browser.js

const express = require('express');
var router = express.Router();

const adminPassword = process.env.ADMIN_PASSWORD;
const ABE_API_URI = (process.env.ABE_API_URI || 'https://abe-api-dev.herokuapp.com/')
  .replace(/\/$/, '');

module.exports = function (api, rootDir) {
  router.route('/').get(function(req, res) {
    res.sendFile(rootDir + '/templates/uploadfile.html');
  });

  router.route('/views').get(ensureAuthenticated, function(req, res) {
    res.sendFile(rootDir + '/templates/views.html');
  });

  router.route('/views/board').get(ensureAuthenticated, function(req, res) {
    res.sendFile(rootDir + '/templates/board.html');
  });

  // Stream only View
  router.route('/views/stream').get(ensureAuthenticated, function(req, res) {
    res.sendFile(rootDir + '/templates/stream.html');
  });

  // Events only View
  router.route('/views/events').get(ensureAuthenticated, function(req, res) {
    res.sendFile(rootDir + '/templates/events.html');
  });
  router.route('/views/expo').get(ensureAuthenticated, function(req, res) {
    res.sendFile(rootDir + '/templates/stream-basic.html');
  });
  router.route('/upload').get(function (req, res) {
    res.sendFile(rootDir + '/templates/uploadfile.html');
  });

  router.route('/admin').get(ensureAuthenticated, function(req, res) {
    res.sendFile(rootDir + '/templates/admin.html');
  });

  router.route('/bobs').get(api.GETallBobs);

  // Show edit page on /bobs/:bobid
  router.route('/bobs/:bobid')
    .get(function(req, res) {
      if (req.params.bobid.length === 24){
        db.Bob.getOneBob({ _id: db.ObjectId(req.params.bobid)}).then(function success(data) {
          if (data){
            // FIXME: this is probably an error. Fix it after adding a test.
            // eslint-disable-next-line no-undef
            res.sendFile(path.join(rootDir, '/templates/editbob.html'));
          } else {
            res.status(404).send("bob not found");
          }
        }, function error(err) {
          console.log(err);
        });
      } else {
        res.status(404).send("bob id must be 24 characters long");
      }
    });

  router.route('/config.js')
    .get(function(req, res) {
      res.type('application/javascript')
        .send("const ABE_API_URI = " + JSON.stringify(ABE_API_URI) + ";");
    });

  return router;
};

function ensureAuthenticated(req, res, next) {
  if (req.headers.auth === adminPassword | req.query.auth === adminPassword){
    next();
  } else {
    res.status(401).send("User not authenticated");
  }
}