server.js

/**
 * Created by alemjc on 2/22/16.
 * Authors: Jimmy Mona, Dong Son, and Jean Carlos Henriquez
 */ 
var Sequelize = require("sequelize");
var express = require("express");
var expressHandlebars = require("express-handlebars");
var expresssession = require('express-session');
var passport = require("passport");
var LocalStrategy = require("passport-local");
var flash = require('connect-flash');
var bcrypt = require("bcryptjs");
var bodyparser = require("body-parser");
var cookieparser = require("cookie-parser");
var SequelizeStore = require('connect-session-sequelize')(expresssession.Store);
var PORT = process.env.PORT || 9001;

var app = express();

app.engine("handlebars", expressHandlebars({
  defaultLayout: "main"
}));

app.set("view engine", "handlebars");

app.use("/static", express.static("public"));
app.use(cookieparser());
app.use(bodyparser.urlencoded({extended:false}));

app.use(flash());


passport.serializeUser(function(user, done){
  done(null, user);
});


passport.deserializeUser(function(user, done){
  done(null, user);
});


passport.use('local', new LocalStrategy({
    usernameField:'userName',
    passwordField:'password',
    session:true,
    passReqToCallback: true
  },
  function(req, userName, password, done){
    Users
      .findOne({where: {userName:userName}})
      .then(function(user){
        console.log('user', user);
        if(user){
          bcrypt.compare(password, user.dataValues.password, function(err, success){
            console.log('success', success);
            if(success){
              done(null,{userName:userName});
            }
            else{
              done(null,false, {message: "Invalid user name or password."});
            }

          });
        }
        else{
          done(null,false, {message: "Invalid user name or password."});
        }

      })
      .catch(function(err){
        done(err);
      });
  }
));


if(process.env.NODE_ENV === 'production') {
  // FOR HEROKU DEPLOY

} 
else {
  // FOR TESTING LOCALLY
  require("dotenv").config({path:"./DBCreds.env"});
}

var sequelize = new Sequelize(process.env.CLEARDB_DATABASE_URL);

app.use(expresssession({secret:'process.env.SECRET', resave:true, saveUninitialized:true,
  cookie : { secure : false, maxAge : (4 * 60 * 60 * 1000) }
  //store: new SequelizeStore({
  //  db: sequelize
  //})
}));

app.use(passport.initialize());
app.use(passport.session());

//DB Models
var Places = sequelize.define("place", {
  name: {
  type:Sequelize.STRING,
   allowNull:false
  },
  address:{
   type:Sequelize.STRING,
   allowNull:false
  },
  pictures:{
   type:Sequelize.STRING,
   defaultValue: "http://www.clipartbest.com/cliparts/dc8/578/dc8578Kgi.jpeg"
  },
  hours:{
   type:Sequelize.STRING
  },
  category:{
   type:Sequelize.STRING,
   allowNull:false
  }
});

var Users = sequelize.define("user",{
  firstName:{
   type:Sequelize.STRING,
   allowNull:false
  },
  lastName:{
   type:Sequelize.STRING,
   allowNull:false
  },
  userName:{
   type:Sequelize.STRING,
   allowNull:false,
   validate:{
     len:[5,20]
    }
  },
 password: {
   type: Sequelize.STRING,
   allowNull: false,
   validate: {
     len: [5, 2000]
   }
 },
 birthday: {
 type: Sequelize.STRING
  }
},
  {
  hooks:{
    beforeCreate: function(input){
      input.password = bcrypt.hashSync(input.password,10);
      }
    }
  }
);

var Ratings = sequelize.define("rating",{
  stars: {
    type:Sequelize.INTEGER
  },
  comment:{
    type:Sequelize.STRING
  }
});
//End DB Models

//DB relations
Users.belongsToMany(Places,{through:Ratings});
Places.belongsToMany(Users,{through:Ratings});

//routes
app.get("/", function (req, res) {
    Places.findAll().then(function(place) {
      if(req.isAuthenticated()){
        res.render('home', {
          layout: "loggedin",
          place: place,
          userinfo: req.user
        })
      }else{
        res.render('home', {
        place: place
      })
    }
  })
});

app.get("/food", function (req, res) {
  Places.findAll({
    where: {category: "food"}
  }).then(function(place) {
    if(req.isAuthenticated()){
      res.render('food', {
        layout: "loggedin",
        place: place,
        userinfo: req.user
      })
    }else{
      res.render('food', {
       place: place
      })
    }
  })
});

app.get("/entertainment", function (req, res) {
  Places.findAll({
    where: {category: "entertainment"}
  }).then(function(place) {
    if(req.isAuthenticated()){
      res.render('entertainment', {
        layout: "loggedin",
        place: place,
        userinfo: req.user
      })
    }else{
      res.render('entertainment', {
        place: place
      })
    }
  })
});

app.get("/shopping", function (req, res) {
  Places.findAll({
    where: {category: "shopping"}
  }).then(function(place) {
    if(req.isAuthenticated()){
      res.render('shopping', {
        layout:"loggedin",
        place: place,
        userinfo: req.user
      })
    }else{
      res.render('shopping', {
        place: place
      })
    }
  })
});


app.get("/:category/:id", function (req, res){
  var id = req.params.id;
  Ratings.findAll({
    where: {placeId: id}
    }).then(function(ratings){
      var ratings= ratings
      Places.findAll({
        where: {id: id},
        include: [{
          model: Users
          }]
        }).then(function(place){
        if(req.isAuthenticated()){
          res.render("placepage", {
            layout:"loggedin",
            place: place,
            ratings: ratings,
            userinfo: req.user,
            msg: req.session.error
          })
          delete req.session.error;
        }else{
          res.render("placepage", {
            place: place,
            ratings: ratings,
            msg: req.session.error
          })
          delete req.session.error;
        }
      })
    })
  });

app.get("/register", function(req, res) {
  res.render("register", req.query);
});

app.get("/login", function(req, res) {
  res.render("login", {msg:req.flash("message")});
});

app.get("/logout", function(req, res){
  req.session.destroy();
  req.logout();
  res.redirect("/");

});
//end routes

//POSTS
app.post("/login", passport.authenticate('local',{
    successRedirect:"/",
    failureRedirect:"/login",
    failureFlash:true
  }
));

app.post("/register", function(req, res){
  if(req.body.userName.length < 5 || req.body.password.length < 5){
    res.redirect("/register?msg=User name password must be longer than 5 characters.");
    return;
  }

  if(req.body.first_name.length === 0 || req.body.last_name.length === 0 || req.body.birthday.length === 0){
    res.redirect("/register?msg=Please fill out all fields.");
    return;
  }

  Users.findAll({
    where: {userName: req.body.userName}
  }).then(function(result){
    if (result.length < 0) {
      res.redirect("/register?msg=That user name is already taken, please choose a diffrent one.");
      return;
    }
  });
  Users
    .create({userName:req.body.userName, firstName:req.body.first_name, lastName:req.body.last_name,
    password: req.body.password, birthday:req.body.birthday})
    .then(function(){
      res.redirect("/login");
    })
    .catch(function(err){
      console.log("error is: ");
      console.log(err);
      if(err){
        console.log(err);
        res.redirect("/register?msg=Please fill out all fields.");
      }
    });
});

app.post("/loggedin", function(req, res) {
  Places
    .create({name:req.body.business_name, address:req.body.business_address, category:req.body.category})
    .then(function() {
    res.redirect("/");
  })
});

app.post("/ratings", function(req, res){
  if (req.isAuthenticated()){
    Users.findAll({
    where: {userName: req.user.userName}
  }).then(function (result){
    if (req.body.stars === "0"){
      req.session.error = "You must choose a star rating to review a business";
      res.redirect("back");
      return;
    }else if (req.body.comment.length < 10){
      req.session.error = "You're review is too short, please make it at least 10 characters";
      res.redirect("back");
      return;
    }
    Ratings
      .create({stars: parseInt(req.body.stars), comment: req.body.comment, placeId: parseInt(req.body.placeId), userId:parseInt(result[0].dataValues.id)})
      .then(function(){
        res.redirect("back");
      })
  })
  }else{
    req.session.error = "You must be logged in to review a business";
    res.redirect("back");
  }
});
//End posts

sequelize.sync().then(function(){
  app.listen(PORT, function() {
   console.log("LISTENING ON %s", PORT);
  });
}).catch(function(err){
  console.log("could not sync to db because of following error");
  console.log(err);
});