var express = require('express'); var router = express.Router(); var csrf = require('csurf'); // Cross-Site Request Forgery prevention var passport = require('passport'); var dbFile = require("../node_simple.js"); var Promise = require('promise'); var csrfProtection = csrf(); router.use(csrfProtection); // router is protected router.get('/logout', loggedIn, function (req, res, next) { req.logout(); res.redirect('/'); }); /* Render/GET user_profile page */ router.get('/user_profile', loggedIn, isUser, function(req, res, next) { req.session.messages = null; var comments = []; var inbox = []; var error = null; var follows = []; function getComments() { return new Promise(function(resolve, reject) { dbFile.retrieve_userComments_history(req.user.user_name, function (success, object) { if (!success) { // Need to redirect to an error page instead. console.log("Could not retrieve comments."); if (!comments.length) { var obj = { comment: 'Use a heap!', date: '2016-04-05', exam_id: 'some id', course_code : 'CSC263', term: 'Fall', year : 2016 }; comments.push(obj); comments.push(obj); } resolve(1); } else if (object.length){ req.user.comments = object.length; req.user.comment_list = object; resolve(1); } else { req.user.comments = object.length; resolve(1); } }); }); } function getMail(){ return new Promise(function(resolve, reject) { dbFile.checkMailbox(req.user.user_name, function(success, error, data, message){ if (success) { inbox = data; req.user.messages = inbox.length; // needed to display in layout var i = 0; inbox.forEach(function(element) { element.class = i; i ++; }); resolve(1); } else if (error) { // For testing purposes, remove later: if (!inbox.length) { var mail_data = { sender: 'The Dude', receiver: req.user.user_name, subject: 'Whoa look at this', message: 'I sent you a link on Skype', date: '2016-04-05' } } inbox.push(mail_data); inbox.push(mail_data); // Need to redirect to an error page instead. console.log("Could not retrieve mail."); resolve(1); } }); }); } function getFollows(){ return new Promise(function(resolve, reject) { dbFile.retrieveFollows(req.user.user_name, function(success, data){ req.user.examfollows = []; req.user.followerCount = data.length; if(success && data.length){ var count = 1; data.forEach(function(item){ dbFile.get_exam_byID(item, function(success, error, data){ if(success){ req.user.examfollows.push(data); if(count == req.user.followerCount ){ console.log(req.user.examfollows); resolve(1); }else{ count++; } }else{ console.log("Error: Could not fetch one or more exams;"); resolve(1); } }) }); } else if(success && !data.length){ resolve(1); console.log("Success: But no follows found;"); } else{ //error error = data; console.log(error); resolve(1); } }); }); } /*function solutionsCount() { return new Promise(function (resolve, reject) { dbFile.retrieve_userSolutions_history(req.user.username, function (bool, results) { if (!bool) { error = 'Error: could not retrieve Answered count'; resolve(1); } else { console.log("RESULTS: "); console.log(results); resolve(1); } }); }); }*/ getComments().then(getMail).then(getFollows).then(function (data) { console.log('got here fere'); res.render('user_profile_alt', {inbox: inbox, error: error, csrfToken: req.csrfToken(), userProfile: true}); }); //res.render('user_profile_alt', {comments : comments, inbox: inbox, csrfToken: req.csrfToken()}); }); router.get('/signup', loggedOut, function(req, res, next) { res.render('signup', {csrfToken: req.csrfToken(), success: req.session.success, errors: req.session.errors}); req.session.errors = null; }); router.get('/signup/failed', loggedOut, function(req, res, next) { var msg = req.flash('error'); res.render('signup', {csrfToken: req.csrfToken(), success: req.session.success, errors: req.session.errors, flashMsg: msg}); }); router.get('/signin', loggedOut, function (req, res, next) { var msg = req.flash('error'); res.render('signin', { csrfToken: req.csrfToken(), success: req.session.success, errors: req.session.errors, flashMsg: msg }); }); router.post('/signup', loggedOut, function(req, res, next) { req.assert('fname', 'Please enter a valid first name.').notEmpty().withMessage('First name required.').isAlpha(); req.check('lname', 'Please enter a valid first name.').notEmpty().withMessage('Last name required.').isAlpha(); req.check('email', 'Enter a valid Email address').notEmpty().withMessage('Email required').isEmail(); req.check('usrname', 'Enter a valid username').notEmpty().withMessage('Username required.'); req.check('password', "Password should be between 6 and 12 characters.") .notEmpty().withMessage('Password required').isLength({min: 6, max: 12}); req.check('password', "The confirmation password doesn't match.").equals(req.body.confirmPassword); // phone number optional if (req.body.phone_num){ req.check('phone_num', 'Please enter a valid phone number').isMobilePhone('en-CA'); } var errors = req.validationErrors(); if (errors) { req.session.errors = errors; req.session.success = false; res.redirect('/user/signup'); } else { console.log("GOT SUCCESS"); passport.authenticate('local_signup', { successRedirect: '/user/user_profile', failureRedirect: '/user/signup/failed', failureFlash: true })(req, res); } }); router.post('/signin', loggedOut, function(req, res, next) { req.check('usrname', 'Username field is empty.').notEmpty(); req.check('password', "Password field is empty.").notEmpty(); var errors = req.validationErrors(); if (errors) { req.session.errors = errors; req.session.success = false; res.redirect('/signin'); } else { passport.authenticate('local_signin', { successRedirect: '/user/user_profile', failureRedirect: '/user/signin', failureFlash: true })(req, res); } }); router.post('/user_profile/send_message', loggedIn, function(req, res, next) { if (req.user.user_name === req.body.receiver_username) { req.session.messages = {error : 'You cannot send a message to yourself.'}; res.redirect('/user/user_profile/'); } else { var date = new Date(); var current_date = date.toString().slice(0, 24); var subject = req.body.subject; if (!subject) { subject = '(none)'; } var mail_data = { sender: req.user.user_name, receiver: req.body.receiver_username, subject: subject, message: req.body.message, date: current_date }; //console.log(mail_data); dbFile.sendMail(mail_data, function(success, error, message) { if ((!success && !error) || (error)) { req.session.messages = {error : message}; res.redirect('/user/user_profile/'); } else { req.session.messages = {success: message}; res.redirect('/user/user_profile/'); //$('#profile-send-message').show(); } }); } }); /* Adds a solution into the database, redirect to exam/question/solution page */ router.post('/submit_solution/:examID/:qID', function(req,res){ // Get required fields from body // Populate this data /* var Data = { exam_id: fields[0], q_id: fields[1], text: fields[2], votes: 0, comments: [], author: fields[3] };*/ var examID = req.params.examID; var qID = req.params.qID; var text = req.body.solution, votes = 0, comments = [], author = req.user.user_name; var fields = [examID, qID, text, author]; console.log(fields); // Add to database dbFile.add_solution(fields, function(addedSolution, statusMsg){ if(addedSolution){ req.session.messages = {success : statusMsg}; }else{ req.session.messages = {error : statusMsg}; } //Redirect to solutions page again res.redirect('/solutions/' + examID + '/' + qID); }); }); /* Routed here from Solutions page (add solution button) * Renders add_solution page for response.*/ router.get('/add_solution/:examID/:qID', function (req, res, next) { var examID = req.params.examID; var qID = req.params.qID; // Must be a logged in user to access if(req.isAuthenticated()){ res.render('add_solutions', {csrfToken: req.csrfToken(), examID: examID, qID: qID}); } else { var message = "Must be logged in to add a solution!"; req.session.messages = {error : message}; res.redirect('/solutions/' + examID + '/' + qID); } }); // Authentication check in code router.post('/comment/submit/:examID/:qID/:solID', function(req, res, next){ var examID = req.params.examID; var qID = req.params.qID; var comment = req.body.comment; var username = req.user.user_name; var solutionID = req.params.solID; // Must be a logged in user to access var fields = [comment, username]; if(req.isAuthenticated()){ dbFile.add_comment(solutionID, fields, function(commentAdded, statusMsg){ if(commentAdded){ req.session.messages = {success : statusMsg}; } else{ req.session.messages = {error : statusMsg}; } res.redirect('/solutions/' + examID + '/' + qID); }); } else { //User not logged in var message = "Must be logged in to comment!"; req.session.messages = {error : message}; res.redirect('/solutions/' + examID + '/' + qID); } }); router.post('/solution/vote/:examID/:qID/:solID', function(req, res, next){ var vote = req.body.vote; var examID = req.params.examID; var qID = req.params.qID; var solutionID = req.params.solID; if(req.isAuthenticated()){ dbFile.vote_solution(solutionID, vote, function(voteCounted, statusMsg){ if(voteCounted){ res.redirect('/solutions/' + examID + '/' + qID); }else{ req.session.messages = {error : statusMsg}; res.redirect('/solutions/' + examID + '/' + qID); } }); } else { //User not logged in var message = "Must be logged in to Vote!"; req.session.messages = {error : message}; res.redirect('/solutions/' + examID + '/' + qID); } }); router.post('/follow_exam/:examID',function (req, res) { var examId = req.params.examID; if (req.isAuthenticated()){ console.log("Exam Id follow exam: " + examId); console.log("Username follow exam: " + req.user.user_name); dbFile.followExam(req.user.user_name,examId,function (success, message) { if (success){ req.session.messages = {success : message}; res.redirect('/questions/' + examId); }else{ req.session.messages = {error : message}; res.redirect('/questions/' + examId); } }); }else{ var message = "Must be logged in to follow an exam!"; console.log(message); req.session.messages = {error : message}; res.redirect('/questions/' + examId); } }); module.exports = router; /************** Route protection ********************/ function loggedIn(req, res, next) { if (req.isAuthenticated()) { return next(); } res.redirect('/'); } function loggedOut(req, res, next) { if (!req.isAuthenticated()) { return next(); } res.redirect('/'); } function isUser(req, res, next) { if (req.user && req.user.email) { return next(); } res.redirect('/admin'); }