aboutsummaryrefslogtreecommitdiff
path: root/routes
diff options
context:
space:
mode:
Diffstat (limited to 'routes')
-rw-r--r--routes/index.js22
1 files changed, 22 insertions, 0 deletions
diff --git a/routes/index.js b/routes/index.js
index 457fbd1..60a2c28 100644
--- a/routes/index.js
+++ b/routes/index.js
@@ -1,6 +1,11 @@
var dbFile = require("../node_simple.js");
var express = require('express');
var router = express.Router();
+var csrf = require('csurf'); // Cross-Site Request Forgery prevention
+var passport = require('passport');
+
+var csrfProtection = csrf();
+router.use(csrfProtection); // router is protected
/* Render/GET homepage. */
router.get('/', function(req, res, next) {
@@ -40,6 +45,21 @@ router.get('/search', function(req, res, next) {
res.redirect('/exams/' + courseName);
});
+router.get('/signup', function(req, res, next) {
+ res.render('signup', {csrfToken: req.csrfToken()});
+});
+
+router.post('/signup', function(req, res, next) {
+ res.redirect('/');
+});
+
+/*router.post('/signup', passport.authenticate('local.signup', {
+ sucessRedirect: '/profile',
+ failureRedirect: '/signup',
+ failureFlash: true
+}));*/
+
+
/*
app.get('/exams',function (req,res) {
console.log(req.query.search);
@@ -55,6 +75,8 @@ app.get('/exams.html', function (req,res) {
});*/
+
+
function getExamsForCourseCode(courseCode) {
dbFile.get_all_exams(courseCode, function (exams) {
if (exams.length == 0){