server.js

'use strict';

var _ = require('lodash');
var express = require('express');
var compress = require('compression');
var cookieParser = require('cookie-parser');
var cookieSession = require('cookie-session');
var bodyParser = require('body-parser');
var morgan = require('morgan');
var path = require('path');

var config = require('./lib/config');
var Users = require('./lib/models/users');
var users = new Users();

var i18n = require('./lib/i18n');
i18n.init();
var locale = require('locale');

var passport = require('passport');
passport.serializeUser(function (user, done) {
  done(null, user.id);
});
passport.deserializeUser(function (id, done) {
  users.query('where', 'id', '=', id)
    .fetch()
    .then(function (col) {
      done(null, col.at(0).toJSON());
    })
    .catch(function (err) {
      done(err);
    });
});
passport.use(require('./lib/auth')(users));

var app = express();
app.use(morgan('dev')); // logger
app.use(compress());
app.use(bodyParser.json());
app.use(cookieParser());
app.use(cookieSession({
  secret: config.session.key
}));
app.use(passport.initialize());
app.use(passport.session());

app.set('view engine', 'ejs');
app.set('views', path.join(__dirname, '/views'));

app.use(locale(i18n.supported()));

app.use('/login', bodyParser.urlencoded({extended: false}));
app.get('/login', function (req, res) {
  res.render('login', {
    $$: i18n.getTranslator(req.locale),
    urlPrefix: config.web.urlPrefix
  });
});
app.post('/login',
  passport.authenticate('local', {
    successRedirect: config.web.urlPrefix + '/',
    failureRedirect: config.web.urlPrefix + '/login'
  })
);
app.get('/logout', function (req, res) {
  req.logout();
  res.redirect(config.web.urlPrefix + '/');
});

app.use('/api', ensureAuthenticated);
app.use('/api', require('./lib/api'));

app.get('/', ensureAuthenticated);
app.get('/', function (req, res) {
  res.render('index', {
    locale: req.locale,
    $$: i18n.getTranslator(req.locale),
    urlPrefix: config.web.urlPrefix
  });
});

app.get('/profile', ensureAuthenticated);
app.get('/profile', function (req, res) {
  res.send(_.omit(req.user, 'password'));
});

app.use('/admin', ensureAdmin);
app.use('/admin', require('./lib/admin')(users));

app.use(express.static(path.join(__dirname, 'public')));

const port = process.env.PORT || 8080;
app.listen(port);
console.log(new Date(), 'Server is now running on port', port);

function ensureAuthenticated (req, res, next) {
  if (!req.isAuthenticated()) {
    res.redirect(config.web.urlPrefix + '/login');
    next('Failed login attempt');
    return;
  }

  next();
}

function ensureAdmin (req, res, next) {
  ensureAuthenticated(req, res, function () {
    if (!req.user.admin) {
      res.json({error: 'access denied'});
    } else {
      next();
    }
  });
}