res, next) {
-    if (!req.user) {
-        var user = new User(req.body);
-        var message = null;
+ 
+ /**
+  * @api {post} /users/login Login a user
+  * @apiDescription Login a user
+  * @apiName loginUser
+  * @apiGroup User
+  *
+  * @apiParam (Body) {String} email User email.
+  * @apiParam (Body) {String} password User password.
+  *
+  * @apiSuccess {Number} status Status of the Request.
+  * @apiSuccess {String} _id User _id.
+  * @apiSuccess {String} token Authentication token.
+  *
+  * @apiSuccessExample Success-Response:
+  *
+  * HTTP/1.1 200 OK
+  *
+  * {
+  *  _id: '123',
+  *  token: 'JWT eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJfaWQiOiI1OTBhMWI3ODAzMDI3N2NiNjQxM2JhZGUiLCJpYXQiOjE0OTM4MzQ2MTZ9.RSlMF6RRwAALZQRdfKrOZWnuHBk-mQNnRcCLJsc8zio',
+  * }
+  *
+  * @apiErrorExample {json} Error
+  *  HTTP/1.1 400 Bad Request
+  *
+  *  {
+  *    email: 'email is required'
+  *  }
+  */
+ 
+export async function login(req, res, next) {
+  res.status(HTTPStatus.OK).json(req.user.toAuthJSON());
+
+  return next();
+}
 
-        user.save(function(err) {
-            if (err) {
-                var message = getErrorMessage(err);
-                res.json(message);
-            }
-        })
+/**
+ * @api {post} /users/signup Create a user
+ * @apiDescription Create a user
+ * @apiName createUser
+ * @apiGroup User
+ *
+ * @apiParam (Body) {String} email User email.
+ * @apiParam (Body) {String} password User password.
+ * @apiParam (Body) {String} username User username.
+ *
+ * @apiSuccess {Number} status Status of the Request.
+ * @apiSuccess {String} _id User _id.
+ * @apiSuccess {String} token Authentication token.
+ *
+ * @apiSuccessExample Success-Response:
+ *
+ * HTTP/1.1 200 OK
+ *
+ * {
+ *  _id: '123',
+ *  token: 'JWT eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJfaWQiOiI1OTBhMWI3ODAzMDI3N2NiNjQxM2JhZGUiLCJpYXQiOjE0OTM4MzQ2MTZ9.RSlMF6RRwAALZQRdfKrOZWnuHBk-mQNnRcCLJsc8zio',
+ * }
+ *
+ * @apiErrorExample {json} Error
+ *  HTTP/1.1 400 Bad Request
+ *
+ *  {
+ *    email: 'email is required'
+ *  }
+ */
+export async function create(req, res, next) {
+    try {
+      const user = await User.create(req.body);
+      return res.status(HTTPStatus.CREATED).json(user.toAuthJSON());
+    } catch (e) {
+      e.status = HTTPStatus.BAD_REQUEST;
+      return next(e);
     }
-}
+  }