add apis and authenticate using JWT

Author: harsh1206

config/passport-google-oauth2-strategy.js

@@ -0,0 +1,2 @@
+const passport=require('passport');
+const googleStategy

config/passport-jwt-strategy.js

@@ -0,0 +1,28 @@
+const passport=require('passport');
+const JWTStrategy=require('passport-jwt').Strategy;
+const ExtractJWT= require('passport-jwt').ExtractJwt;
+const User=require('../models/user');
+
+let opts= { 
+    jwtFromRequest:ExtractJWT.fromAuthHeaderAsBearerToken(),
+    secretOrKey:'codeial'
+}
+
+passport.use(new JWTStrategy(opts,function(jwtPayload,done){
+
+    User.findById(jwtPayload._id,function(err,user){
+        if(err){
+            console.log('Error in finding user from JWT');
+            return;
+        }
+
+        if(user){
+            return done(null,user);
+        }else{
+            return done(null,false);
+        }
+    })
+
+}));
+
+module.exports=passport;

controllers/api/v1/posts_api.js

@@ -0,0 +1,63 @@
+const Post=require("../../../models/posts");
+const Comment=require("../../../models/comment");
+
+module.exports.index=async function(req,res){
+    
+    let posts=await Post.find({})
+    .sort('-createdAt')
+    .populate('user')
+    .populate({
+      path:'comments',
+      populate:{
+        path:'user'
+      }
+    });
+
+    return res.json(200,{
+        message:"List of posts",
+        posts:posts    
+    });
+
+}
+
+module.exports.destroy =async function(req,res){
+    
+    try{
+        
+
+
+       let post= await Post.findById(req.params.id);
+       
+       if(post.user==req.user.id){
+       
+         post.remove();
+
+         await Comment.deleteMany({post:req.params.id});
+         
+         return res.json(200,{
+             message:"Post and associated comments deleted successfully"
+         });
+         
+      
+     }
+    else{
+         
+         return res.json(401,{
+             message:"You cannot delete this post"
+         });
+         
+      }
+      
+   }catch(err){
+       
+       console.log('api delete error',err);
+
+       return res.json(500,{
+           message:"Internal server error"
+       });
+   }
+           
+    
+  
+
+}

controllers/api/v1/users_api.js

@@ -0,0 +1,32 @@
+const User=require('../../../models/user');
+const jwt=require('jsonwebtoken');
+
+module.exports.createSession= async function(req,res){
+    
+    try{
+        let user=await User.findOne({email:req.body.email});
+
+         if(!user || user.password!=req.body.password)
+         {
+             return res.json(422,{
+                message:"Invalid Username or Password"
+             });
+         }
+         
+         return res.json(200,{
+             message:"Successfully Signed In, here is your token,please keep it safe !",
+             data:{
+                 token:jwt.sign(user.toJSON(),'codeial',{expiresIn:'100000'})
+             }
+
+         })
+
+    }catch(err)
+    {
+        console.log('user api error',err);
+
+        return res.json(500,{
+            message:"Internal server error"
+        });
+    } 
+}

controllers/users_controller.js

@@ -48,8 +48,15 @@ module.exports.update=async function(req,res){
 
 
                     if(user.avatar){
-                     
-                        fs.unlinkSync(path.join(__dirname,'..',user.avatar));
+
+             
+                            
+                        if(fs.existsSync(path.join(__dirname,'..',user.avatar))){
+
+                           fs.unlinkSync(path.join(__dirname,'..',user.avatar));
+
+                        };
+                        
 
                     }
 

index.js

@@ -8,6 +8,7 @@ const db = require('./config/mongoose');
 const session = require('express-session');
 const passport = require('passport');
 const passportLocal = require('./config/passport-local-strategy');
+const passportJWT = require('./config/passport-jwt-strategy');
 const MongoStore=require('connect-mongo')(session);
 const sassMiddleware=require('node-sass-middleware');
 const flash = require('connect-flash');

models/user.js

@@ -32,6 +32,12 @@ const userSchema=new mongoose.Schema({
 
 });
 
+userSchema.methods.toJSON = function() {
+    var obj = this.toObject();
+    delete obj.password;
+    return obj;
+   }
+
 var storage = multer.diskStorage({
     destination: function (req, file, cb) {
       cb(null,path.join(__dirname,'..',AVATAR_PATH));