app.js

const express = require('express');
const passport = require('passport');
const bodyParser = require('body-parser');
const cookieParser = require('cookie-parser');
const session = require('express-session');
const FileStore = require('session-file-store')(session);
const mongoose = require('mongoose');
const path = require('path');
const bcrypt = require('bcrypt');
const GitHubStrategy = require('passport-github2').Strategy;

const config = require('./config');

const app = express();
const port = process.env.PORT || config.port;

const User = require('./models').User;
const Flight = require('./models').Flight;

// middleware

app.use(bodyParser.urlencoded({extended: true}));
app.use(bodyParser.json());
app.use(cookieParser());

app.use(session({
    name: 'sid',
    secret: config.sessionSecret,
    saveUninitialized: false,
    resave: false,
    cookie: {
        httpOnly: true,
        sameSite: true,
        maxAge: 24 * 60 * 60 * 1000
    },
    store: new FileStore({logFn: function() {}})
}));
app.use(passport.initialize());
app.use(passport.session());

passport.serializeUser(function(user, done) {
    done(null, user);
});

passport.deserializeUser(function(obj, done) {
    done(null, obj);
});

passport.use(new GitHubStrategy({
        clientID: config.GithubClientID,
        clientSecret: config.GithubClientSecret,
        callbackURL: config.GithubCallbackURL
    },
    function(accessToken, refreshToken, profile, done) {
        User.findOrCreate({ githubId: profile.id }, function (err, user) {
            return done(err, user._id);
        });
    }
));

mongoose.connect(config.dbConnection, { useNewUrlParser: true, useUnifiedTopology: true });

function auth(req, res, next) {
    if (typeof req.session.userId !== 'undefined' && req.session.userId !== null) {
        next();
    } else {
        res.json({code: 403, msg: "not logged in"});
    }
}

app.get('/auth/github', passport.authenticate('github', { scope: [ 'profile' ] }));

app.get('/auth/github/callback',
    passport.authenticate('github', { failureRedirect: '/login.html' }),
    function(req, res) {
        req.session.userId = req.user;
        res.redirect('/');
    }
);

app.get('/getUpcoming', auth, function (req, res) {
    Flight.find({owner: req.session.userId}, function (err, docs) {
        res.json(docs.filter((item) => new Date(item.date).valueOf() >= new Date().valueOf()));
    });
});

app.get('/getPast', auth, function (req, res) {
    Flight.find({owner: req.session.userId}, function (err, docs) {
        res.json(docs.filter((item) => new Date(item.date).valueOf() < new Date().valueOf()));
    });
});

app.get('/logout', auth, function (req, res) {
    req.logout();
    req.session.destroy(function(err) {
        res.clearCookie('sid');
        res.redirect('/login.html');
    });
});

app.post('/login', function (req, res) {
    User.findOne({username: req.body.username}, function(err, result) {
        if (result != null) {
            bcrypt.compare(req.body.password, result.password, function(err, ok) {
                if (ok) {
                    req.session.userId = result._id;
                    res.json({code: 200, msg: "success"});
                } else {
                    res.json({code: 400, msg: "invalid credentials"});
                }
            });
        } else {
            res.json({code: 400, msg: "invalid credentials"});
        }
    });
});

app.post('/reg', function (req, res) {
    if (req.body.username === "" || req.body.password === "")
        res.json({code: 401, msg: "username or password cannot be empty"});
    else {
        User.findOne({username: req.body.username}, function (err, result) {
            if (result != null) {
                res.json({code: 401, msg: "The username already exists."});
            } else {
                const user = {};
                user.username = req.body.username;
                user.password = bcrypt.hashSync(req.body.password, 10);

                const newUser = new User(user);
                newUser.save(function (err, docs) {
                    req.session.userId = docs._id;
                    res.json({code: 200, msg: "success"});
                });
            }
        });
    }
});

app.post('/add', auth, function (req, res) {
    req.body.owner = req.session.userId;
    const newFlight = new Flight(req.body);
    newFlight.save().then(r => {
        res.json({code: 200, msg: 'success'});
    });
});

app.post('/del', auth, function (req, res) {
    Flight.findOneAndRemove({'_id': req.body.id, 'owner': req.session.userId}, function (err, docs) {
        res.json({code: 200, msg: 'success'});
    });
});

app.post('/queryFlight', auth, function (req, res) {
    Flight.findOne({'_id': req.body.id, 'owner': req.session.userId}, function (err, result) {
        if (result != null) {
            res.json({code: 200, msg: 'success', result});
        } else {
            res.json({code: 400, msg: 'The specific entry does not exist or not belong to the user.'});
        }
    });
});

app.post('/editFlight', auth, function (req, res) {
    Flight.findOneAndUpdate({'_id': req.body.id, 'owner': req.session.userId}, req.body, function (err, result) {
        if (result != null) {
            res.json({code: 200, msg: 'success', result});
        } else {
            res.json({code: 400, msg: 'The specific entry does not exist or not belong to the user.'});
        }
    });
});

app.use('/', express.static(path.join(__dirname, 'public')));

app.listen(port, () => {
    console.log(`Listening at ${port}`)
});