app.js

/*jslint unparam: true, node: true, plusplus: true, nomen: true, indent: 2, white: true, todo: true */
'use strict';

// Load local .env file if present to set env vars
require('dotenv').load();

var express             = require('express');
var favicon             = require('static-favicon');
var logger              = require('morgan');
var cookieParser        = require('cookie-parser');
var bodyParser          = require('body-parser');
var compression         = require('compression');
var session             = require('express-session');
var moment              = require('moment');
var passport            = require('passport');
var GitHubStrategy      = require('passport-github').Strategy;
var GoogleStrategy      = require('passport-google-oauth').OAuth2Strategy;
var Mongoose            = require('mongoose');
var MongoStore          = require('connect-mongo')(session);
var Cron                = require('./lib/cron');
var IndexController     = require('./controllers/index');
var AuthController      = require('./controllers/auth');
var BookingsController  = require('./controllers/bookings');
var GadgetsController   = require('./controllers/gadgets');
var UserController      = require('./controllers/users');


// Setup mongodb
Mongoose.connect(process.env.MONGODB_URL);
//Mongoose.set('debug', process.env.NODE_ENV === 'DEVELOPMENT');


//
// Setup passport strategies
//
passport.use(new GitHubStrategy({
    clientID: process.env.GITHUB_CLIENT_ID,
    clientSecret: process.env.GITHUB_CLIENT_SECRET,
    callbackURL: process.env.GITHUB_CALLBACK
  }, function (at, rt, user, cb) {
  return cb(null, user);
}));

passport.use(new GoogleStrategy({
  clientID: process.env.GOOGLE_CLIENT_ID,
  clientSecret: process.env.GOOGLE_CLIENT_SECRET,
  callbackURL: process.env.GOOGLE_CALLBACK
}, function (at, rt, user, cb) {
  // asynchronous verification, for effect...
  process.nextTick(function () {
    return cb(null, user);
  });
}));

passport.serializeUser(function (user, done) { done(null, user); });
passport.deserializeUser(function (user, done) { done(null, user); });


//
// Setup express
//
var app = express();
app.set('port', process.env.PORT || 3000);
app.set('views', __dirname + '/views');
app.set('view engine', 'jade');
app.disable('view cache');
app.use(favicon());
app.use(compression());
app.use(cookieParser());
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({ extended: true }));
app.use(session({
  secret: process.env.SESSION_COOKIE_SECRET,
  store: new MongoStore({ mongooseConnection: Mongoose.connection })
}));
app.use(passport.initialize());
app.use(passport.session());
app.use(express.static(__dirname + '/public', { maxAge: 86400000 * 10 }));

app.use(function (req, res, next) {
  // make current user obj available in templates
  app.locals.user = req.session.user;

  if (req.url.indexOf('/gadgets/top') !== -1) {
    app.locals.page = 'top';
  } else if (req.url.indexOf('/bookings') !== -1) {
    app.locals.page = 'bookings';
  } else if (req.url.indexOf('/users') !== -1) {
    app.locals.page = 'users';
  } else {
    app.locals.page = 'gadgets';
  }
  next();
});


// Start scheduler for recurring tasks
// Cron.start();


// Register view helper
app.locals.fmtDatetime = function (datetime) {
  if (!datetime) { return '-'; }
  return moment(datetime).format(process.env.DATE_TIME_FORMAT);
};


//
// Setup routes
//
app.get ('/',                                                       IndexController.index);
app.get ('/imprint',                                                IndexController.imprint);
app.get ('/users/auth/google',                                      AuthController.authWithGoogle);
app.get ('/users/auth/google/callback',                             AuthController.authWithGoogleCb);
app.get ('/users/auth/github',                                      AuthController.authWithGithub);
app.get ('/users/auth/github/callback',                             AuthController.authWithGithubCb);
app.get ('/users/drop',                                             UserController.drop);
app.get ('/users/logout',                 AuthController.isAuth,    AuthController.logout);
app.get ('/users/',                       AuthController.isAdmin,   UserController.listAll);
app.get ('/users/:id',                    AuthController.isAdmin,   UserController.list);
app.post('/users/:id',                    AuthController.isAdmin,   UserController.update);
app.get ('/users/:id/remove',             AuthController.isAdmin,   UserController.remove);
app.all ('/gadgets',                      AuthController.isAuth,    GadgetsController.listAll);
app.get ('/gadgets/top',                  AuthController.isAuth,    GadgetsController.listTop);
app.get ('/gadgets/new',                  AuthController.isAdmin,   GadgetsController.create);
app.get ('/gadgets/import',               AuthController.isAdmin,   GadgetsController.uploadCsv);
app.post('/gadgets/import',               AuthController.isAdmin,   GadgetsController.importCsv);
app.get ('/gadgets/:id',                  AuthController.isAuth,    GadgetsController.list);
app.get ('/gadgets/:id/edit',             AuthController.isAdmin,   GadgetsController.edit);
app.post('/gadgets/:id/save',             AuthController.isAdmin,   GadgetsController.save);
app.get ('/gadgets/:id/remove',           AuthController.isAdmin,   GadgetsController.remove);
app.get ('/bookings/:status?',            AuthController.isAuth,    BookingsController.listAll);
app.get ('/bookings/transfer/:hash/:uId',                           BookingsController.transfer);
app.get ('/bookings/:id/new',             AuthController.isAuth,    BookingsController.create);
app.get ('/bookings/:id/edit',            AuthController.isAuth,    BookingsController.edit);
app.post('/bookings/:id/save',            AuthController.isAuth,    BookingsController.save);
app.get ('/bookings/:id/remove',          AuthController.isAuth,    BookingsController.remove);
app.get ('/bookings/:id/handout',         AuthController.isAdmin,   BookingsController.handout);
app.get ('/bookings/:id/takeback',        AuthController.isAdmin,   BookingsController.takeback);


// Error handling
app.use(function (err, req, res, next) {

  err.statusCode  = err.statusCode  || 500;
  err.message     = err.message     || 'Internal server error';

  console.error(err.message);
  if (app.get('env') === 'DEVELOPMENT') {
    console.error(err.stack);
  }

  switch (err.statusCode) {
    case 401:
      //err.message = 'Unauthorized';
      return res.redirect('/');
    case 403:
      err.message = 'Forbidden';
      break;
  }

  res.statusCode = err.statusCode;
  res.render('error', {
    title: err.message,
    error: err,
    showStacktrace: (app.get('env') === 'DEVELOPMENT')
  });
});


// assume 404 since no middleware responded
app.use(function (req, res) {
  res.status(404).render('404', {
    title: '404',
    url: req.originalUrl
  });
});


app.listen(app.get('port'), function () {
  console.log(
    'Express server listening on port %s in %s mode',
    app.get('port'), process.env.NODE_ENV
  );
});