Auth

There are two ways to verify if a user is authenticated:

1. Using the passport.authenticate() method, specifying 'JWT' as the strategy in the route declaration.

Example:

app.post('/route',  passport.authenticate('jwt',  { session: false}),  function(req,  res) { });

After the passport.authenticate() method is called, the user object is accessible via req.user

2. Check if the request header has the JSON web token (JWT).

Example:

getToken = function (headers) {
    if (headers && headers.authorization) {
        var parted = headers.authorization.split(' ');
        if (parted.length === 2) {
            return parted[1];
        } else {
            return null;
        }
    } else {
        return null;
    }
};

var token = getToken(req.headers);
if (token) {
    var decoded = jwt.decode(token, config.get(mongodb.secret));
}

src/test/test.js

@@ -194,6 +194,23 @@ describe('Requires a simulation', () => {
                 done();
             });
     });
+    it('should not create a nameless simulation', (done) => {
+        chai.request(server)
+            .post('/api/v1/simulation')
+            .set('content-type', 'application/x-www-form-urlencoded')
+            .set('x-apicache-bypass', 'true')
+            .end((err, res) => {
+                res.should.have.status(200);
+                res.should.be.json;
+                res.body.should.not.have.property('id');
+                res.body.should.have.property('success');
+                res.body.success.should.equal(false);
+                Simulation.findById(res.body.id, (err, simulation) => {
+                    expect(simulation).to.not.exist;
+                });
+                done();
+            });
+    });
     it('should find an existing simulation', (done) => {
         newSimulation = new Simulation();
         newSimulation.name = 'test';
@@ -212,6 +229,19 @@ describe('Requires a simulation', () => {
                 });
         });
     });
+    it('should not find an unexisting simulation', (done) => {
+        newSimulation = new Simulation();
+        let id = newSimulation._id;
+        chai.request(server)
+            .get(`/api/v1/simulation/${id}`)
+            .end((err, res) => {
+                res.should.have.status(200);
+                res.should.be.json;
+                res.body.should.have.property('success');
+                res.body.success.should.equal(false);
+                done();
+            });
+    });
     it('should update an existing simulation\'s location', (done) => {
         newSimulation = new Simulation();
         newSimulation.name = 'test';