express_server.js

var express = require("express");
var cookieSession = require('cookie-session')

const bcrypt = require('bcrypt');
var app = express();
app.use(cookieSession({
  name: 'session',
  keys: ["King", "North"],
}));

const bodyParser = require("body-parser");
app.use(bodyParser.urlencoded({extended: true}));

var PORT = 8080; // default port 8080

app.set('view engine', 'ejs');
app.set('trust proxy', 1)


const urlDatabase = {
  sgq3y6: { longURL: "https://www.tsn.ca", userID: "aJ48lW" },
  sdjfhd: { longURL: "https://www.google.ca", userID: "aJ48lW" }
};

const users = {
  "abc123": {
    userId: "abc123",
    email: "user@example.com",
    password: bcrypt.hashSync("purple-monkey-dinosaur", 10)
  },
 "user2RandomID": {
    userId: "user2RandomID",
    email: "user2@example.com",
    password: bcrypt.hashSync("dishwasher-funk", 10)
  },
  "aJ48lW": {
    userId: "aJ48lW",
    email: "jake@hotmail.com",
    password: bcrypt.hashSync("dog", 10)
  }
}

function generateRandomString(length) {
   var result           = '';
   var characters       = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
   var charactersLength = characters.length;
   for ( var i = 0; i < length; i++ ) {
      result += characters.charAt(Math.floor(Math.random() * charactersLength));
   }
   return result;
}

getUserByEmailPassword = (email, password) => {
  let user = null;
  for(let userId in users) {
    if(users[userId].email === email && bcrypt.compareSync(password, users[userId].password)) {
      user = users[userId];
    }
  }
  return user;
}


function urlsForUser(id) {
  let urls = {};
  let key = null;
  let value = null;
  for (let shortURLs in urlDatabase) {
    if(urlDatabase[shortURLs].userID == id) {
      key = shortURLs;
      value = urlDatabase[shortURLs].longURL;
      urls[key] = value;
    }
  }
  return urls;
}


app.get("/", (req, res) => {
  if(req.session['uId']) {
    res.redirect("/urls");
  } else {
    res.redirect("/login");
  }
});


app.get("/urls", (req, res) => {
  let templateVars = {
    user: null,
    urls: null,
    loginRedirect: null
  }
  if(req.session['uId']) {
    templateVars.user = users[req.session['uId']],
    templateVars.urls = urlsForUser([req.session['uId']]),
    res.render("urls_index", templateVars)
  } else {
    templateVars.loginRedirect = true;
    res.render("urls_login", templateVars);
  }
});


app.get("/urls/new", (req, res) => {
  let templateVars = {
    urls: urlDatabase,
    user: null,
    loginRedirect: null
  }
  if(req.session['uId']) {
    templateVars.user = users[req.session['uId']];
    res.render("urls_new", templateVars);
  } else {
    templateVars.loginRedirect = true;
    res.render("urls_login", templateVars);
  }
});


app.post("/urls/:id", (req, res) => {
  let templateVars = {
    user: null
  }
  if(req.session['uId']) {
    urlDatabase[req.params.id].longURL = req.body[req.params.id]
    res.redirect("/urls");
  } else {
    res.send("Please login/register to use TinyApp")
  }
})


app.get("/urls/:shortURL", (req, res) => {
  let templateVars = {
    urls: urlDatabase,
    user: null,
    shortURL: req.params.shortURL,
    longURL: null
  }
  if (!urlDatabase.hasOwnProperty(req.params.shortURL)) {
    res.send("URL does not exist");
  } else if(!req.session['uId']) {
    res.send("Please login to access shortURL")
  } else if (req.session['uId']) {
    templateVars.user = users[req.session['uId']];
    templateVars.longURL = urlDatabase[req.params.shortURL].longURL;
    res.render("urls_show", templateVars);
  } else {
    res.send("The URL does not belong to the current user - please create a new URL")
  }
});


app.get("/register", (req, res) => {
  if(req.session['uId']) {
    res.redirect("/urls")
  } else {
    res.render("urls_register");
  }
})

app.post("/register", (req, res) => {
  let userId = generateRandomString(6);
  let email = req.body.email;
  let password = req.body.password;
  let hashedPassword = bcrypt.hashSync(req.body.password, 10);
  for (let user in users) {
    if (users[user].email === email) {
      return res.send("This email has already been taken");
    }
  }
  if(email === "" || password === ""){
    return res.send("Please provide both email and password!");
  } else {
    users[userId] = {
      userId,
      email,
      password: hashedPassword
    }
    req.session.uId = userId;
    res.redirect("/urls")
  }
});

app.get("/login", (req, res) =>{
  let templateVars = {
    uId: req.session["uId"],
    urls: urlDatabase,
    userObject: users,
    user: null,
    loginRedirect: null
  };
  if (req.session.uId) {
    templateVars.user = users[req.session.uId];
    res.redirect("/urls");
  } else {
    res.render("urls_login", templateVars);
  }
});


app.post("/login", (req, res) => {
  if (!req.body.email || !req.body.password) {
    res.status(400);
    return res.send('Email and password cannot be empty');
  }
  let user = getUserByEmailPassword(req.body.email, req.body.password);
  if(user) {
    req.session.uId = user.userId;
    res.redirect("/urls");
  } else {
    res.status(400);
    res.send("invalid username and/or password");
  }
});


app.post("/logout", (req, res) => {
  req.session = null
  res.redirect("/login");
})

app.post("/urls", (req, res) => {
  let generatedString = generateRandomString(6);
  // urlDatabase[generatedString] = req.body.longURL;
  urlDatabase[generatedString] = {longURL: req.body.longURL, userID: req.session.uId}
  res.redirect("/urls/" + generatedString);
});


app.post("/urls/:shortURL/delete", (req, res) => {
  delete urlDatabase[req.params.shortURL];
  res.redirect("/urls")
})

app.get("/u/:shortURL", (req, res) => {
  const longURL = urlDatabase[req.params.shortURL].longURL;
  res.redirect(longURL);
});

app.listen(PORT, () => {
  console.log(`Example app listening on port ${PORT}!`);
});