var fs = require('fs-plus');
var express = require('express');
var session = require('express-session');
var path = require('path');
var favicon = require('serve-favicon');
var logger = require('morgan');
var bodyParser = require('body-parser');
var stylus = require('stylus');
var nib = require('nib');
var settings = require('./settings');
var NEWSLYNX_CONFIG = require('./settings').config;

var appRoutes = require('./routes');

var debug = require('tracer').console();
var compression = require('compression')

var LevelStore = require('level-session-store')(session);

var app = express();

// view engine setup
app.set('views', path.join(__dirname, 'views'));
app.set('view engine', 'jade');

// Environment
app.set('env', settings.env);

app.set('trust proxy', ['loopback', 'linklocal', 'uniquelocal', '127.0.0.1']) // specify multiple subnets as an array

// middleware
app.use(favicon( path.join(__dirname, '/public/images/favicon.ico')));
app.use(logger('dev'));
app.use(bodyParser.json());
app.use(bodyParser.urlencoded());

var sessInfo = {
	store: new LevelStore(path.join(__dirname, 'db')),
	secret: NEWSLYNX_CONFIG.app_secret_key,
	resave: true,
	saveUninitialized: true,
	unset: 'destroy',
	cookie: {secure: false}
};

// If we are running in a secure environment
if (app.get('env') === 'https' || NEWSLYNX_CONFIG.https === true) {
	app.set('trust proxy', 1) // Trust the first proxy
	sessInfo.cookie.secure = true
}

app.use(session(sessInfo));

app.use(compression());

// The client shouldn't cache these pages
app.use(function (req, res, next) {
  res.setHeader('Cache-Control', 'No-Cache');
  next();
});

app.use(express.static(path.join(__dirname, 'public')));

// If not logged in or accessing a public file listed in one of the directories below, go to the login page
var non_auth_routes = ['setup', 'login', 'auth', 'about', 'images', 'stylesheets', 'data', 'javascripts'];
app.use(function(req, res, next){
			
	var parts = req.path.split('/'),
	    page = parts[1];

	if ( non_auth_routes.indexOf(page) !== -1 ) {

		if ((page === 'login' && req.session.apikey) || (page === 'setup' && NEWSLYNX_CONFIG.api_url)){
			res.redirect('/');
		// Check for api url location
		// This is most applicable for the Electron app where this value is configurable 
		} else if (page !== 'setup' && !NEWSLYNX_CONFIG.api_url){
			res.redirect('/setup');
		} else {
			next();
		}

	} else {

		if (req.session.apikey) {
			next();
		} else {
			var url_path = req.path,
					url;

			req.session.redirect_page = url_path
			// Persist this request after login for bookmarklet route
			if (url_path == '/articles/lookup'){
				url = req.query.url;
				req.session.redirect_url = url_path + '?url=' + url;
			}
			res.redirect('/login');
		}

	}
})

appRoutes.forEach(function(appRoute){
	app.use(appRoute);
})

/// catch 404 and forwarding to error handler
app.use(function(req, res, next) {
    var err = new Error(err);
    err.status = 404;
    next(err);
});

settings.apply(app);

module.exports = app;