v 0.1

.coveralls.yml

@@ -0,0 +1,2 @@
+service_name: travis-ci
+repo_token: MACdJgxPruysr5F3qYQTHCKXsctMUziEj

.gitignore

@@ -5,6 +5,8 @@ db
 logs
 *.log
 npm-debug.log*
+coverage
+html-report
 
 # Runtime data
 pids

.travis.yml

@@ -14,5 +14,7 @@ env:
   - CXX=g++-4.8
 sudo: required
 before_script: npm i
+after_success: npm run coveralls
 script:
   - npm test
+  - npm run lint

CODE_OF_CONDUCT.md

@@ -0,0 +1,46 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.
+
+## Our Standards
+
+Examples of behavior that contributes to creating a positive environment include:
+
+* Using welcoming and inclusive language
+* Being respectful of differing viewpoints and experiences
+* Gracefully accepting constructive criticism
+* Focusing on what is best for the community
+* Showing empathy towards other community members
+
+Examples of unacceptable behavior by participants include:
+
+* The use of sexualized language or imagery and unwelcome sexual attention or advances
+* Trolling, insulting/derogatory comments, and personal or political attacks
+* Public or private harassment
+* Publishing others' private information, such as a physical or electronic address, without explicit permission
+* Other conduct which could reasonably be considered inappropriate in a professional setting
+
+## Our Responsibilities
+
+Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.
+
+Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful.
+
+## Scope
+
+This Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project or its community. Examples of representing a project or community include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team at [atom@github.com](mailto:atom@github.com). All complaints will be reviewed and investigated and will result in a response that is deemed necessary and appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately.
+
+Project maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4, available at [http://contributor-covenant.org/version/1/4][version]
+
+[homepage]: http://contributor-covenant.org
+[version]: http://contributor-covenant.org/version/1/4/

CONTRIBUTING.md

@@ -0,0 +1,19 @@
+# Guidline to Contributing
+
+##Code of Conduct
+
+This project adheres to the Contributor Covenant [code of conduct](https://github.com/atom/atom/blob/master/CODE_OF_CONDUCT.md). By participating, you are expected to uphold this code. Please report unacceptable behavior to Adam @ [https://github.com/adamstelle](https://github.com/adamstelle).
+
+## Issues
+
+###When submitting an issue for a bug, please adhere to the following guidelines:
+
+- Use a clear and descriptive title for the issue.
+- Describe the steps you took when encountering the bug and whether you are able to reproduce the bug.
+- Please include screenshots showing the steps you take to reproduce the bug.
+
+## Contacting Admins
+
+###If there are any questions, comments or concerns, please message us at the following:
+
+- [https://github.com/adamstelle](https://github.com/adamstelle)

README.md

@@ -1,15 +1,29 @@
+[![Coverage Status](https://coveralls.io/repos/github/adamstelle/abba/badge.svg?branch=staging)](https://coveralls.io/github/adamstelle/abba?branch=staging)
+
 # Abba
-An app to predict short-term rental income for homeowners and renters.
+Abba is a simple REST API helps homeowners or prospective owners predict  potential AirBnB rental income for one or more spare bedrooms.
+
+## Description
+Abba is a a RESTful API that uses full CRUD operations to allow clients to perform a http requests on a variety of routes. *For more route information check out the* **[wiki](https://github.com/adamstelle/abba/wiki)**.
+
+### Why this should exist
+With home prices constantly on the rise, home ownership is a huge financial burden on most first-time homeowners. Even for people making good wages, the prospect of adding huge monthly mortgage payments to the all-too-common  student loan or consumer debt is daunting. However, the rise of short-term rental sites like AirBnB now allow for homeowners to rent out one or more spare bedrooms and use the income to lessen their debt burden. The problem is that, until now, the income potential for AirBnBing small bedrooms has been hard to quantify.
 
-## Project description
-Created to fulfill the backend project requirement for 401 Full-Stack JavaScript.  
+That's why we created this tool: using historical data we can predict the monthly rental income potential for homeowners or prospective buyers based on a given address and some basic facts about the property.
 
 ### Instructions
-To run, fork & clone into a local repository and run 'npm install'. Run 'npm start' to start the server (with nodemon and debug on by default), and 'npm test' to run tests with mocha.
+1. Fork & clone into a local repository
+2. Run 'npm install'
+3. Run 'npm start' to start the server (with nodemon and debug on by default)
+4. To test, 'npm test' - uses [Mocha](https://github.com/mochajs/mocha) and [Chai](https://github.com/chaijs/chai) for testing, [Istanbul](https://github.com/gotwarlost/istanbul) and [Coveralls.io](https://coveralls.io/) for code coverage..
 
 ### Team Members
 
-Logan
-Adam
-Raziyeh
-Sarah
+[Logan](https://github.com/loganlsr),
+[Adam](https://github.com/adamstelle),
+[Raziyeh](https://github.com/Raziyehbazargan),
+and [Sarah](https://github.com/prungy88).
+
+This project was created as part of a [Codefellows](codefellows.com) 401 Javascript course. Special thanks to our awesome instructors.
+
+*License: [MIT](https://opensource.org/licenses/MIT)*.

lib/aws-mocks.js

@@ -0,0 +1,33 @@
+'use strict';
+
+const AWSMock = require('aws-sdk-mock');
+
+module.exports = exports = {};
+
+// Example response data from AWS
+exports.uploadMock = {
+  ETag: '"075c4d4656b2ef6c04145ae560c73e5a"',
+  Location: 'https://cf401demo.s3.amazonaws.com/cb2d73360c93555fb407a2108e812bb9',
+  key: 'cb2d73360c93555fb407a2108e812bb9',
+  Key: 'cb2d73360c93555fb407a2108e812bb9',
+  Bucket: 'cf401demo',
+};
+
+AWSMock.mock('S3', 'upload', function(params, callback){
+  if(params.ACL !== 'public-read') return callback(new Error('ACL must be "public-read"'));
+  if(params.Bucket !== 'cf401demo') return callback(new Error('Bucket must be "cf401demo"'));
+  if(!params.Key) return callback(new Error('requires Key'));
+  if(!params.Body) return callback(new Error('requires body'));
+  callback(null, exports.uploadMock);
+});
+
+exports.deleteMock = {
+  DeleteMarker: true,
+  Bucket: 'cf401demo',
+};
+
+AWSMock.mock('S3', 'deleteObject', function(params, callback){
+  if(params.Bucket !== 'cf401demo') return callback(new Error('Bucket must be "cf401demo"'));
+  if(!params.Key) return callback(new Error('requires Key'));
+  callback(null, exports.uploadMock);
+});

lib/bearer-auth-middleware.js

@@ -11,10 +11,14 @@ module.exports = function(req, res, next){
   debug();
   let authHeader = req.headers.authorization;
   if (!authHeader) return next(createError(401, 'requires auth header'));
-  let token = authHeader.split('Bearer')[1];
+  if (authHeader.split(' ')[0] !== 'Bearer') return next(createError(400, 'bad header (not bearer auth)'));
+  let token = authHeader.split('Bearer ')[1];
   if (!token) return next(createError(401, 'requires token'));
   jwt.verify(token, process.env.APP_SECRET, (err, decoded) => {
-    if(err) return next(err); // 500 error
+    if (err) {
+      if (err.name === 'JsonWebTokenError') return next(createError(401, 'Bad permissions'));
+      else return next(err); // 500 error
+    }
     User.findOne({findHash: decoded.token})
     .then( user => {
       req.user = user;

lib/error-middleware.js

@@ -1,12 +1,12 @@
 'use strict';
 
 const createError = require('http-errors');
+
 const debug = require('debug')('abba:error-middleware');
 
 module.exports = function(err, req, res, next){
   debug('error middleware');
-  console.error(err.message);
-  console.error('name', err.name);
+  console.error('err message is ', err.message);
 
   if (err.status){
     res.status(err.status).send(err.name);
@@ -20,6 +20,22 @@ module.exports = function(err, req, res, next){
     next();
     return;
   }
+
+  if (err.message === 'Unexpected field'){
+    err = createError(400, err.message);
+    res.status(err.status).send(err.name);
+    next();
+    return;
+  }
+
+  if (err.name === 'MongoError' && err.message.startsWith('E11000 duplicate')){
+  // 409 means conflict im using it for duplicate errors
+    err = createError(409, err.message);
+    res.status(err.status).send(err.name);
+    next();
+    return;
+  }
+
   err = createError(500, err.message);
   res.status(err.status).send(err.name);
   next();

lib/photo-aws-middleware.js

@@ -0,0 +1,131 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+
+const del = require('del');
+const AWS = require('aws-sdk');
+const createError = require('http-errors');
+const debug = require('debug')('abba:photo-aws-middleware');
+
+const Photo = require('../model/photo.js');
+const dataDir = `${__dirname}/../data`;
+const Profile = require('../model/profile.js');
+const Bedroom = require('../model/bedroom.js');
+const s3UploadPromise = require('../lib/promisify-upload.js');
+
+// module config
+AWS.config.setPromisesDependency(require('bluebird'));
+
+// module constants
+const s3 = new AWS.S3();
+
+module.exports = exports = {};
+
+exports.profilePhotoUpload = function(req, res, next){
+  debug('profilePhotoUpload helper');
+  if(!req.file) return next(createError(400, 'no file found'));
+  if(!req.file.path) return next(createError(500, 'no file was saved'));
+  let ext = path.extname(req.file.originalname);
+  let params = {
+    ACL: 'public-read',
+    Bucket: 'cf401demo',
+    Key: `${req.file.filename}${ext}`,
+    Body: fs.createReadStream(req.file.path),
+  };
+  let s3data;
+  Profile.findById(req.params.profID)
+  .catch(err => Promise.reject(createError(404, err.message)))
+  .then(() => s3UploadPromise(params))
+  .catch(err => Promise.reject(createError(500,  err)))
+  .then(data => {
+    s3data = data;
+    return del([`${dataDir}/*`]);
+  })
+  .then(() => {
+    let photoData = {
+      name: req.body.name,
+      caption: req.body.caption,
+      objectKey: s3data.Key,
+      imageURI: s3data.Location,
+      userID: req.user._id,
+    };
+    return new Photo(photoData).save();
+  })
+  .then(photo => {
+    res.photo = photo;
+    next();
+  })
+  .catch(err => {
+    return err.status ? next(err) : next(createError(500, err.message));
+  });
+};
+
+exports.photoDelete = function(req, res, next){
+  debug('profilephotoDelete helper');
+  Photo.findById(req.params.id)
+  .then(photo => {
+    req.photo = photo;
+    if(photo.userID.toString() !== req.user._id.toString())
+      return next(createError(401, 'User not permitted to delete this photo.'));
+    let params = {
+      Bucket: 'cf401demo',
+      Key: photo.objectKey,
+    };
+    return s3.deleteObject(params).promise();
+  })
+  .then(() => {
+    Photo.findById(req.photo._id).remove();
+  })
+  .then(() => next())
+  .catch(err => {
+    return err.status ? next(err) : next(createError(500, err.message));
+  });
+};
+
+exports.bedroomPhotoUpload = function(req, res, next){
+  debug('bedroomPhotoUpload helper');
+
+  if(!req.files) return next(createError(400, 'no file found'));
+  if(!req.files[0].path) return next(createError(500, 'no file was saved'));
+  let numFiles = req.files.length;
+  let i = 0;
+  let photoDataArray = [];
+  function uploadFiles() {
+    let ext = path.extname(req.files[i].originalname);
+    let params = {
+      ACL: 'public-read',
+      Bucket: 'cf401demo',
+      Key: `${req.files[i].filename}${ext}`,
+      Body: fs.createReadStream(req.files[i].path),
+    };
+    let s3data;
+    Bedroom.findById(req.params.bedroomID)
+    .catch(err => next(createError(404, err.message)))
+    .then(() => s3UploadPromise(params))
+    .catch(err => Promise.reject(createError(500,  err)))
+    .then(data => {
+      s3data = data;
+      let photoData = {
+        name: req.body.name,
+        caption: req.body.caption,
+        objectKey: s3data.Key,
+        imageURI: s3data.Location,
+        userID: req.user._id,
+      };
+      new Photo(photoData).save()
+      .then(photo => {
+        photoDataArray.push(photo);
+        i++;
+        if (i < numFiles) return uploadFiles();
+        req.photos = photoDataArray;
+        return del([`${dataDir}/*`])
+        .then(next());
+      });
+    })
+    .catch(err => {
+      return err.status ? next(err) : next(createError(500, err.message));
+    });
+  }
+  uploadFiles();
+};

lib/promisify-upload.js

@@ -0,0 +1,13 @@
+'use strict';
+
+const AWS = require('aws-sdk');
+const s3 = new AWS.S3();
+
+module.exports = function s3UploadPromise(params) {
+  return new Promise((resolve, reject) => {
+    s3.upload(params, (err, s3data) => {
+      if (err) return reject(err);
+      resolve(s3data);
+    });
+  });
+};