Auth

There are two ways to verify if a user is authenticated:

1. Using the passport.authenticate() method, specifying 'JWT' as the strategy in the route declaration.

Example:

app.post('/route',  passport.authenticate('jwt',  { session: false}),  function(req,  res) { });

After the passport.authenticate() method is called, the user object is accessible via req.user

2. Check if the request header has the JSON web token (JWT).

Example:

getToken = function (headers) {
    if (headers && headers.authorization) {
        var parted = headers.authorization.split(' ');
        if (parted.length === 2) {
            return parted[1];
        } else {
            return null;
        }
    } else {
        return null;
    }
};

var token = getToken(req.headers);
if (token) {
    var decoded = jwt.decode(token, config.get(mongodb.secret));
}

src/test/test.js

@@ -166,14 +166,16 @@ describe('request cities', () => {
     });
 });
 
-describe('Create new sim', () => {
+describe('Requires a simulation', () => {
     let newSimulation;
 
     beforeEach(() => {
-        Simulation.remove();
+        Simulation.remove({}, (err) => {
+            console.log('Test collection purged');
+        });
     });
 
-    it('should return a new simulation id', (done) => {
+    it('should create a new simulation', (done) => {
         chai.request(server)
             .post('/api/v1/simulation')
             .set('content-type', 'application/x-www-form-urlencoded')
@@ -184,6 +186,11 @@ describe('Create new sim', () => {
                 res.should.be.json;
                 res.body.should.have.property('id');
                 res.body.id.should.be.a('string');
+                Simulation.findById(res.body.id, (err, simulation) => {
+                    simulation.should.have.property('name');
+                    simulation.name.should.be.a('string');
+                    simulation.name.should.equal('test_entry');
+                });
                 done();
             });
     });
@@ -205,14 +212,14 @@ describe('Create new sim', () => {
                 });
         });
     });
-    it('should update an existing simulation', (done) => {
+    it('should update an existing simulation\'s location', (done) => {
         newSimulation = new Simulation();
         newSimulation.name = 'test';
         newSimulation.save((err, sim) => {
             let id = sim._id;
             chai.request(server)
                 .post(`/api/v1/simulation/${id}`)
-                .send({location: 5})
+                .send({ location: 5 })
                 .end((err, res) => {
                     res.should.have.status(200);
                     res.should.be.json;
@@ -223,6 +230,31 @@ describe('Create new sim', () => {
                         simulation.name.should.be.a('string');
                         simulation.should.have.property('location');
                         simulation.location.should.be.a('number');
+                        simulation.location.should.equal(5);
+                    });
+                    done();
+                });
+        });
+    });
+    it('should update an existing simulation\'s time', (done) => {
+        newSimulation = new Simulation();
+        newSimulation.name = 'test';
+        newSimulation.save((err, sim) => {
+            let id = sim._id;
+            chai.request(server)
+                .post(`/api/v1/simulation/${id}`)
+                .send({ time: 5 })
+                .end((err, res) => {
+                    res.should.have.status(200);
+                    res.should.be.json;
+                    res.body.should.have.property('id');
+                    res.body.id.should.be.a('string');
+                    Simulation.findById(res.body.id, (err, simulation) => {
+                        simulation.should.have.property('name');
+                        simulation.name.should.be.a('string');
+                        simulation.should.have.property('time');
+                        simulation.time.should.be.a('number');
+                        simulation.time.should.equal(5);
                     });
                     done();
                 });