router.js

var fs = require('fs')
  , uuid = require('node-uuid')
  , multiparty = require('multiparty')
  , Recaptcha = require('recaptcha').Recaptcha
  , utils = require('./lib/utils')
  , atom = require('./lib/atom')


module.exports = function(app, Note, Comment, TrackBack
  , User, LoginToken, config) {

  var PUBLIC_KEY  = config.recapcha.public_key
    , PRIVATE_KEY = config.recapcha.private_key

    , siteUrl = config.site.url
    , siteName = config.site.name
    , siteAdmin = config.site.admin

    , authLoginToken = function(req, res, next) {
        var cookie = JSON.parse(req.cookies.logintoken)

        LoginToken.findOne({
          email: cookie.email
        , token: cookie.token
        , series: cookie.series
        }, function(err, token) {
          if (!token) {
            res.redirect('/admin/login')
            return
          }

          User.findOne({
            email: token.email
          }, function(err, user) {
            if (user) {
              req.session.user_id = user.id
              req.currUser = user

              token.token = token.randomToken()
              token.save(function(err) {
                res.cookie('logintoken', token.cookieValue, {
                  expires: new Date(Date.now() + 2 * 604800000)
                , path: '/'
                })
                next()
              })
            } else {
              res.redirect('/admin/login')
            }
          })
        })
      }

    , authUser = function(req, res, next) {
        var userId = req.session.user_id
        if (userId) {
          User.findById(userId, function(err, user) {
            if (user) {
              req.currUser = user
              next()
            } else {
              res.redirect('/admin/login')
            }
          })
        } else if (req.cookies.logintoken) {
          authLoginToken(req, res, next)
        } else {
          res.redirect('/admin/login')
        }
      }

    , loadUser = function(req, res, next) {
        if (req.cookies.logintoken) {
          authLoginToken(req, res, next)
        } else {
          next()
        }
      }

    , generateAtom = function() {
        var dataObj = {}
          , recentNotes = []

        // basic info
        dataObj.title = siteName
        dataObj.url = siteUrl
        dataObj.author = siteAdmin

        // recent notes
        Note.find().limit(50).sort('-created')
          .exec(function(err, notes) {
            notes.forEach(function(n, i) {
              recentNotes[i] = {
                url: n.url
              , uuid: n.uuid
              , title: n.title
              , content: n.bodyParsed
              , updated: utils.formatDate(n.created, 'rfc3339')
              }
            })

            dataObj.notes = recentNotes

            fs.writeFile(
              __dirname + '/public/atom.xml',
              atom.generate(dataObj), 'UTF-8', function(err) {
                console.error(err)
              })
        })
      }

    , validateBrowser = function(req, res, next) {
        var ua = req.headers['user-agent']
        if (/msie (6|7|8|9)\.0/i.test(ua)) {
          res.render('admin/noie', {
            title: 'NO IE'
          })
        } else {
          next()
        }
      }

  app.get('/', validateBrowser, loadUser, function(req, res) {
    Note.find().limit(5).sort('-created')
      .exec(function(err, notes, next) {
        if (err) {
          next(new utils.InternalServerError(err))
        } else {
          // query recent comments
          Comment.find().limit(10).sort('-created')
            .exec(function(err, comments) {
              res.render('index', {
                title: siteName
              , admin: siteAdmin
              , user: req.currUser
              , notes: notes
              , comments: utils.distinct(comments, 'email').slice(0, 5)
              })
          })
        }
    })
  })

  app.get('/user/create', authUser, function(req, res) {
    res.render('user/create', {
      title: 'Create User'
    , user: new User()
    })
  })

  app.post('/user/create', function(req, res) {
    var user = new User(req.body.user)
    user.save(function(err) {
      res.redirect('/')
    })
  })

  app.get('/admin/login', validateBrowser, function(req, res) {
    res.render('admin/login', {
      title: 'Login'
    })
  })

  app.post('/admin/login', function(req, res) {
    var userInfo = req.body.user
    User.findOne({ email: userInfo.email }, function(err, user) {
      if (user && user.authenticate(userInfo.password)) {
        req.session.user_id = user.id

        if (userInfo.remember) { // default
        var loginToken = new LoginToken({ email: user.email })
        loginToken.save(function(err) {
          // header modification is also now stricter
          res.cookie('logintoken', loginToken.cookieValue, {
            expires: new Date(Date.now() + 2 * 604800000)
          , path: '/'
          })
          // delete guest info
          res.clearCookie('ncguest.info', { path: '/' })
          // an asynchronous Mongoose call could happen after a redirect was sent
          // throw new Error("Can't use mutable header APIs after sent.")
          res.redirect('/')
        })
      } else {
        res.redirect('/')
      }
      } else {
        res.redirect('/admin/login')
      }
    })
  })

  app.get('/admin/logout', authUser, function(req, res) {
    if (req.session) {
      LoginToken.remove({ email: req.currUser.email })
      // this path option is important
      res.clearCookie('logintoken', { path: '/' })
      req.session.destroy(function(){})
    }
    res.redirect('/')
  })

  app.get('/note/create', authUser, function(req, res) {
    res.render('note/create', {
      title: 'Create Note'
    , note: new Note()
    })
  })

  app.get('/note/edit/:id', function(req, res) {
    Note.findById(req.params.id, function(err, note) {
      res.render('note/edit', {
        title: 'Edit Note'
      , note: note
      })
    })
  })

  app.get('/:year/:month/:day/:slug',
    validateBrowser, loadUser,
    function(req, res, next) {
      var params = req.params
        , condition = utils.createCondition(
            utils.parseIntDate(params),
            params.slug)
        , guestStr = req.cookies['ncguest.info']
        , currGuest = guestStr ? JSON.parse(guestStr) : ''
        , currUser = req.currUser || currGuest

      Note.findOne(condition, function(err, note) {
        if (err) {
          next(new utils.InternalServerError(err))
        } else if (!note) {
          next(new utils.NotFound())
        } else {
          var recaptcha = new Recaptcha(PUBLIC_KEY, PRIVATE_KEY)
          Comment.find({ nid: note.id }).sort('created')
            .exec(function(err, comments) {
              res.render('note/view', {
                title: note.title
              , user: currUser
              , note: note
              , comments: comments
              , recaptcha_form: recaptcha.toHTML()
              , trackback: utils.mkNoteUrl(params) + 'trackback'
              })
          })
        }
      })
  })

  app.get('/:year/:month/:day/:slug/trackback',
    function(req, res) {
      res.redirect(utils.mkNoteUrl(req.params))
  })

  app.get('/note/list', authUser, function(req, res) {
    Note.find().sort('-created')
      .exec(function(err, notes) {
        res.render('admin/notes', {
          title: 'Notes / admin'
        , notes: notes
        })
      })
  })

  app.get('/comment/list', authUser, function(req, res) {
    Comment.find().sort('-created')
      .exec(function(err, comments) {
        res.render('admin/comments', {
          title: 'Comments / admin'
        , comments: comments
        })
      })
  })

  app.get('/tags/:tag', function(req, res) {
    var tagName = req.params.tag
    Note.find({ tags: tagName }).sort('-created')
      .exec(function(err, notes, next) {
        if (err) {
          next(new utils.InternalServerError(err))
        } else if (!notes) {
          next(new utils.NotFound())
        } else {
          res.render('note/tag', {
            title: tagName
          , notes: notes
          })
        }
    })
  })

  app.post('/note/create', function(req, res) {
    var note = new Note()
      , data = req.body.note

    note.uuid = uuid()
    note.title = data.title
    note.slug = data.slug
    note.body = data.body
    note.modified = note.created = new Date()
    note.tags = data.tags.split(' ')
    note.trackbacks = 0
    note.comments = 0

    note.save(function(err) {
      generateAtom()
      res.redirect('/')
    })
  })

  app.post('/note/upload_pic', function(req, res) {
    var form = new multiparty.Form({
      uploadDir: utils.getUploadPath()
    })

    form.parse(req, function(err, fields, files) {
      res.header('Content-Type', '')
      res.end('{"src":"' + files.image[0].path + '"}')
    })
  })

  app.post('/:year/:month/:day/:slug/comment', function(req, res) {
    var recaptchaData = {
          remoteip:  req.connection.remoteAddress
        , challenge: req.body.recaptcha_challenge_field
        , response:  req.body.recaptcha_response_field
        }

      , recaptcha = new Recaptcha(
          PUBLIC_KEY
        , PRIVATE_KEY
        , recaptchaData)

      , params = req.params
      , condition = utils.createCondition(
          utils.parseIntDate(params)
        , params.slug)
      , data = req.body.comment
      , comment = new Comment()
      , noteUrl = utils.mkNoteUrl(params)

    // save guest info
    if (!req.session.user_id) {
      var ncguestInfo = JSON.stringify({
        name: data.author
      , email: data.email
      , website: data.website || ''
      })
      res.cookie('ncguest.info', ncguestInfo, {
        expires: new Date(Date.now() + 2 * 604800000)
      , path: '/'
      })
    }

    recaptcha.verify(function(success, error_code) {
      if (!success) {
        res.redirect(noteUrl)
      } else {
        Note.findOne(condition, function(err, note) {
          if (!err) {
            // save comment
            comment.nid = note.id
            comment.nurl = noteUrl
            comment.ntitle = note.title
            comment.author = data.author
            comment.body = data.body.trim() || 'passing...'
            comment.email = data.email
            comment.website = data.website
            comment.created = new Date()

            comment.save(function(err) {
              if (!err) {
                note.comments += 1
                note.save(function(err) {
                  res.redirect(noteUrl)
                })
              }
            })
          }
        })
      }
    })
  })

  app.post('/note/:id/comment/delete', function(req, res) {
    Comment.findById(req.body.commentId, function(err, comment) {
      comment.remove(function(err) {
        res.contentType('json')
        res.send('{"err" : 0}')
      })
    })

    Note.findById(req.params.id, function(err, note) {
      if (!err) {
        note.comments -= 1
        note.save(function(err) {})
      }
    })
  })

  app.post('/note/:id', function(req, res) {
    Note.findById(req.params.id, function(err, note) {
      note.remove(function(err) {
        generateAtom()
        res.redirect('/')
      })
    })
  })

  app.post('/note/edit/:id', function(req, res) {
    Note.findById(req.params.id, function(err, note) {
      var reqBody = req.body.note

      note.title = reqBody.title
      note.body = reqBody.body
      note.tags = reqBody.tags.split(' ')
      note.modified = new Date()

      note.save(function(err) {
        generateAtom()
        res.redirect('/')
      })
    })
  })

  // receive trackback
  app.post('/:year/:month/:day/:slug/trackback',
    function(req, res, next) {
      var tb = req.body
        , params = req.params
        , tbRec = {
            url: tb.url
          , title: tb.title
          , excerpt: tb.excerpt
          , blog_name: tb.blog_name
          , date: new Date().toString()
          }
        , condition = utils.createCondition(
            utils.parseIntDate(params)
          , params.slug)

        , TMPL_TB_XML = '<?xml version="1.0" encoding="UTF-8"?>'
            + '<response><error>{NUM}</error><message>{MSG}</message></response>'

      res.contentType('application/xml')
      Note.findOne(condition, function(err, note) {
        if (err) {
          next(new utils.InternalServerError(err))
        } else {
          if (!note || !tbRec.url) {
            // return error status
            res.send(TMPL_TB_XML
              .replace('{NUM}, 1')
              .replace('{MSG}', 'TrackBack Error'))
        } else {
          // return success status
          res.send(TMPL_TB_XML
            .replace('{NUM}', 0)
            .replace('{MSG}', ''))

          var trackback = new TrackBack()

          trackback.nid = note.id
          trackback.url = tb.url
          trackback.title = tb.title ? tb.title : tb.url
          trackback.excerpt = tb.excerpt ? utils.subExcerpt(tb.excerpt) : ''
          trackback.blogname = tb.blog_name || ''
          trackback.create = tb.date

          trackback.save(function(err) {
            if (err) {
              next(new utils.InternalServerError(err))
            } else {
              note.trackbacks += 1
            }
          })
        }
      }
    })
  })

  // Handle 500 error
  app.use(function(err, req, res, next){
    console.error(err.stack)
    res.statusCode = 500
    res.render('error/404.jade', {
      title: '500 InternalServerError'
    , error: 'Something broke!'
    })
  })

  // Handle 404 error
  app.use(function(req, res, next){
    res.statusCode = 404
    res.render('error/404.jade', {
      title: '404 NotFound'
    , error: 'Sorry cant find that!'
    })
  })
}