-router.post("/challenges/:vid([0-9]+)", access.logged, access.ajax, (req,res) => {
- const vid = req.params["vid"];
- // TODO: check data req.body.chall (
- const error = ChallengeModel.checkChallenge(chall);
- ChallengeModel.create(chall, (err,lastId) => {
+router.post("/challenges", access.logged, access.ajax, (req,res) => {
+ const error = ChallengeModel.checkChallenge(req.body.chall);
+ // TODO: treat "to" field separately (search users by name)
+ // --> replace "to" by an array of uid (in chall), then call:
+ const from = req.userId;
+// let to = !!req.body.to ? ObjectID(req.body.to) : undefined;
+// let nameTo = !!req.body.nameTo ? req.body.nameTo : undefined;
+// let vid = ObjectID(req.body.vid);
+// if (!to && !!nameTo)
+// {
+// UserModel.getByName(nameTo, (err,user) => {
+// access.checkRequest(res, err, user, "Opponent not found", () => {
+// createChallenge(vid, from, user._id, res);
+// });
+// });
+// }
+// else if (!!to)
+// createChallenge(vid, from, to, res);
+// else
+// createChallenge(vid, from, undefined, res); //automatch
+ ChallengeModel.create(req.body.chall, (err,lastId) => {