user.controller.js

'use strict';

var User = require('./user.model');
var passport = require('passport');
var config = require('../../config/environment');
var jwt = require('jsonwebtoken');

var validationError = function(res, statusCode) {
  statusCode = statusCode || 422;
  return function(err){
    res.json(statusCode, err);
  };
};

function handleError(res, statusCode){
  statusCode = statusCode || 500;
  return function(err){
    res.send(statusCode, err);
  };
}

function respondWith(res, statusCode){
  statusCode = statusCode || 200;
  return function(){
    res.send(statusCode);
  };
}

/**
 * Get list of users
 * restriction: 'admin'
 */
exports.index = function(req, res) {
  User.findAsync({}, '-salt -password')
    .then(function (users) {
      res.json(200, users);
    })
    .catch(handleError(res));
};

/**
 * Creates a new user
 */
exports.create = function (req, res, next) {
  var newUser = new User(req.body);
  newUser.provider = 'local';
  newUser.role = 'user';
  newUser.saveAsync()
    .then(function(user) {
      var token = jwt.sign({_id: user._id }, config.secrets.session, { expiresInMinutes: 60*5 });
      res.json({ token: token });
    })
    .catch(validationError(res));
};

/**
 * Get a single user
 */
exports.show = function (req, res, next) {
  var userId = req.params.id;

  User.findByIdAsync(userId)
    .then(function (user) {
      if(!user) {
        return res.send(401);
      }
      res.json(user.profile);
    })
    .catch(function(err){
      return next(err);
    });
};

/**
 * Deletes a user
 * restriction: 'admin'
 */
exports.destroy = function(req, res) {
  User.findByIdAndRemoveAsync(req.params.id)
    .then(respondWith(res, 204))
    .catch(handleError(res));
};

/**
 * Change a users password
 */
exports.changePassword = function(req, res, next) {
  var userId = req.user._id;
  var oldPass = String(req.body.oldPassword);
  var newPass = String(req.body.newPassword);

  User.findByIdAsync(userId)
    .then(function(user) {
      user.authenticate(oldPass, function(authErr, authenticated) {
        if (authErr) res.send(403);

        if (authenticated) {
          user.password = newPass;
          user.saveAsync()
            .then(respondWith(res, 200))
            .catch(validationError(res));
        } else {
          res.send(403);
        }
      });
    })
    .catch(function(authErr){
      res.send(403);
    });
};

/**
 * Get my info
 */
exports.me = function(req, res, next) {
  var userId = req.user._id;

  User.findOneAsync({ _id: userId }, '-salt -password')
    .then(function(user) { // don't ever give out the password or salt
      if (!user) {
        return res.json(401);
      }
      res.json(user);
    })
    .catch(function(err){
      return next(err);
    });
    
};

/**
 * Authentication callback
 */
exports.authCallback = function(req, res, next) {
  res.redirect('/');
};