MusareFork/server/auth/auth-router.js

var express = require('express');
var authControllers = require('./auth-controller');

var auth = require('./index');
var authRouter = express.Router();
var r = require('../db');

var bcrypt = require('bcryptjs');

// GitHub
authRouter.use('/login/callback/github', auth.authenticate('github'), function (req, res) {
    res.redirect('/');
});
authRouter.get('/login/github', auth.authenticate('github', { scope: [ 'user:email' ] }));

// Local
authRouter.get('/login', auth.authenticate('local', {successRedirect: '/auth/user', failureRedirect: '/login'}), function(req, res) {
    // If this function gets called, authentication was successful.
    // `req.user` contains the authenticated user.
    res.redirect("/auth/user");
});

// Local
authRouter.get('/register', function(req, res) {
    req.checkQuery('email', 'Invalid email').isEmail();
    req.checkQuery('username', 'Invalid getparam').notEmpty();
    req.checkQuery('password', 'Invalid getparam').notEmpty();
    var query = req.query;

    var errors = req.validationErrors();
    if (errors) {
        res.send('There have been validation errors: ', 400);
        return;
    } else {
        //TODO Check if username/email already exists
        r.table("users").getAll(query.username.toLowerCase(), {index: "usernameL"}).isEmpty().run(r.conn, function(err, result) {
            if (err) throw err;
            if (result) {
                r.table("users").getAll(query.email.toLowerCase(), {index: "email"}).isEmpty().run(r.conn, function(err, result) {
                    if (err) throw err;
                    if (result) {
                        //TODO Hash password
                        var hash;
                        bcrypt.genSalt(10, function (err, salt) {
                            if (err) {
                                //TODO Throw error
                            } else {
                                bcrypt.hash(query.password, salt, function (err, hash) {
                                    if (err) {
                                        //TODO Throw error
                                    } else {
                                        var email = query.email.toLowerCase();
                                        var usernameL = query.username.toLowerCase();
                                        r.table('users')
                                            .insert({
                                                username: query.username,
                                                usernameL: usernameL,
                                                email: email,
                                                type: 'local',
                                                password: hash
                                            })
                                            .run(r.conn)
                                            .then(function (response) {

                                                return r.table('users')
                                                    .get(response.generated_keys[0])
                                                    .run(r.conn);
                                            })
                                            .then(function (newUser) {
                                                //TODO Log in
                                            });
                                    }
                                });
                            }
                        });
                    } else {
                        //TODO Throw error
                    }
                });
            } else {
                //TODO Throw error
            }
        });
    }
});

// All
authRouter.use('/user', authControllers.getUser);
authRouter.use('/logout', authControllers.logout);

module.exports = authRouter;