etnbrd/flx-compiler

'use strict';

/**
 * @class Router
 */

var OAuth     = require('oauth').OAuth2;
var encryptor = require('simple-encryptor');
var express   = require('express');
var heroku    = require('heroku-client');

/**
 * Create a router with the necessary routes for Heroku OAuth authentication.
 *
 * @method main
 * @param {Object} options options for configuring the router. See
 *   {{#crossLink "Main/main"}}Main#main{{/crossLink}} for configuration
 *   details.
 * @return {Express.Router} an Express.js router
 */
module.exports = function(options) {
  var cipher = encryptor(options.encryptionSecret);
  var oauth  = getOAuth();
  var router = new express.Router();

  router.get('/auth/heroku', function(req, res) {
    var param = req.query.redirectPath;
    var path  = param || req.headers.referer;

    if (!req.session.redirectPath) {
      req.session.redirectPath = path;
    }

    res.redirect(oauth.getAuthorizeUrl({ response_type: 'code', scope: options.oAuthScope }));
  });

  router.get('/auth/heroku/callback', function(req, res) {
    oauth.getOAuthAccessToken(req.query.code, null, function(err, accessToken, refreshToken, results) {
      if (err) throw err;

      var hk = heroku.createClient({
        token: accessToken,
        host : options.herokuAPIHost
      });

      hk.account().info(function(err, account) {
        if (err) throw err;

        var userSession = {
          accessToken : accessToken,
          refreshToken: refreshToken,
          createdAt   : (new Date()).toISOString(),
          expiresIn   : results.expires_in,

          user: {
            name : account.name,
            email: account.email,
            id   : account.id
          }
        };

        var redirectPath;

        if (options.sessionSyncNonce) {
          var nonceName = options.sessionSyncNonce;
          req.session.herokuBouncerSessionNonce = req.cookies[nonceName];
        }

        req.session.userSession = cipher.encrypt(userSession);

        if (!req.session.redirectPath || req.path === '/auth/heroku') {
          redirectPath = '/';
        } else {
          redirectPath = req.session.redirectPath;
        }

        delete req.session.redirectPath;
        res.redirect(redirectPath);
      });
    });
  });

  router.get('/auth/heroku/logout', function(req, res) {
    req.session.reset();
    res.redirect(options.oAuthServerURL + '/logout');
  });

  function getOAuth() {
    return new OAuth(
      options.oAuthClientID,
      options.oAuthClientSecret,
      options.oAuthServerURL,
      '/oauth/authorize',
      '/oauth/token'
    );
  }

  return router;
};