initial commit.

2017-04-07 01:29:05 +02:00
commit 7ff2926578
258 changed files with 83743 additions and 0 deletions
--- a/routes/api/sessions.js
+++ b/routes/api/sessions.js
@@ -0,0 +1,82 @@
+"use strict";
+
+var config = require('config');
+require('../../models/schema');
+
+var bcrypt = require('bcrypt');
+var crypo = require('crypto');
+
+var express = require('express');
+var router = express.Router();
+
+router.post('/', function(req, res) {
+  var data = req.body;
+  if (data.email && data.password) {
+    var email = req.body.email.toLowerCase();
+    var password = req.body["password"];
+
+    User.find({email: email, account_type: "email"}, (function (err, users) {
+      if (err) {
+        res.status(400).json({"error":"session.users"});
+      } else {
+
+        if (users.length == 1) {
+          var user = users[0];
+
+          if (bcrypt.compareSync(password, user.password_hash)) {
+            crypo.randomBytes(48, function(ex, buf) {
+              var token = buf.toString('hex');
+
+              var session = {
+                token: token,
+                ip: req.ip,
+                device: "web",
+                created_at: new Date()
+              };
+
+              if (!user.sessions)
+                user.sessions = [];
+
+              user.sessions.push(session);
+
+              user.save(function(err, result) {
+                // FIXME
+                var secure = process.env.NODE_ENV == "production" || process.env.NODE_ENV == "staging";
+                var domain = (process.env.NODE_ENV == "production") ? ".example.org" : "localhost";
+
+                res.cookie('sdsession', token, { domain: domain, httpOnly: true, secure: secure});
+                res.status(201).json(session);
+              });
+            });
+          }else{
+            res.sendStatus(403);
+          }
+        } else {
+          res.sendStatus(404);
+        }
+      }
+    }));
+  } else {
+    res.status(400).json({});
+  }
+});
+
+router.delete('/current', function(req, res, next) {
+  if (req.user) {
+    var user = req.user;
+    var newSessions = user.sessions.filter( function(session){
+      return session.token != req.token;
+    });
+    user.sessions = newSessions;
+    user.save(function(err, result) {
+      // FIXME
+      var domain = (process.env.NODE_ENV == "production") ? ".example.org" : "localhost";
+      res.clearCookie('sdsession', { domain: domain });
+      res.sendStatus(204);
+    });
+  } else {
+    res.sendStatus(404);
+  }
+});
+
+module.exports = router;