display messages

2 files changed, 21 insertions, 1 deletions

diff --git a/lib/bucky.js b/lib/bucky.js
index c003103..bfc4b6f 100644
--- a/lib/bucky.js
+++ b/lib/bucky.js
@@ -175,4 +175,15 @@ var bucky = module.exports = {
       next()
     })
   },
+  ensureMessage: function(req, res, next){
+    db.getMessage(req.params.id).then(function(message){
+      var username = req.user.get('username')
+      if (username !== message.get('recipient') && username !== message.get('sender')) {
+        res.sendStatus(404)
+        return
+      }
+      res.message = message
+      next()
+    })
+  }
 }
\ No newline at end of file
diff --git a/lib/router.js b/lib/router.js
index f1d9a48..67fee61 100644
--- a/lib/router.js
+++ b/lib/router.js
@@ -108,7 +108,7 @@ module.exports = function(app){
       res.render("pages/mailbox", { title: util.sanitize(req.params.box) })
     }
   )
-  app.get("/mail/read/:id",
+  app.get("/message/:id",
     middleware.ensureAuthenticated,
     function(req, res){
       res.render("pages/message", { title: util.sanitize(req.params.box) })
@@ -129,4 +129,13 @@ module.exports = function(app){
     }
   )
 
+  app.get("/api/message/:id",
+    middleware.ensureAuthenticated,
+    bucky.ensureMessage,
+    function(req, res){
+      res.json({
+        message: res.message,
+      })
+  })
+
 }