Auth

There are two ways to verify if a user is authenticated:

1. Using the passport.authenticate() method, specifying 'JWT' as the strategy in the route declaration.

Example:

app.post('/route',  passport.authenticate('jwt',  { session: false}),  function(req,  res) { });

After the passport.authenticate() method is called, the user object is accessible via req.user

2. Check if the request header has the JSON web token (JWT).

Example:

getToken = function (headers) {
    if (headers && headers.authorization) {
        var parted = headers.authorization.split(' ');
        if (parted.length === 2) {
            return parted[1];
        } else {
            return null;
        }
    } else {
        return null;
    }
};

var token = getToken(req.headers);
if (token) {
    var decoded = jwt.decode(token, config.get(mongodb.secret));
}

src/libs/models/simulation.js

@@ -52,7 +52,12 @@ SimulationSchema.methods.setInclusionGoals = function (g) {
     return true;
 };
 SimulationSchema.methods.setEnrollments = function (e) {
-    e = JSON.parse(e);
+    try{
+        e = JSON.parse(e);
+    } catch (err) {
+        return false;
+    }
+    let success = true;
     for(let i=0; i<e.length; i++){
         if(!(e[i] instanceof Array)){
             return false;
@@ -60,15 +65,16 @@ SimulationSchema.methods.setEnrollments = function (e) {
         if(e[i].length !== this.time){
             return false;
         }
-        for(let n of e[i])
-            if(!(n instanceof Number) && (n !== parseInt(n, 10))){
-                return false;
+        e[i].forEach((n, i, array) => {
+            if(n !== parseInt(n, 10)){
+                success = false;
             }
+        });
+
     }
-    log.debug("rolou");
-    this.enrollments = e;
+    if (success) this.enrollments = e;
 
-    return true;
+    return success;
 }
 SimulationSchema.methods.update = function (property, value) {
     let success = true;
@@ -94,8 +100,6 @@ SimulationSchema.methods.update = function (property, value) {
         case 'name':
             this.name = value;
             break;
-        default:
-            success = false;
     }
     return success;
 };