server/controllers/api/v1/users.js

   1 'use strict'
   2
   3 const config = require('config')
   4 const mongoose = require('mongoose')
   5 const express = require('express')
   6
   7 const oAuth = require('../../../middlewares').oauth
   8
   9 const Client = mongoose.model('OAuthClient')
  10
  11 const router = express.Router()
  12
  13 router.get('/client', getAngularClient)
  14 router.post('/token', oAuth.token, success)
  15
  16 // ---------------------------------------------------------------------------
  17
  18 module.exports = router
  19
  20 // ---------------------------------------------------------------------------
  21
  22 function getAngularClient (req, res, next) {
  23   const serverHost = config.get('webserver.host')
  24   const serverPort = config.get('webserver.port')
  25   let headerHostShouldBe = serverHost
  26   if (serverPort !== 80 && serverPort !== 443) {
  27     headerHostShouldBe += ':' + serverPort
  28   }
  29
  30   if (req.get('host') !== headerHostShouldBe) return res.type('json').status(403).end()
  31
  32   Client.loadFirstClient(function (err, client) {
  33     if (err) return next(err)
  34     if (!client) return next(new Error('No client available.'))
  35
  36     res.json({
  37       client_id: client._id,
  38       client_secret: client.clientSecret
  39     })
  40   })
  41 }
  42
  43 function success (req, res, next) {
  44   res.end()
  45 }