app.js

var express = require('express');
var http = require('http');
var path = require('path');
var util = require('util');

var middleware = require('./middleware');
var template = require('./template');

var user = require('./routes/user');
var behavior = require('./routes/behavior');
var badge = require('./routes/badge');
var admin = require('./routes/admin');
var issuer = require('./routes/issuer');
var api = require('./routes/api');
var debug = require('./routes/debug');
var stats = require('./routes/stats');

var app = express();
var logger = app.logger = require('./lib/logger');
var env = app.env = require('./lib/environment');

template.express(app);

app.configure(function () {
  app.set('port', process.env.PORT || 3000);
  app.use(express.favicon(__dirname + '/public/img/favicon.ico'));
  app.use(express.logger('dev'));
  app.use(express.bodyParser());
  app.use(express.methodOverride());
  app.use(middleware.cookieParser());
  app.use(middleware.session());
  app.use(middleware.flash());
  app.use(express.static(path.join(__dirname, 'public')));
  app.use(middleware.csrf({whitelist: ['/v1/*']}));
  app.use(middleware.cors({whitelist: ['/v1/*']}));
  app.use(middleware.noCache({
    whitelist: ['/badge/assertion/*']
  }));
  app.use(user.requireAuth({
    whitelist: [
      '/',
      '/login',
      '/logout',
      '/badge/*', // public badge resources
      '/v1/*',     // api endpoints
      '/claim*'
    ],
    redirectTo: '/login'
  }));
  app.use(issuer.getIssuerConfig());
  app.use(app.router);

  // if we've fallen through the router, it's a 404
  app.use(admin.notFound);
});

app.configure('development', function () {
  app.get('/500', admin.nextError);
  app.use(express.errorHandler());
});

app.configure('production', function () {
  app.use(admin.errorHandler);
});

/** Routes */

// Issuer configuration
// --------------------
app.get('/admin/config', admin.configure);
app.post('/admin/config', issuer.update);

app.get('/admin/stats', [stats.monthly], admin.stats);


// Badge listing
// -------------
var indexMiddleware = [badge.findAll, behavior.findAll];
app.get('/', badge.findNonOffline, admin.all);
app.get('/admin', indexMiddleware, admin.badgeIndex);
app.get('/admin/badges', indexMiddleware, admin.badgeIndex);

// Creating and editing a badge
// ----------------------------
var findBadgeByParamShortname = badge.findByShortName({
  container: 'param',
  field: 'shortname',
  required: true
});


// section middleware
app.all('/admin/badge/:shortname*', findBadgeByParamShortname);

app.get('/admin/badge', admin.newBadgeForm);
app.get('/admin/badge/:shortname', [behavior.findAll], admin.showBadge);
app.get('/admin/badge/:shortname/edit', admin.editBadgeForm);
app.get('/admin/badge/:shortname/claims/', admin.manageClaimCodes);

app.post('/admin/badge', [
  badge.getUploadedImage({ required: true })
], badge.create);
app.post('/admin/badge/:shortname/edit', [
  badge.getUploadedImage()
], badge.update);
app.delete('/admin/badge/:shortname', badge.destroy);
app.post('/admin/badge/:shortname/behavior', badge.addBehavior);
app.delete('/admin/badge/:shortname/behavior', badge.removeBehavior);
app.post('/admin/badge/:shortname/claims', badge.addClaimCodes);
app.delete('/admin/badge/:shortname/claims/:code', badge.removeClaimCode);
app.patch('/admin/badge/:shortname/claims/:code', badge.releaseClaimCode);

// Creating new behaviors
// ----------------------
app.get('/admin/behavior', admin.newBehaviorForm);
app.post('/admin/behavior', behavior.create);
app.delete('/admin/behavior/:shortname', [
  behavior.findByShortName
], behavior.destroy);

// Public, non-admin endpoints
// ---------------------------
// XXX: these are to `relativeUrl` in models/badge.js and
// models/badge-instance.js. If you change these routes, change those
// methods.
app.get('/badge/image/:shortname.png', [
  findBadgeByParamShortname
], badge.image);
app.get('/badge/assertion/:hash', badge.assertion);
app.get('/badge/criteria/:shortname', [
   findBadgeByParamShortname
], admin.criteria);

app.get('/claim', admin.claim);

app.post('/claim',[
  badge.findByClaimCode()
], admin.confirmClaim);

app.post('/claim/confirm',[
  badge.findByClaimCode()
], badge.awardToUser);

app.get('/404', admin.notFound);

// User login/logout
// -------------------
app.get('/login', admin.login);
app.post('/login', user.login);
app.post('/logout', user.logout);

app.get('/admin/users',[
  user.findAll()
], admin.userList);

app.delete('/admin/users', user.deleteInstancesByEmail);

// API endpoints
// -------------
app.get('/v1/badges', api.badges)
app.get('/v1/user', [api.auth], api.user)
app.post('/v1/user/behavior/:behavior/credit', [api.auth], api.credit);
app.post('/v1/user/mark-all-badges-as-read',
         [api.auth],
         api.markAllBadgesAsRead);

// Debug endpoints
// ---------------
app.configure('development', function () {
  app.get('/debug/flush', admin.showFlushDbForm);
  app.post('/debug/flush', debug.flushDb);
});

var server = module.exports = http.createServer(app);

console.log('Environment: \n' + util.inspect(env.all()));
if (!module.parent) {
  var port = env.get('port', process.env.PORT);
  server.listen(port, function () {
    app.logger.info("Express server listening on port " + port);
  });
}