1 files changed, 50 insertions, 5 deletions
diff --git a/lib/router.js b/lib/router.js
index 92c0054..e2ba442 100644
--- a/lib/router.js
+++ b/lib/router.js
@@ -28,6 +28,7 @@ module.exports = function(app){
   
   app.post("/api/login", auth.loggedInLocal)
   app.get("/api/index",
+    middleware.ensureAuthenticated,
     bucky.ensureLatestThreads,
     bucky.ensureCommentCountsForThreads,
     bucky.ensureFileCountsForThreads,
@@ -43,6 +44,7 @@ module.exports = function(app){
     }
   )
   app.get("/api/thread/:id",
+    middleware.ensureAuthenticated,
     bucky.ensureThread,
     bucky.ensureKeywordForThread,
     bucky.ensureCommentsForThread,
@@ -56,14 +58,21 @@ module.exports = function(app){
       })
     }
   )
-  app.post("/api/thread/:id", function(req, res){
+  app.post("/api/thread/:id",
+    middleware.ensureAuthenticated,
+    function(req, res){
   })
-  app.post("/api/thread/:id/comment", function(req, res){
+  app.post("/api/thread/:id/comment",
+    middleware.ensureAuthenticated,
+    function(req, res){
   })
-  app.delete("/api/thread/:id", function(req, res){
+  app.delete("/api/thread/:id",
+    middleware.ensureAuthenticated,
+    function(req, res){
   })
 
   app.get("/api/keyword/:keyword",
+    middleware.ensureAuthenticated,
     bucky.ensureKeyword,
     bucky.ensureThreadsForKeyword,
     bucky.ensureCommentCountsForThreads,
@@ -77,9 +86,45 @@ module.exports = function(app){
     }
   )
   
-  app.put("/api/comment/:id", function(req, res){
+  app.put("/api/comment/:id",
+    middleware.ensureAuthenticated,
+    function(req, res){
   })
-  app.delete("/api/comment/:id", function(req, res){
+  app.delete("/api/comment/:id",
+    middleware.ensureAuthenticated,
+    function(req, res){
   })
   
+  app.get("/mail/",
+    middleware.ensureAuthenticated,
+    function(req, res){
+      res.render("pages/mailbox", {title: "inbox" })
+    }
+  )
+  app.get("/mail/:box",
+    middleware.ensureAuthenticated,
+    function(req, res){
+      res.render("pages/mailbox", { title: util.sanitize(req.params.box) })
+    }
+  )
+  app.get("/mail/read/:id",
+    middleware.ensureAuthenticated,
+    function(req, res){
+      res.render("pages/message", { title: util.sanitize(req.params.box) })
+    }
+  )
+
+  app.get("/api/mailbox/:box",
+    middleware.ensureAuthenticated,
+    bucky.ensureMailbox,
+    bucky.ensureMailboxCounts,
+    bucky.ensureMessages,
+    function(req, res){
+      res.json({
+        messages: res.messages,
+        boxes: res.boxes,
+      })
+    }
+  )
+
 }