main.js

// npm install express
// npm install jade
// npm install mongolian
// npm install coffee-script
// checking trello

var express = require('express');
require('jade');
var DbMgr = require('./db2');
var vroutes = require('./vroutes');
var passport = require('passport');
var GoogleStrategy = require('passport-google-oauth').OAuth2Strategy;

var AppBaseUrl = 'http://vlcb.netrc.c9.io/';
if (process.env.NODE_ENV === 'production') {
  // set: heroku config:add NODE_ENV=production --app vlcb
  // set: heroku config:add VLCB_HEROKU_URL=http://vlcb.herokuapp.com --app vlcb
  AppBaseUrl = process.env.VLCB_HEROKU_URL;
}

// see example at https://github.com/jaredhanson/passport-google-oauth/blob/master/examples/oauth2/app.js
// see https://code.google.com/apis/console
var GOOGLE_CLIENT_ID = '813523971348-c4umm4e0vsqpqfs6m5m87h9h1ap24l4b.apps.googleusercontent.com';
var GOOGLE_CLIENT_SECRET = 'Vj3T18kyITMIWUE6DBDtMhFH';

passport.serializeUser(function(user, done) {
  done(null, user);
});

passport.deserializeUser(function(obj, done) {
  done(null, obj);
});

var PassportReturnUrl = AppBaseUrl + 'auth/google/return';

passport.use(new GoogleStrategy({
    clientID: GOOGLE_CLIENT_ID,
    clientSecret: GOOGLE_CLIENT_SECRET,
    callbackURL: PassportReturnUrl
  },  function(accessToken, refreshToken, profile, done) {
//    User.findOrCreate({ openId: identifier }, function(err, user) {
//      done(err, user);
//    });
        
        console.log("google has returned:");
        console.log("profile: dn:" + profile.displayName+" email:"+ profile.emails[0].value);
        // maybe this is where I figure out the authorization role? reader / editor
        //profile.identifier = identifier;
        
        // everyone is readonly, except for me
        profile.role = "readonly";
        if (profile.emails[0].value == "gnetrc@gmail.com") {
            profile.role = "vlcbEditor";
        }
        console.log("profile role: " + profile.role);
      return done(null, profile);        
  }
));


var vlcbAuthorization = function( req, res, next ) {
    // every page gets our role cookie
    res.cookie('vlcbRole', ((req.user) && (req.user.role == "vlcbEditor")) ? 'vlcbEditor' : 'readonly');

    if (req.method != "POST") {
        return next();   // not a POST, go ahead
    }
    if ( (req.user) && (req.user.role == "vlcbEditor")) {
        return next();   // POST and an editor, go ahead
    }
    // POST but not an editor !!
    //console.log("vlcba:", req.method, ":not permitted");
    // set a res.flashUnauthPost
    res.redirect('back');
};

var vlcbLogout = function(req, res){
  req.logout();
  res.redirect('back');
};


var app = express();
app.use(express.favicon());
app.use(express.logger('dev'));
app.use(express.cookieParser('foobar'));
app.use(express.bodyParser());
app.use(express.session({ secret: 'vlcb!083c4n#M.vAs' }));
app.use(passport.initialize());
app.use(passport.session());
app.use(vlcbAuthorization);
app.use(app.router);
app.use(express.static('views'));   // will check this dir for undefined pages...

app.set('views', __dirname + '/views');  // sets render dir

// html views
app.get('/', vroutes.vindex);
app.get('/rubbing/:rname?', vroutes.rubbing);
app.get('/brass/:bname?', vroutes.brass);
app.get('/church/:cname?', vroutes.church);
app.get('/map/:cname?', vroutes.map);
app.get('/blog', vroutes.blog);
app.get('/rss', vroutes.rss);
app.get('/note/:nname', vroutes.note);
app.get('/pic', vroutes.pic);
app.get('/software', vroutes.software);
app.get('/log', vroutes.log);
app.get('/dobatch', vroutes.doBatch);

// Authorization / Passport
var Gapip = 'https://www.googleapis.com/auth/userinfo.profile';
var Gapie = 'https://www.googleapis.com/auth/userinfo.email';
app.get('/auth/google', passport.authenticate('google', { scope: [ Gapip, Gapie ] } ),
    function(req,res) {
    });
app.get('/auth/google/return',  passport.authenticate('google', { successRedirect: '/', failureRedirect: '/auth/login' } ),
    function(req,res) {
    });
app.get('/auth/logout', vlcbLogout);
// rest interfaces
//     ... get all of category
app.get('/rest/Church', vroutes.restGetChurch);
app.get('/rest/Pic', vroutes.restGetPic);
app.get('/rest/Brass', vroutes.restGetBrass);
app.get('/rest/Rubbing', vroutes.restGetRubbing);
app.get('/rest/Blog', vroutes.restGetBlog);
app.get('/rest/Log', vroutes.restGetLog);
//     ... post one new item
app.post('/rest/Rubbing', vroutes.restPostRubbing);
app.post('/rest/Brass', vroutes.restPostBrass);
app.post('/rest/Pic', vroutes.restPostPic);
app.post('/rest/Blog', vroutes.restPostBlog);
//     ...
app.get('/rest/Note/:cat/:title?', vroutes.restGetNoteMD);
app.post('/rest/Note/:cat/:title?', vroutes.restPostNoteMD);
app.get('/rest/Church/:cname', vroutes.restGetChurchShow);  // TODO no more Church show
app.get('/rest/Church/:cname/Brass', vroutes.restGetBrassByChurch);
app.get('/rest/Brass/:bname/Rubbing', vroutes.restGetRubbingByBrass);
//     ... generic get Pics
app.get('/rest/:cat/:name/Pics', vroutes.restGetPicsByCategory);
app.get('/rest/:cat/:name/:field', vroutes.restGetGenericField);
app.post('/rest/:cat/:name/:field', vroutes.restPostGenericField);
//     ... other helpers
app.get('/rest/qa/:testname', vroutes.restQAtest);
app.get('/rest/dumpData', vroutes.restDumpData);
//     ... special data collections for x-edit selection buttons
app.get('/rest/xeditSelect/Church', vroutes.restXeditSelectChurch);
app.get('/rest/xeditSelect/Brass', vroutes.restXeditSelectBrass);


DbMgr.initConn( 'vlc', 'vlcmdb!', 'ds033307.mongolab.com', '33307', 'vlcbtest');
console.log('initConn - done');

app.listen(process.env.PORT);
console.log('listening on ' + process.env.PORT);