added private public view to profile -- todo : add same for article view

This commit is contained in:
2013-01-17 17:30:16 -05:00
parent 89308a0c3e
commit 7b6a0df4a5
13 changed files with 42 additions and 31 deletions

View File

@@ -13,7 +13,7 @@ var maxArticlesPerPage = 5;
module.exports = function(app) {
app.get('/articles', function(req, res, next){
app.get('/articles', loggedIn, function(req, res, next){
var page = req.query.page && parseInt(req.query.page, 10) || 0;
async.parallel([
@@ -57,7 +57,7 @@ module.exports = function(app) {
res.render('articles/new', {title: "New Article"});
});
app.get('/articles/:title', loadArticle, function(req, res, next){
app.get('/articles/:_id', loadArticle, function(req, res, next){
res.render('articles/article', {title: req.article.title,
article: req.article});
});

View File

@@ -3,9 +3,11 @@
* GET home page.
*/
var loggedIn = require('./middleware/logged_in');
module.exports = function(app) {
app.get('/', function(req, res){
res.render('index', { title: 'Express' })
app.get('/', loggedIn, function(req, res){
res.render('index', { title: 'Express' });
});
};

View File

@@ -1,6 +1,7 @@
function loggedIn(req, res, next) {
if (! req.session.user) {
res.send('Forbidden. Please log in first.', 403);
//res.send('Forbidden. Please log in first.', 403);
res.redirect('/session/new');
} else {
next();
}

View File

@@ -1,6 +1,6 @@
function notLoggedIn(req, res, next) {
if (req.session.user) {
res.send('Unauthorized', 401);
res.redirect('/users/' + req.session.user.username);
} else {
next();
}

View File

@@ -17,6 +17,7 @@ module.exports = function(app) {
}
if (user) {
req.session.user = user;
console.log("req.session.user= " + JSON.stringify(req.session.user));
res.redirect('/users');
} else {
res.redirect('/session/new');
@@ -26,6 +27,6 @@ module.exports = function(app) {
app.del('/session', function(req, res, next) {
req.session.destroy();
res.redirect('/users');
res.redirect('/session/new');
});
};

View File

@@ -4,13 +4,14 @@
var User = require('../data/models/user');
var notLoggedIn = require('./middleware/not_logged_in');
var loggedIn = require('./middleware/logged_in');
var loadUser = require('./middleware/load_user');
var restrictUserToSelf = require('./middleware/restrict_user_to_self');
var maxUsersPerPage = 5;
module.exports = function(app) {
app.get('/users', function(req, res, next){
app.get('/users', loggedIn, function(req, res, next){
var page = req.query.page && parseInt(req.query.page, 10) || 0;
User.count(function(err, count) {