// # API routes var express = require('express'), api = require('../api'), apiRoutes; apiRoutes = function apiRoutes(middleware) { var router = express.Router(), // Authentication for public endpoints authenticatePublic = [ middleware.api.authenticateClient, middleware.api.authenticateUser, middleware.api.requiresAuthorizedUserPublicAPI ], // Require user for private endpoints authenticatePrivate = [ middleware.api.authenticateClient, middleware.api.authenticateUser, middleware.api.requiresAuthorizedUser ]; // alias delete with del router.del = router.delete; // ## Configuration router.get('/configuration', authenticatePrivate, api.http(api.configuration.browse)); router.get('/configuration/:key', authenticatePrivate, api.http(api.configuration.read)); // ## Posts router.get('/posts', authenticatePublic, api.http(api.posts.browse)); router.post('/posts', authenticatePrivate, api.http(api.posts.add)); router.get('/posts/:id', authenticatePublic, api.http(api.posts.read)); router.get('/posts/slug/:slug', authenticatePublic, api.http(api.posts.read)); router.put('/posts/:id', authenticatePrivate, api.http(api.posts.edit)); router.del('/posts/:id', authenticatePrivate, api.http(api.posts.destroy)); // ## Settings router.get('/settings', authenticatePrivate, api.http(api.settings.browse)); router.get('/settings/:key', authenticatePrivate, api.http(api.settings.read)); router.put('/settings', authenticatePrivate, api.http(api.settings.edit)); // ## Users router.get('/users', authenticatePublic, api.http(api.users.browse)); router.get('/users/:id', authenticatePublic, api.http(api.users.read)); router.get('/users/slug/:slug', authenticatePublic, api.http(api.users.read)); router.get('/users/email/:email', authenticatePublic, api.http(api.users.read)); router.put('/users/password', authenticatePrivate, api.http(api.users.changePassword)); router.put('/users/owner', authenticatePrivate, api.http(api.users.transferOwnership)); router.put('/users/:id', authenticatePrivate, api.http(api.users.edit)); router.post('/users', authenticatePrivate, api.http(api.users.add)); router.del('/users/:id', authenticatePrivate, api.http(api.users.destroy)); // ## Tags router.get('/tags', authenticatePublic, api.http(api.tags.browse)); router.get('/tags/:id', authenticatePublic, api.http(api.tags.read)); router.get('/tags/slug/:slug', authenticatePublic, api.http(api.tags.read)); router.post('/tags', authenticatePrivate, api.http(api.tags.add)); router.put('/tags/:id', authenticatePrivate, api.http(api.tags.edit)); router.del('/tags/:id', authenticatePrivate, api.http(api.tags.destroy)); // ## Roles router.get('/roles/', authenticatePrivate, api.http(api.roles.browse)); // ## Clients router.get('/clients/slug/:slug', api.http(api.clients.read)); // ## Slugs router.get('/slugs/:type/:name', authenticatePrivate, api.http(api.slugs.generate)); // ## Themes router.get('/themes', authenticatePrivate, api.http(api.themes.browse)); router.put('/themes/:name', authenticatePrivate, api.http(api.themes.edit)); // ## Notifications router.get('/notifications', authenticatePrivate, api.http(api.notifications.browse)); router.post('/notifications', authenticatePrivate, api.http(api.notifications.add)); router.del('/notifications/:id', authenticatePrivate, api.http(api.notifications.destroy)); // ## DB router.get('/db', authenticatePrivate, api.http(api.db.exportContent)); router.post('/db', authenticatePrivate, middleware.busboy, api.http(api.db.importContent)); router.del('/db', authenticatePrivate, api.http(api.db.deleteAllContent)); // ## Mail router.post('/mail', authenticatePrivate, api.http(api.mail.send)); router.post('/mail/test', authenticatePrivate, api.http(api.mail.sendTest)); // ## Authentication router.post('/authentication/passwordreset', middleware.spamPrevention.forgotten, api.http(api.authentication.generateResetToken) ); router.put('/authentication/passwordreset', api.http(api.authentication.resetPassword)); router.post('/authentication/invitation', api.http(api.authentication.acceptInvitation)); router.get('/authentication/invitation', api.http(api.authentication.isInvitation)); router.post('/authentication/setup', api.http(api.authentication.setup)); router.put('/authentication/setup', api.http(api.authentication.updateSetup)); router.get('/authentication/setup', api.http(api.authentication.isSetup)); router.post('/authentication/token', middleware.spamPrevention.signin, middleware.api.authenticateClient, middleware.oauth.generateAccessToken ); router.post('/authentication/revoke', authenticatePrivate, api.http(api.authentication.revoke)); // ## Uploads router.post('/uploads', authenticatePrivate, middleware.busboy, api.http(api.uploads.add)); // API Router middleware router.use(middleware.api.errorHandler); return router; }; module.exports = apiRoutes;