migrating repo to Bodyrep org

routes/middleware/is_admin.js

@@ -0,0 +1,11 @@
+function isAdmin(req, res, next) {
+  if (req.session.user.is_admin === false) {
+  console.log("not an admin - sending to profile");
+	res.redirect('/users/' + req.session.user.username);
+  } else {
+  console.log("Admin detected");
+    next();
+  }
+}
+
+module.exports = isAdmin;

routes/middleware/load_user.js

@@ -0,0 +1,16 @@
+var User = require('../../data/models/user');
+
+function loadUser(req, res, next) {
+  User.findOne({username: req.params.name}, function(err, user) {
+    if (err) {
+      return next(err);
+    }
+    if (! user) {
+      return res.send('Not found', 404);
+    }
+    req.user = user;
+    next();
+  });
+}
+
+module.exports = loadUser;

routes/middleware/load_workout.js

@@ -0,0 +1,21 @@
+var workout = require('../../data/models/workout');
+
+function loadworkout(req, res, next) {
+  console.log('fetch id' + req.params.title );
+  workout.findOne({title: req.params.title})
+    .populate('elements')
+
+    .exec(function(err, workout) {
+      if (err) {
+        return next(err);
+      }
+      if (! workout) {
+        return res.send('Not found', 404);
+      }
+      console.log('workout' + JSON.stringify(workout));
+      req.workout = workout;
+      next();
+    });
+}
+
+module.exports = loadworkout;

routes/middleware/logged_in.js

@@ -0,0 +1,11 @@
+function loggedIn(req, res, next) {
+  if (! req.session.user) {
+    console.log("not logged in - redirecting to login");
+    res.redirect('/session/new');
+  } else {
+    console.log("user logged in");
+    next();
+  }
+}
+
+module.exports = loggedIn;

routes/middleware/not_logged_in.js

@@ -0,0 +1,9 @@
+function notLoggedIn(req, res, next) {
+  if (req.session.user) {
+     res.redirect('/users/' + req.session.user.username);
+  } else {
+    next();
+  }
+}
+
+module.exports = notLoggedIn;

routes/middleware/restrict_user_to_self.js

@@ -0,0 +1,9 @@
+function restrictUserToSelf(req, res, next) {
+  if (! req.session.user || req.session.user.username !== req.user.username) {
+    res.send('Unauthorized', 401);
+  } else {
+    next();
+  }
+}
+
+module.exports = restrictUserToSelf;