almost rebased

test/routes/middleware/load_user.js

@@ -0,0 +1,16 @@
+var User = require('../../data/models/user');
+
+function loadUser(req, res, next) {
+  User.findOne({username: req.params.name}, function(err, user) {
+    if (err) {
+      return next(err);
+    }
+    if (! user) {
+      return res.send('Not found', 404);
+    }
+    req.user = user;
+    next();
+  });
+}
+
+module.exports = loadUser;

test/routes/middleware/not_logged_in.js

@@ -0,0 +1,9 @@
+function notLoggedIn(req, res, next) {
+  if (req.session.user) {
+    res.send('Unauthorized', 401);
+  } else {
+    next();
+  }
+}
+
+module.exports = notLoggedIn;

test/routes/middleware/restrict_user_to_self.js

@@ -0,0 +1,9 @@
+function restrictUserToSelf(req, res, next) {
+  if (! req.session.user || req.session.user.username !== req.user.username) {
+    res.send('Unauthorized', 401);
+  } else {
+    next();
+  }
+}
+
+module.exports = restrictUserToSelf;