server.js

/*
 * CS 4241 Final Project - Server code
 * by Terry Hearst, Demi Karavoussianis, Kyle Reese, and Tom White
 */


// ####################
// ## INITIALIZE APP ##
// ####################

const express    = require("express")
const app        = express()
const session    = require("express-session")
const passport   = require("passport")
const Local      = require("passport-local").Strategy
const pass       = require("pwd")
const bodyParser = require("body-parser")
const moment     = require("moment")
const database   = require("./database.js")

// Parse JSON bodies
app.use(bodyParser.json())

// Serve our compiled react program
const directory = "client/build"
app.use(express.static(directory))

// Redirect to the default webpage
app.get("/", function(request, response)
{
	response.sendFile(__dirname + directory + "/index.html")
})


// ####################
// ## AUTHENTICATION ##
// ####################

passport.use(new Local(function(username, password, done)
{
	console.log("Attempted login: ", username)
	
	database.getUser(username).then(
	function(user)
	{
		if (user === null)
		{
			console.log("Fail - user not found")
			return done(null, false)
		}
		
		pass.hash(password, user.salt).then(function(result)
		{
			if (user.hash === result.hash)
			{
				console.log("Success")
				done(null, {"username": username, "password": password})
			}
			else
			{
				console.log("Fail - bad password")
				done(null, false)
			}
		})
	})
}))

app.use(session({"secret": "top 5 bruh moments", "resave": false, "saveUninitialized": false}))
app.use(passport.initialize())
app.use(passport.session())

app.post(
	"/login",
	passport.authenticate("local"),
	function(req, res)
	{
		res.send()
	}
)

app.post(
	"/signup",
	function(req, res)
	{
		console.log("Signup request: ", req.body.username)
		
		if (req.body.username === undefined || req.body.password === undefined
			|| req.body.username === "" || req.body.password === "")
		{
			console.log("Error: not all fields are filled")
			res.status(400) 	// Bad request
			res.send()
			return
		}
		
		database.getUser(req.body.username).then(
		function(user)
		{
			console.log(user)
			// Make sure user does not already exist
			if (user !== null)
			{
				console.log("Error: username ", req.body.username, " already exists")
				res.status(403) 	// Forbidden
				res.send()
				return
			}
			
			pass.hash(req.body.password).then(function(result)
			{
				database.createUser(req.body.username, result.salt, result.hash)
				console.log("Successfully created user ", req.body.username)
				res.json({"status": "success"})
			})
		})
	}
)

passport.serializeUser((user, done) =>
{
	console.log("Serialized user ", user.username)
	done(null, user.username)
})
passport.deserializeUser((username, done) =>
{
	console.log("Deserialized user ", username)
	
	database.getUser(username).then(
	function(user)
	{
		if (user === null)
		{
			done(null, false, {"message": "user not found - session not restored"})
		}
		else
		{
			done(null, user)
		}
	})
})


// ###########
// ## TASKS ##
// ###########

app.post(
	"/gettasks",
	function(req, res)
	{
		if (req.user === undefined)
		{
			res.status(401) // Unauthorized
			res.send()
			return
		}
		
		console.log("Getting tasks for: ", req.user.username)
		
		database.getUserTasks(req.user.username).then(
		function(tasks)
		{
			//console.log("tasks: ", tasks)
			
			tasks = tasks === undefined ? [] : tasks
			
			tasks = tasks.filter(task => task.completed === false)

			tasks.forEach((task) =>
			{
				const now = new moment()
				const dueDate = new moment(task.dueDate)
				
				const deltaTime = moment.duration(now.diff(dueDate))
				//console.log(deltaTime)
				task.deltaTime = deltaTime
			})
			
			tasks.sort(function(firstEl, secondEl)
			{
				return firstEl.deltaTime.asSeconds() - secondEl.deltaTime.asSeconds()
			})
			
			// Remove field so that they aren't sent to the frontend - they aren't needed
			tasks.forEach((task) =>
			{
				task.deltaTime = undefined
			})
			res.json(tasks)
		})
	}
)

app.post(
	"/createtask",
	function(req, res)
	{
		if (req.user === undefined)
		{
			res.status(401) // Unauthorized
			res.send()
			return
		}
		
		const task = req.body
		//console.log(task)
		
		database.getUser(req.user.username).then(
		function(user)
		{
			task.userId = user.id
			
			console.log("created task: ", task.title)
			database.createTask(task)
			
			res.status(200)
			res.send()
		})
	}
)

app.post(
	"/edittask",
	function(req, res)
	{
		if (req.user === undefined)
		{
			res.status(401) // Unauthorized
			res.send()
			return
		}
		
		const task = req.body
		const taskId = task.id
		task.priority = task.priority_text

		if(task.priority_)
		
		console.log("Updating task: ", taskId, task)
		
		task.id = undefined 	// Don't update the task id to be the same that it already is
		
		database.updateTask(taskId, task).then(
		function()
		{
			res.status(200)
			res.send()
		})
	}
)

// Not yet implemented in the database library
app.post(
	"/deletetask",
	function(req, res)
	{
		if (req.user === undefined)
		{
			res.status(401) // Unauthorized
			res.send()
			return
		}
		
		const json = req.body
		
		database.deleteTask(json.id)
		res.status(200)
		res.send()
	}
)


// ############
// ## LISTEN ##
// ############

database.startDB().then(() =>
{
	const listener = app.listen(process.env.PORT || 3000, function()
	{
		console.log("Your app is listening on port " + listener.address().port)
	})
})