server.js

  var express = require("express");
  var dotenv = require("dotenv").config();
  var bodyParser = require("body-parser");
  var logger = require("morgan");
  var passport = require("passport");
  var LocalStrategy= require("passport-local");
  var passportLocalMongoose = require("passport-local-mongoose");
  var multer = require("multer");
  //for password hash generation 
  var crypto = require('crypto');
  var bcrypt   = require('bcrypt-nodejs');
  var GoogleStrategy = require("passport-google-oauth").OAuth2Strategy;
  var LinkedInStrategy = require("passport-linkedin-oauth2").Strategy;
  var path = require("path");
  var db = require("./db/db.js")
  var User = require("./models/user")
  var employee = require("./models/employee");
  var leavedetails = require("./models/leavedetails");
  var userrecords = require("./models/userrecords");


//Initialize Express
  var app = express();
  var PORT = process.env.PORT || 1010;

  //NodeMailer configurations//
  app.use(function (req, res, next) {
   res.header("Access-Control-Allow-Origin", "*");
   res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
   next();
  });
  //NodeMailer configurations//

//Express session
  app.use(require("express-session")({
    secret: "This is our secret session 2016 for users!",
    resave: false,
    saveUninitialized: false
  }));

//Passport
  app.use(passport.initialize());
  app.use(passport.session());
  passport.use(new LocalStrategy(User.authenticate()));
  passport.serializeUser(function(user,done) {
    done(null, user.id);
  });

  passport.deserializeUser(function(id,done) {
    User.findById(id, function (err,user) {
     done(err,user);
    });
  });

//Body-Parser
  app.use(logger("dev"));
  app.use(bodyParser.json());
  app.use(bodyParser.urlencoded({ extended: true }));
  app.use(bodyParser.text());
  app.use(bodyParser.json({ type: "application/vnd.api+json" }));

//Landing
  app.get("/", autoRedirect, function(req, res){
     res.sendFile(path.resolve(__dirname, "public", "index.html"));
  });

//Public files <this needs to stay right below app.get("/")!!!!
  app.use(express.static(__dirname + "/public"))

//GOOGLE AUTH
  app.get('/auth/google', passport.authenticate('google', { scope: ['profile', 'email'] }));

  app.get('/auth/google/callback',
    passport.authenticate('google', {
      failureRedirect: '/'
    }),
    function(req, res) {
      res.redirect('/employee');
    });

  if (process.env.GOOGLE_CLIENT_ID) passport.use(new GoogleStrategy({
    clientID: process.env.GOOGLE_CLIENT_ID,
    clientSecret: process.env.GOOGLE_CLIENT_SECRET,
    callbackURL: process.env.GOOGLE_CALLBACK_URL
  },
    function(accessToken, refreshToken, profile, done) {
      User.findOne({ "username" : profile.displayName, "email" :profile.emails[0].value }, function (err, user) {
        console.log("Current user already stored = " + user)
        if(err)
          return done(err);
        if(user) {
          return done(null, user);
        } else {
            var newUser = new User();
            newUser.username = profile.displayName;
            newUser.email = profile.emails[0].value
            newUser.userType = "employee";
            console.log("Storing new user to DB")

            newUser.save(function(err) {
              if (err)
                 throw err;
              return done(null, newUser);
            });
        }
      });
    }
  ));

//LINKED IN AUTH
  app.get('/auth/linkedin', passport.authenticate('linkedin', {
     failureRedirect: '/',
     scope: ['r_emailaddress', 'r_basicprofile']
  }));

  app.get('/auth/linkedin/callback', passport.authenticate('linkedin', {
    successRedirect: '/employee',
    failureRedirect: '/'
  }));

  passport.use(new LinkedInStrategy({
    clientID: process.env.LINKEDIN_ID,
    clientSecret: process.env.LINKEDIN_SECRET,
    callbackURL: process.env.LINKEDIN_CALLBACK,
    state: true
  },
    function(accessToken, refreshToken, profile, done) {
    console.log(profile.photos[0].value)
      User.findOne({ "username": profile.name.givenName, "email": profile.emailAddress }, function (err, user) {
        console.log("Current user already stored = " + user)
        if(err)
          return done(err);
        if(user) {
          return done(null, user);
        } else {
            var newUser = new User();
            newUser.username = profile.name.givenName;
            newUser.email = profile.emailAddress;
            newUser.userType = "employee";
            newUser.picture = profile.photos[0].value;
            console.log("Storing new user to DB")

            newUser.save(function(err) {
              if (err)
                throw err;
              return done(null, newUser);
            });
        }
      });
  }));

//LOCAL AUTH
  app.post("/register", function(req, res) {

    User.register(new User({
      username: req.body.username,
      email: req.body.email,
      userType: req.body.userType,
      // picture: "https://raw.githubusercontent.com/clsavino/react-shift-scheduler/master/public/assets/images/logo.png",
      groupId : "",
      designationId:"",
      active:0
    }),   
    req.body.password, function(err, user) {
       if(err){
        res.sendFile(path.resolve(__dirname, "public", "error.html"));
        console.log(err);
       } else {     
          passport.authenticate("local")(req, res, function() {
            console.log(user);
          //Add new user to the employee collection(additional mods)
          employee.create({
                firstName: req.body.username,
                lastName: req.body.username,
                email: req.body.email,
                user_id : user._id,
                active:0
              }, function(req, res) {           
          });  
          //Add users details to the leave details collection 
          leavedetails.create({
                user_id : user._id,
             }, function(req, res) {         
          });  
          //Add details to user records collection
          userrecords.create({
                user_id : user._id,
             }, function(req, res) {         
          });  
           res.redirect("/");   
       });
      }
    })
  });

  app.post('/login', function(req, res, next) {
    passport.authenticate('local', function(err, user, info) {
      failureFlash: true // optional, see text as well
      if (err) { 
        res.redirect("/");
        return next(err) 
      }
      if (!user) {
        // *** Display message without using flash option
        return res.redirect("/");
         // return res.sendFile(path.resolve(__dirname, "public", "notauth.html"))
        }
      req.logIn(user, function(err) {
        if (err) { return next(err); }
        reRoute(req,res);
      });
    })(req, res, next);
  });

  //change password (passport-local-mongoose)
  /*app.post('/manager/reset-password', function(req, res, next){
    var userid = req.body.userid;
    var oldpassword = req.body.oldpassword;
    var newpassword = req.body.newpassword;
    var confirmpassword = req.body.confirmpassword;
    var storehash;
    var storesalt;

    if (newpassword !== confirmpassword) {
        throw new Error('password and confirm password do not match');
     }

    User.findById(userid).then(function(sanitizedUser){
    if (sanitizedUser){
        sanitizedUser.setPassword(newpassword, function(){
            sanitizedUser.save();
            // res.status(200).json({message: 'password reset successful'});
            res.redirect("/manager/reset-password");
        });
    } else {
        res.status(500).json({message: 'This user does not exist'});
    }
    },function(err){
        console.error(err);
    })
  });*/
 
  /*app.post("/login", passport.authenticate("local", {
    // successRedirect: "/manager",
    failureRedirect: "/"
  }), function(req, res) {
      reRoute(req,res);
  });*/

//Functions for Auth
  function isLoggedIn(req,res,next){
    if(req.isAuthenticated()){
      return next();
    }
    res.redirect("/");
  }

  function reRoute(req,res){
     if (req.user.userType === "manager" || req.user.userType === "su") {
      res.redirect("/manager");
    } else {
      res.redirect("/employee");
    }
  }

  function autoRedirect(req,res,next){
    if(req.isAuthenticated()){
      reRoute(req,res);
    } else {
      res.sendFile(path.resolve(__dirname, "public", "index.html"));
    }
  }

 app.get('/user', function(req,res){
    res.send(req.user)
  });

//Restricting routes
  app.get("/login", function(req,res) {
    res.sendFile(path.resolve(__dirname, "public", "index.html"))
  });

  app.get("/register", function(req,res) {
    res.sendFile(path.resolve(__dirname, "public", "index.html"))
  });

  app.get("/manager", isLoggedIn, function(req,res) {
    if (req.user.userType === "manager" || req.user.userType === "su") {
        res.sendFile(path.resolve(__dirname, "public", "index.html"))
    } else {
        res.sendFile(path.resolve(__dirname, "public", "notauth.html"))
    }
  });

  app.get("/manager/*", isLoggedIn, function(req,res) {
    if (req.user.userType === "manager" || req.user.userType === "su") {
        res.sendFile(path.resolve(__dirname, "public", "index.html"))
    } else {
        res.sendFile(path.resolve(__dirname, "public", "notauth.html"))
    }
  });

  app.get("/employee", isLoggedIn, function(req,res) {
    if (req.user.userType === "employee") {
      res.sendFile(path.resolve(__dirname, "public", "index.html"))
    } else {
      res.redirect("/manager");
    }
  });

  app.get("/employee/*", isLoggedIn, function(req,res) {
    if (req.user.userType === "employee") {
      res.sendFile(path.resolve(__dirname, "public", "index.html"))
    } else {
      res.redirect("/manager");
    }
  });
   
  app.get("/logout", function(req, res) {
    req.logout();
    res.redirect("/");
  });

  var routes = require('./controllers/db_controller.js');
  app.use('/', isLoggedIn, routes);

  app.get("*", function(req,res) {
    res.sendFile(path.resolve(__dirname, "public", "404.html"))
  })

//Port Listener
  app.listen(PORT, function() {
    console.log("App listening on PORT: " + PORT);
  });