Add secure Angular route

app_api/config/passport.js

@@ -7,7 +7,12 @@ passport.use(new LocalStrategy({
     usernameField: 'email'
   },
   function(username, password, done) {
+    console.log("Finding user: " + username + ";" + password);
     User.findOne({ email: username }, function (err, user) {
+      console.log("user found");
+      console.log(user);
+      console.log("err found");
+      console.log(err);
       if (err) { return done(err); }
       // Return if user not found in database
       if (!user) {

app_api/controllers/authentication.js

@@ -1,4 +1,4 @@
-// var passport = require('passport');
+var passport = require('passport');
 var mongoose = require('mongoose');
 var User = mongoose.model('User');
 
@@ -8,7 +8,6 @@ var sendJSONresponse = function(res, status, content) {
 };
 
 module.exports.register = function(req, res) {
-  console.log("Registering user: " + req.body.email);
 
   // if(!req.body.name || !req.body.email || !req.body.password) {
   //   sendJSONresponse(res, 400, {
@@ -36,7 +35,6 @@ module.exports.register = function(req, res) {
 };
 
 module.exports.login = function(req, res) {
-  console.log("Logging in user: " + req.body.email);
 
   // if(!req.body.email || !req.body.password) {
   //   sendJSONresponse(res, 400, {

app_api/routes/index.js

@@ -2,7 +2,7 @@ var express = require('express');
 var router = express.Router();
 var jwt = require('express-jwt');
 var auth = jwt({
-  secret: process.env.JWT_SECRET,
+  secret: 'MY_SECRET',
   userProperty: 'payload'
 });
 

app_client/auth/login/login.controller.js

@@ -14,14 +14,15 @@
     };
 
     vm.onSubmit = function () {
+      console.log('Submit login form:', vm.credentials);
       authentication
-      .login(vm.credentials)
-      .error(function(err){
-        alert(err);
-      })
-      .then(function(){
-        $location.path('profile');
-      });
+        .login(vm.credentials)
+        .error(function(err){
+          alert(err);
+        })
+        .then(function(){
+          $location.path('profile');
+        });
     };
 
   }

app_client/auth/register/register.controller.js

@@ -9,12 +9,13 @@
     var vm = this;
 
     vm.credentials = {
-      name : "",
+      name : "Simon",
       email : "",
       password : ""
     };
 
     vm.onSubmit = function () {
+      console.log('Submitting registration');
       authentication
         .register(vm.credentials)
         .error(function(err){

app_client/main.js

@@ -1,37 +1,65 @@
 (function () {
 
   angular.module('meanApp', ['ngRoute']);
+    // .config(config)
+    // .run(run);
+
 
   function config ($routeProvider, $locationProvider) {
     $routeProvider
       .when('/', {
         templateUrl: 'home/home.view.html',
         controller: 'homeCtrl',
-        controllerAs: 'vm'
+        controllerAs: 'vm',
+        access: {
+          requiredLogin: false
+        }
       })
       .when('/register', {
         templateUrl: '/auth/register/register.view.html',
         controller: 'registerCtrl',
-        controllerAs: 'vm'
+        controllerAs: 'vm',
+        access: {
+          requiredLogin: false
+        }
       })
       .when('/login', {
         templateUrl: '/auth/login/login.view.html',
         controller: 'loginCtrl',
-        controllerAs: 'vm'
+        controllerAs: 'vm',
+        access: {
+          requiredLogin: false
+        }
       })
       .when('/profile', {
         templateUrl: '/profile/profile.view.html',
         controller: 'profileCtrl',
-        controllerAs: 'vm'
+        controllerAs: 'vm',
+        access: {
+          requiredLogin: false
+        }
       })
       .otherwise({redirectTo: '/'});
 
     // use the HTML5 History API
     $locationProvider.html5Mode(true);
   }
 
+  // run.$inject = ['$rootScope', '$location', '$window'];
+  function run($rootScope, $location, authentication) {
+    $rootScope.$on('$routeChangeStart', function(event, nextRoute, currentRoute) {
+      var restrictedPage = $location.path() === '/profile';
+      var loggedIn = authentication.isLoggedIn();
+      if (restrictedPage && !loggedIn) {
+        $location.path('/');
+      }
+    });
+  }
+
   angular
     .module('meanApp')
-    .config(['$routeProvider', '$locationProvider', config]);
+    .config(['$routeProvider', '$locationProvider', config])
+    .run(['$rootScope', '$location', 'authentication', run]);
 
+
 })();

app_client/profile/profile.view.html

@@ -10,11 +10,11 @@ <h1 class="form-signin-heading">Your profile</h1>
       <form  class="form-horizontal">
         <div class="form-group">
           <label class="col-sm-3 control-label">Full name</label>
-          <p class="form-control-static">Simon Holmes</p>
+          <p class="form-control-static">{{ vm.user.name }}</p>
         </div>
         <div class="form-group">
           <label class="col-sm-3 control-label">Email</label>
-          <p class="form-control-static">simon@fullstacktraining.com</p>
+          <p class="form-control-static">{{ vm.user.email }}</p>
         </div>
       </form>
 

package.json

@@ -10,10 +10,13 @@
     "cookie-parser": "~1.3.3",
     "debug": "~2.1.1",
     "express": "~4.11.1",
+    "express-jwt": "^3.0.1",
     "jade": "~1.9.1",
     "jsonwebtoken": "^5.0.4",
     "mongoose": "^4.1.2",
     "morgan": "~1.5.1",
+    "passport": "^0.2.2",
+    "passport-local": "^1.0.0",
     "serve-favicon": "~2.2.0"
   },
   "devDependencies": {