app.js

var express 				= require("express"),
	mongoose 				= require("mongoose"),
	passport				= require("passport"),
	bodyParser				= require("body-parser"),
	User 					= require("./models/user"),
	LocalStrategy 			= require("passport-local"),
	passportLocalMongoose 	= require("passport-local-mongoose");

mongoose.set('useNewUrlParser', true);
mongoose.set('useFindAndModify', false);
mongoose.set('useCreateIndex', true);
mongoose.set('useUnifiedTopology', true);
mongoose.connect("mongodb://localhost/auth_demo_app");

var app = express();
app.set("view engine", "ejs");
app.use(bodyParser.urlencoded({extended: true}));
app.use(require("express-session")({
	secret: "webdeveloper",
	resave: false,
	saveUninitialized: false
}));
app.use(passport.initialize());
app.use(passport.session());

passport.use(new LocalStrategy(User.authenticate()));
passport.serializeUser(User.serializeUser());
passport.deserializeUser(User.deserializeUser());


//=======================================================
// ROUTES
//=======================================================

// INDEX ROUTE
app.get("/", function(req, res){
	res.render("home");
});

// INDEX ROUTE
app.get("/secret", isLoggedIn, function(req, res){
	res.render("secret");
;})



// AUTH ROUTES ==================================

// Show sign up form
app.get("/register", function(req, res){
	res.render("register");
});
// Handling user sign up
app.post("/register", function(req, res){
	req.body.username
	req.body.password
	User.register(new User({username: req.body.username}), req.body.password, function(err, user){
		if(err){
			console.log(err);
			return res.render("register");
		}
		passport.authenticate("local")(req, res, function(){
			res.redirect("/secret");
		});
	});
});

// LOGIN ROUTES
// Render login form
app.get("/login", function(req, res){
	res.render("login");
});

app.post("/login", passport.authenticate("local", {
	successRedirect: "/secret",
	failureRedirect: "/login"
})	, function(req, res){
});

app.get("/logout", function(req, res){
	req.logout();
	res.redirect("/");
});

function isLoggedIn(req, res, next){
	if(req.isAuthenticated()){
	   return next();
	   }
	res.redirect("/login");
}

app.listen(3000, function(){
	console.log("Server listening on port 3000");
});