var async = require("async"); var cradle = require("cradle"); var express = require("express"); var fs = require("fs"); var http = require("http"); var https = require("https"); var log4js = require("log4js"); var scrypt = require("scrypt"); //load own tools (tiny functions that help a little ;-) var tools = require("./src/Tools.js"); //load settings var settings = require("./src/Settings.js"); //initialize couch connector cradle.setup(settings.couchdb); var couch = new(cradle.Connection); var db = couch.database(settings.couchdb.database); db.exists(function(err, exists) { if(err) { console.log("An error occured - could not talk to couchdb:"); console.log(err); process.exit(1); } else if(exists == true) { console.log("Database exists :-)"); } else { console.log("Database does not exist :-("); process.exit(1); } }); //begin setting up the dashboard app var app = express(); app.use(express.cookieParser()); app.use(express.session({ "secret": settings.general.sessionsecret })); app.use(express.bodyParser()); //some logging for debugging app.use(function(req, res, next) { console.log("%s %s", req.method, req.url); next(); }); //initialize fresh session app.use(function(req, res, next) { if(req.session.initialized != true) { req.session.initialized = true; req.session.data = { "user": null, "profile": {}, "login": false, "lastActivity": new Date() }; } console.log(["Session Data", req.session.data]); next(); }); //deliver static files by default app.use("/", express.static(__dirname + '/static')); //API: /session app.use("/session", function(req, res) { res.setHeader("Content-Type", "application/json"); //refresh session if(req.method == "GET") { if(req.session.data.login == true) { if(new Date() - req.session.data.lastActivity < 5 * 60 * 1000) { req.session.data.lastActivity = new Date(); } else { req.session.data.login = false; } } res.send(200, JSON.stringify({ "login": req.session.data.login })); } //check user credentials, update session data if(req.method == "PUT") { if(req.session.data.login == true) { res.send(200, JSON.stringify({ "success": false })); } var params = req.body; if(tools.reqParamsGiven() == false) { res.send(200, JSON.stringify({ "login": req.session.data.login })); return; } req.session.data.login = true; req.session.data.lastActivity = new Date(); res.send(200, JSON.stringify({ "login": req.session.data.login })); } //destroy the session if(req.method == "DELETE") { req.session.data.login = false; res.send(200, JSON.stringify({ "login": req.session.data.login })); } }); //API: /user app.use("/user", function(req, res) { res.setHeader("Content-Type", "application/json"); if(req.method == "PUT") { var params = req.body; if(tools.reqParamsGiven(["username", "password", "email"], params) == false) { res.send(500, JSON.stringify({ "success": false, "err": "This method needs username, password and email!" })); return; } //check if user already exists db.get(params.username, function (err, doc) { if(!err || err.error != "not_found" || err.reason != "missing") { res.send(200, JSON.stringify({ "success": false, "err": "Username already taken!" })); return; } //get: {"0":{"error":"not_found","reason":"missing"}} scrypt.passwordHash(params.password, 10, function(err, pwHash) { var userDoc = { "_id": params.username, "auth": pwHash, "email": params.email, "type": "user" }; db.save(userDoc._id, userDoc, function(err, result) { if(err) { res.send(200, JSON.stringify({ "success": false, "err": err })); } else { res.send(200, JSON.stringify({ "success": true })); } }); }); }); } if(req.method == "GET") { res.send(200, JSON.stringify(req.session.data.user)); } if(req.method == "POST") { console.log(req); } if(req.method == "DELETE") { //verify credentials before erasing all data console.log(req); } }); //define 404 for everything else or 500 on error (ugly but i think it's useful) app.use(function(err, req, res, next) { if(err) { console.log(err.stack); res.send(500, "Oops, an error occured."); } else { res.send(404, "Sorry, nothing here."); } res.end(); }); //fire it up as https (or http - NOT recommended(!)) server if(settings.general.https == true) { var httpsOptions = { "cert": fs.readFileSync(settings.https.cert), "key": fs.readFileSync(settings.https.key) }; https.createServer(httpsOptions, app).listen(settings.general.listen.port, settings.general.listen.host); } else { http.createServer(app).listen(settings.general.listen.port, settings.general.listen.host); }