server.js

var fs = require('fs');
var https = require('https');
var Moonboots = require('moonboots-express');
var express = require('express');
var helmet = require('helmet');
var xssFilter = require('x-xss-protection');
var frameguard = require('frameguard');
var config = require('getconfig');
var templatizer = require('templatizer');
var async = require('async');
var LDAP = require('ldapjs');

String.prototype.capitalize = function() {
    return this.charAt(0).toUpperCase() + this.slice(1);
};

var app = express();
var bodyParser = require('body-parser');
var compression = require('compression');
var serveStatic = require('serve-static');

app.use(bodyParser.json());
app.use(bodyParser.urlencoded({ extended: false }));
app.use(compression());
app.use(serveStatic(__dirname + '/public'));
if (!config.isDev) {
    app.use(frameguard());
}
app.use(xssFilter({ setOnOldIE: true }));
app.use(helmet.noSniff());

var webappManifest = fs.readFileSync('./public/x-manifest.webapp');

app.set('views', __dirname + '/views');
app.set('view engine', 'jade');

app.get('/login', function (req, res) {
    res.render("login", {"config": config.server});
});

app.get('/logout', function (req, res) {
    res.render('logout');
});

app.get('/config.js', function (req, res) {
    res.type('application/javascript');
    res.send("window.SERVER_CONFIG = " + JSON.stringify(config.server) + ";");
});

app.get('/sounds/*', function (req, res) {
    res.type('audio/wav');
    res.redirect("./public" + req.baseUrl);
});

function connectLDAP(req, cb) {

    if (!config.ldap || !config.ldap.address || !config.ldap.base) {
        cb(true);
        return;
    }

    var ldapDN = 'uid=' + req.body.uid + ',' + config.ldap.base;
    var ldapPW = req.body.password;

    var client = LDAP.createClient({ url: 'ldap://' + config.ldap.address });

    function closeCb(client) {
      client.unbind();
      console.log("LDAP: Disconnected");
    }

    client.bind(ldapDN, ldapPW, function(err) {
      if (err) {
        console.log("LDAP: Can not connect to server with " + ldapDN);
        closeCb(client);
        cb(true);
        return;
      }

      console.log("LDAP: Connected on ldap://" + config.ldap.address + " with " + ldapDN);

      if (req.body.uid == config.server.admin && config.ldap.user && config.ldap.password) {
        console.log("LDAP: " + ldapDN + " is XMPP admin");

        client.bind(config.ldap.user, config.ldap.password, function(err) {
          if (err) {
            console.log("LDAP: Can not connect to server with " + config.ldap.user);
            closeCb(client);
            cb(true);
            return;
          }

          console.log("LDAP: Connected on ldap://" + config.ldap.address + " with " + config.ldap.user);
          cb(false, client, closeCb);
        });
        return;
      }
      cb(false, client, closeCb);

    });
}

app.post('/ldap/user/:id', function(req, res) {
    var dn = 'uid=' + req.params.id.toLowerCase() + ',' + config.ldap.base;
    console.log('LDAP: Save user informations (' + dn + ')');

    connectLDAP(req, function (err, client, closeCb) {
        if (err === false) {

            var changes = [];
            if (req.body.cn !== undefined) changes.push(new LDAP.Change({ operation: 'replace', modification: {cn: req.body.cn}}));
            if (req.body.sn !== undefined) changes.push(new LDAP.Change({ operation: 'replace',  modification: {sn: req.body.sn}}));
            if (req.body.givenName !== undefined) changes.push(new LDAP.Change({ operation: 'replace',  modification: {givenName: req.body.givenName}}));
            if (req.body.displayName !== undefined) changes.push(new LDAP.Change({ operation: 'replace',  modification: {displayName: req.body.displayName}}));
            if (req.body.mail !== undefined) changes.push(new LDAP.Change({ operation: 'replace',  modification: {mail: req.body.mail}}));

            client.modify(dn, changes, function (err) {
                if (err) {
                    console.log('LDAP: Impossible to change user informations (' + dn + ')');
                    console.log(err);
                    res.type('application/javascript');
                    res.send(false);

                    closeCb(client);
                    return;
                }

                console.log('LDAP: User informations saved (' + dn + ')');
                res.type('application/javascript');
                res.send(true);

                closeCb(client);
            });
        }
    });

});

app.post('/ldap/user/:id/password', function(req, res) {
    var dn = 'uid=' + req.params.id.toLowerCase() + ',' + config.ldap.base;
    console.log('LDAP: Change user password (' + dn + ')');

    connectLDAP(req, function (err, client, closeCb) {
        if (err === false) {

            var changes = [new LDAP.Change({ operation: 'replace', modification: {userPassword: req.body.newPassword}})];

            client.modify(dn, changes, function (err) {
                if (err) {
                    console.log('LDAP: Impossible to change user password (' + dn + ')');
                    console.log(err);
                    res.type('application/javascript');
                    res.send(false);

                    closeCb(client);
                    return;
                }

                console.log('LDAP: User password changed (' + dn + ')');
                res.type('application/javascript');
                res.send(true);

                closeCb(client);
            });
        }
    });
});

app.post('/ldap/users', function (req, res) {
    console.log('LDAP: Get users list');

    connectLDAP(req, function (err, client, closeCb) {
        if (err === false) {
            var filter = config.ldap.filter;
            if (req.body.uid != config.server.admin) {
                var uid = 'uid=' + req.body.uid.toLowerCase();
                filter = '(&(' + filter + ')(' + uid + '))';
            }
            var opts = {
              filter: filter,
              scope: 'sub',
              attributes: ['uid', 'cn', 'sn', 'givenName', 'displayName', 'mail', 'objectClass'],
              attrsOnly: true
            };
            client.search(config.ldap.base, opts, function(err, data) {
                var users = [];
                if (!err) {
                    data.on('searchEntry', function(entry) {
                      var user = {};
                      entry.attributes.forEach(function(attr) {
                        user[attr.type] = attr.vals;
                        if (attr.type !== 'objectClass') {
                          user[attr.type] = user[attr.type][0];
                        }
                      });
                      users.push(user);
                    });
                    data.on('end', function(result) {
                      res.type('application/javascript');
                      res.send(JSON.stringify(users));

                      console.log('LDAP: Users list sent');
                      closeCb(client);
                    });
                }
                else {
                    console.log(err);
                }
            });
        }
    });

});

app.post('/ldap/users/add', function (req, res) {
    console.log('LDAP: Add a new user');

    connectLDAP(req, function (err, client, closeCb) {
        if (err === false || !req.body.newUid) {
            var dn = 'uid=' + req.body.newUid.toLowerCase() + ',' + config.ldap.base;
            var entry = {
                objectClass: [ 'organizationalPerson', 'person', 'inetOrgPerson'],
                cn: req.body.newUid.capitalize(),
                sn: req.body.newUid.capitalize(),
                givenName: req.body.newUid.capitalize(),
                displayName: req.body.newUid.capitalize(),
                userPassword: req.body.newUid.toLowerCase()
            };
            client.add(dn, entry, function (err) {
                if (err) {
                    console.log('LDAP: Impossible to add a new user (' + dn + ')');
                    console.log(err);
                    res.type('application/javascript');
                    res.send(false);

                    closeCb(client);
                    return;
                }

                if (config.ldap.group) {
                    var changes = [
                      { operation: 'add',
                       modification: {member: dn }
                      }
                    ];
                    client.modify(config.ldap.group, changes, function (err) {
                        if (err) console.log(err);

                        console.log('LDAP: New user added (' + dn + ')');
                        res.type('application/javascript');
                        res.send(true);

                        closeCb(client);
                    });
                }

            });
        }
    });

});

app.post('/ldap/users/delete', function (req, res) {
    console.log('LDAP: Remove a user');

    connectLDAP(req, function (err, client, closeCb) {
        if (err === false || !req.body.removeUid) {
            var dn = 'uid=' + req.body.removeUid.toLowerCase() + ',' + config.ldap.base;
            client.del(dn, function (err) {
                if (err) {
                    console.log('LDAP: Impossible to remove this user (' + dn + ')');
                    console.log(err);
                    res.type('application/javascript');
                    res.send(false);

                    closeCb(client);
                    return;
                }

                if (config.ldap.group) {
                    var changes = [
                      { operation: 'delete',
                       modification: {member: dn }
                      }
                    ];
                    client.modify(config.ldap.group, changes, function (err) {
                        if (err) console.log(err);

                        console.log('LDAP: User removed (' + dn + ')');
                        res.type('application/javascript');
                        res.send(true);

                        closeCb(client);
                    });
                }

            });
        }
    });

});

app.get('/oauth/login', function (req, res) {
    res.redirect('https://apps.andyet.com/oauth/authorize?client_id=' + config.andyetAuth.id + '&response_type=token');
});

app.get('/oauth/callback', function (req, res) {
    res.render('oauthLogin');
});

app.get('/manifest.webapp', function (req, res, next) {
    res.set('Content-Type', 'application/x-web-app-manifest+json');
    res.send(webappManifest);
});

app.use(function handleError(err, req, res, next) {
    var errorResult = {message: 'Something bad happened :('};

    if (config.isDev) {
        if (err instanceof Error) {
            if (err.message) {
                errorResult.message = err.message;
            }

            if (err.stack) {
                errorResult.stack = err.stack;
            }
        }
    }

    res.status(500);
    res.render('error', errorResult);
});

var clientApp = new Moonboots({
    moonboots: {
        main: __dirname + '/clientapp/app.js',
        developmentMode: config.isDev,
        libraries: [
            __dirname + '/clientapp/libraries/jquery.js',
            __dirname + '/clientapp/libraries/ui.js',
            __dirname + '/clientapp/libraries/resampler.js',
            __dirname + '/clientapp/libraries/IndexedDBShim.min.js',
            __dirname + '/clientapp/libraries/sugar-1.2.1-dates.js',
            __dirname + '/clientapp/libraries/jquery.oembed.js',
            __dirname + '/clientapp/libraries/jquery-impromptu.js'
        ],
        browserify: {
            debug: false
        },
        stylesheets: [
            __dirname + '/public/css/client.css',
            __dirname + '/public/css/jquery.oembed.css',
            __dirname + '/public/css/jquery-impromptu.css'
        ],
        beforeBuildJS: function () {
            if (config.isDev) {
                var clientFolder = __dirname + '/clientapp';
                templatizer(clientFolder + '/templates', clientFolder + '/templates.js');
            }
        }
    },
    server: app,
    cachePeriod: 0,
    render: function (req, res) {
        res.render('index');
    }
});

clientApp.on('ready', function () {
    console.log('Client app ready');
    var pkginfo = JSON.parse(fs.readFileSync(__dirname + '/package.json'));

    var manifestTemplate = fs.readFileSync(__dirname + '/clientapp/templates/misc/manifest.cache', 'utf-8');
    var cacheManifest = manifestTemplate
          .replace('#{version}', pkginfo.version + config.isDev ? ' ' + Date.now() : '')
          .replace('#{jsFileName}', clientApp.moonboots.jsFileName())
          .replace('#{cssFileName}', clientApp.moonboots.cssFileName());
    console.log('Cache manifest generated');


    app.get('/manifest.cache', function (req, res, next) {
        res.set('Content-Type', 'text/cache-manifest');
        res.set('Cache-Control', 'no-cache, private, no-store, must-revalidate, max-stale=0, post-check=0, pre-check=0');
        res.send(cacheManifest);
    });

    // serves app on every other url
    app.get('*', function (req, res) {
        res.render(clientApp.moonboots.htmlSource());
    });
});

app.listen(config.http.port, config.http.host, function () {
    console.log('Kaiwa running...');
    if (config.http.host) {
      console.log('Hostname:' + config.http.host);
    }
    console.log('Port:' + config.http.port);
});