\n ![\"I'm](\"assets/images/yeoman.png\")
\n
\npaizaQA
\nHow to make QA sites like this: Building a QA web service in an hour - MEAN stack development(3)
\n\n Accounts are reset on server restart from server/config/seed.js. Default account is test@example.com / test
Admin account is admin@example.com / admin
The delete user and user index api routes are restricted to users with the 'admin' role.
\n \nHow to make QA sites like this: Building a QA web service in an hour - MEAN stack development(3)
\n\n | Stars | \nAnswers | \nQuestion | \n
|---|---|---|
| \n {{question.stars.length}} \n | \n \n {{question.answers.length}} \n | \n \n \n \n \n \n {{question.title}}\n \n \n by {{question.user.name}}\n - {{question.createdAt|fromNow}}\n \n \n \n \n {{tag.text}}\n \n \n \n \n \n | \n
Are you sure you want to delete ' + name + ' ?
',\n buttons: [{\n classes: 'btn-danger',\n text: 'Delete',\n click: function(e) {\n deleteModal.close(e);\n }\n }, {\n classes: 'btn-default',\n text: 'Cancel',\n click: function(e) {\n deleteModal.dismiss(e);\n }\n }]\n }\n }, 'modal-danger');\n\n deleteModal.result.then(function(event) {\n del.apply(event, args);\n });\n };\n }\n }\n };\n });\n" }, { "path": "client/components/mongoose-error/mongoose-error.directive.js", "content": "'use strict';\n\n/**\n * Removes server error when user updates input\n */\nangular.module('paizaqaApp')\n .directive('mongooseError', function() {\n return {\n restrict: 'A',\n require: 'ngModel',\n link: function(scope, element, attrs, ngModel) {\n element.on('keydown', () => ngModel.$setValidity('mongoose', true));\n }\n };\n });\n" }, { "path": "client/components/navbar/navbar.controller.js", "content": "'use strict';\n\nclass NavbarController {\n //start-non-standard\n\n\n isCollapsed = true;\n //end-non-standard\n\n constructor(Auth, $state) {\n this.menu = [\n {\n 'title': 'All',\n 'link': function(){return '/';},\n 'show': function(){return true;},\n },\n {\n 'title': 'Mine',\n 'link': function(){return '/users/' + Auth.getCurrentUser()._id;},\n 'show': Auth.isLoggedIn,\n },\n {\n 'title': 'Starred',\n 'link': function(){return '/users/' + Auth.getCurrentUser()._id + '/starred';},\n 'show': Auth.isLoggedIn,\n },\n ];\n this.isLoggedIn = Auth.isLoggedIn;\n this.isAdmin = Auth.isAdmin;\n this.getCurrentUser = Auth.getCurrentUser;\n\n this.search = function(keyword) {\n $state.go('main', {keyword: keyword}, {reload: true});\n };\n }\n}\n\nangular.module('paizaqaApp')\n .controller('NavbarController', NavbarController);\n" }, { "path": "client/components/navbar/navbar.directive.js", "content": "'use strict';\n\nangular.module('paizaqaApp')\n .directive('navbar', () => ({\n templateUrl: 'components/navbar/navbar.html',\n restrict: 'E',\n controller: 'NavbarController',\n controllerAs: 'nav'\n }));\n" }, { "path": "client/components/navbar/navbar.html", "content": "\n" }, { "path": "client/components/oauth-buttons/oauth-buttons.controller.js", "content": "'use strict';\n\nangular.module('paizaqaApp')\n .controller('OauthButtonsCtrl', function($window) {\n this.loginOauth = function(provider) {\n $window.location.href = '/auth/' + provider;\n };\n });\n" }, { "path": "client/components/oauth-buttons/oauth-buttons.controller.spec.js", "content": "'use strict';\n\ndescribe('Controller: OauthButtonsCtrl', function() {\n\n // load the controller's module\n beforeEach(module('paizaqaApp'));\n\n var OauthButtonsCtrl, $window;\n\n // Initialize the controller and a mock $window\n beforeEach(inject(function($controller) {\n $window = {\n location: {}\n };\n\n OauthButtonsCtrl = $controller('OauthButtonsCtrl', {\n $window: $window\n });\n }));\n\n it('should attach loginOauth', function() {\n expect(OauthButtonsCtrl.loginOauth).toEqual(jasmine.any(Function));\n });\n});\n" }, { "path": "client/components/oauth-buttons/oauth-buttons.directive.js", "content": "'use strict';\n\nangular.module('paizaqaApp')\n .directive('oauthButtons', function() {\n return {\n templateUrl: 'components/oauth-buttons/oauth-buttons.html',\n restrict: 'EA',\n controller: 'OauthButtonsCtrl',\n controllerAs: 'OauthButtons',\n scope: {\n classes: '@'\n }\n };\n });\n" }, { "path": "client/components/oauth-buttons/oauth-buttons.directive.spec.js", "content": "'use strict';\n\ndescribe('Directive: oauthButtons', function() {\n\n // load the directive's module and view\n beforeEach(module('paizaqaApp'));\n beforeEach(module('components/oauth-buttons/oauth-buttons.html'));\n\n var element, parentScope, elementScope;\n\n var compileDirective = function(template) {\n inject(function($compile) {\n element = angular.element(template);\n element = $compile(element)(parentScope);\n parentScope.$digest();\n elementScope = element.isolateScope();\n });\n };\n\n beforeEach(inject(function($rootScope) {\n parentScope = $rootScope.$new();\n }));\n\n it('should contain anchor buttons', function() {\n compileDirective('![\"Fork](\"https://s3.amazonaws.com/github/ribbons/forkme_right_green_007200.png\")
\n \n\n"
},
{
"path": "client/robots.txt",
"content": "# robotstxt.org\n\nUser-agent: *\n"
},
{
"path": "e2e/account/login/login.po.js",
"content": "/**\n * This file uses the Page Object pattern to define the main page for tests\n * https://docs.google.com/presentation/d/1B6manhG0zEXkC-H-tPo2vwU06JhL8w9-XCF9oehXzAQ\n */\n\n'use strict';\n\nvar LoginPage = function() {\n var form = this.form = element(by.css('.form'));\n form.email = form.element(by.model('vm.user.email'));\n form.password = form.element(by.model('vm.user.password'));\n form.submit = form.element(by.css('.btn-login'));\n form.oauthButtons = require('../../components/oauth-buttons/oauth-buttons.po').oauthButtons;\n\n this.login = function(data) {\n for (var prop in data) {\n var formElem = form[prop];\n if (data.hasOwnProperty(prop) && formElem && typeof formElem.sendKeys === 'function') {\n formElem.sendKeys(data[prop]);\n }\n }\n\n return form.submit.click();\n };\n};\n\nmodule.exports = new LoginPage();\n\n"
},
{
"path": "e2e/account/login/login.spec.js",
"content": "'use strict';\n\nvar config = browser.params;\nvar UserModel = require(config.serverConfig.root + '/server/api/user/user.model');\n\ndescribe('Login View', function() {\n var page;\n\n var loadPage = function() {\n browser.get(config.baseUrl + '/login');\n page = require('./login.po');\n };\n\n var testUser = {\n name: 'Test User',\n email: 'test@example.com',\n password: 'test'\n };\n\n beforeEach(function(done) {\n UserModel.removeAsync()\n .then(function() {\n return UserModel.createAsync(testUser);\n })\n .then(loadPage)\n .finally(function() {\n browser.wait(function() {\n //console.log('waiting for angular...');\n return browser.executeScript('return !!window.angular');\n\n }, 5000).then(done);\n\n });\n });\n\n it('should include login form with correct inputs and submit button', function() {\n expect(page.form.email.getAttribute('type')).toBe('email');\n expect(page.form.email.getAttribute('name')).toBe('email');\n expect(page.form.password.getAttribute('type')).toBe('password');\n expect(page.form.password.getAttribute('name')).toBe('password');\n expect(page.form.submit.getAttribute('type')).toBe('submit');\n expect(page.form.submit.getText()).toBe('Login');\n });\n\n it('should include oauth buttons with correct classes applied', function() {\n expect(page.form.oauthButtons.facebook.getText()).toBe('Connect with Facebook');\n expect(page.form.oauthButtons.facebook.getAttribute('class')).toMatch('btn-block');\n expect(page.form.oauthButtons.google.getText()).toBe('Connect with Google+');\n expect(page.form.oauthButtons.google.getAttribute('class')).toMatch('btn-block');\n expect(page.form.oauthButtons.twitter.getText()).toBe('Connect with Twitter');\n expect(page.form.oauthButtons.twitter.getAttribute('class')).toMatch('btn-block');\n });\n\n describe('with local auth', function() {\n\n it('should login a user and redirecting to \"/\"', function() {\n page.login(testUser);\n\n var navbar = require('../../components/navbar/navbar.po');\n\n expect(browser.getCurrentUrl()).toBe(config.baseUrl + '/');\n expect(navbar.navbarAccountGreeting.getText()).toBe('Hello ' + testUser.name);\n });\n\n it('should indicate login failures', function() {\n page.login({\n email: testUser.email,\n password: 'badPassword'\n });\n\n expect(browser.getCurrentUrl()).toBe(config.baseUrl + '/login');\n\n var helpBlock = page.form.element(by.css('.form-group.has-error .help-block.ng-binding'));\n expect(helpBlock.getText()).toBe('This password is not correct.');\n });\n\n });\n});\n"
},
{
"path": "e2e/account/logout/logout.spec.js",
"content": "'use strict';\n\nvar config = browser.params;\nvar UserModel = require(config.serverConfig.root + '/server/api/user/user.model');\n\ndescribe('Logout View', function() {\n var login = function(user) {\n browser.get(config.baseUrl + '/login');\n require('../login/login.po').login(user);\n };\n\n var testUser = {\n name: 'Test User',\n email: 'test@example.com',\n password: 'test'\n };\n\n beforeEach(function(done) {\n UserModel.removeAsync()\n .then(function() {\n return UserModel.createAsync(testUser);\n })\n .then(function() {\n return login(testUser);\n })\n .finally(function() {\n browser.wait(function() {\n return browser.executeScript('return !!window.angular');\n }, 5000).then(done);\n });\n });\n\n describe('with local auth', function() {\n\n it('should logout a user and redirecting to \"/\"', function() {\n var navbar = require('../../components/navbar/navbar.po');\n\n expect(browser.getCurrentUrl()).toBe(config.baseUrl + '/');\n expect(navbar.navbarAccountGreeting.getText()).toBe('Hello ' + testUser.name);\n\n browser.get(config.baseUrl + '/logout');\n\n navbar = require('../../components/navbar/navbar.po');\n\n expect(browser.getCurrentUrl()).toBe(config.baseUrl + '/');\n expect(navbar.navbarAccountGreeting.isDisplayed()).toBe(false);\n });\n\n });\n});\n"
},
{
"path": "e2e/account/signup/signup.po.js",
"content": "/**\n * This file uses the Page Object pattern to define the main page for tests\n * https://docs.google.com/presentation/d/1B6manhG0zEXkC-H-tPo2vwU06JhL8w9-XCF9oehXzAQ\n */\n\n'use strict';\n\nvar SignupPage = function() {\n var form = this.form = element(by.css('.form'));\n form.name = form.element(by.model('vm.user.name'));\n form.email = form.element(by.model('vm.user.email'));\n form.password = form.element(by.model('vm.user.password'));\n form.confirmPassword = form.element(by.model('vm.user.confirmPassword'));\n form.submit = form.element(by.css('.btn-register'));\n form.oauthButtons = require('../../components/oauth-buttons/oauth-buttons.po').oauthButtons;\n\n this.signup = function(data) {\n for (var prop in data) {\n var formElem = form[prop];\n if (data.hasOwnProperty(prop) && formElem && typeof formElem.sendKeys === 'function') {\n formElem.sendKeys(data[prop]);\n }\n }\n\n return form.submit.click();\n };\n};\n\nmodule.exports = new SignupPage();\n\n"
},
{
"path": "e2e/account/signup/signup.spec.js",
"content": "'use strict';\n\nvar config = browser.params;\nvar UserModel = require(config.serverConfig.root + '/server/api/user/user.model');\n\ndescribe('Signup View', function() {\n var page;\n\n var loadPage = function() {\n browser.manage().deleteAllCookies();\n browser.get(config.baseUrl + '/signup');\n page = require('./signup.po');\n };\n\n var testUser = {\n name: 'Test',\n email: 'test@example.com',\n password: 'test',\n confirmPassword: 'test'\n };\n\n beforeEach(function(done) {\n loadPage();\n browser.wait(function() {\n return browser.executeScript('return !!window.angular');\n }, 5000).then(done);\n });\n\n it('should include signup form with correct inputs and submit button', function() {\n expect(page.form.name.getAttribute('type')).toBe('text');\n expect(page.form.name.getAttribute('name')).toBe('name');\n expect(page.form.email.getAttribute('type')).toBe('email');\n expect(page.form.email.getAttribute('name')).toBe('email');\n expect(page.form.password.getAttribute('type')).toBe('password');\n expect(page.form.password.getAttribute('name')).toBe('password');\n expect(page.form.confirmPassword.getAttribute('type')).toBe('password');\n expect(page.form.confirmPassword.getAttribute('name')).toBe('confirmPassword');\n expect(page.form.submit.getAttribute('type')).toBe('submit');\n expect(page.form.submit.getText()).toBe('Sign up');\n });\n\n it('should include oauth buttons with correct classes applied', function() {\n expect(page.form.oauthButtons.facebook.getText()).toBe('Connect with Facebook');\n expect(page.form.oauthButtons.facebook.getAttribute('class')).toMatch('btn-block');\n expect(page.form.oauthButtons.google.getText()).toBe('Connect with Google+');\n expect(page.form.oauthButtons.google.getAttribute('class')).toMatch('btn-block');\n expect(page.form.oauthButtons.twitter.getText()).toBe('Connect with Twitter');\n expect(page.form.oauthButtons.twitter.getAttribute('class')).toMatch('btn-block');\n });\n\n describe('with local auth', function() {\n\n beforeAll(function(done) {\n UserModel.removeAsync().then(done);\n });\n\n it('should signup a new user, log them in, and redirecting to \"/\"', function() {\n page.signup(testUser);\n\n var navbar = require('../../components/navbar/navbar.po');\n\n expect(browser.getCurrentUrl()).toBe(config.baseUrl + '/');\n expect(navbar.navbarAccountGreeting.getText()).toBe('Hello ' + testUser.name);\n });\n\n it('should indicate signup failures', function() {\n page.signup(testUser);\n\n expect(browser.getCurrentUrl()).toBe(config.baseUrl + '/signup');\n expect(page.form.email.getAttribute('class')).toContain('ng-invalid-mongoose');\n\n var helpBlock = page.form.element(by.css('.form-group.has-error .help-block.ng-binding'));\n expect(helpBlock.getText()).toBe('The specified email address is already in use.');\n });\n\n });\n});\n"
},
{
"path": "e2e/components/navbar/navbar.po.js",
"content": "/**\n * This file uses the Page Object pattern to define the main page for tests\n * https://docs.google.com/presentation/d/1B6manhG0zEXkC-H-tPo2vwU06JhL8w9-XCF9oehXzAQ\n */\n\n'use strict';\n\nvar NavbarComponent = function() {\n this.navbar = element(by.css('.navbar'));\n this.navbarHeader = this.navbar.element(by.css('.navbar-header'));\n this.navbarNav = this.navbar.element(by.css('#navbar-main .nav.navbar-nav:not(.navbar-right)'));\n this.navbarAccount = this.navbar.element(by.css('#navbar-main .nav.navbar-nav.navbar-right'));\n this.navbarAccountGreeting = this.navbarAccount.element(by.binding('getCurrentUser().name'));\n};\n\nmodule.exports = new NavbarComponent();\n"
},
{
"path": "e2e/components/oauth-buttons/oauth-buttons.po.js",
"content": "/**\n * This file uses the Page Object pattern to define the main page for tests\n * https://docs.google.com/presentation/d/1B6manhG0zEXkC-H-tPo2vwU06JhL8w9-XCF9oehXzAQ\n */\n\n'use strict';\n\nvar OauthButtons = function() {\n var oauthButtons = this.oauthButtons = element(by.css('oauth-buttons'));\n oauthButtons.facebook = oauthButtons.element(by.css('.btn.btn-social.btn-facebook'));\n oauthButtons.google = oauthButtons.element(by.css('.btn.btn-social.btn-google'));\n oauthButtons.twitter = oauthButtons.element(by.css('.btn.btn-social.btn-twitter'));\n};\n\nmodule.exports = new OauthButtons();\n"
},
{
"path": "e2e/main/main.po.js",
"content": "/**\n * This file uses the Page Object pattern to define the main page for tests\n * https://docs.google.com/presentation/d/1B6manhG0zEXkC-H-tPo2vwU06JhL8w9-XCF9oehXzAQ\n */\n\n'use strict';\n\nvar MainPage = function() {\n this.heroEl = element(by.css('.hero-unit'));\n this.h1El = this.heroEl.element(by.css('h1'));\n this.imgEl = this.heroEl.element(by.css('img'));\n};\n\nmodule.exports = new MainPage();\n\n"
},
{
"path": "e2e/main/main.spec.js",
"content": "'use strict';\n\nvar config = browser.params;\n\ndescribe('Main View', function() {\n var page;\n\n beforeEach(function() {\n browser.get(config.baseUrl + '/');\n page = require('./main.po');\n });\n\n it('should include jumbotron with correct data', function() {\n expect(page.h1El.getText()).toBe('\\'Allo, \\'Allo!');\n expect(page.imgEl.getAttribute('src')).toMatch(/yeoman.png$/);\n expect(page.imgEl.getAttribute('alt')).toBe('I\\'m Yeoman');\n });\n});\n"
},
{
"path": "karma.conf.js",
"content": "// Karma configuration\n// http://karma-runner.github.io/0.10/config/configuration-file.html\n\nmodule.exports = function(config) {\n config.set({\n // base path, that will be used to resolve files and exclude\n basePath: '',\n\n // testing framework to use (jasmine/mocha/qunit/...)\n frameworks: ['jasmine'],\n\n // list of files / patterns to load in the browser\n files: [\n // bower:js\n 'client/bower_components/jquery/dist/jquery.js',\n 'client/bower_components/angular/angular.js',\n 'client/bower_components/angular-resource/angular-resource.js',\n 'client/bower_components/angular-cookies/angular-cookies.js',\n 'client/bower_components/angular-sanitize/angular-sanitize.js',\n 'client/bower_components/angular-bootstrap/ui-bootstrap-tpls.js',\n 'client/bower_components/lodash/dist/lodash.compat.js',\n 'client/bower_components/angular-socket-io/socket.js',\n 'client/bower_components/angular-ui-router/release/angular-ui-router.js',\n 'client/bower_components/angular-validation-match/dist/angular-validation-match.min.js',\n 'client/bower_components/pagedown/Markdown.Converter.js',\n 'client/bower_components/pagedown/Markdown.Sanitizer.js',\n 'client/bower_components/pagedown/Markdown.Extra.js',\n 'client/bower_components/pagedown/Markdown.Editor.js',\n 'client/bower_components/angular-pagedown/angular-pagedown.js',\n 'client/bower_components/ng-tags-input/ng-tags-input.min.js',\n 'client/bower_components/angular-messages/angular-messages.js',\n 'client/bower_components/moment/moment.js',\n 'client/bower_components/ngInfiniteScroll/build/ng-infinite-scroll.js',\n 'client/bower_components/angular-mocks/angular-mocks.js',\n // endbower\n 'node_modules/socket.io-client/socket.io.js',\n 'client/app/app.js',\n 'client/{app,components}/**/*.module.js',\n 'client/{app,components}/**/*.js',\n 'client/{app,components}/**/*.html'\n ],\n\n preprocessors: {\n '**/*.html': 'ng-html2js',\n 'client/{app,components}/**/*.js': 'babel'\n },\n\n ngHtml2JsPreprocessor: {\n stripPrefix: 'client/'\n },\n\n babelPreprocessor: {\n options: {\n sourceMap: 'inline',\n optional: [\n 'es7.classProperties'\n ]\n },\n filename: function (file) {\n return file.originalPath.replace(/\\.js$/, '.es5.js');\n },\n sourceFileName: function (file) {\n return file.originalPath;\n }\n },\n\n // list of files / patterns to exclude\n exclude: [],\n\n // web server port\n port: 8080,\n\n // level of logging\n // possible values: LOG_DISABLE || LOG_ERROR || LOG_WARN || LOG_INFO || LOG_DEBUG\n logLevel: config.LOG_INFO,\n\n // reporter types:\n // - dots\n // - progress (default)\n // - spec (karma-spec-reporter)\n // - junit\n // - growl\n // - coverage\n reporters: ['spec'],\n\n // enable / disable watching file and executing tests whenever any file changes\n autoWatch: false,\n\n // Start these browsers, currently available:\n // - Chrome\n // - ChromeCanary\n // - Firefox\n // - Opera\n // - Safari (only Mac)\n // - PhantomJS\n // - IE (only Windows)\n browsers: ['PhantomJS'],\n\n // Continuous Integration mode\n // if true, it capture browsers, run tests and exit\n singleRun: false\n });\n};\n"
},
{
"path": "mocha.conf.js",
"content": "'use strict';\n\n// Register the Babel require hook\nrequire('babel-core/register');\n\nvar chai = require('chai');\n\n// Load Chai assertions\nglobal.expect = chai.expect;\nglobal.assert = chai.assert;\nchai.should();\n\n// Load Sinon\nglobal.sinon = require('sinon');\n\n// Initialize Chai plugins\nchai.use(require('sinon-chai'));\nchai.use(require('chai-as-promised'));\nchai.use(require('chai-things'))\n"
},
{
"path": "package.json",
"content": "{\n \"name\": \"paizaqa\",\n \"version\": \"0.0.0\",\n \"main\": \"server/app.js\",\n \"dependencies\": {\n \"babel-runtime\": \"^5.8.20\",\n \"bluebird\": \"^2.9.34\",\n \"body-parser\": \"^1.13.3\",\n \"composable-middleware\": \"^0.3.0\",\n \"compression\": \"^1.5.2\",\n \"connect-mongo\": \"^0.8.1\",\n \"cookie-parser\": \"^1.3.5\",\n \"ejs\": \"^2.3.3\",\n \"errorhandler\": \"^1.4.2\",\n \"express\": \"^4.13.3\",\n \"express-jwt\": \"^3.0.0\",\n \"express-session\": \"^1.11.3\",\n \"jsonwebtoken\": \"^5.0.0\",\n \"lodash\": \"^3.10.1\",\n \"lusca\": \"^1.3.0\",\n \"method-override\": \"^2.3.5\",\n \"mongoose\": \"^4.1.2\",\n \"morgan\": \"~1.6.1\",\n \"passport\": \"~0.3.0\",\n \"passport-facebook\": \"^2.0.0\",\n \"passport-google-oauth\": \"~0.2.0\",\n \"passport-local\": \"^1.0.0\",\n \"passport-twitter\": \"^1.0.3\",\n \"serve-favicon\": \"^2.3.0\",\n \"socket.io\": \"^1.3.5\",\n \"socket.io-client\": \"^1.3.5\",\n \"socketio-jwt\": \"^4.2.0\",\n \"tiny-segmenter\": \"r7kamura/tiny-segmenter\"\n },\n \"devDependencies\": {\n \"autoprefixer\": \"^6.0.0\",\n \"babel-core\": \"^5.6.4\",\n \"grunt\": \"~0.4.5\",\n \"grunt-wiredep\": \"^2.0.0\",\n \"grunt-concurrent\": \"^2.0.1\",\n \"grunt-contrib-clean\": \"~0.7.0\",\n \"grunt-contrib-concat\": \"^0.5.1\",\n \"grunt-contrib-copy\": \"^0.8.0\",\n \"grunt-contrib-cssmin\": \"~0.14.0\",\n \"grunt-contrib-imagemin\": \"~1.0.0\",\n \"grunt-contrib-jshint\": \"~0.11.2\",\n \"grunt-contrib-uglify\": \"~0.11.0\",\n \"grunt-contrib-watch\": \"~0.6.1\",\n \"grunt-babel\": \"~5.0.0\",\n \"grunt-google-cdn\": \"~0.4.0\",\n \"grunt-jscs\": \"^2.1.0\",\n \"grunt-newer\": \"^1.1.1\",\n \"grunt-ng-annotate\": \"^1.0.1\",\n \"grunt-ng-constant\": \"^1.1.0\",\n \"grunt-filerev\": \"^2.3.1\",\n \"grunt-usemin\": \"^3.0.0\",\n \"grunt-env\": \"~0.4.1\",\n \"grunt-node-inspector\": \"^0.4.1\",\n \"grunt-nodemon\": \"^0.4.0\",\n \"grunt-angular-templates\": \"^0.5.4\",\n \"grunt-dom-munger\": \"^3.4.0\",\n \"grunt-protractor-runner\": \"^2.0.0\",\n \"grunt-injector\": \"^0.6.0\",\n \"grunt-karma\": \"~0.12.0\",\n \"grunt-build-control\": \"^0.6.0\",\n \"grunt-contrib-sass\": \"^0.9.0\",\n \"jit-grunt\": \"^0.9.1\",\n \"grunt-express-server\": \"^0.5.1\",\n \"grunt-postcss\": \"~0.7.1\",\n \"grunt-open\": \"~0.2.3\",\n \"time-grunt\": \"^1.2.1\",\n \"grunt-mocha-test\": \"~0.12.7\",\n \"grunt-mocha-istanbul\": \"^3.0.1\",\n \"open\": \"~0.0.4\",\n \"jshint-stylish\": \"~2.1.0\",\n \"connect-livereload\": \"^0.5.3\",\n \"istanbul\": \"~0.4.1\",\n \"chai\": \"^3.2.0\",\n \"sinon\": \"^1.16.1\",\n \"chai-as-promised\": \"^5.1.0\",\n \"chai-things\": \"^0.2.0\",\n \"karma\": \"~0.13.3\",\n \"karma-ng-scenario\": \"~0.1.0\",\n \"karma-firefox-launcher\": \"~0.1.6\",\n \"karma-script-launcher\": \"~0.1.0\",\n \"karma-chrome-launcher\": \"~0.2.0\",\n \"karma-requirejs\": \"~0.2.2\",\n \"karma-jade-preprocessor\": \"0.0.11\",\n \"karma-phantomjs-launcher\": \"~0.2.0\",\n \"karma-ng-html2js-preprocessor\": \"~0.2.0\",\n \"karma-spec-reporter\": \"~0.0.20\",\n \"sinon-chai\": \"^2.8.0\",\n \"mocha\": \"^2.2.5\",\n \"jasmine-core\": \"^2.3.4\",\n \"karma-jasmine\": \"~0.3.0\",\n \"jasmine-spec-reporter\": \"^2.4.0\",\n \"karma-babel-preprocessor\": \"^5.2.1\",\n \"requirejs\": \"~2.1.11\",\n \"phantomjs\": \"^1.9.18\",\n \"proxyquire\": \"^1.0.1\",\n \"supertest\": \"^1.1.0\"\n },\n \"engines\": {\n \"node\": \"^4.2.3\",\n \"npm\": \"^2.14.7\"\n },\n \"scripts\": {\n \"start\": \"node server\",\n \"test\": \"grunt test\",\n \"update-webdriver\": \"node node_modules/grunt-protractor-runner/node_modules/protractor/bin/webdriver-manager update\"\n },\n \"private\": true\n}\n"
},
{
"path": "protractor.conf.js",
"content": "// Protractor configuration\n// https://github.com/angular/protractor/blob/master/referenceConf.js\n\n'use strict';\n\nvar config = {\n // The timeout for each script run on the browser. This should be longer\n // than the maximum time your application needs to stabilize between tasks.\n allScriptsTimeout: 110000,\n\n // A base URL for your application under test. Calls to protractor.get()\n // with relative paths will be prepended with this.\n baseUrl: 'http://localhost:' + (process.env.PORT || '9000'),\n\n // Credientials for Saucelabs\n sauceUser: process.env.SAUCE_USERNAME,\n\n sauceKey: process.env.SAUCE_ACCESS_KEY,\n\n // list of files / patterns to load in the browser\n specs: [\n 'e2e/**/*.spec.js'\n ],\n\n // Patterns to exclude.\n exclude: [],\n\n // ----- Capabilities to be passed to the webdriver instance ----\n //\n // For a full list of available capabilities, see\n // https://code.google.com/p/selenium/wiki/DesiredCapabilities\n // and\n // https://code.google.com/p/selenium/source/browse/javascript/webdriver/capabilities.js\n capabilities: {\n 'browserName': 'chrome',\n 'name': 'Fullstack E2E',\n 'tunnel-identifier': process.env.TRAVIS_JOB_NUMBER,\n 'build': process.env.TRAVIS_BUILD_NUMBER\n },\n\n // ----- The test framework -----\n //\n // Jasmine and Cucumber are fully supported as a test and assertion framework.\n // Mocha has limited beta support. You will need to include your own\n // assertion framework if working with mocha.\n framework: 'jasmine2',\n\n // ----- Options to be passed to minijasminenode -----\n //\n // See the full list at https://github.com/jasmine/jasmine-npm\n jasmineNodeOpts: {\n defaultTimeoutInterval: 30000,\n print: function() {} // for jasmine-spec-reporter\n },\n\n // Prepare environment for tests\n params: {\n serverConfig: require('./server/config/environment')\n },\n\n onPrepare: function() {\n require('babel-core/register');\n var SpecReporter = require('jasmine-spec-reporter');\n // add jasmine spec reporter\n jasmine.getEnv().addReporter(new SpecReporter({displayStacktrace: true}));\n\n var serverConfig = config.params.serverConfig;\n\n // Setup mongo for tests\n var mongoose = require('mongoose');\n mongoose.connect(serverConfig.mongo.uri, serverConfig.mongo.options); // Connect to database\n }\n};\n\nconfig.params.baseUrl = config.baseUrl;\nexports.config = config;\n"
},
{
"path": "server/.jshintrc",
"content": "{\n \"expr\": true,\n \"node\": true,\n \"esnext\": true,\n \"bitwise\": true,\n \"eqeqeq\": true,\n \"immed\": true,\n \"latedef\": \"nofunc\",\n \"newcap\": true,\n \"noarg\": true,\n \"undef\": true,\n \"smarttabs\": true,\n \"asi\": true,\n \"debug\": true\n}\n"
},
{
"path": "server/.jshintrc-spec",
"content": "{\n \"extends\": \".jshintrc\",\n \"globals\": {\n \"jasmine\": true,\n \"describe\": true,\n \"it\": true,\n \"before\": true,\n \"beforeEach\": true,\n \"after\": true,\n \"afterEach\": true,\n \"expect\": true,\n \"assert\": true,\n \"sinon\": true\n }\n}\n"
},
{
"path": "server/api/question/index.js",
"content": "'use strict';\n\nvar express = require('express');\nvar controller = require('./question.controller');\n\nvar router = express.Router();\n\nvar auth = require('../../auth/auth.service');\n\nrouter.get('/', controller.index);\nrouter.get('/:id', controller.show);\nrouter.post('/', auth.isAuthenticated(), controller.create);\nrouter.put('/:id', auth.isAuthenticated(), controller.update);\nrouter.patch('/:id', auth.isAuthenticated(), controller.update);\nrouter.delete('/:id', auth.isAuthenticated(), controller.destroy);\n\nrouter.post('/:id/answers', auth.isAuthenticated(), controller.createAnswer);\nrouter.put('/:id/answers/:answerId', auth.isAuthenticated(), controller.updateAnswer);\nrouter.delete('/:id/answers/:answerId', auth.isAuthenticated(), controller.destroyAnswer);\n\nrouter.post('/:id/comments', auth.isAuthenticated(), controller.createComment);\nrouter.put('/:id/comments/:commentId', auth.isAuthenticated(), controller.updateComment);\nrouter.delete('/:id/comments/:commentId', auth.isAuthenticated(), controller.destroyComment);\n\nrouter.post('/:id/answers/:answerId/comments', auth.isAuthenticated(), controller.createAnswerComment);\nrouter.put('/:id/answers/:answerId/comments/:commentId', auth.isAuthenticated(), controller.updateAnswerComment);\nrouter.delete('/:id/answers/:answerId/comments/:commentId', auth.isAuthenticated(), controller.destroyAnswerComment);\n\n\nrouter.put('/:id/star', auth.isAuthenticated(), controller.star);\nrouter.delete('/:id/star', auth.isAuthenticated(), controller.unstar);\nrouter.put('/:id/answers/:answerId/star', auth.isAuthenticated(), controller.starAnswer);\nrouter.delete('/:id/answers/:answerId/star', auth.isAuthenticated(), controller.unstarAnswer);\nrouter.put('/:id/comments/:commentId/star', auth.isAuthenticated(), controller.starComment);\nrouter.delete('/:id/comments/:commentId/star', auth.isAuthenticated(), controller.unstarComment);\nrouter.put('/:id/answers/:answerId/comments/:commentId/star', auth.isAuthenticated(), controller.starAnswerComment);\nrouter.delete('/:id/answers/:answerId/comments/:commentId/star', auth.isAuthenticated(), controller.unstarAnswerComment);\n\nmodule.exports = router;\n"
},
{
"path": "server/api/question/question.controller.js",
"content": "/**\n * Using Rails-like standard naming convention for endpoints.\n * GET /api/questions -> index\n * POST /api/questions -> create\n * GET /api/questions/:id -> show\n * PUT /api/questions/:id -> update\n * DELETE /api/questions/:id -> destroy\n */\n\n'use strict';\n\nimport _ from 'lodash';\nimport Question from './question.model';\n\nfunction respondWithResult(res, statusCode) {\n statusCode = statusCode || 200;\n return function(entity) {\n if (entity) {\n res.status(statusCode).json(entity);\n }\n };\n}\n\nfunction saveUpdates(updates) {\n return function(entity) {\n var updated = _.merge(entity, updates);\n return updated.saveAsync()\n .spread(updated => {\n return updated;\n });\n };\n}\n\nfunction removeEntity(res) {\n return function(entity) {\n if (entity) {\n return entity.removeAsync()\n .then(() => {\n res.status(204).end();\n });\n }\n };\n}\n\nfunction handleEntityNotFound(res) {\n return function(entity) {\n if (!entity) {\n res.status(404).end();\n return null;\n }\n return entity;\n };\n}\n\nfunction handleError(res, statusCode) {\n statusCode = statusCode || 500;\n return function(err) {\n res.status(statusCode).send(err);\n };\n}\nfunction handleUnauthorized(req, res) {\n return function(entity) {\n if (!entity) {return null;}\n if(entity.user._id.toString() !== req.user._id.toString()){\n res.send(403).end();\n return null;\n }\n return entity;\n }\n}\n// Gets a list of Questions\nexport function index(req, res) {\n var query = req.query.query && JSON.parse(req.query.query);\n Question.find(query).sort({createdAt: -1}).limit(20).execAsync()\n .then(respondWithResult(res))\n .catch(handleError(res));\n}\n\n// Gets a single Question from the DB\nexport function show(req, res) {\n Question.findByIdAsync(req.params.id)\n .then(handleEntityNotFound(res))\n .then(respondWithResult(res))\n .catch(handleError(res));\n}\n\n// Creates a new Question in the DB\nexport function create(req, res) {\n req.body.user = req.user;\n Question.createAsync(req.body)\n .then(respondWithResult(res, 201))\n .catch(handleError(res));\n}\n\n// Updates an existing Question in the DB\nexport function update(req, res) {\n if (req.body._id) {\n delete req.body._id;\n }\n Question.findByIdAsync(req.params.id)\n .then(handleEntityNotFound(res))\n .then(handleUnauthorized(req, res))\n .then(saveUpdates(req.body))\n .then(respondWithResult(res))\n .catch(handleError(res));\n}\n\n// Deletes a Question from the DB\nexport function destroy(req, res) {\n Question.findByIdAsync(req.params.id)\n .then(handleEntityNotFound(res))\n .then(handleUnauthorized(req, res))\n .then(removeEntity(res))\n .catch(handleError(res));\n}\n\nexport function createAnswer(req, res) {\n req.body.user = req.user;\n Question.update({_id: req.params.id}, {$push: {answers: req.body}}, function(err, num) {\n if(err) { return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n Question.updateSearchText(req.params.id);\n });\n}\n\nexport function destroyAnswer(req, res) {\n Question.update({_id: req.params.id}, {$pull: {answers: {_id: req.params.answerId , 'user': req.user._id}}}, function(err, num) {\n if(err) { return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n Question.updateSearchText(req.params.id);\n });\n}\n\nexport function updateAnswer(req, res) {\n Question.update({_id: req.params.id, 'answers._id': req.params.answerId}, {'answers.$.content': req.body.content, 'answers.$.user': req.user.id}, function(err, num){\n if(err) { return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n Question.updateSearchText(req.params.id);\n });\n}\n\n/* comments APIs */\nexport function createComment(req, res) {\n req.body.user = req.user.id;\n Question.update({_id: req.params.id}, {$push: {comments: req.body}}, function(err, num){\n if(err) {return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n Question.updateSearchText(req.params.id);\n })\n}\nexport function destroyComment(req, res) {\n Question.update({_id: req.params.id}, {$pull: {comments: {_id: req.params.commentId , 'user': req.user._id}}}, function(err, num) {\n if(err) { return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n Question.updateSearchText(req.params.id);\n });\n}\nexport function updateComment(req, res) {\n Question.update({_id: req.params.id, 'comments._id': req.params.commentId}, {'comments.$.content': req.body.content, 'comments.$.user': req.user.id}, function(err, num){\n if(err) { return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n Question.updateSearchText(req.params.id);\n });\n}\n\n/* answersComments APIs */\nexport function createAnswerComment(req, res) {\n req.body.user = req.user.id;\n Question.update({_id: req.params.id, 'answers._id': req.params.answerId}, {$push: {'answers.$.comments': req.body}}, function(err, num){\n if(err) {return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n Question.updateSearchText(req.params.id);\n })\n}\nexport function destroyAnswerComment(req, res) {\n Question.update({_id: req.params.id, 'answers._id': req.params.answerId}, {$pull: {'answers.$.comments': {_id: req.params.commentId , 'user': req.user._id}}}, function(err, num) {\n if(err) { return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n Question.updateSearchText(req.params.id);\n });\n}\nexport function updateAnswerComment(req, res) {\n Question.find({_id: req.params.id}).exec(function(err, questions){\n if(err) { return handleError(res)(err); }\n if(questions.length === 0) { return res.send(404).end(); }\n var question = questions[0];\n var found = false;\n for(var i=0; i < question.answers.length; i++){\n if(question.answers[i]._id.toString() === req.params.answerId){\n found = true;\n var conditions = {};\n conditions._id = req.params.id;\n conditions['answers.' + i + '.comments._id'] = req.params.commentId;\n conditions['answers.' + i + '.comments.user'] = req.user._id;\n var doc = {};\n doc['answers.' + i + '.comments.$.content'] = req.body.content;\n /*jshint -W083 */\n Question.update(conditions, doc, function(err, num){\n if(err) { return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n Question.updateSearchText(req.params.id);\n return;\n });\n }\n }\n if(!found){\n return res.send(404).end();\n }\n });\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n/* star/unstar question */\nexport function star(req, res) {\n Question.update({_id: req.params.id}, {$push: {stars: req.user.id}}, function(err, num){\n if(err) { return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n });\n}\nexport function unstar(req, res) {\n Question.update({_id: req.params.id}, {$pull: {stars: req.user.id}}, function(err, num){\n if(err) { return handleError(res, err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n });\n}\n\n/* star/unstar answer */\nexport function starAnswer(req, res) {\n Question.update({_id: req.params.id, 'answers._id': req.params.answerId}, {$push: {'answers.$.stars': req.user.id}}, function(err, num){\n if(err) { return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n });\n}\nexport function unstarAnswer(req, res) {\n Question.update({_id: req.params.id, 'answers._id': req.params.answerId}, {$pull: {'answers.$.stars': req.user.id}}, function(err, num){\n if(err) { return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n });\n}\n\n/* star/unstar question comment */\nexport function starComment(req, res) {\n Question.update({_id: req.params.id, 'comments._id': req.params.commentId}, {$push: {'comments.$.stars': req.user.id}}, function(err, num){\n if(err) { return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n });\n}\nexport function unstarComment(req, res) {\n Question.update({_id: req.params.id, 'comments._id': req.params.commentId}, {$pull: {'comments.$.stars': req.user.id}}, function(err, num){\n if(err) { return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n });\n}\n\n/* star/unstar question answer comment */\nvar pushOrPullStarAnswerComment = function(op, req, res) {\n Question.find({_id: req.params.id}).exec(function(err, questions){\n if(err) { return handleError(res)(err); }\n if(questions.length === 0) { return res.send(404).end(); }\n var question = questions[0];\n var found = false;\n for(var i=0; i < question.answers.length; i++){\n if(question.answers[i]._id.toString() === req.params.answerId){\n found = true;\n var conditions = {};\n conditions._id = req.params.id;\n conditions['answers.' + i + '.comments._id'] = req.params.commentId;\n var doc = {};\n doc[op] = {};\n doc[op]['answers.' + i + '.comments.$.stars'] = req.user.id;\n // Question.update({_id: req.params.id, 'answers.' + i + '.comments._id': req.params.commentId}, {op: {('answers.' + i + '.comments.$.stars'): req.user.id}}, function(err, num){\n /*jshint -W083 */\n Question.update(conditions, doc, function(err, num){\n if(err) { return handleError(res)(err); }\n if(num === 0) { return res.send(404).end(); }\n exports.show(req, res);\n return;\n });\n }\n }\n if(!found){\n return res.send(404).end();\n }\n });\n};\nexport function starAnswerComment(req, res) {\n pushOrPullStarAnswerComment('$push', req, res);\n}\nexport function unstarAnswerComment(req, res) {\n pushOrPullStarAnswerComment('$pull', req, res);\n}\n"
},
{
"path": "server/api/question/question.events.js",
"content": "/**\n * Question model events\n */\n\n'use strict';\n\nimport {EventEmitter} from 'events';\nvar Question = require('./question.model');\nvar QuestionEvents = new EventEmitter();\n\n// Set max event listeners (0 == unlimited)\nQuestionEvents.setMaxListeners(0);\n\n// Model events\nvar events = {\n 'save': 'save',\n 'remove': 'remove'\n};\n\n// Register the event emitter to the model events\nfor (var e in events) {\n var event = events[e];\n Question.schema.post(e, emitEvent(event));\n}\n\nfunction emitEvent(event) {\n return function(doc) {\n QuestionEvents.emit(event + ':' + doc._id, doc);\n QuestionEvents.emit(event, doc);\n }\n}\n\nexport default QuestionEvents;\n"
},
{
"path": "server/api/question/question.integration.js",
"content": "'use strict';\n\nvar app = require('../..');\nimport request from 'supertest';\nvar User = require('../user/user.model');\n\nvar newQuestion;\n\ndescribe('Question API:', function() {\n var user;\n before(function() {\n return User.removeAsync().then(function() {\n user = new User({\n name: 'Fake User',\n email: 'test@test.com',\n password: 'password'\n });\n\n return user.saveAsync();\n });\n });\n\n var token;\n before(function(done) {\n request(app)\n .post('/auth/local')\n .send({\n email: 'test@test.com',\n password: 'password'\n })\n .expect(200)\n .expect('Content-Type', /json/)\n .end(function(err, res) {\n token = res.body.token;\n done();\n });\n });\n \n describe('GET /api/questions', function() {\n var questions;\n\n beforeEach(function(done) {\n request(app)\n .get('/api/questions')\n .expect(200)\n .expect('Content-Type', /json/)\n .end((err, res) => {\n if (err) {\n return done(err);\n }\n questions = res.body;\n done();\n });\n });\n\n it('should respond with JSON array', function() {\n questions.should.be.instanceOf(Array);\n });\n\n });\n\n describe('POST /api/questions', function() {\n beforeEach(function(done) {\n request(app)\n .post('/api/questions')\n .set('authorization', 'Bearer ' + token)\n .send({\n title: 'New Question',\n content: 'This is the brand new question!!!'\n })\n .expect(201)\n .expect('Content-Type', /json/)\n .end((err, res) => {\n if (err) {\n return done(err);\n }\n newQuestion = res.body;\n console.warn(\"newQuestion:test1\",newQuestion);\n done();\n });\n });\n\n it('should respond with the newly created question', function() {\n console.warn(\"newQuestion:test2\",newQuestion);\n newQuestion.title.should.equal('New Question');\n newQuestion.content.should.equal('This is the brand new question!!!');\n });\n\n });\n\n describe('GET /api/questions/:id', function() {\n var question;\n\n beforeEach(function(done) {\n request(app)\n .get('/api/questions/' + newQuestion._id)\n .expect(200)\n .expect('Content-Type', /json/)\n .end((err, res) => {\n if (err) {\n return done(err);\n }\n question = res.body;\n done();\n });\n });\n\n afterEach(function() {\n question = {};\n });\n\n it('should respond with the requested question', function() {\n question.title.should.equal('New Question');\n question.content.should.equal('This is the brand new question!!!');\n });\n\n });\n\n/*\n describe('PUT /api/questions/:id', function() {\n var updatedQuestion;\n\n beforeEach(function(done) {\n request(app)\n .put('/api/questions/' + newQuestion._id)\n .set('authorization', 'Bearer ' + token)\n .send({\n title: 'Updated Question',\n content: 'This is the updated question!!!'\n })\n .expect(200)\n .expect('Content-Type', /json/)\n .end(function(err, res) {\n if (err) {\n return done(err);\n }\n updatedQuestion = res.body;\n done();\n });\n });\n afterEach(function() {\n updatedQuestion = {};\n });\n\n it('should respond with the updated question', function() {\n updatedQuestion.title.should.equal('Updated Question');\n updatedQuestion.content.should.equal('This is the updated question!!!');\n });\n\n });\n*/\n\n describe('DELETE /api/questions/:id', function() {\n\n it('should respond with 204 on successful removal', function(done) {\n request(app)\n .delete('/api/questions/' + newQuestion._id)\n .set('authorization', 'Bearer ' + token)\n .expect(204)\n .end((err, res) => {\n if (err) {\n return done(err);\n }\n done();\n });\n });\n\n it('should respond with 404 when question does not exist', function(done) {\n request(app)\n .delete('/api/questions/' + newQuestion._id)\n .set('authorization', 'Bearer ' + token)\n .expect(404)\n .end((err, res) => {\n if (err) {\n return done(err);\n }\n done();\n });\n });\n\n });\n\n});\n"
},
{
"path": "server/api/question/question.model.js",
"content": "'use strict';\n\nvar mongoose = require('bluebird').promisifyAll(require('mongoose'));\n\nvar QuestionSchema = new mongoose.Schema({\n title: String,\n content: String,\n answers: [{\n content: String,\n user: {\n type: mongoose.Schema.ObjectId,\n ref: 'User'\n },\n createdAt: {\n type: Date,\n default: Date.now,\n },\n comments: [{\n content: String,\n stars: [{\n type: mongoose.Schema.ObjectId,\n ref: 'User'\n }],\n user: {\n type: mongoose.Schema.ObjectId,\n ref: 'User'\n },\n createdAt: {\n type: Date,\n default: Date.now,\n }\n }],\n stars: [{\n type: mongoose.Schema.ObjectId,\n ref: 'User'\n }],\n }],\n tags: [{\n text: String,\n }],\n user: {\n type: mongoose.Schema.ObjectId,\n ref: 'User'\n },\n createdAt: {\n type: Date,\n default: Date.now\n },\n comments: [{\n content: String,\n stars: [{\n type: mongoose.Schema.ObjectId,\n ref: 'User'\n }],\n user: {\n type: mongoose.Schema.ObjectId,\n ref: 'User'\n },\n createdAt: {\n type: Date,\n default: Date.now,\n }\n }],\n stars: [{\n type: mongoose.Schema.ObjectId,\n ref: 'User'\n }],\n searchText: String,\n});\nQuestionSchema.pre('find', function(next){\n this.populate('user', 'name');\n this.populate('comments.user', 'name');\n this.populate('answers.user', 'name');\n this.populate('answers.comments.user', 'name');\n next();\n});\nQuestionSchema.pre('findOne', function(next){\n this.populate('user', 'name');\n this.populate('comments.user', 'name');\n this.populate('answers.user', 'name');\n this.populate('answers.comments.user', 'name');\n next();\n});\n\nQuestionSchema.index({\n 'title': 'text',\n 'content': 'text',\n 'tags.text': 'text',\n 'answers.content': 'text',\n 'comments.content': 'text',\n 'answers.comments.content': 'text',\n 'searchText': 'text',\n}, {name: 'question_schema_index'});\n\nvar TinySegmenter = require('tiny-segmenter');\n\nvar getSearchText = function(question){\n var tinySegmenter = new TinySegmenter();\n var searchText = \"\";\n searchText += tinySegmenter.segment(question.title).join(' ') + \" \";\n searchText += tinySegmenter.segment(question.content).join(' ') + \" \";\n question.answers.forEach(function(answer){\n searchText += tinySegmenter.segment(answer.content).join(' ') + \" \";\n answer.comments.forEach(function(comment){\n searchText += tinySegmenter.segment(comment.content).join(' ') + \" \";\n });\n });\n question.comments.forEach(function(comment){\n searchText += tinySegmenter.segment(comment.content).join(' ') + \" \";\n });\n console.log(\"searchText\", searchText);\n return searchText;\n};\nQuestionSchema.statics.updateSearchText = function(id, cb){\n this.findOne({_id: id}).exec(function(err, question){\n if(err){ if(cb){cb(err);} return; }\n var searchText = getSearchText(question);\n this.update({_id: id}, {searchText: searchText}, function(err, num){\n if(cb){cb(err);}\n });\n }.bind(this));\n};\n\nQuestionSchema.pre('save', function(next){\n this.searchText = getSearchText(this);\n next();\n});\n\nexport default mongoose.model('Question', QuestionSchema);\n"
},
{
"path": "server/api/question/question.socket.js",
"content": "/**\n * Broadcast updates to client when the model changes\n */\n\n'use strict';\n\nvar QuestionEvents = require('./question.events');\n\n// Model events to emit\nvar events = ['save', 'remove'];\n\nexport function register(socket) {\n // Bind model events to socket events\n for (var i = 0, eventsLength = events.length; i < eventsLength; i++) {\n var event = events[i];\n var listener = createListener('question:' + event, socket);\n\n QuestionEvents.on(event, listener);\n socket.on('disconnect', removeListener(event, listener));\n }\n}\n\n\nfunction createListener(event, socket) {\n return function(doc) {\n socket.emit(event, doc);\n };\n}\n\nfunction removeListener(event, listener) {\n return function() {\n QuestionEvents.removeListener(event, listener);\n };\n}\n"
},
{
"path": "server/api/thing/index.js",
"content": "'use strict';\n\nvar express = require('express');\nvar controller = require('./thing.controller');\n\nvar router = express.Router();\n\nrouter.get('/', controller.index);\nrouter.get('/:id', controller.show);\nrouter.post('/', controller.create);\nrouter.put('/:id', controller.update);\nrouter.patch('/:id', controller.update);\nrouter.delete('/:id', controller.destroy);\n\nmodule.exports = router;\n"
},
{
"path": "server/api/thing/index.spec.js",
"content": "'use strict';\n\nvar proxyquire = require('proxyquire').noPreserveCache();\n\nvar thingCtrlStub = {\n index: 'thingCtrl.index',\n show: 'thingCtrl.show',\n create: 'thingCtrl.create',\n update: 'thingCtrl.update',\n destroy: 'thingCtrl.destroy'\n};\n\nvar routerStub = {\n get: sinon.spy(),\n put: sinon.spy(),\n patch: sinon.spy(),\n post: sinon.spy(),\n delete: sinon.spy()\n};\n\n// require the index with our stubbed out modules\nvar thingIndex = proxyquire('./index.js', {\n 'express': {\n Router: function() {\n return routerStub;\n }\n },\n './thing.controller': thingCtrlStub\n});\n\ndescribe('Thing API Router:', function() {\n\n it('should return an express router instance', function() {\n thingIndex.should.equal(routerStub);\n });\n\n describe('GET /api/things', function() {\n\n it('should route to thing.controller.index', function() {\n routerStub.get\n .withArgs('/', 'thingCtrl.index')\n .should.have.been.calledOnce;\n });\n\n });\n\n describe('GET /api/things/:id', function() {\n\n it('should route to thing.controller.show', function() {\n routerStub.get\n .withArgs('/:id', 'thingCtrl.show')\n .should.have.been.calledOnce;\n });\n\n });\n\n describe('POST /api/things', function() {\n\n it('should route to thing.controller.create', function() {\n routerStub.post\n .withArgs('/', 'thingCtrl.create')\n .should.have.been.calledOnce;\n });\n\n });\n\n describe('PUT /api/things/:id', function() {\n\n it('should route to thing.controller.update', function() {\n routerStub.put\n .withArgs('/:id', 'thingCtrl.update')\n .should.have.been.calledOnce;\n });\n\n });\n\n describe('PATCH /api/things/:id', function() {\n\n it('should route to thing.controller.update', function() {\n routerStub.patch\n .withArgs('/:id', 'thingCtrl.update')\n .should.have.been.calledOnce;\n });\n\n });\n\n describe('DELETE /api/things/:id', function() {\n\n it('should route to thing.controller.destroy', function() {\n routerStub.delete\n .withArgs('/:id', 'thingCtrl.destroy')\n .should.have.been.calledOnce;\n });\n\n });\n\n});\n"
},
{
"path": "server/api/thing/thing.controller.js",
"content": "/**\n * Using Rails-like standard naming convention for endpoints.\n * GET /api/things -> index\n * POST /api/things -> create\n * GET /api/things/:id -> show\n * PUT /api/things/:id -> update\n * DELETE /api/things/:id -> destroy\n */\n\n'use strict';\n\nimport _ from 'lodash';\nimport Thing from './thing.model';\n\nfunction respondWithResult(res, statusCode) {\n statusCode = statusCode || 200;\n return function(entity) {\n if (entity) {\n res.status(statusCode).json(entity);\n }\n };\n}\n\nfunction saveUpdates(updates) {\n return function(entity) {\n var updated = _.merge(entity, updates);\n return updated.saveAsync()\n .spread(updated => {\n return updated;\n });\n };\n}\n\nfunction removeEntity(res) {\n return function(entity) {\n if (entity) {\n return entity.removeAsync()\n .then(() => {\n res.status(204).end();\n });\n }\n };\n}\n\nfunction handleEntityNotFound(res) {\n return function(entity) {\n if (!entity) {\n res.status(404).end();\n return null;\n }\n return entity;\n };\n}\n\nfunction handleError(res, statusCode) {\n statusCode = statusCode || 500;\n return function(err) {\n res.status(statusCode).send(err);\n };\n}\n\n// Gets a list of Things\nexport function index(req, res) {\n Thing.findAsync()\n .then(respondWithResult(res))\n .catch(handleError(res));\n}\n\n// Gets a single Thing from the DB\nexport function show(req, res) {\n Thing.findByIdAsync(req.params.id)\n .then(handleEntityNotFound(res))\n .then(respondWithResult(res))\n .catch(handleError(res));\n}\n\n// Creates a new Thing in the DB\nexport function create(req, res) {\n Thing.createAsync(req.body)\n .then(respondWithResult(res, 201))\n .catch(handleError(res));\n}\n\n// Updates an existing Thing in the DB\nexport function update(req, res) {\n if (req.body._id) {\n delete req.body._id;\n }\n Thing.findByIdAsync(req.params.id)\n .then(handleEntityNotFound(res))\n .then(saveUpdates(req.body))\n .then(respondWithResult(res))\n .catch(handleError(res));\n}\n\n// Deletes a Thing from the DB\nexport function destroy(req, res) {\n Thing.findByIdAsync(req.params.id)\n .then(handleEntityNotFound(res))\n .then(removeEntity(res))\n .catch(handleError(res));\n}\n"
},
{
"path": "server/api/thing/thing.events.js",
"content": "/**\n * Thing model events\n */\n\n'use strict';\n\nimport {EventEmitter} from 'events';\nvar Thing = require('./thing.model');\nvar ThingEvents = new EventEmitter();\n\n// Set max event listeners (0 == unlimited)\nThingEvents.setMaxListeners(0);\n\n// Model events\nvar events = {\n 'save': 'save',\n 'remove': 'remove'\n};\n\n// Register the event emitter to the model events\nfor (var e in events) {\n var event = events[e];\n Thing.schema.post(e, emitEvent(event));\n}\n\nfunction emitEvent(event) {\n return function(doc) {\n ThingEvents.emit(event + ':' + doc._id, doc);\n ThingEvents.emit(event, doc);\n }\n}\n\nexport default ThingEvents;\n"
},
{
"path": "server/api/thing/thing.integration.js",
"content": "'use strict';\n\nvar app = require('../..');\nimport request from 'supertest';\n\nvar newThing;\n\ndescribe('Thing API:', function() {\n\n describe('GET /api/things', function() {\n var things;\n\n beforeEach(function(done) {\n request(app)\n .get('/api/things')\n .expect(200)\n .expect('Content-Type', /json/)\n .end((err, res) => {\n if (err) {\n return done(err);\n }\n things = res.body;\n done();\n });\n });\n\n it('should respond with JSON array', function() {\n things.should.be.instanceOf(Array);\n });\n\n });\n\n describe('POST /api/things', function() {\n beforeEach(function(done) {\n request(app)\n .post('/api/things')\n .send({\n name: 'New Thing',\n info: 'This is the brand new thing!!!'\n })\n .expect(201)\n .expect('Content-Type', /json/)\n .end((err, res) => {\n if (err) {\n return done(err);\n }\n newThing = res.body;\n done();\n });\n });\n\n it('should respond with the newly created thing', function() {\n newThing.name.should.equal('New Thing');\n newThing.info.should.equal('This is the brand new thing!!!');\n });\n\n });\n\n describe('GET /api/things/:id', function() {\n var thing;\n\n beforeEach(function(done) {\n request(app)\n .get('/api/things/' + newThing._id)\n .expect(200)\n .expect('Content-Type', /json/)\n .end((err, res) => {\n if (err) {\n return done(err);\n }\n thing = res.body;\n done();\n });\n });\n\n afterEach(function() {\n thing = {};\n });\n\n it('should respond with the requested thing', function() {\n thing.name.should.equal('New Thing');\n thing.info.should.equal('This is the brand new thing!!!');\n });\n\n });\n\n describe('PUT /api/things/:id', function() {\n var updatedThing;\n\n beforeEach(function(done) {\n request(app)\n .put('/api/things/' + newThing._id)\n .send({\n name: 'Updated Thing',\n info: 'This is the updated thing!!!'\n })\n .expect(200)\n .expect('Content-Type', /json/)\n .end(function(err, res) {\n if (err) {\n return done(err);\n }\n updatedThing = res.body;\n done();\n });\n });\n\n afterEach(function() {\n updatedThing = {};\n });\n\n it('should respond with the updated thing', function() {\n updatedThing.name.should.equal('Updated Thing');\n updatedThing.info.should.equal('This is the updated thing!!!');\n });\n\n });\n\n describe('DELETE /api/things/:id', function() {\n\n it('should respond with 204 on successful removal', function(done) {\n request(app)\n .delete('/api/things/' + newThing._id)\n .expect(204)\n .end((err, res) => {\n if (err) {\n return done(err);\n }\n done();\n });\n });\n\n it('should respond with 404 when thing does not exist', function(done) {\n request(app)\n .delete('/api/things/' + newThing._id)\n .expect(404)\n .end((err, res) => {\n if (err) {\n return done(err);\n }\n done();\n });\n });\n\n });\n\n});\n"
},
{
"path": "server/api/thing/thing.model.js",
"content": "'use strict';\n\nvar mongoose = require('bluebird').promisifyAll(require('mongoose'));\n\nvar ThingSchema = new mongoose.Schema({\n name: String,\n info: String,\n active: Boolean\n});\n\nexport default mongoose.model('Thing', ThingSchema);\n"
},
{
"path": "server/api/thing/thing.socket.js",
"content": "/**\n * Broadcast updates to client when the model changes\n */\n\n'use strict';\n\nvar ThingEvents = require('./thing.events');\n\n// Model events to emit\nvar events = ['save', 'remove'];\n\nexport function register(socket) {\n // Bind model events to socket events\n for (var i = 0, eventsLength = events.length; i < eventsLength; i++) {\n var event = events[i];\n var listener = createListener('thing:' + event, socket);\n\n ThingEvents.on(event, listener);\n socket.on('disconnect', removeListener(event, listener));\n }\n}\n\n\nfunction createListener(event, socket) {\n return function(doc) {\n socket.emit(event, doc);\n };\n}\n\nfunction removeListener(event, listener) {\n return function() {\n ThingEvents.removeListener(event, listener);\n };\n}\n"
},
{
"path": "server/api/user/index.js",
"content": "'use strict';\n\nimport {Router} from 'express';\nimport * as controller from './user.controller';\nimport * as auth from '../../auth/auth.service';\n\nvar router = new Router();\n\nrouter.get('/', auth.hasRole('admin'), controller.index);\nrouter.delete('/:id', auth.hasRole('admin'), controller.destroy);\nrouter.get('/me', auth.isAuthenticated(), controller.me);\nrouter.put('/:id/password', auth.isAuthenticated(), controller.changePassword);\nrouter.get('/:id', auth.isAuthenticated(), controller.show);\nrouter.post('/', controller.create);\n\nexport default router;\n"
},
{
"path": "server/api/user/index.spec.js",
"content": "'use strict';\n\nvar proxyquire = require('proxyquire').noPreserveCache();\n\nvar userCtrlStub = {\n index: 'userCtrl.index',\n destroy: 'userCtrl.destroy',\n me: 'userCtrl.me',\n changePassword: 'userCtrl.changePassword',\n show: 'userCtrl.show',\n create: 'userCtrl.create'\n};\n\nvar authServiceStub = {\n isAuthenticated() {\n return 'authService.isAuthenticated';\n },\n hasRole(role) {\n return 'authService.hasRole.' + role;\n }\n};\n\nvar routerStub = {\n get: sinon.spy(),\n put: sinon.spy(),\n post: sinon.spy(),\n delete: sinon.spy()\n};\n\n// require the index with our stubbed out modules\nvar userIndex = proxyquire('./index', {\n 'express': {\n Router() {\n return routerStub;\n }\n },\n './user.controller': userCtrlStub,\n '../../auth/auth.service': authServiceStub\n});\n\ndescribe('User API Router:', function() {\n\n it('should return an express router instance', function() {\n userIndex.should.equal(routerStub);\n });\n\n describe('GET /api/users', function() {\n\n it('should verify admin role and route to user.controller.index', function() {\n routerStub.get\n .withArgs('/', 'authService.hasRole.admin', 'userCtrl.index')\n .should.have.been.calledOnce;\n });\n\n });\n\n describe('DELETE /api/users/:id', function() {\n\n it('should verify admin role and route to user.controller.destroy', function() {\n routerStub.delete\n .withArgs('/:id', 'authService.hasRole.admin', 'userCtrl.destroy')\n .should.have.been.calledOnce;\n });\n\n });\n\n describe('GET /api/users/me', function() {\n\n it('should be authenticated and route to user.controller.me', function() {\n routerStub.get\n .withArgs('/me', 'authService.isAuthenticated', 'userCtrl.me')\n .should.have.been.calledOnce;\n });\n\n });\n\n describe('PUT /api/users/:id/password', function() {\n\n it('should be authenticated and route to user.controller.changePassword', function() {\n routerStub.put\n .withArgs('/:id/password', 'authService.isAuthenticated', 'userCtrl.changePassword')\n .should.have.been.calledOnce;\n });\n\n });\n\n describe('GET /api/users/:id', function() {\n\n it('should be authenticated and route to user.controller.show', function() {\n routerStub.get\n .withArgs('/:id', 'authService.isAuthenticated', 'userCtrl.show')\n .should.have.been.calledOnce;\n });\n\n });\n\n describe('POST /api/users', function() {\n\n it('should route to user.controller.create', function() {\n routerStub.post\n .withArgs('/', 'userCtrl.create')\n .should.have.been.calledOnce;\n });\n\n });\n\n});\n"
},
{
"path": "server/api/user/user.controller.js",
"content": "'use strict';\n\nimport User from './user.model';\nimport passport from 'passport';\nimport config from '../../config/environment';\nimport jwt from 'jsonwebtoken';\n\nfunction validationError(res, statusCode) {\n statusCode = statusCode || 422;\n return function(err) {\n res.status(statusCode).json(err);\n }\n}\n\nfunction handleError(res, statusCode) {\n statusCode = statusCode || 500;\n return function(err) {\n res.status(statusCode).send(err);\n };\n}\n\n/**\n * Get list of users\n * restriction: 'admin'\n */\nexport function index(req, res) {\n User.findAsync({}, '-salt -password')\n .then(users => {\n res.status(200).json(users);\n })\n .catch(handleError(res));\n}\n\n/**\n * Creates a new user\n */\nexport function create(req, res, next) {\n var newUser = new User(req.body);\n newUser.provider = 'local';\n newUser.role = 'user';\n newUser.saveAsync()\n .spread(function(user) {\n var token = jwt.sign({ _id: user._id }, config.secrets.session, {\n expiresIn: 60 * 60 * 5\n });\n res.json({ token });\n })\n .catch(validationError(res));\n}\n\n/**\n * Get a single user\n */\nexport function show(req, res, next) {\n var userId = req.params.id;\n\n User.findByIdAsync(userId)\n .then(user => {\n if (!user) {\n return res.status(404).end();\n }\n res.json(user.profile);\n })\n .catch(err => next(err));\n}\n\n/**\n * Deletes a user\n * restriction: 'admin'\n */\nexport function destroy(req, res) {\n User.findByIdAndRemoveAsync(req.params.id)\n .then(function() {\n res.status(204).end();\n })\n .catch(handleError(res));\n}\n\n/**\n * Change a users password\n */\nexport function changePassword(req, res, next) {\n var userId = req.user._id;\n var oldPass = String(req.body.oldPassword);\n var newPass = String(req.body.newPassword);\n\n User.findByIdAsync(userId)\n .then(user => {\n if (user.authenticate(oldPass)) {\n user.password = newPass;\n return user.saveAsync()\n .then(() => {\n res.status(204).end();\n })\n .catch(validationError(res));\n } else {\n return res.status(403).end();\n }\n });\n}\n\n/**\n * Get my info\n */\nexport function me(req, res, next) {\n var userId = req.user._id;\n\n User.findOneAsync({ _id: userId }, '-salt -password')\n .then(user => { // don't ever give out the password or salt\n if (!user) {\n return res.status(401).end();\n }\n res.json(user);\n })\n .catch(err => next(err));\n}\n\n/**\n * Authentication callback\n */\nexport function authCallback(req, res, next) {\n res.redirect('/');\n}\n"
},
{
"path": "server/api/user/user.events.js",
"content": "/**\n * User model events\n */\n\n'use strict';\n\nimport {EventEmitter} from 'events';\nimport User from './user.model';\nvar UserEvents = new EventEmitter();\n\n// Set max event listeners (0 == unlimited)\nUserEvents.setMaxListeners(0);\n\n// Model events\nvar events = {\n 'save': 'save',\n 'remove': 'remove'\n};\n\n// Register the event emitter to the model events\nfor (var e in events) {\n var event = events[e];\n User.schema.post(e, emitEvent(event));\n}\n\nfunction emitEvent(event) {\n return function(doc) {\n UserEvents.emit(event + ':' + doc._id, doc);\n UserEvents.emit(event, doc);\n }\n}\n\nexport default UserEvents;\n"
},
{
"path": "server/api/user/user.integration.js",
"content": "'use strict';\n\nimport app from '../..';\nimport User from './user.model';\nimport request from 'supertest';\n\ndescribe('User API:', function() {\n var user;\n\n // Clear users before testing\n before(function() {\n return User.removeAsync().then(function() {\n user = new User({\n name: 'Fake User',\n email: 'test@example.com',\n password: 'password'\n });\n\n return user.saveAsync();\n });\n });\n\n // Clear users after testing\n after(function() {\n return User.removeAsync();\n });\n\n describe('GET /api/users/me', function() {\n var token;\n\n before(function(done) {\n request(app)\n .post('/auth/local')\n .send({\n email: 'test@example.com',\n password: 'password'\n })\n .expect(200)\n .expect('Content-Type', /json/)\n .end((err, res) => {\n token = res.body.token;\n done();\n });\n });\n\n it('should respond with a user profile when authenticated', function(done) {\n request(app)\n .get('/api/users/me')\n .set('authorization', 'Bearer ' + token)\n .expect(200)\n .expect('Content-Type', /json/)\n .end((err, res) => {\n res.body._id.toString().should.equal(user._id.toString());\n done();\n });\n });\n\n it('should respond with a 401 when not authenticated', function(done) {\n request(app)\n .get('/api/users/me')\n .expect(401)\n .end(done);\n });\n });\n});\n"
},
{
"path": "server/api/user/user.model.js",
"content": "'use strict';\n\nimport crypto from 'crypto';\nvar mongoose = require('bluebird').promisifyAll(require('mongoose'));\nimport {Schema} from 'mongoose';\n\nconst authTypes = ['github', 'twitter', 'facebook', 'google'];\n\nvar UserSchema = new Schema({\n name: String,\n email: {\n type: String,\n lowercase: true\n },\n role: {\n type: String,\n default: 'user'\n },\n password: String,\n provider: String,\n salt: String,\n facebook: {},\n twitter: {},\n google: {},\n github: {}\n});\n\n/**\n * Virtuals\n */\n\n// Public profile information\nUserSchema\n .virtual('profile')\n .get(function() {\n return {\n 'name': this.name,\n 'role': this.role\n };\n });\n\n// Non-sensitive info we'll be putting in the token\nUserSchema\n .virtual('token')\n .get(function() {\n return {\n '_id': this._id,\n 'role': this.role\n };\n });\n\n/**\n * Validations\n */\n\n// Validate empty email\nUserSchema\n .path('email')\n .validate(function(email) {\n if (authTypes.indexOf(this.provider) !== -1) {\n return true;\n }\n return email.length;\n }, 'Email cannot be blank');\n\n// Validate empty password\nUserSchema\n .path('password')\n .validate(function(password) {\n if (authTypes.indexOf(this.provider) !== -1) {\n return true;\n }\n return password.length;\n }, 'Password cannot be blank');\n\n// Validate email is not taken\nUserSchema\n .path('email')\n .validate(function(value, respond) {\n var self = this;\n return this.constructor.findOneAsync({ email: value })\n .then(function(user) {\n if (user) {\n if (self.id === user.id) {\n return respond(true);\n }\n return respond(false);\n }\n return respond(true);\n })\n .catch(function(err) {\n throw err;\n });\n }, 'The specified email address is already in use.');\n\nvar validatePresenceOf = function(value) {\n return value && value.length;\n};\n\n/**\n * Pre-save hook\n */\nUserSchema\n .pre('save', function(next) {\n // Handle new/update passwords\n if (!this.isModified('password')) {\n return next();\n }\n\n if (!validatePresenceOf(this.password) && authTypes.indexOf(this.provider) === -1) {\n next(new Error('Invalid password'));\n }\n\n // Make salt with a callback\n this.makeSalt((saltErr, salt) => {\n if (saltErr) {\n next(saltErr);\n }\n this.salt = salt;\n this.encryptPassword(this.password, (encryptErr, hashedPassword) => {\n if (encryptErr) {\n next(encryptErr);\n }\n this.password = hashedPassword;\n next();\n });\n });\n });\n\n/**\n * Methods\n */\nUserSchema.methods = {\n /**\n * Authenticate - check if the passwords are the same\n *\n * @param {String} password\n * @param {Function} callback\n * @return {Boolean}\n * @api public\n */\n authenticate(password, callback) {\n if (!callback) {\n return this.password === this.encryptPassword(password);\n }\n\n this.encryptPassword(password, (err, pwdGen) => {\n if (err) {\n return callback(err);\n }\n\n if (this.password === pwdGen) {\n callback(null, true);\n } else {\n callback(null, false);\n }\n });\n },\n\n /**\n * Make salt\n *\n * @param {Number} byteSize Optional salt byte size, default to 16\n * @param {Function} callback\n * @return {String}\n * @api public\n */\n makeSalt(byteSize, callback) {\n var defaultByteSize = 16;\n\n if (typeof arguments[0] === 'function') {\n callback = arguments[0];\n byteSize = defaultByteSize;\n } else if (typeof arguments[1] === 'function') {\n callback = arguments[1];\n }\n\n if (!byteSize) {\n byteSize = defaultByteSize;\n }\n\n if (!callback) {\n return crypto.randomBytes(byteSize).toString('base64');\n }\n\n return crypto.randomBytes(byteSize, (err, salt) => {\n if (err) {\n callback(err);\n } else {\n callback(null, salt.toString('base64'));\n }\n });\n },\n\n /**\n * Encrypt password\n *\n * @param {String} password\n * @param {Function} callback\n * @return {String}\n * @api public\n */\n encryptPassword(password, callback) {\n if (!password || !this.salt) {\n return null;\n }\n\n var defaultIterations = 10000;\n var defaultKeyLength = 64;\n var salt = new Buffer(this.salt, 'base64');\n\n if (!callback) {\n return crypto.pbkdf2Sync(password, salt, defaultIterations, defaultKeyLength)\n .toString('base64');\n }\n\n return crypto.pbkdf2(password, salt, defaultIterations, defaultKeyLength, (err, key) => {\n if (err) {\n callback(err);\n } else {\n callback(null, key.toString('base64'));\n }\n });\n }\n};\n\nexport default mongoose.model('User', UserSchema);\n"
},
{
"path": "server/api/user/user.model.spec.js",
"content": "'use strict';\n\nimport app from '../..';\nimport User from './user.model';\nvar user;\nvar genUser = function() {\n user = new User({\n provider: 'local',\n name: 'Fake User',\n email: 'test@example.com',\n password: 'password'\n });\n return user;\n};\n\ndescribe('User Model', function() {\n before(function() {\n // Clear users before testing\n return User.removeAsync();\n });\n\n beforeEach(function() {\n genUser();\n });\n\n afterEach(function() {\n return User.removeAsync();\n });\n\n it('should begin with no users', function() {\n return User.findAsync({}).should\n .eventually.have.length(0);\n });\n\n it('should fail when saving a duplicate user', function() {\n return user.saveAsync()\n .then(function() {\n var userDup = genUser();\n return userDup.saveAsync();\n }).should.be.rejected;\n });\n\n describe('#email', function() {\n it('should fail when saving without an email', function() {\n user.email = '';\n return user.saveAsync().should.be.rejected;\n });\n });\n\n describe('#password', function() {\n beforeEach(function() {\n return user.saveAsync();\n });\n\n it('should authenticate user if valid', function() {\n user.authenticate('password').should.be.true;\n });\n\n it('should not authenticate user if invalid', function() {\n user.authenticate('blah').should.not.be.true;\n });\n\n it('should remain the same hash unless the password is updated', function() {\n user.name = 'Test User';\n return user.saveAsync()\n .spread(function(u) {\n return u.authenticate('password');\n }).should.eventually.be.true;\n });\n });\n\n});\n"
},
{
"path": "server/app.js",
"content": "/**\n * Main application file\n */\n\n'use strict';\n\nimport express from 'express';\nimport mongoose from 'mongoose';\nmongoose.Promise = require('bluebird');\nimport config from './config/environment';\nimport http from 'http';\n\n// Connect to MongoDB\nmongoose.connect(config.mongo.uri, config.mongo.options);\nmongoose.connection.on('error', function(err) {\n console.error('MongoDB connection error: ' + err);\n process.exit(-1);\n});\n\n// Populate databases with sample data\nif (config.seedDB) { require('./config/seed'); }\n\n// Setup server\nvar app = express();\nvar server = http.createServer(app);\nvar socketio = require('socket.io')(server, {\n serveClient: config.env !== 'production',\n path: '/socket.io-client'\n});\nrequire('./config/socketio')(socketio);\nrequire('./config/express')(app);\nrequire('./routes')(app);\n\n// Start server\nfunction startServer() {\n app.angularFullstack = server.listen(config.port, config.ip, function() {\n console.log('Express server listening on %d, in %s mode', config.port, app.get('env'));\n });\n}\n\nsetImmediate(startServer);\n\n// Expose app\nexports = module.exports = app;\n"
},
{
"path": "server/auth/auth.service.js",
"content": "'use strict';\n\nimport passport from 'passport';\nimport config from '../config/environment';\nimport jwt from 'jsonwebtoken';\nimport expressJwt from 'express-jwt';\nimport compose from 'composable-middleware';\nimport User from '../api/user/user.model';\n\nvar validateJwt = expressJwt({\n secret: config.secrets.session\n});\n\n/**\n * Attaches the user object to the request if authenticated\n * Otherwise returns 403\n */\nexport function isAuthenticated() {\n return compose()\n // Validate jwt\n .use(function(req, res, next) {\n // allow access_token to be passed through query parameter as well\n if (req.query && req.query.hasOwnProperty('access_token')) {\n req.headers.authorization = 'Bearer ' + req.query.access_token;\n }\n validateJwt(req, res, next);\n })\n // Attach user to request\n .use(function(req, res, next) {\n User.findByIdAsync(req.user._id)\n .then(user => {\n if (!user) {\n return res.status(401).end();\n }\n req.user = user;\n next();\n })\n .catch(err => next(err));\n });\n}\n\n/**\n * Checks if the user role meets the minimum requirements of the route\n */\nexport function hasRole(roleRequired) {\n if (!roleRequired) {\n throw new Error('Required role needs to be set');\n }\n\n return compose()\n .use(isAuthenticated())\n .use(function meetsRequirements(req, res, next) {\n if (config.userRoles.indexOf(req.user.role) >=\n config.userRoles.indexOf(roleRequired)) {\n next();\n } else {\n res.status(403).send('Forbidden');\n }\n });\n}\n\n/**\n * Returns a jwt token signed by the app secret\n */\nexport function signToken(id, role) {\n return jwt.sign({ _id: id, role: role }, config.secrets.session, {\n expiresIn: 60 * 60 * 5\n });\n}\n\n/**\n * Set token cookie directly for oAuth strategies\n */\nexport function setTokenCookie(req, res) {\n if (!req.user) {\n return res.status(404).send('It looks like you aren\\'t logged in, please try again.');\n }\n var token = signToken(req.user._id, req.user.role);\n res.cookie('token', token);\n res.redirect('/');\n}\n"
},
{
"path": "server/auth/facebook/index.js",
"content": "'use strict';\n\nimport express from 'express';\nimport passport from 'passport';\nimport {setTokenCookie} from '../auth.service';\n\nvar router = express.Router();\n\nrouter\n .get('/', passport.authenticate('facebook', {\n scope: ['email', 'user_about_me'],\n failureRedirect: '/signup',\n session: false\n }))\n .get('/callback', passport.authenticate('facebook', {\n failureRedirect: '/signup',\n session: false\n }), setTokenCookie);\n\nexport default router;\n"
},
{
"path": "server/auth/facebook/passport.js",
"content": "import passport from 'passport';\nimport {Strategy as FacebookStrategy} from 'passport-facebook';\n\nexport function setup(User, config) {\n passport.use(new FacebookStrategy({\n clientID: config.facebook.clientID,\n clientSecret: config.facebook.clientSecret,\n callbackURL: config.facebook.callbackURL,\n profileFields: [\n 'displayName',\n 'emails'\n ]\n },\n function(accessToken, refreshToken, profile, done) {\n User.findOneAsync({\n 'facebook.id': profile.id\n })\n .then(user => {\n if (user) {\n return done(null, user);\n }\n\n user = new User({\n name: profile.displayName,\n email: profile.emails[0].value,\n role: 'user',\n provider: 'facebook',\n facebook: profile._json\n });\n user.save()\n .then(user => done(null, user))\n .catch(err => done(err));\n })\n .catch(err => done(err));\n }));\n}\n"
},
{
"path": "server/auth/google/index.js",
"content": "'use strict';\n\nimport express from 'express';\nimport passport from 'passport';\nimport {setTokenCookie} from '../auth.service';\n\nvar router = express.Router();\n\nrouter\n .get('/', passport.authenticate('google', {\n failureRedirect: '/signup',\n scope: [\n 'profile',\n 'email'\n ],\n session: false\n }))\n .get('/callback', passport.authenticate('google', {\n failureRedirect: '/signup',\n session: false\n }), setTokenCookie);\n\nexport default router;\n"
},
{
"path": "server/auth/google/passport.js",
"content": "import passport from 'passport';\nimport {OAuth2Strategy as GoogleStrategy} from 'passport-google-oauth';\n\nexport function setup(User, config) {\n passport.use(new GoogleStrategy({\n clientID: config.google.clientID,\n clientSecret: config.google.clientSecret,\n callbackURL: config.google.callbackURL\n },\n function(accessToken, refreshToken, profile, done) {\n User.findOneAsync({\n 'google.id': profile.id\n })\n .then(user => {\n if (user) {\n return done(null, user);\n }\n\n user = new User({\n name: profile.displayName,\n email: profile.emails[0].value,\n role: 'user',\n username: profile.emails[0].value.split('@')[0],\n provider: 'google',\n google: profile._json\n });\n user.save()\n .then(user => done(null, user))\n .catch(err => done(err));\n })\n .catch(err => done(err));\n }));\n}\n"
},
{
"path": "server/auth/index.js",
"content": "'use strict';\n\nimport express from 'express';\nimport passport from 'passport';\nimport config from '../config/environment';\nimport User from '../api/user/user.model';\n\n// Passport Configuration\nrequire('./local/passport').setup(User, config);\nrequire('./facebook/passport').setup(User, config);\nrequire('./google/passport').setup(User, config);\nrequire('./twitter/passport').setup(User, config);\n\nvar router = express.Router();\n\nrouter.use('/local', require('./local'));\nrouter.use('/facebook', require('./facebook'));\nrouter.use('/twitter', require('./twitter'));\nrouter.use('/google', require('./google'));\n\nexport default router;\n"
},
{
"path": "server/auth/local/index.js",
"content": "'use strict';\n\nimport express from 'express';\nimport passport from 'passport';\nimport {signToken} from '../auth.service';\n\nvar router = express.Router();\n\nrouter.post('/', function(req, res, next) {\n passport.authenticate('local', function(err, user, info) {\n var error = err || info;\n if (error) {\n return res.status(401).json(error);\n }\n if (!user) {\n return res.status(404).json({message: 'Something went wrong, please try again.'});\n }\n\n var token = signToken(user._id, user.role);\n res.json({ token });\n })(req, res, next)\n});\n\nexport default router;\n"
},
{
"path": "server/auth/local/passport.js",
"content": "import passport from 'passport';\nimport {Strategy as LocalStrategy} from 'passport-local';\n\nfunction localAuthenticate(User, email, password, done) {\n User.findOneAsync({\n email: email.toLowerCase()\n })\n .then(user => {\n if (!user) {\n return done(null, false, {\n message: 'This email is not registered.'\n });\n }\n user.authenticate(password, function(authError, authenticated) {\n if (authError) {\n return done(authError);\n }\n if (!authenticated) {\n return done(null, false, { message: 'This password is not correct.' });\n } else {\n return done(null, user);\n }\n });\n })\n .catch(err => done(err));\n}\n\nexport function setup(User, config) {\n passport.use(new LocalStrategy({\n usernameField: 'email',\n passwordField: 'password' // this is the virtual field on the model\n }, function(email, password, done) {\n return localAuthenticate(User, email, password, done);\n }));\n}\n"
},
{
"path": "server/auth/twitter/index.js",
"content": "'use strict';\n\nimport express from 'express';\nimport passport from 'passport';\nimport {setTokenCookie} from '../auth.service';\n\nvar router = express.Router();\n\nrouter\n .get('/', passport.authenticate('twitter', {\n failureRedirect: '/signup',\n session: false\n }))\n .get('/callback', passport.authenticate('twitter', {\n failureRedirect: '/signup',\n session: false\n }), setTokenCookie);\n\nexport default router;\n"
},
{
"path": "server/auth/twitter/passport.js",
"content": "import passport from 'passport';\nimport {Strategy as TwitterStrategy} from 'passport-twitter';\n\nexport function setup(User, config) {\n passport.use(new TwitterStrategy({\n consumerKey: config.twitter.clientID,\n consumerSecret: config.twitter.clientSecret,\n callbackURL: config.twitter.callbackURL\n },\n function(token, tokenSecret, profile, done) {\n User.findOneAsync({\n 'twitter.id_str': profile.id\n })\n .then(user => {\n if (user) {\n return done(null, user);\n }\n\n user = new User({\n name: profile.displayName,\n username: profile.username,\n role: 'user',\n provider: 'twitter',\n twitter: profile._json\n });\n user.save()\n .then(user => done(null, user))\n .catch(err => done(err));\n })\n .catch(err => done(err));\n }));\n}\n"
},
{
"path": "server/components/errors/index.js",
"content": "/**\n * Error responses\n */\n\n'use strict';\n\nmodule.exports[404] = function pageNotFound(req, res) {\n var viewFilePath = '404';\n var statusCode = 404;\n var result = {\n status: statusCode\n };\n\n res.status(result.status);\n res.render(viewFilePath, {}, function(err, html) {\n if (err) {\n return res.json(result, result.status);\n }\n\n res.send(html);\n });\n};\n"
},
{
"path": "server/config/environment/development.js",
"content": "'use strict';\n\n// Development specific configuration\n// ==================================\nmodule.exports = {\n\n // MongoDB connection options\n mongo: {\n uri: 'mongodb://localhost/paizaqa-dev'\n },\n\n // Seed database on startup\n seedDB: true\n\n};\n"
},
{
"path": "server/config/environment/index.js",
"content": "'use strict';\n\nvar path = require('path');\nvar _ = require('lodash');\n\nfunction requiredProcessEnv(name) {\n if (!process.env[name]) {\n throw new Error('You must set the ' + name + ' environment variable');\n }\n return process.env[name];\n}\n\n// All configurations will extend these options\n// ============================================\nvar all = {\n env: process.env.NODE_ENV,\n\n // Root path of server\n root: path.normalize(__dirname + '/../../..'),\n\n // Server port\n port: process.env.PORT || 9000,\n\n // Server IP\n ip: process.env.IP || '0.0.0.0',\n\n // Should we populate the DB with sample data?\n seedDB: false,\n\n // Secret for session, you will want to change this and make it an environment variable\n secrets: {\n session: 'paizaqa-secret'\n },\n\n // MongoDB connection options\n mongo: {\n options: {\n db: {\n safe: true\n }\n }\n },\n\n facebook: {\n clientID: process.env.FACEBOOK_ID || 'id',\n clientSecret: process.env.FACEBOOK_SECRET || 'secret',\n callbackURL: (process.env.DOMAIN || '') + '/auth/facebook/callback'\n },\n\n twitter: {\n clientID: process.env.TWITTER_ID || 'id',\n clientSecret: process.env.TWITTER_SECRET || 'secret',\n callbackURL: (process.env.DOMAIN || '') + '/auth/twitter/callback'\n },\n\n google: {\n clientID: process.env.GOOGLE_ID || 'id',\n clientSecret: process.env.GOOGLE_SECRET || 'secret',\n callbackURL: (process.env.DOMAIN || '') + '/auth/google/callback'\n }\n};\n\n// Export the config object based on the NODE_ENV\n// ==============================================\nmodule.exports = _.merge(\n all,\n require('./shared'),\n require('./' + process.env.NODE_ENV + '.js') || {});\n"
},
{
"path": "server/config/environment/production.js",
"content": "'use strict';\n\n// Production specific configuration\n// =================================\nmodule.exports = {\n // Server IP\n ip: process.env.OPENSHIFT_NODEJS_IP ||\n process.env.IP ||\n undefined,\n\n // Server port\n port: process.env.OPENSHIFT_NODEJS_PORT ||\n process.env.PORT ||\n 8080,\n\n // MongoDB connection options\n mongo: {\n uri: process.env.MONGOLAB_URI ||\n process.env.MONGOHQ_URL ||\n process.env.OPENSHIFT_MONGODB_DB_URL +\n process.env.OPENSHIFT_APP_NAME ||\n 'mongodb://localhost/paizaqa'\n }\n};\n"
},
{
"path": "server/config/environment/shared.js",
"content": "'use strict';\n\nexports = module.exports = {\n // List of user roles\n userRoles: ['guest', 'user', 'admin']\n};\n"
},
{
"path": "server/config/environment/test.js",
"content": "'use strict';\n\n// Test specific configuration\n// ===========================\nmodule.exports = {\n // MongoDB connection options\n mongo: {\n uri: 'mongodb://localhost/paizaqa-test'\n },\n sequelize: {\n uri: 'sqlite://',\n options: {\n logging: false,\n storage: 'test.sqlite',\n define: {\n timestamps: false\n }\n }\n }\n};\n"
},
{
"path": "server/config/express.js",
"content": "/**\n * Express configuration\n */\n\n'use strict';\n\nimport express from 'express';\nimport favicon from 'serve-favicon';\nimport morgan from 'morgan';\nimport compression from 'compression';\nimport bodyParser from 'body-parser';\nimport methodOverride from 'method-override';\nimport cookieParser from 'cookie-parser';\nimport errorHandler from 'errorhandler';\nimport path from 'path';\nimport lusca from 'lusca';\nimport config from './environment';\nimport passport from 'passport';\nimport session from 'express-session';\nimport connectMongo from 'connect-mongo';\nimport mongoose from 'mongoose';\nvar mongoStore = connectMongo(session);\n\nexport default function(app) {\n var env = app.get('env');\n\n app.set('views', config.root + '/server/views');\n app.engine('html', require('ejs').renderFile);\n app.set('view engine', 'html');\n app.use(compression());\n app.use(bodyParser.urlencoded({ extended: false }));\n app.use(bodyParser.json());\n app.use(methodOverride());\n app.use(cookieParser());\n app.use(passport.initialize());\n\n // Persist sessions with mongoStore / sequelizeStore\n // We need to enable sessions for passport-twitter because it's an\n // oauth 1.0 strategy, and Lusca depends on sessions\n app.use(session({\n secret: config.secrets.session,\n saveUninitialized: true,\n resave: false,\n store: new mongoStore({\n mongooseConnection: mongoose.connection,\n db: 'paizaqa'\n })\n }));\n\n /**\n * Lusca - express server security\n * https://github.com/krakenjs/lusca\n */\n if ('test' !== env) {\n app.use(lusca({\n csrf: {\n angular: true\n },\n xframe: 'SAMEORIGIN',\n hsts: {\n maxAge: 31536000, //1 year, in seconds\n includeSubDomains: true,\n preload: true\n },\n xssProtection: true\n }));\n }\n\n app.set('appPath', path.join(config.root, 'client'));\n\n if ('production' === env) {\n app.use(favicon(path.join(config.root, 'client', 'favicon.ico')));\n app.use(express.static(app.get('appPath')));\n app.use(morgan('dev'));\n }\n\n if ('development' === env) {\n app.use(require('connect-livereload')());\n }\n\n if ('development' === env || 'test' === env) {\n app.use(express.static(path.join(config.root, '.tmp')));\n app.use(express.static(app.get('appPath')));\n app.use(morgan('dev'));\n app.use(errorHandler()); // Error handler - has to be last\n }\n}\n"
},
{
"path": "server/config/local.env.sample.js",
"content": "'use strict';\n\n// Use local.env.js for environment variables that grunt will set when the server starts locally.\n// Use for your api keys, secrets, etc. This file should not be tracked by git.\n//\n// You will need to set these on the server you deploy to.\n\nmodule.exports = {\n DOMAIN: 'http://localhost:9000',\n SESSION_SECRET: 'paizaqa-secret',\n\n FACEBOOK_ID: 'app-id',\n FACEBOOK_SECRET: 'secret',\n\n TWITTER_ID: 'app-id',\n TWITTER_SECRET: 'secret',\n\n GOOGLE_ID: 'app-id',\n GOOGLE_SECRET: 'secret',\n\n // Control debug level for modules using visionmedia/debug\n DEBUG: ''\n};\n"
},
{
"path": "server/config/seed.js",
"content": "/**\n * Populate DB with sample data on server start\n * to disable, edit config/environment/index.js, and set `seedDB: false`\n */\n\n'use strict';\nimport Thing from '../api/thing/thing.model';\nimport User from '../api/user/user.model';\n\nThing.find({}).removeAsync()\n .then(() => {\n Thing.create({\n name: 'Development Tools',\n info: 'Integration with popular tools such as Bower, Grunt, Babel, Karma, ' +\n 'Mocha, JSHint, Node Inspector, Livereload, Protractor, Jade, ' +\n 'Stylus, Sass, and Less.'\n }, {\n name: 'Server and Client integration',\n info: 'Built with a powerful and fun stack: MongoDB, Express, ' +\n 'AngularJS, and Node.'\n }, {\n name: 'Smart Build System',\n info: 'Build system ignores `spec` files, allowing you to keep ' +\n 'tests alongside code. Automatic injection of scripts and ' +\n 'styles into your index.html'\n }, {\n name: 'Modular Structure',\n info: 'Best practice client and server structures allow for more ' +\n 'code reusability and maximum scalability'\n }, {\n name: 'Optimized Build',\n info: 'Build process packs up your templates as a single JavaScript ' +\n 'payload, minifies your scripts/css/images, and rewrites asset ' +\n 'names for caching.'\n }, {\n name: 'Deployment Ready',\n info: 'Easily deploy your app to Heroku or Openshift with the heroku ' +\n 'and openshift subgenerators'\n });\n });\n\nUser.find({}).removeAsync()\n .then(() => {\n User.createAsync({\n provider: 'local',\n name: 'Test User',\n email: 'test@example.com',\n password: 'test'\n }, {\n provider: 'local',\n role: 'admin',\n name: 'Admin',\n email: 'admin@example.com',\n password: 'admin'\n })\n .then(() => {\n console.log('finished populating users');\n });\n });\n"
},
{
"path": "server/config/socketio.js",
"content": "/**\n * Socket.io configuration\n */\n'use strict';\n\nimport config from './environment';\n\n// When the user disconnects.. perform this\nfunction onDisconnect(socket) {\n}\n\n// When the user connects.. perform this\nfunction onConnect(socket) {\n // When the client emits 'info', this listens and executes\n socket.on('info', data => {\n socket.log(JSON.stringify(data, null, 2));\n });\n\n // Insert sockets below\n require('../api/question/question.socket').register(socket);\n require('../api/thing/thing.socket').register(socket);\n\n}\n\nexport default function(socketio) {\n // socket.io (v1.x.x) is powered by debug.\n // In order to see all the debug output, set DEBUG (in server/config/local.env.js) to including the desired scope.\n //\n // ex: DEBUG: \"http*,socket.io:socket\"\n\n // We can authenticate socket.io users and access their token through socket.decoded_token\n //\n // 1. You will need to send the token in `client/components/socket/socket.service.js`\n //\n // 2. Require authentication here:\n // socketio.use(require('socketio-jwt').authorize({\n // secret: config.secrets.session,\n // handshake: true\n // }));\n\n socketio.on('connection', function(socket) {\n socket.address = socket.request.connection.remoteAddress +\n ':' + socket.request.connection.remotePort;\n\n socket.connectedAt = new Date();\n\n socket.log = function(...data) {\n console.log(`SocketIO ${socket.nsp.name} [${socket.address}]`, ...data);\n };\n\n // Call onDisconnect.\n socket.on('disconnect', () => {\n onDisconnect(socket);\n socket.log('DISCONNECTED');\n });\n\n // Call onConnect.\n onConnect(socket);\n socket.log('CONNECTED');\n });\n}\n"
},
{
"path": "server/index.js",
"content": "'use strict';\n\n// Set default node environment to development\nvar env = process.env.NODE_ENV = process.env.NODE_ENV || 'development';\n\nif (env === 'development' || env === 'test') {\n // Register the Babel require hook\n require('babel-core/register');\n}\n\n// Export the application\nexports = module.exports = require('./app');\n"
},
{
"path": "server/routes.js",
"content": "/**\n * Main application routes\n */\n\n'use strict';\n\nimport errors from './components/errors';\nimport path from 'path';\n\nexport default function(app) {\n // Insert routes below\n app.use('/api/questions', require('./api/question'));\n app.use('/api/things', require('./api/thing'));\n app.use('/api/users', require('./api/user'));\n\n app.use('/auth', require('./auth'));\n\n // All undefined asset or api routes should return a 404\n app.route('/:url(api|auth|components|app|bower_components|assets)/*')\n .get(errors[404]);\n\n // All other routes should redirect to the index.html\n app.route('/*')\n .get((req, res) => {\n res.sendFile(path.resolve(app.get('appPath') + '/index.html'));\n });\n}\n"
},
{
"path": "server/views/404.html",
"content": "\n\n \n \n Sorry, but the page you were trying to view does not exist.
\nIt looks like this was the result of either:
\n
\n \n\n
\n
\n add a comment\n \n