-//
-//// from[, to][,nameTo]
-//router.post("/challenges", access.logged, access.ajax, (req,res) => {
-// if (req.body.from != req.user._id)
-// return res.json({errmsg: "Identity usurpation"});
-// let from = ObjectID(req.body.from);
-// let to = !!req.body.to ? ObjectID(req.body.to) : undefined;
-// let nameTo = !!req.body.nameTo ? req.body.nameTo : undefined;
-// let vid = ObjectID(req.body.vid);
-// if (!to && !!nameTo)
-// {
-// UserModel.getByName(nameTo, (err,user) => {
-// access.checkRequest(res, err, user, "Opponent not found", () => {
-// createChallenge(vid, from, user._id, res);
-// });
-// });
-// }
-// else if (!!to)
-// createChallenge(vid, from, to, res);
-// else
-// createChallenge(vid, from, undefined, res); //automatch
-//});
-//
-//router.delete("/challenges", access.logged, access.ajax, (req,res) => {
-// let cid = ObjectID(req.query.cid);
-// ChallengeModel.getById(cid, (err,chall) => {
-// access.checkRequest(res, err, chall, "Challenge not found", () => {
-// if (!chall.from.equals(req.user._id) && !!chall.to && !chall.to.equals(req.user._id))
-// return res.json({errmsg: "Not your challenge"});
-// ChallengeModel.remove(cid, err => {
-// res.json(err || {});
-// });
-// });
-// });
-//});
+
+router.delete("/challenges", access.logged, access.ajax, (req,res) => {
+ const cid = req.query.id;
+ ChallengeModel.remove(cid, req.userId, err => {
+ res.json(err || {});
+ });
+});