First commit

api/controllers/todoListController.js

@@ -0,0 +1,51 @@
+'use strict';
+
+var mongoose = require('mongoose'),
+  Task = mongoose.model('Tasks');
+
+
+
+exports.list_all_tasks = function(req, res) {
+  Task.find({}, function(err, task) {
+    if (err)
+      res.send(err);
+    res.json(task);
+  });
+};
+
+
+exports.create_a_task = function(req, res) {
+  var new_task = new Task(req.body);
+  new_task.save(function(err, task) {
+    if (err)
+      res.send(err);
+    res.json(task);
+  });
+};
+
+exports.read_a_task = function(req, res) {
+  Task.findById(req.params.taskId, function(err, task) {
+    if (err)
+      res.send(err);
+    res.json(task);
+  });
+};
+
+exports.update_a_task = function(req, res) {
+  Task.findByIdAndUpdate(req.params.taskId, req.body, {new: true}, function(err, task) {
+    if (err)
+      res.send(err);
+    res.json(task);
+  });
+};
+// Task.remove({}).exec(function(){});
+exports.delete_a_task = function(req, res) {
+
+  Task.remove({
+    _id: req.params.taskId
+  }, function(err, task) {
+    if (err)
+      res.send(err);
+    res.json({ message: 'Task successfully deleted' });
+  });
+};

api/controllers/userController.js

@@ -0,0 +1,183 @@
+'use strict';
+
+var mongoose = require('mongoose'),
+  jwt = require('jsonwebtoken'),
+  bcrypt = require('bcrypt'),
+  User = mongoose.model('User'),
+  path = require('path'),
+  async = require('async'),
+  crypto = require('crypto'),
+  _ = require('lodash'),
+  hbs = require('nodemailer-express-handlebars'),
+  email = process.env.MAILER_EMAIL_ID || 'auth_email_address@gmail.com',
+  pass = process.env.MAILER_PASSWORD || 'auth_email_pass',
+  nodemailer = require('nodemailer');
+
+
+var smtpTransport = nodemailer.createTransport({
+  service: process.env.MAILER_SERVICE_PROVIDER || 'Gmail',
+  auth: {
+    user: email,
+    pass: pass
+  }
+});
+
+
+var handlebarsOptions = {
+  viewEngine: 'handlebars',
+  viewPath: path.resolve('./api/templates/'),
+  extName: '.html'
+};
+
+smtpTransport.use('compile', hbs(handlebarsOptions));
+
+
+exports.register = function(req, res) {
+  var newUser = new User(req.body);
+  newUser.hash_password = bcrypt.hashSync(req.body.password, 10);
+  newUser.save(function(err, user) {
+    if (err) {
+      return res.status(400).send({
+        message: err
+      });
+    } else {
+      user.hash_password = undefined;
+      return res.json(user);
+    }
+  });
+};
+
+exports.index = function(req, res) {
+  return res.sendFile(path.resolve('./public/home.html'));
+};
+
+exports.render_forgot_password_template = function(req, res) {
+  return res.sendFile(path.resolve('./public/forgot-password.html'));
+};
+
+exports.render_reset_password_template = function(req, res) {
+  return res.sendFile(path.resolve('./public/reset-password.html'));
+};
+
+exports.sign_in = function(req, res) {
+  User.findOne({
+    email: req.body.email
+  }, function(err, user) {
+    if (err) throw err;
+    if (!user || !user.comparePassword(req.body.password)) {
+      return res.status(401).json({ message: 'Authentication failed. Invalid user or password.' });
+    }
+    return res.json({ token: jwt.sign({ email: user.email, fullName: user.fullName, _id: user._id }, 'RESTFULAPIs') });
+  });
+};
+
+exports.loginRequired = function(req, res, next) {
+  if (req.user) {
+    next();
+  } else {
+    return res.status(401).json({ message: 'Unauthorized user!' });
+  }
+};
+
+exports.forgot_password = function(req, res) {
+  async.waterfall([
+    function(done) {
+      User.findOne({
+        email: req.body.email
+      }).exec(function(err, user) {
+        if (user) {
+          done(err, user);
+        } else {
+          done('User not found.');
+        }
+      });
+    },
+    function(user, done) {
+      // create the random token
+      crypto.randomBytes(20, function(err, buffer) {
+        var token = buffer.toString('hex');
+        done(err, user, token);
+      });
+    },
+    function(user, token, done) {
+      User.findByIdAndUpdate({ _id: user._id }, { reset_password_token: token, reset_password_expires: Date.now() + 86400000 }, { upsert: true, new: true }).exec(function(err, new_user) {
+        done(err, token, new_user);
+      });
+    },
+    function(token, user, done) {
+      var data = {
+        to: user.email,
+        from: email,
+        template: 'forgot-password-email',
+        subject: 'Password help has arrived!',
+        context: {
+          url: 'http://localhost:3000/auth/reset_password?token=' + token,
+          name: user.fullName.split(' ')[0]
+        }
+      };
+
+      smtpTransport.sendMail(data, function(err) {
+        if (!err) {
+          return res.json({ message: 'Kindly check your email for further instructions' });
+        } else {
+          return done(err);
+        }
+      });
+    }
+  ], function(err) {
+    return res.status(422).json({ message: err });
+  });
+};
+
+/**
+ * Reset password
+ */
+exports.reset_password = function(req, res, next) {
+  User.findOne({
+    reset_password_token: req.body.token,
+    reset_password_expires: {
+      $gt: Date.now()
+    }
+  }).exec(function(err, user) {
+    if (!err && user) {
+      if (req.body.newPassword === req.body.verifyPassword) {
+        user.hash_password = bcrypt.hashSync(req.body.newPassword, 10);
+        user.reset_password_token = undefined;
+        user.reset_password_expires = undefined;
+        user.save(function(err) {
+          if (err) {
+            return res.status(422).send({
+              message: err
+            });
+          } else {
+            var data = {
+              to: user.email,
+              from: email,
+              template: 'reset-password-email',
+              subject: 'Password Reset Confirmation',
+              context: {
+                name: user.fullName.split(' ')[0]
+              }
+            };
+
+            smtpTransport.sendMail(data, function(err) {
+              if (!err) {
+                return res.json({ message: 'Password reset' });
+              } else {
+                return done(err);
+              }
+            });
+          }
+        });
+      } else {
+        return res.status(422).send({
+          message: 'Passwords do not match'
+        });
+      }
+    } else {
+      return res.status(400).send({
+        message: 'Password reset token is invalid or has expired.'
+      });
+    }
+  });
+};

api/models/todoListModel.js

@@ -0,0 +1,23 @@
+'use strict';
+
+
+var mongoose = require('mongoose');
+var Schema = mongoose.Schema;
+
+var TaskSchema = new Schema({
+  name: {
+    type: String,
+    Required: 'Kindly enter the name of the task'
+  },
+  created_date: {
+    type: Date,
+    default: Date.now
+  },
+  status: {
+    type: String,
+    default: 'pending'
+  }
+});
+
+
+module.exports = mongoose.model('Tasks', TaskSchema);

api/models/userModel.js

@@ -0,0 +1,44 @@
+'use strict';
+
+var mongoose = require('mongoose'),
+  bcrypt = require('bcrypt'),
+  Schema = mongoose.Schema;
+
+/**
+ * User Schema
+ */
+var UserSchema = new Schema({
+  fullName: {
+    type: String,
+    trim: true,
+    required: true
+  },
+  email: {
+    type: String,
+    unique: true,
+    lowercase: true,
+    trim: true,
+    required: true
+  },
+  hash_password: {
+    type: String,
+    required: true
+  },
+  created: {
+    type: Date,
+    default: Date.now
+  },
+  reset_password_token: {
+    type: String
+  },
+  reset_password_expires: {
+    type: Date
+  }
+});
+
+UserSchema.methods.comparePassword = function(password) {
+  return bcrypt.compareSync(password, this.hash_password);
+};
+
+
+mongoose.model('User', UserSchema);

api/routes/todoListRoutes.js

@@ -0,0 +1,34 @@
+'use strict';
+
+module.exports = function(app) {
+  var todoList = require('../controllers/todoListController'),
+    userHandlers = require('../controllers/userController.js');
+
+  // todoList Routes
+
+  app.route('/')
+  .get(userHandlers.index);
+
+  app.route('/tasks')
+    .get(todoList.list_all_tasks)
+    .post(userHandlers.loginRequired, todoList.create_a_task);
+
+  app.route('/tasks/:taskId')
+    .get(todoList.read_a_task)
+    .put(todoList.update_a_task)
+    .delete(todoList.delete_a_task);
+
+  app.route('/auth/register')
+    .post(userHandlers.register);
+
+  app.route('/auth/sign_in')
+    .post(userHandlers.sign_in);
+
+  app.route('/auth/forgot_password')
+    .get(userHandlers.render_forgot_password_template)
+    .post(userHandlers.forgot_password);
+
+  app.route('/auth/reset_password')
+    .get(userHandlers.render_reset_password_template)
+    .post(userHandlers.reset_password);
+};

api/templates/forgot-password-email.html

@@ -0,0 +1,18 @@
+<!DOCTYPE html>
+<html>
+
+<head>
+    <title>Forget Password Email</title>
+</head>
+
+<body>
+    <div>
+        <h3>Dear {{name}},</h3>
+        <p>You requested for a password reset, kindly use this <a href="{{url}}">link</a> to reset your password</p>
+        <br>
+        <p>Cheers!</p>
+    </div>
+
+</body>
+
+</html>

api/templates/reset-password-email.html

@@ -0,0 +1,20 @@
+<!DOCTYPE html>
+<html>
+
+<head>
+    <title>Password Reset</title>
+</head>
+
+<body>
+    <div>
+        <h3>Dear {{name}},</h3>
+        <p>Your password has been successful reset, you can now login with your new password.</p>
+        <br>
+        <div>
+            Cheers!
+        </div>
+    </div>
+
+</body>
+
+</html>