middleware.js

var Post = require("./models/trips");
var Comment = require("./models/comment");

var middlewareObj={};

middlewareObj.checkOwnership = function ( req, res, next )
{ 
    if(req.isAuthenticated()) 
    {
        Post.findById(req.params.id, function(err, foundCampground)
            {   if(err) {
               req.flash("error", "Campground not found");
               res.redirect("back");}
                 else{
                   //   does this user owns camps
                    if(foundCampground.author.id.equals(req.user._id))
                    { next();}
                    else { req.flash("error", "You don't have permission to do that");
                res.redirect("back");}
                    }
            }); 
    }                   else {     req.flash("error", "You need to be logged in to do that");
        res.redirect("back");} 
 };
           
middlewareObj.isLoggedIn = function(req, res, next){
    if(req.isAuthenticated()){
        return next();
    }
    req.flash("error", "You need to be logged in to do that");
    res.redirect("/login");
}

                
                
                
                
                
                
                
                
                
                
                
                
                
                
                
                
    middlewareObj.checkCommentOwnership = function(req, res, next) {
    if(req.isAuthenticated()){
        Comment.findById(req.params.comment_id, function(err, foundComment){
           if(err){
               res.redirect("back");
           }  else {
               // does user own the comment?
            if(foundComment.author.id.equals(req.user._id)) {
                next();
            } else {
                res.redirect("back");
            }
           }
        });
    } else {
        res.redirect("back");
    }
}

module.exports = middlewareObj;