Strider-CD/strider

const express = require('express');
const models = require('../../models');
const router = new express.Router();
const User = models.User;

router
  .route('/')
  /**
   * @api {get} /api/session Get Session
   * @apiDescription Gets the current session information
   * @apiName GetSession
   * @apiGroup Session
   * @apiVersion 1.0.0
   *
   * @apiExample {curl} CURL Example:
   *    curl -X GET http://localhost/api/session
   */
  .get(function getSession(req, res) {
    res.send({ user: req.user });
  })

  /**
   * @api {post} /api/session Create New Session
   * @apiDescription Creates a new user session after validating an email address and password pair.
   * @apiName CreateSession
   * @apiGroup Session
   * @apiVersion 1.0.0
   *
   * @apiExample {curl} CURL Example:
   *    curl -X POST -d email=me@me.com -d password=mypass http://localhost/api/session
   *
   * @apiParam (RequestBody) {String} email The email address to login as (which is used as the username).
   * @apiParam (RequestBody) {String} password The user's password.
   */
  .post(function createSession(req, res) {
    User.authenticate(req.body.email, req.body.password, function (err, user) {
      if (!user) {
        res.status(404).send({ message: 'No such username / password' });
      } else {
        if (!req.session.passport) {
          req.session.passport = {};
        }
        req.session.passport.user = user.id;
        res.send(user);
      }
    });
  });

module.exports = router;