diff options
Diffstat (limited to 'routes')
| -rw-r--r-- | routes/index.js | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/routes/index.js b/routes/index.js index 457fbd1..60a2c28 100644 --- a/routes/index.js +++ b/routes/index.js @@ -1,6 +1,11 @@ var dbFile = require("../node_simple.js"); var express = require('express'); var router = express.Router(); +var csrf = require('csurf'); // Cross-Site Request Forgery prevention +var passport = require('passport'); + +var csrfProtection = csrf(); +router.use(csrfProtection); // router is protected /* Render/GET homepage. */ router.get('/', function(req, res, next) { @@ -40,6 +45,21 @@ router.get('/search', function(req, res, next) { res.redirect('/exams/' + courseName); }); +router.get('/signup', function(req, res, next) { + res.render('signup', {csrfToken: req.csrfToken()}); +}); + +router.post('/signup', function(req, res, next) { + res.redirect('/'); +}); + +/*router.post('/signup', passport.authenticate('local.signup', { + sucessRedirect: '/profile', + failureRedirect: '/signup', + failureFlash: true +}));*/ + + /* app.get('/exams',function (req,res) { console.log(req.query.search); @@ -55,6 +75,8 @@ app.get('/exams.html', function (req,res) { });*/ + + function getExamsForCourseCode(courseCode) { dbFile.get_all_exams(courseCode, function (exams) { if (exams.length == 0){ |
