Order route & factory

browser/js/common/factories/OrderFactory.js

@@ -0,0 +1,22 @@
+app.factory('OrderFactory', function ( $http ) {
+
+  var OrderFactory = {};
+
+  OrderFactory.fetchAll = function() {
+
+    return $http.get('/api/orders')
+      .then( function( res ) { 
+        console.log( "OUTPUT!!!!!!!!!!!!!!!!!", res.data );
+        return res.data;
+      })
+      .then( null, function( err ) {
+
+        console.log( err );
+
+      });
+
+  }
+
+  return OrderFactory;
+
+});

server/app/routes/index.js

@@ -4,6 +4,7 @@ module.exports = router;
 
 router.use('/members', require('./members'));
 router.use('/cart', require('./cart'));
+router.use('/orders', require('./order'));
 router.use('/product', require('./products'));
 router.use('/user', require('./user'));
 router.use('/review', require('./review'));

server/app/routes/order/index.js

@@ -0,0 +1,61 @@
+var router = require('express').Router();
+module.exports = router;
+var mongoose = require('mongoose');
+
+var Order = mongoose.model( 'Order' );
+
+var adminOnly = function( req, res, next ) {
+
+  if ( req.user && req.user.isAdmin ) {
+    next()
+  } else {
+    res.status( 401 ).end();
+  }
+
+}
+
+router.param('id', function ( req, res, next, id ) {
+
+  if ( !req.user ) return res.status( 401 ).end();
+
+  Order.findById( id )
+  .then( function( order ) {
+
+    if ( order === null ) return res.status( 404 ).end();
+
+    // you cannot look up another user's order via the order API
+    if ( order.user._id.toString() === req.user._id.toString() || req.user.isAdmin ) {
+      req.order = order;
+      next();
+    } else {
+      res.status( 401 ).end()
+    }
+
+  })
+  .then( null, next );
+
+});
+
+router.get('/', adminOnly, function ( req, res, next ) {
+
+  Order.find().populate('lineItems paymentInfo').exec()
+  .then( function( orders ){
+    res.status(200).json(orders);
+  })
+  .then( null, next );
+
+});
+
+router.get('/:id', function ( req, res ) {
+  res.status(200).json( req.order );
+});
+
+router.delete('/:id', adminOnly, function ( req, res, next ) {
+
+  req.order.remove()
+  .then( function() {
+    res.status(204).end();
+  })
+  .then( null, next );
+
+});

tests/browser/factories/order-factory.js

@@ -0,0 +1,68 @@
+// this module will prevent ui-router from working
+mod = angular.module('uiRouterNoop', [])
+    .service('$state', function() { return {} })
+    .service('$urlRouter', function() { return {} })
+
+describe('OrderFactory', function() {
+
+  beforeEach(module('FullstackGeneratedApp'));
+  beforeEach(module('uiRouterNoop'));
+
+  var $httpBackend;
+  var $rootScope;
+  beforeEach('Inject tools', inject( function (_$httpBackend_, _$rootScope_) {
+    $httpBackend = _$httpBackend_;
+    $rootScope = _$rootScope_;
+  }));
+
+  var OrderFactory;
+  beforeEach('Inject factory', inject( function ( _OrderFactory_ ) {
+    OrderFactory = _OrderFactory_;
+  }));
+
+  it('should be an object', function () {
+    expect( OrderFactory ).to.be.an('object');
+  });
+
+  describe('API endpoints', function () {
+
+    afterEach( function () {
+      $httpBackend.verifyNoOutstandingExpectation();
+      $httpBackend.verifyNoOutstandingRequest();
+    });
+
+    it('should GET /api/orders when calling fetchAll', function(done) {
+
+      $httpBackend.expectGET('/api/orders');
+      $httpBackend.whenGET('/api/orders').respond([{ works: true }]);
+
+      OrderFactory.fetchAll().then( function( orders ) {
+
+        expect( orders[0].works ).to.be.true;
+        done();
+
+      });
+
+      $httpBackend.flush();
+
+    });
+
+    it('should return undefined if it\'s unauthorized', function(done) {
+
+      $httpBackend.expectGET('/api/orders');
+      $httpBackend.whenGET('/api/orders').respond( 401, {} );
+
+      OrderFactory.fetchAll().then( function( orders ) {
+
+        expect( orders ).to.be.undefined;
+        done();
+
+      });
+
+      $httpBackend.flush();
+
+    });
+
+  });
+
+});

tests/server/routes/order-route-test.js

@@ -0,0 +1,48 @@
+// Instantiate all models
+var mongoose = require('mongoose');
+require('../../../server/db/models');
+var User = mongoose.model('User');
+var Order = mongoose.model('Order');
+
+var expect = require('chai').expect;
+
+var dbURI = 'mongodb://localhost:27017/testingDB';
+var clearDB = require('mocha-mongoose')(dbURI);
+
+var supertest = require('supertest');
+var app = require('../../../server/app');
+
+describe('Order Route', function () {
+
+  before('Establish DB connection', function (done) {
+    if (mongoose.connection.db) return done();
+    mongoose.connect(dbURI, done);
+  });
+
+  after('Clear test database', function (done) {
+    clearDB(done);
+  });
+
+  describe( 'authorization', function () {
+
+    var agent;
+    beforeEach('create supertest agents', function() {
+      agent = supertest.agent(app);
+    });
+
+    it('protects the get all route from non-admins', function (done) {
+
+      agent.get('/api/orders')
+        .expect( 401 )
+        .end( function( err, res ) {
+          if ( err ) return done(err);
+
+          done();
+
+        });
+
+    });
+
+  });
+
+});