path: root/routes/user.js

var express = require('express');
var router = express.Router();
var csrf = require('csurf'); // Cross-Site Request Forgery prevention
var passport = require('passport');

var dbFile  = require("../node_simple.js");
var Promise = require('promise');

var csrfProtection = csrf();
router.use(csrfProtection); // router is protected


router.get('/logout', loggedIn, function (req, res, next) {
    req.logout();
    res.redirect('/');
});


/* Render/GET user_profile page */
router.get('/user_profile', loggedIn, isUser, function(req, res, next) {
    req.session.messages = null;

    var comments = [];
    var inbox = [];
    function getComments() {
        console.log('in getComments');
        return new Promise(function(resolve, reject) {
            dbFile.retrieve_userComments_history(req.user.user_name, function (success, object) {
                if (!success) {
                    // Need to redirect to an error page instead.
                    console.log("Could not retrieve comments.");
                    if (!comments.length) {
                        var obj = {
                            comment: 'Use a heap!',
                            date: '2016-04-05',
                            exam_id: 'some id',
                            course_code : 'CSC263',
                            term: 'Fall',
                            year : 2016
                        };
                        comments.push(obj);
                        comments.push(obj);

                    }

                    resolve(1);
                } else if (object.length){
                    comments = object;
                    resolve(1);
                } else {
                    resolve(1);
                }

            });
        });
    }
    function getMail(){
        console.log('ing getMail');
        return new Promise(function(resolve, reject) {

            dbFile.checkMailbox(req.user.user_name, function(success, error, data, message){
                if (success) {
                    inbox = data;
                    resolve(1);
                } else if (error) {
                    // For testing purposes, remove later:
                    if (!inbox.length) {
                        var mail_data = {
                            sender: 'The Dude', receiver: req.user.user_name,
                            subject: 'Whoa look at this',
                            message: 'I sent you a link on Skype',
                            date: '2016-04-05'
                        }
                    }
                    inbox.push(mail_data);
                    inbox.push(mail_data);
                    // Need to redirect to an error page instead.
                    console.log("Could not retrieve mail.");
                    resolve(1);
                }
            });
        });
    }
    getComments().then(getMail).then(function (data) {
        console.log('got here');
        res.render('user_profile_alt', {comments : comments, inbox: inbox, csrfToken: req.csrfToken()});
    });

    //res.render('user_profile_alt', {comments : comments, inbox: inbox, csrfToken: req.csrfToken()});
});

/* Adds a solution into the database, redirect to exam/question/solution page */
router.post('/submit_solution/:examID/:qID', function(req,res){
    // Get required fields from body
    // Populate this data
    /* var Data = {
     exam_id: fields[0],
     q_id: fields[1],
     text: fields[2],
     votes: 0,
     comments: [],
     author: fields[3]
     };*/

    var examID = req.params.examID;
    var qID = req.params.qID;

    var text = req.body.solution,
        votes = 0,
        comments = [],
        author = req.user.user_name;

    var fields = [examID, qID, text, author];
    console.log(fields);
    // Add to database
    dbFile.add_solution(fields, function(addedSolution, statusMsg){
        if(addedSolution){
            console.log("Success!");
        }else{
            console.log("Failed to add solution!");
        }
        console.log(statusMsg);

        //Redirect to solutions page again
        res.redirect('/solutions/' + examID + '/' + qID);

    });

});

/* Routed here from Solutions page (add solution button)
*  Renders add_solution page for response.*/
router.get('/add_solution/:examID/:qID', function (req, res, next) {
    var examID = req.params.examID;
    var qID = req.params.qID;

    // Must be a logged in user to access
    if(req.isAuthenticated()){
        res.render('add_solutions', {csrfToken: req.csrfToken(), examID: examID, qID: qID});
    } else {
        res.redirect('/'); // Change this to go back to the solutions page
    }

});

router.get('/signup', loggedOut, function(req, res, next) {
    res.render('signup', {csrfToken: req.csrfToken(), success: req.session.success, errors: req.session.errors});
    req.session.errors = null;
});

router.get('/signup/failed', loggedOut, function(req, res, next) {
    var msg = req.flash('error');

    res.render('signup', {csrfToken: req.csrfToken(),
        success: req.session.success,
        errors: req.session.errors,
        flashMsg: msg});
});

router.get('/signin', loggedOut, function (req, res, next) {
    var msg = req.flash('error');
    res.render('signin', {
        csrfToken: req.csrfToken(),
        success: req.session.success,
        errors: req.session.errors,
        flashMsg: msg
    });
});

router.post('/signup', loggedOut, function(req, res, next) {
    req.assert('fname', 'Please enter a valid first name.').notEmpty().withMessage('First name required.').isAlpha();
    req.check('lname', 'Please enter a valid first name.').notEmpty().withMessage('Last name required.').isAlpha();
    req.check('email', 'Enter a valid Email address').notEmpty().withMessage('Email required').isEmail();
    req.check('usrname', 'Enter a valid username').notEmpty().withMessage('Username required.');
    req.check('password', "Password should be between 6 and 12 characters.")
        .notEmpty().withMessage('Password required').isLength({min: 6, max: 12});
    req.check('password', "The confirmation password doesn't match.").equals(req.body.confirmPassword);

    // phone number optional
    if (req.body.phone_num){
        req.check('phone_num', 'Please enter a valid phone number').isMobilePhone('en-CA');
    }

    var errors = req.validationErrors();
    if (errors) {
        req.session.errors = errors;
        req.session.success = false;
        res.redirect('/user/signup');
    } else {
        console.log("GOT SUCCESS");
        passport.authenticate('local_signup', {
            successRedirect: '/user/user_profile',
            failureRedirect: '/user/signup/failed',
            failureFlash: true
        })(req, res);

    }
});

router.post('/signin', loggedOut, function(req, res, next) {
    req.check('usrname', 'Username field is empty.').notEmpty();
    req.check('password', "Password field is empty.").notEmpty();

    var errors = req.validationErrors();
    if (errors) {
        req.session.errors = errors;
        req.session.success = false;
        res.redirect('/signin');
    } else {
        passport.authenticate('local_signin', {
            successRedirect: '/user/user_profile',
            failureRedirect: '/user/signin',
            failureFlash: true
        })(req, res);
    }


});

router.post('/user_profile/send_message', loggedIn, function(req, res, next) {
    var date = new Date();
    var current_date = date.toString().slice(0, 24);
    var subject = req.body.subject;
    if (!subject) {
        subject = '(none)';
    }
    var mail_data = {
        sender: req.user.user_name,
        receiver: req.body.receiver_username,
        subject: subject,
        message: req.body.message,
        date: current_date
    };

    console.log(mail_data);
    dbFile.sendMail(mail_data, function(success, error, message) {
        if ((!success && !error) || (error)) {
            req.session.messages  = {error : message};
            res.redirect('/user/user_profile');

        }  else {
            req.session.messages = {success: message};
            res.redirect('/user/user_profile');
        }
    });

});

// Authentication check in code
router.post('/comment/submit/:examID/:qID/:solID', function(req, res, next){
    var examID = req.params.examID;
    var qID = req.params.qID;
    var comment = req.body.comment;
    var username = req.user.user_name;
    var solutionID = req.params.solID;
    // Must be a logged in user to access
    var fields = [comment, username];
    if(req.isAuthenticated()){
        dbFile.add_comment(solutionID, fields, function(commentAdded, statusMessage){
           if(commentAdded){
               console.log("Success!");
           } else{
               console.log("Failed to add comment!");
           }
           console.log(statusMessage);
           res.redirect('/solutions/' + examID + '/' + qID);
        });

    } else { //User not logged in
        res.redirect('/'); // Change this to go back to the solutions page with "need to be logged in msg"
    }
});

router.post('/solution/vote/:examID/:qID/:solID', loggedIn, function(req, res, next){
    var vote = req.body.vote;
    var examID = req.params.examID;
    var qID = req.params.qID;
    var solutionID = req.params.solID;
    dbFile.vote_solution(solutionID, vote, function(voteCounted, statusMsg){
        if(voteCounted){
            console.log("Success!");
        }else{
            console.log("Action failed!");
        }
        console.log(statusMsg); // Change to display message above
        res.redirect('/solutions/' + examID + '/' + qID);
    });


});

module.exports = router;

/************** Route protection ********************/
function loggedIn(req, res, next) {
    if (req.isAuthenticated()) {
        return next();
    }
    res.redirect('/');
}

function loggedOut(req, res, next) {
    if (!req.isAuthenticated()) {
        return next();
    }
    res.redirect('/');
}

function isUser(req, res, next) {
    if (req.user && req.user.email) {
        return next();
    }
    res.redirect('/admin');
}