app.js

const dotenv = require("dotenv");
const fs = require("fs");
const helmet = require("helmet");
const compression = require("compression");  // compresses requests
const bodyParser = require("body-parser");
const lusca = require("lusca");
const cors = require("cors");
const mongoose = require("mongoose");

const passport = require('passport');
const jwt = require('jsonwebtoken');

const createResponse = require('./src/helper/helper');

const aboutRouter = require("./src/controllers/about");
const adminRouter = require("./src/controllers/admin");
const blogRouter = require("./src/controllers/blog");
const eventRouter = require("./src/controllers/events");
const initRouter = require("./src/controllers/initiatives");
const resourceRouter = require("./src/controllers/resources");
const showcaseRouter = require("./src/controllers/showcase");
const sponsorRouter = require("./src/controllers/sponsors");
const teamRouter = require("./src/controllers/team");

// import path from "path";
const express = require('express');
const app = express();

if (fs.existsSync(".env")) {
  console.log("Using .env file to supply config environment variables");
  dotenv.config({ path: ".env" });
} else {
  console.log("Please create a .env file for environment variables");
}

const secret = process.env['SECRET'];

const MONGODB_URI = process.env["MONGODB_URI_LOCAL"] || "mongodb://localhost:27017/iic_backend";
// const MONGODB_URI = "mongodb://localhost:27017/iic_backend";

mongoose.connect(MONGODB_URI, { useNewUrlParser: true })
.then(function() {
	console.log("Connected to mongoDB");
}).catch(function(err) {
	console.log(err);
});

app.use(compression());
app.use(bodyParser.json({ type: 'application/json' }));
app.use(bodyParser.urlencoded({ extended: true }));
app.use(cors());
app.use(helmet());
app.use(lusca.xframe("SAMEORIGIN"));
app.use(lusca.xssProtection(true));

app.use(passport.initialize());
app.use(passport.session());

require('./src/helper/passport')(passport);

var User = require('./src/models/users');

app.set("view engine","ejs");

app.get('/', function(req, res) {
  res.send("You've reached the default start page");
});

app.post('/login', (req, res, next) => {
	const username = req.body.username;
	const password = req.body.password;

	User.getUserByName(username, (err, user) => {
		if (err) {
			console.log(err);
		}
		if (!user) {
			// change error status
			res.status(200).json(createResponse(false, 'User not found', ""));
		} else {
			User.comparePasswords(password, user.password, (err, isMatch) => {
				if (err) {
					console.log(err);
					// change error status
					res.status(200).json(createResponse(false, 'Something went wrong, please try again later', ""));
				}
				if (isMatch) {
					// import secret from env file ---------------------------
					const token = jwt.sign(user.toJSON(), secret, {
						expiresIn: 604800
					});
					jsonData = {
						token: 'JWT ' + token,
						user: user
					}
					res.status(200).json(createResponse(true, 'User logged in successfully', jsonData));
				} else {
					// change error status
					res.status(200).json(createResponse(false, 'Incorrect password', ""));
				}
			})
		}
	})
})

app.get('/api/getAdmin', function(req, res) {
	User.find({}, function(err, results) {
		if(!err) {
			res.status(200).json(createResponse(true, 'details retrieved: ', results[0]));
		} else {
			console.log(err)
		}
	});
});


const apiRouter = express.Router();

apiRouter.use('/about', aboutRouter);
// apiRouter.use('/admin', adminRouter);
apiRouter.use('/admin', passport.authenticate('jwt', {session: false}), adminRouter);
apiRouter.use('/blog', blogRouter);
apiRouter.use('/events', eventRouter);
apiRouter.use('/initiatives', initRouter);
apiRouter.use('/resources', resourceRouter);
apiRouter.use('/showcase', showcaseRouter);
apiRouter.use('/sponsors', sponsorRouter);
apiRouter.use('/team', teamRouter);

// -------------- unprotected admin route to insert Data ------------------

apiRouter.use('/insertData', adminRouter);

// ----------------------------------------------------------

app.use('/api', apiRouter);


app.get('/login', function(req, res) {
	res.render('form.ejs')
})

// app.listen(7500, process.env.IP, function() {
app.listen(process.env["PORT"], process.env.IP, function() {
	console.log("Server started on %s", process.env["PORT"]);
});

// ------------for dummy data-----------------------delete this later on

app.get('/sudo/deleteAll', function(req, res) {
	mongoose.connection.db.dropDatabase(function(err, result) {
		console.log('Entire collection deleted');
	});
	res.send('done');
})

app.get('/createSAdmin/:name', function(req, res) {
	var admin = new User({
		name: req.params.name,
		position: 'PosName',
		organisation: 'OrgName',
		username: req.params.name,
		password: 'helloworld',
		access: 'superadmin'
	});
	User.addUser(admin, (err, user) => {
		if (err) {
			console.log(err);
		} else {
			console.log(user);
		}
	})
	res.send('done');
});

















// app.post('/testForm', function(req, res) {
// 	console.log(req.body)
// })

// app.get('/hello', function(req, res) {
// 	console.log("API call received")
// 	return res.status(200).json({
//         'error': false,
//         'data': [{"name": "test", "email": "a@g.com", "num": "123"}, {"name": "test2", "email": "b@g.com", "num": "456"}, {"name": "test3", "email": "c@g.com", "num": "789"}]
//     });
// });





// to test the functioning of the database and schema -

// app.get('/insertData', function(req, res) {

// 	var data = "Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.";
// 	static.create({
// 		title: "about",
// 		body: data,
// 	}, function(err, static) {
// 		if(err) {
// 			console.log(err);
// 		} else {
// 			console.log("your data has been saved");
// 			res.send(data + "has been saved to the database");
// 		}
// 	})
// });