Changeset 466 for Dev/trunk/src/server/app.js

Timestamp:

06/26/13 14:43:57 (12 years ago)

Author:

hendrikvanantwerpen

Message:

Added authentication (fixed user now).

File:

• Dev/trunk/src/server/app.js (modified) (3 diffs)

Dev/trunk/src/server/app.js

@@ -4 +4 @@
 var fs = require("fs");
 var path = require("path");
-var proxy = require("./simple-http-proxy");
+var proxy = require("./util/simple-http-proxy");
 var _ = require("underscore");
 
@@ -31 +31 @@
         }
     }));
+    passport.serializeUser(function(user, done) {
+        done(null, user.username);
+    });
+    passport.deserializeUser(function(id, done) {
+        done(null, {username: id});
+    });
 
     var app = express();
@@ -56 +62 @@
     });
 
+    
     // url to login (might work on others as well?)
     // you should then have a session to work with
-    app.post('/api/login');
+    // should return a user info object
+    function returnUser(req,res) {
+        res.send(200, req.user);
+    }
+    app.post(
+        '/api/login',
+        passport.authenticate('local'),
+        returnUser);
 
+    // ensure we're authenticated on API calls
+    app.use('/api', function(req,res,next){
+        if (!req.user) {
+            return res.send(401,{error:"Login before accessing API."});
+        } else {
+            return next();
+        }
+    });
+    
+    app.get(
+        '/api/login',
+        returnUser);
+
+    app.post(
+        '/api/logout', function(req,res){
+            req.logout();
+            res.send(200,{});
+        });
+
+    app.get('/api/surveyRun/:id/response/csv',
+            function(req, res) {
+                var id = req.params.id;
+                // query CouchDB and build the CSV file
+                res.set({
+                    'Content-Type': 'text/csv',
+                    'Content-Disposition': 'attachment; filename=responses-'+id+'.csv'
+                });
+                res.send(200, "Response for surveyRun "+id);
+            });
+    
     // forward to couch
-    app.use('/data/couch', proxy(settings.couchDbURL));
+    app.use('/api/data', proxy(settings.couchDbURL));
 
     return app;