File Upload

Author: kanedev

.gitignore

@@ -2,3 +2,4 @@
 node_modules/
 package-lock.json
 
+Server-side Development with NodeJS, Express and MongoDB/conFusionServer/public/images/pic.jpg

Server-side Development with NodeJS, Express and MongoDB/conFusionServer/app.js

@@ -18,7 +18,7 @@ var usersRouter = require('./routes/users');
 var dishRouter = require('./routes/dishRouter');
 var promoRouter = require('./routes/promoRouter');
 var leaderRouter = require('./routes/leaderRouter');
-
+const uploadRouter = require('./routes/uploadRouter');
 
 
 // DB
@@ -68,7 +68,7 @@ app.use(express.static(path.join(__dirname, 'public')));
 app.use('/dishes',dishRouter);
 app.use('/promos',promoRouter);
 app.use('/leaders',leaderRouter);
-
+app.use('/imageUpload',uploadRouter);
 
 
 // catch 404 and forward to error handler

Server-side Development with NodeJS, Express and MongoDB/conFusionServer/package.json

@@ -16,6 +16,7 @@
     "mongoose": "^5.1.7",
     "mongoose-currency": "^0.2.0",
     "morgan": "~1.9.1",
+    "multer": "^1.3.1",
     "passport": "^0.4.0",
     "passport-jwt": "^4.0.0",
     "passport-local": "^1.0.0",

Server-side Development with NodeJS, Express and MongoDB/conFusionServer/routes/uploadRouter.js

@@ -0,0 +1,48 @@
+const express = require('express');
+const bodyParser = require('body-parser');
+const authenticate = require('../authenticate');
+const multer = require('multer');
+
+const storage = multer.diskStorage({
+    destination: (req, file, cb) => {
+        cb(null, 'public/images');
+    },
+
+    filename: (req, file, cb) => {
+        cb(null, file.originalname)
+    }
+});
+
+const imageFileFilter = (req, file, cb) => {
+    if(!file.originalname.match(/\.(jpg|jpeg|png|gif)$/)) {
+        return cb(new Error('You can upload only image files!'), false);
+    }
+    cb(null, true);
+};
+
+const upload = multer({ storage: storage, fileFilter: imageFileFilter});
+
+const uploadRouter = express.Router();
+
+uploadRouter.use(bodyParser.json());
+
+uploadRouter.route('/')
+.get(authenticate.verifyUser, authenticate.verifyAdmin, (req, res, next) => {
+    res.statusCode = 403;
+    res.end('GET operation not supported on /imageUpload');
+})
+.post(authenticate.verifyUser, authenticate.verifyAdmin, upload.single('imageFile'), (req, res) => {
+    res.statusCode = 200;
+    res.setHeader('Content-Type', 'application/json');
+    res.json(req.file);
+})
+.put(authenticate.verifyUser, authenticate.verifyAdmin, (req, res, next) => {
+    res.statusCode = 403;
+    res.end('PUT operation not supported on /imageUpload');
+})
+.delete(authenticate.verifyUser, authenticate.verifyAdmin, (req, res, next) => {
+    res.statusCode = 403;
+    res.end('DELETE operation not supported on /imageUpload');
+});
+
+module.exports = uploadRouter;

Server-side Development with NodeJS, Express and MongoDB/conFusionServer/routes/users.js

@@ -1,15 +1,14 @@
-var express = require('express');
-var router = express.Router();
+const express = require('express');
 const bodyParser = require('body-parser');
-var User = require('../models/user');
-var passport = require('passport');
-var authenticate = require('../authenticate');
+const User = require('../models/user');
+const passport = require('passport');
+const authenticate = require('../authenticate');
 
 
-router.use(bodyParser.json());
+const usersRouter = express.Router();
+usersRouter.use(bodyParser.json());
 
-/* GET users listing. */
-router.route('/')
+usersRouter.route('/')
 .get( authenticate.verifyUser, authenticate.verifyAdmin, (req, res, next)=> {
     User.find({})
         .then((users) =>{
@@ -19,59 +18,50 @@ router.route('/')
         }, (err) => next(err))
         .catch((err) => next(err));
 })
+// USERS/SIGN UP
 
-
-
-// SIGN UP
-router.post('/signup', (req, res, next) => {
-  User.register(new User({username: req.body.username}), 
+usersRouter.post('/signup', (req, res, next) => {
+  User.register(new User({ username: req.body.username }),
     req.body.password, (err, user) => {
-    if(err) {
-      res.statusCode = 500;
-      res.setHeader('Content-Type', 'application/json');
-      res.json({err: err});
-    }
-    else {
-      if (req.body.firstname)
-        user.firstname = req.body.firstname;
-      if (req.body.lastname)
-        user.lastname = req.body.lastname;
-      user.save((err, user) => {
-        if (err) {
-          res.statusCode = 500;
-          res.setHeader('Content-Type', 'application/json');
-          res.json({err: err});
-          return ;
-        }
-        passport.authenticate('local')(req, res, () => {
-          res.statusCode = 200;
-          res.setHeader('Content-Type', 'application/json');
-          res.json({success: true, status: 'Registration Successful!'});
+      if (err) {
+        res.statusCode = 500;
+        res.setHeader('Content-Type', 'application/json');
+        res.json({ err: err });
+      }
+      else {
+        if (req.body.firstname)
+          user.firstname = req.body.firstname;
+        if (req.body.lastname)
+          user.lastname = req.body.lastname;
+          user.save((err, user) => {
+          if (err) {
+            res.statusCode = 500;
+            res.setHeader('Content-Type', 'application/json');
+            res.json({ err: err });
+            return;
+          }
+          passport.authenticate('local')(req, res, () => {
+            res.statusCode = 200;
+            res.setHeader('Content-Type', 'application/json');
+            res.json({ success: true, status: 'Registration Successful!' });
+          });
         });
-      });
-    }
-  });
+      }
+    });
 });
 
-//LOGIN
-router.post('/login', passport.authenticate('local'), (req, res) => {
 
-  // var token = authenticate.getToken({
-  //   _id: req.user._id,
-  //   firstname: req.user.firstname,
-  //   lastname: req.user.lastname
-  // });
+// USERS/LOGIN 
 
+usersRouter.post('/login', passport.authenticate('local'), (req, res) => {
 
-  var token = authenticate.getToken({_id: req.user._id});
+  var token = authenticate.getToken({ _id: req.user._id });//going to create a token by giving a payload, which only contains the ID of the user. So, we'll say id: req.user._id. That is sufficient enough for creating the JsonWebToken. We don't want to include any other of the user's information
   res.statusCode = 200;
   res.setHeader('Content-Type', 'application/json');
-  res.json({success: true, token: token, status: 'You are successfully logged in!'});
+  res.json({ success: true, token: token, status: 'You are successfully logged in!' });
 });
 
-// LOGOUT
-
-router.get('/logout', (req, res) => {
+usersRouter.get('/logout', (req, res,next) => {
   if (req.session) {
     req.session.destroy();
     res.clearCookie('session-id');
@@ -84,7 +74,4 @@ router.get('/logout', (req, res) => {
   }
 });
 
-
-
-
-module.exports = router;
+module.exports = usersRouter;