app.js

var express = require('express');
var bodyParser = require('body-parser');
GLOBAL._ = require('underscore');
var fs= require('fs')
var app = express();
var MongoClient = require('mongodb').MongoClient;
var url = 'mongodb://localhost:27017/socialNetwork';


MongoClient.connect(url, function(err, db) {
    console.log("Connected correctly to server");
    GLOBAL.DB  =  db;
    app.listen(127)
    console.log(err)
    console.log(db)
});

//app.use(express.static('public'))
app.use(function(req, res, next) {
    res.header('Access-Control-Allow-Origin', '*');
    res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
    res.header('Access-Control-Allow-Headers', 'Content-Type, Authorization, Content-Length, X-Requested-With');

    // intercept OPTIONS method
    if ('OPTIONS' == req.method) {
        res.send(200);
    }
    else {
        next();
    }
});

app.use(bodyParser.json())

app.use(function (req, res, next) {
    console.log(req.originalUrl)
    if(req.originalUrl =='/register'){
        next(null);
        return;
    }
    if (!req.headers['authorization']) {
        res.status(401).send({message: "No auth"});
        return;
    }
    var parts = req.headers['authorization'].split(":")
    var nick = parts[0];
    var pwd = parts[1];
    DB.collection('users').find({nick:nick,pwd:pwd}).toArray(function(err, data){
        console.log(data)
        if (data.length>0) {
            req.currentUser =data[0];
            next(null);
            return;
        }
        res.status(401).send({message: "invalid user or password"})

    })


})

require('./controllers/user')(app)
require('./controllers/post')(app)