adding Admin server

account/server/config/express.js

@@ -0,0 +1,60 @@
+const path = require("path");
+const express = require("express");
+const session = require("express-session");
+const bodyParser = require("body-parser");
+const connectMongo = require("connect-mongo");
+const secrets = require("./secrets");
+
+const MongoStore = connectMongo(session)
+var cookie_domain = process.env['COOKIE_DOMAIN'] != null ? process.env['COOKIE_DOMAIN'] : '.openmhz.com'; //'https://s3.amazonaws.com/robotastic';
+
+
+module.exports = function(app, passport) {
+	app.set("port", 3009)
+
+	// X-Powered-By header has no functional value.
+	// Keeping it makes it easier for an attacker to build the site's profile
+	// It can be removed safely
+	app.disable("x-powered-by")
+	app.enable('trust proxy')
+	app.use(bodyParser.json())
+	app.use(bodyParser.urlencoded({ extended: true }))
+	app.use(express.static(path.join(process.cwd(), 'public')));
+
+	const sess = {
+		secret: 'secret',
+		/*saveUninitialized: false,
+		resave: false,*/
+		resave: true,
+		saveUninitialized: true,
+		secret: secrets.sessionSecret,
+		proxy: true,
+		name: "sessionId",
+		cookie: {
+			httpOnly: true,
+			secure: false,
+			domain: cookie_domain
+		},
+		store: new MongoStore({
+			url: secrets.db,
+			autoReconnect: true
+		})
+	}
+
+	var node_env = process.env.NODE_ENV;
+	console.log('--------------------------');
+	console.log('===> 😊  Starting Server . . .');
+	console.log('===>  Environment: ' + node_env);
+	/*if(node_env === 'production') {
+		console.log('===> 🚦  Note: In order for authentication to work in production');
+		console.log('===>           you will need a secure HTTPS connection');
+		sess.cookie.secure = true; // Serve secure cookies
+		sess.cookie.httpOnly = false;
+	}*/
+
+	app.use(session(sess))
+
+	app.use(passport.initialize())
+	app.use(passport.session())
+
+}

account/server/config/passport-strategies/local.js

@@ -0,0 +1,34 @@
+/*
+ Configuring local strategy to authenticate strategies
+ Code modified from : https://github.com/madhums/node-express-mongoose-demo/blob/master/config/passport/local.js
+ */
+
+const LocalStrategy = require("passport-local").Strategy;
+const User = require("../../models/user");
+ /*
+ By default, LocalStrategy expects to find credentials in parameters named username and password.
+ If your site prefers to name these fields differently, options are available to change the defaults.
+ */
+const local = new LocalStrategy({
+ 	usernameField: "email"
+ }, (email, password, done) => {
+ 	User.findOne({
+    $or: [{
+      email
+    }, {
+      local: {
+        email
+      }
+    }]
+  }, (err, user) => {
+ 		if(!user) return done(null, false, { message: `Email ${email} not found` })
+ 		user.comparePassword(password, (err, isMatch) => {
+ 			if (isMatch) {
+ 				return done(null, user)
+ 			} else {
+ 				return done(null, false, { message: "Invalid email or password" })
+ 			}
+ 		})
+ 	})
+ })
+module.exports = local;

account/server/config/passport.js

@@ -0,0 +1,26 @@
+/* Initializing PassportJS */
+const User = require("../models/user");
+const local = require("./passport-strategies/local");
+
+module.exports = function (app, passport) {
+  // Configure Passport authenticated session persistence.
+  //
+  // In order to restore authentication state across HTTP requests, Passport needs
+  // to serialize users into and deserialize users out of the session.  The
+  // typical implementation of this is as simple as supplying the user ID when
+  // serializing, and querying the user record by ID from the database when
+  // deserializing.
+  passport.serializeUser((user, done) => {
+  	done(null, user.id)
+  })
+
+  passport.deserializeUser((id, done) => {
+  	User.findById(id, (err, user) => {
+      done(err, user)
+  	})
+  })
+
+  // use the following strategies
+  passport.use(local)
+}
+

account/server/config/secrets.js

@@ -0,0 +1,15 @@
+/** Important **/
+/** You should not be committing this file to GitHub **/
+/** Repeat: DO! NOT! COMMIT! THIS! FILE! TO! YOUR! REPO! **/
+var host = process.env['MONGO_NODE_DRIVER_HOST'] != null ? process.env['MONGO_NODE_DRIVER_HOST'] : 'localhost';
+var port = process.env['MONGO_NODE_DRIVER_PORT'] != null ? process.env['MONGO_NODE_DRIVER_PORT'] : 27017;
+var mongoUrl = 'mongodb://' + host + ':' + port + '/scanner';
+
+
+
+const secrets = {
+	db: mongoUrl,
+	sessionSecret: "letthisbeyoursecret"
+}
+
+module.exports = secrets