server.js

var express       = require('express'),
  sessions      = require('client-sessions'),
  redis         = require('redis'),
  fonts         = require('connect-fonts'),
  font_opensans = require('connect-fonts-opensans'),
  font_alegreyasans = require('connect-fonts-alegreyasans'),
  url           = require('url'),
  oauth         = require('./oauth'),
  config        = require('./config');


// create a connection to the redis datastore
var db = redis.createClient();

db.on('error', function (err) { // eslint-disable-line handle-callback-err
  db = null;
  console.log('redis error!  the server won\'t actually store anything! ' + //eslint-disable-line no-console
              ' this is just fine for local dev');
});

var app = express();

app.use(
  express.logger(),
  express.bodyParser()
);

//app.use(require('./retarget.js'));

var allowOrigin = '*';
try {
  // a bit of a dirty hack. Use the redirect_uri to find
  // out what this server's public host is.
  allowOrigin = url.parse(config.redirect_uri).host;
} catch(e) {
}

app.use(fonts.setup({
  allow_origin: allowOrigin,
  ua: 'all',
  fonts: [ font_opensans, font_alegreyasans ]
}));

app.use(function (req, res, next) {
  if (/^\/api/.test(req.url)) {
    res.setHeader('Cache-Control', 'no-cache, max-age=0');

    return sessions({
      cookieName: config.cookieName || '123done',
      secret: process.env['COOKIE_SECRET'] || 'define a real secret, please',
      requestKey: 'session',
      cookie: {
        path: '/api',
        httpOnly: true
      }
    })(req, res, next);
  } else {
    return next();
  }
});

// add oauth endpoints
oauth(app, db);

// a function to verify that the current user is authenticated
function checkAuth(req, res, next) {
  if (!req.session.email) {
    res.send('authentication required\n', 401);
  } else {
    next();
  }
}

// auth status reports who the currently logged in user is on this
// session
app.get('/api/auth_status', function(req, res) {
  console.log(req.session); //eslint-disable-line no-console

  res.send(JSON.stringify({
    email: req.session.email || null,
    amr: req.session.amr || null,
    acr: req.session.acr || '0',
  }));
});

// logout clears the current authenticated user
app.post('/api/logout', checkAuth, function(req, res) {
  req.session.reset();
  res.send(200);
});

// the 'todo/save' api saves a todo list
app.post('/api/todos/save', checkAuth, function(req, res) {
  if (db) {
    db.set(req.session.user, JSON.stringify(req.body));
  }
  res.send(200);
});

// the 'todo/get' api gets the current version of the todo list
// from the server
app.get('/api/todos/get', checkAuth, function(req, res) {
  if (db) {
    db.get(req.session.user, function(err, reply) {
      if (err) {
        res.send(err.toString(), { 'Content-Type': 'text/plain' }, 500);
      } else {
        res.send(reply ? reply : '[]', { 'Content-Type': 'application/json' }, 200);
      }
    });
  } else {
    res.send('[{"v": "Install redis locally for persistent storage, if I want to"}]',
             { 'Content-Type': 'application/json' }, 200);
  }
});

app.get(/^\/iframe(:?\/(?:index.html)?)?$/, function (req, res, next) {
  req.url = '/index.html';
  next();
});

app.use(express.static(__dirname + '/static'));
var port = process.env['PORT'] || config.port || 8080;
app.listen(port, '0.0.0.0');
console.log('123done started on port', port); //eslint-disable-line no-console