From 630c86aacf4594ffae2b13720e5b44f8b2557953 Mon Sep 17 00:00:00 2001
From: nanalelfe <nargiza.nosirova@mail.utoronto.ca>
Date: Sat, 23 Jul 2016 07:52:04 -0400
Subject: Added route protection for the admin panel, and additional for user.
 Nav changes depending on admin/user

---
 routes/user.js | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

(limited to 'routes/user.js')

diff --git a/routes/user.js b/routes/user.js
index 6167713..325b8ff 100644
--- a/routes/user.js
+++ b/routes/user.js
@@ -13,7 +13,7 @@ router.get('/logout', loggedIn, function (req, res, next) {
 });
 
 /* Render/GET user_profile page */
-router.get('/user_profile', loggedIn, function(req, res, next) {
+router.get('/user_profile', loggedIn, isUser, function(req, res, next) {
     res.render('user_profile_alt');
 });
 
@@ -93,6 +93,8 @@ router.post('/signin', loggedOut, function(req, res, next) {
 
 module.exports = router;
 
+/************** Route protection ********************/
+
 function loggedIn(req, res, next) {
     if (req.isAuthenticated()) {
         return next();
@@ -105,4 +107,11 @@ function loggedOut(req, res, next) {
         return next();
     }
     res.redirect('/');
-}
\ No newline at end of file
+}
+
+function isUser(req, res, next) {
+    if (req.user.email) {
+        return next();
+    }
+    res.redirect('/admin');
+}
-- 
cgit v1.2.3