routes.js

'use strict';

module.exports = function(app, passport) {

  var users = require('./controllers/users');

  // Example API call with isLoggedIn middleware
  app.get('/api/users', isLoggedIn, users.all);

  // Sign up route
  app.post('/api/signup', passport.authenticate('local-signup', {
    successRedirect : '/api/signup/success',
    failureRedirect : '/api/signup/error',
    failureFlash : true
  }));
  app.get('/api/signup/error', function(req, res) {
    res.status(401).send({error: req.flash('signupMessage')});
  });
  app.get('/api/signup/success', function(req, res) {
    res.status(200).send({user: req.user});
  });

  // Log in route
  app.post('/api/login', passport.authenticate('local-login', {
    successRedirect : '/api/login/success',
    failureRedirect : '/api/login/error',
    failureFlash : true
  }));
  app.get('/api/login/error', function(req, res) {
    res.status(401).send({error: req.flash('loginMessage')});
  });
  app.get('/api/login/success', function(req, res) {
    res.status(200).send({user: req.user});
  });

};

// route middleware to make sure a user is logged in
function isLoggedIn(req, res, next) {
  // if user is authenticated in the session, carry on
  if (req.isAuthenticated())
    return next();

  // if they aren't redirect them to the home page
  res.redirect('/');
}