crudify.js

var mongojs = require("mongojs"),
    restify = require('restify'),
	jwt = require('jsonwebtoken'),
	crypto = require('crypto');
module.exports = function(options) {
  'use strict';
  if (!options || !options.server) {
    throw new Error('server should be set');
  }
  if (!options || !options.db) {
    throw new Error('db should be set');
  }
  if (!options || !options.jwtSecret) {
    throw new Error('jwtSecret should be set');
  }
  var server = options.server,
	path = options.path,
	version = options.version || '0.0.1',
	db = options.db,
	auth = function(req, res, next) {
		console.log('auth');
		if (req.headers && req.headers.authorization) {
		
		  var test = req.headers.authorization.match(/^Bearer (.*)$/);
		  if (test) {
			jwt.verify(test[1], options.jwtSecret, function(err, user) {
			  if (err) {
				return next(new restify.NotAuthorizedError('Invalid token'));
			  }

			  req.user = user;
			  next();
			});
		  } else {
			return next(new restify.NotAuthorizedError('Format is Authorization: Bearer [token]'));
		  }
		} else {
		  return next(new restify.NotAuthorizedError('No authorization header was found'));
		}
	},
	findAllResources = function(dbResource) {
		return function(req, res , next){
			console.info('user: ',req.user);
			dbResource.find().sort({postedOn : 1} , function(err , success){
				console.log('Response success '+success.len);
				console.log('Response error '+err);
				if(success && success.length){
					res.send(200 , success);
					return next();
				}
				res.send(404);
				return next(err);
		 
			});
		};
	},
	findResourceByProp = function(dbResource) {

		return function(req, res , next){
			var q = {};
			q[req.params.prop] = req.params.value;
			dbResource.find(q).sort({postedOn : 1} , function(err , success){
				console.log('Response success '+success.len);
				console.log('Response error '+err);
				if(success && success.length){
					res.send(200 , success);
					return next();
				}
				res.send(404);
				return next(err);

			});
		};
	},
	findResourceByQuery = function(dbResource) {

		return function(req, res , next){
			var query = {};
			try{
				query = JSON.parse(req.params.q);
			}catch(error){
				return next(new restify.InvalidArgumentError('Invalid JSON. Please use escape(JSON.stringify(query)'));
			}
			dbResource.find(query).sort({postedOn : 1} , function(err , success){
				console.log('Response success '+success.len);
				console.log('Response error '+err);

				if(success && success.length){
					res.send(200 , success);
					return next();
				}
				res.send(404);
				return next(err);

			});
		};
	},
	findResourceById = function(dbResource) {
		return function(req, res , next){
			dbResource.findOne({_id:mongojs.ObjectId(req.params.resourceId)} , function(err , success){
				console.info('Response success '+success);
				console.log('Response error '+err);
				if(success){
					res.send(200 , success);
					return next();
				}
				res.send(404);
				return next(err);
			});
		};
	},
	deleteResourceById = function(dbResource) {

		return function(req, res , next){
			dbResource.remove({_id:mongojs.ObjectId(req.params.resourceId)} , function(err , success){
				console.log('Response success '+success);
				console.log('Response error '+err);
				if(success && success.n){
					res.send(204);
					return next();      
				} 
				res.send(404);
				return next(err);
				
			});
		};
	},
	updateResourceById = function(dbResource) {

		return function(req, res , next){
			var resource = req.params || {};
			resource.updatedOn = new Date();
			dbResource.update({_id:mongojs.ObjectId(req.params.resourceId)}, {$set: resource}, function(err , success){
				console.log('Response success '+success);
				console.log('Response error '+err);
				if(success && success.updatedExisting){
					console.log(success);
					res.send(204);
					return next();
				}
				res.send(404);
				return next(err);
				
			});
		};
	},
	postNewResource = function(dbResource) {

		return function(req, res , next){
			var resource = req.params || {};
			resource.postedOn = new Date();
			dbResource.save(resource , function(err , success){
				console.log('Response success '+success);
				console.log('Response error '+err);
				if(success){
					console.info(success);
					res.send(201 , resource);
					return next();
				} else {
					return next(err);
				}
			});
		};
	},
	addResource = function(resource) {
		console.info('addResource', resource);
		var dbResource = db.collection(resource);
		server.get({path : path + '/' + resource , version : version}, auth, findAllResources(dbResource));
		server.get({path : path + '/' + resource + '/:resourceId' , version : version}, auth, findResourceById(dbResource));
		server.post({path : path + '/' + resource , version: '0.0.1'}, auth, postNewResource(dbResource));
		server.del({path : path + '/' + resource + '/:resourceId' , version : version}, auth, deleteResourceById(dbResource));
		server.put({path : path + '/' + resource + '/:resourceId' , version : version}, auth, updateResourceById(dbResource));
	},
	authenticate = function(dbResource) {
		return function(req, res , next){
			dbResource.findOne({$and:[ {email:req.params.email}, {pwd:getPasswordHash(req.params.pwd)}]} , function(err , success){
				console.info('Response success '+success);
				console.log('Response error '+err);
				if(success){
					delete success.pwd;
					success.token = jwt.sign(success, options.jwtSecret);

					res.send(200 , success);
					return next();
				}
				res.send(404);
				return next(err);
			});
		};
	},
	/*logout = function() {
		return function(req, res , next){
			//todo: impliment logout
			return next();
		};
	},
	checkSession = function() {
		return function(req, res , next){
			res.send(204);
			return next();
		};
	},*/
	getPasswordHash = function(p) {
		return crypto.createHash('md5').update(p+options.jwtSecret).digest('hex');
	},
	init = function() {
		console.info('init users');
		var resource = 'users',
		dbResource = db.collection(resource),
		validateUser = function(req, res, next) {
			console.info(req.params.secret);
			if(!req.headers || !req.headers.authorization) {
				if (req.params.secret !== options.jwtSecret) {
					return next(new restify.NotAuthorizedError("Invalid secret!"));
				} else {
					req.headers.authorization = 'Bearer '+jwt.sign(req.params, options.jwtSecret);
				}
			}
			if(req.params.email && req.params.pwd){
				dbResource.findOne({email:req.params.email},function(err, success){
					if(err) {
						return next(err);
					}
					if(success){
						return next(new restify.InvalidArgumentError("User already exists!"));
					}
					req.params.pwd = getPasswordHash(req.params.pwd);
					delete req.params.secret;
					return next();
				});
				
			} else {
				return next(new restify.InvalidArgumentError("Required fields 'email', 'pwd', missing."));
			}
		},
		validate = options.validateUser || validateUser;
		server.get({path : path + '/' + resource , version : version}, auth, findAllResources(dbResource));
		server.get({path : path + '/' + resource + '/:resourceId' , version : version}, auth, findResourceById(dbResource));
		server.get({path : path + '/' + resource +'/query/:q' , version : version}, auth, findResourceByQuery(dbResource));
		server.get({path : path + '/' + resource +'/:prop/:value' , version : version}, auth, findResourceByProp(dbResource));

		server.post({path : path + '/' + resource , version: version}, [validate, auth], postNewResource(dbResource));
		server.del({path : path + '/' + resource + '/:resourceId' , version : version}, auth, deleteResourceById(dbResource));
		server.put({path : path + '/' + resource + '/:resourceId' , version : version}, auth, updateResourceById(dbResource));
		
		server.post({path : path + '/authenticate' , version: version}, authenticate(dbResource));
		//server.post({path : path + '/logout' , version: version}, validate, logout(dbResource));
		//server.post({path : path + '/checksession' , version: version}, auth, checkSession(dbResource));
	}();
	
	return addResource;
  
};