server/controllers/api/v1/users.js

   1 'use strict'
   2
   3 const config = require('config')
   4 const express = require('express')
   5 const oAuth2 = require('../../../middlewares').oauth2
   6
   7 const Users = require('../../../models/users')
   8
   9 const router = express.Router()
  10
  11 router.get('/client', getAngularClient)
  12 router.post('/token', oAuth2.token, success)
  13
  14 // ---------------------------------------------------------------------------
  15
  16 module.exports = router
  17
  18 // ---------------------------------------------------------------------------
  19
  20 function getAngularClient (req, res, next) {
  21   const serverHost = config.get('webserver.host')
  22   const serverPort = config.get('webserver.port')
  23   let headerHostShouldBe = serverHost
  24   if (serverPort !== 80 && serverPort !== 443) {
  25     headerHostShouldBe += ':' + serverPort
  26   }
  27
  28   if (req.get('host') !== headerHostShouldBe) return res.type('json').status(403).end()
  29
  30   Users.getFirstClient(function (err, client) {
  31     if (err) return next(err)
  32     if (!client) return next(new Error('No client available.'))
  33
  34     res.json({
  35       client_id: client._id,
  36       client_secret: client.clientSecret
  37     })
  38   })
  39 }
  40
  41 function success (req, res, next) {
  42   res.end()
  43 }