├── _config.yml
├── public
    ├── galleria
    │   ├── themes
    │   │   ├── fullscreen
    │   │   │   ├── index.html
    │   │   │   ├── b.png
    │   │   │   ├── i.png
    │   │   │   ├── l.gif
    │   │   │   ├── n.gif
    │   │   │   ├── p.gif
    │   │   │   ├── r.gif
    │   │   │   ├── up.gif
    │   │   │   ├── down.gif
    │   │   │   ├── fix.gif
    │   │   │   ├── l-neg.png
    │   │   │   ├── loader.gif
    │   │   │   ├── n-neg.png
    │   │   │   ├── p-neg.png
    │   │   │   ├── r-neg.png
    │   │   │   ├── up-neg.gif
    │   │   │   ├── down-neg.gif
    │   │   │   ├── galleria.fullscreen.min.js
    │   │   │   ├── galleria.fullscreen.min.css
    │   │   │   ├── galleria.fullscreen.js
    │   │   │   ├── fullscreen-demo.html
    │   │   │   ├── fullscreen-demo-cdn.html
    │   │   │   └── galleria.fullscreen.css
    │   │   └── classic
    │   │   │   ├── classic-map.png
    │   │   │   ├── classic-loader.gif
    │   │   │   ├── galleria.classic.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).min.js
    │   │   │   ├── galleria.classic.min.js
    │   │   │   ├── galleria.classic.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).js
    │   │   │   ├── galleria.classic.js
    │   │   │   ├── galleria.classic.min.css
    │   │   │   ├── galleria.classic.css
    │   │   │   ├── classic-demo-cdn.html
    │   │   │   ├── classic-demo.html
    │   │   │   └── classic-demo-cdn (SFConflict me@a1b0n.com 2017-02-12-23-35-56).html
    │   └── plugins
    │   │   ├── flickr
    │   │       ├── loader.gif
    │   │       ├── flickr-loader.gif
    │   │       ├── flickr-demo.html
    │   │       ├── galleria.flickr.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).min.js
    │   │       ├── galleria.flickr.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).js
    │   │       ├── galleria.flickr.min.js
    │   │       └── galleria.flickr.js
    │   │   ├── picasa
    │   │       ├── loader.gif
    │   │       ├── picasa-demo.html
    │   │       ├── galleria.picasa.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).min.js
    │   │       ├── galleria.picasa.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).js
    │   │       ├── galleria.picasa.min.js
    │   │       └── galleria.picasa.js
    │   │   └── history
    │   │       ├── galleria.history.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).min.js
    │   │       ├── galleria.history.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).js
    │   │       ├── galleria.history.min.js
    │   │       ├── galleria.history.js
    │   │       └── history-demo.html
    ├── images
    │   ├── a.jpg
    │   ├── b.jpg
    │   ├── c.jpg
    │   └── empty.png
    ├── stylesheets
    │   ├── page.css
    │   └── style.css
    └── javascripts
    │   └── page.js
├── views
    ├── error.hbs
    ├── layout.hbs
    ├── empty.hbs
    └── gallery.hbs
├── tutorial_resources
    ├── 1.png
    ├── 10.png
    ├── 11.png
    ├── 12.png
    ├── 13.png
    ├── 14.png
    ├── 15.png
    ├── 16.png
    ├── 17.png
    ├── 18.png
    ├── 19.png
    ├── 2.png
    ├── 20.png
    ├── 21.png
    ├── 22.png
    ├── 3.png
    ├── 4.png
    ├── 5.png
    ├── 6.png
    ├── 7.png
    ├── 8.png
    └── 9.png
├── .gitignore
├── routes
    └── index.js
├── LICENSE
├── config.js
├── package.json
├── bin
    └── www
├── app.js
├── controller.js
└── README.md


/_config.yml:
--------------------------------------------------------------------------------
1 | theme: jekyll-theme-slate


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/index.html:
--------------------------------------------------------------------------------
1 | 


--------------------------------------------------------------------------------
/public/images/a.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/images/a.jpg


--------------------------------------------------------------------------------
/public/images/b.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/images/b.jpg


--------------------------------------------------------------------------------
/public/images/c.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/images/c.jpg


--------------------------------------------------------------------------------
/views/error.hbs:
--------------------------------------------------------------------------------
1 | <h1>{{message}}</h1>
2 | <h2>{{error.status}}</h2>
3 | <pre>{{error.stack}}</pre>
4 | 


--------------------------------------------------------------------------------
/public/images/empty.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/images/empty.png


--------------------------------------------------------------------------------
/public/stylesheets/page.css:
--------------------------------------------------------------------------------
1 | 
2 | .galleria{
3 | 	max-width: 100%;
4 | 	height: 700px;
5 | 	margin: 0 auto;
6 | }


--------------------------------------------------------------------------------
/tutorial_resources/1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/1.png


--------------------------------------------------------------------------------
/tutorial_resources/10.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/10.png


--------------------------------------------------------------------------------
/tutorial_resources/11.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/11.png


--------------------------------------------------------------------------------
/tutorial_resources/12.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/12.png


--------------------------------------------------------------------------------
/tutorial_resources/13.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/13.png


--------------------------------------------------------------------------------
/tutorial_resources/14.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/14.png


--------------------------------------------------------------------------------
/tutorial_resources/15.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/15.png


--------------------------------------------------------------------------------
/tutorial_resources/16.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/16.png


--------------------------------------------------------------------------------
/tutorial_resources/17.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/17.png


--------------------------------------------------------------------------------
/tutorial_resources/18.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/18.png


--------------------------------------------------------------------------------
/tutorial_resources/19.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/19.png


--------------------------------------------------------------------------------
/tutorial_resources/2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/2.png


--------------------------------------------------------------------------------
/tutorial_resources/20.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/20.png


--------------------------------------------------------------------------------
/tutorial_resources/21.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/21.png


--------------------------------------------------------------------------------
/tutorial_resources/22.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/22.png


--------------------------------------------------------------------------------
/tutorial_resources/3.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/3.png


--------------------------------------------------------------------------------
/tutorial_resources/4.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/4.png


--------------------------------------------------------------------------------
/tutorial_resources/5.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/5.png


--------------------------------------------------------------------------------
/tutorial_resources/6.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/6.png


--------------------------------------------------------------------------------
/tutorial_resources/7.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/7.png


--------------------------------------------------------------------------------
/tutorial_resources/8.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/8.png


--------------------------------------------------------------------------------
/tutorial_resources/9.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/tutorial_resources/9.png


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/b.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/b.png


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/i.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/i.png


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/l.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/l.gif


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/n.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/n.gif


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/p.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/p.gif


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/r.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/r.gif


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/up.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/up.gif


--------------------------------------------------------------------------------
/public/galleria/plugins/flickr/loader.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/plugins/flickr/loader.gif


--------------------------------------------------------------------------------
/public/galleria/plugins/picasa/loader.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/plugins/picasa/loader.gif


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/down.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/down.gif


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/fix.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/fix.gif


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/l-neg.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/l-neg.png


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/loader.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/loader.gif


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/n-neg.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/n-neg.png


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/p-neg.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/p-neg.png


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/r-neg.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/r-neg.png


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/up-neg.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/up-neg.gif


--------------------------------------------------------------------------------
/public/galleria/themes/classic/classic-map.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/classic/classic-map.png


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/down-neg.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/fullscreen/down-neg.gif


--------------------------------------------------------------------------------
/public/galleria/plugins/flickr/flickr-loader.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/plugins/flickr/flickr-loader.gif


--------------------------------------------------------------------------------
/public/galleria/themes/classic/classic-loader.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/dropbox/nodegallerytutorial/HEAD/public/galleria/themes/classic/classic-loader.gif


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
 1 | # Node build artifacts
 2 | node_modules
 3 | npm-debug.log
 4 | 
 5 | # Local development
 6 | *.env
 7 | *.dev
 8 | package-lock.json
 9 | 
10 | *.DS_Store


--------------------------------------------------------------------------------
/public/javascripts/page.js:
--------------------------------------------------------------------------------
1 | jQuery(document).ready(function(){
2 | 	Galleria.loadTheme('/galleria/themes/classic/galleria.classic.min.js');
3 | 	Galleria.run('.galleria');
4 | });


--------------------------------------------------------------------------------
/public/stylesheets/style.css:
--------------------------------------------------------------------------------
 1 | body {
 2 |   padding: 50px;
 3 |   font: 14px "Lucida Grande", Helvetica, Arial, sans-serif;
 4 | }
 5 | 
 6 | a {
 7 |   color: #00B7FF;
 8 | }
 9 | 
10 | #empty{	
11 | 	text-align: center;
12 | }
13 | 


--------------------------------------------------------------------------------
/views/layout.hbs:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 |   <head>
 4 |     <title>{{title}}</title>
 5 |     <link rel='stylesheet' href='/stylesheets/style.css' />
 6 |   </head>
 7 |   <body>
 8 |     {{{body}}}
 9 |   </body>
10 | </html>
11 | 


--------------------------------------------------------------------------------
/views/empty.hbs:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 |   <head>
 4 |     <title>Empty folder</title>
 5 |     <link rel="stylesheet" href="/stylesheets/style.css">
 6 |   </head>
 7 |   <body>
 8 |   	<div id="empty">
 9 | 			<img src="/images/empty.png">
10 | 			<p><a href="https://www.dropbox.com/personal/Apps/dbximgs%20demo" target="_blank">go to folder</a></p> 
11 |   	</div>
12 |   </body>
13 | </html>


--------------------------------------------------------------------------------
/routes/index.js:
--------------------------------------------------------------------------------
 1 | var express = require('express');
 2 | var router = express.Router();
 3 | var controller = require('../controller');
 4 | 
 5 | /* GET home page. */
 6 | router.get('/', controller.home);
 7 | 
 8 | router.get('/login', controller.login);
 9 | 
10 | router.get('/logout', controller.logout);
11 | 
12 | router.get('/oauthredirect',controller.oauthredirect);
13 | 
14 | module.exports = router;
15 | 


--------------------------------------------------------------------------------
/views/gallery.hbs:
--------------------------------------------------------------------------------
 1 | 
 2 | <!DOCTYPE html>
 3 | <html>
 4 | <head>                       
 5 | 	<script type='text/javascript' src='https://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js'></script>
 6 | 	<script src="/galleria/galleria-1.5.7.min.js"></script>
 7 | 	<script type='text/javascript' src='/javascripts/page.js'></script>
 8 | 	<link rel="stylesheet" href="/stylesheets/page.css">
 9 | </head>
10 | <body>
11 | 	<div class="galleria">
12 | 		{{#each imgs}}
13 | 		<img src="{{this}}">
14 | 		{{/each}}
15 | 	</div>
16 | </body>
17 | </html>
18 | 


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
 1 | Copyright (c) 2017 Dropbox, Inc.
 2 | 
 3 | Licensed under the Apache License, Version 2.0 (the "License");
 4 | you may not use this file except in compliance with the License.
 5 | You may obtain a copy of the License at
 6 | 
 7 |     http://www.apache.org/licenses/LICENSE-2.0
 8 | 
 9 | Unless required by applicable law or agreed to in writing, software
10 | distributed under the License is distributed on an "AS IS" BASIS,
11 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 | See the License for the specific language governing permissions and
13 | limitations under the License.
14 | 


--------------------------------------------------------------------------------
/config.js:
--------------------------------------------------------------------------------
 1 | require('dotenv').config({silent: true});
 2 | 
 3 | module.exports = {
 4 | 	DBX_API_DOMAIN: 'https://api.dropboxapi.com',
 5 | 	DBX_OAUTH_DOMAIN: 'https://www.dropbox.com',
 6 | 	DBX_OAUTH_PATH: '/oauth2/authorize',
 7 | 	DBX_TOKEN_PATH: '/oauth2/token',
 8 | 	DBX_LIST_FOLDER_PATH:'/2/files/list_folder',
 9 | 	DBX_LIST_FOLDER_CONTINUE_PATH:'/2/files/list_folder/continue',
10 | 	DBX_GET_TEMPORARY_LINK_PATH:'/2/files/get_temporary_link',
11 | 	DBX_TOKEN_REVOKE_PATH:'/2/auth/token/revoke',
12 | 	DBX_APP_KEY:process.env.DBX_APP_KEY,
13 | 	DBX_APP_SECRET:process.env.DBX_APP_SECRET, 
14 | 	OAUTH_REDIRECT_URL:process.env.OAUTH_REDIRECT_URL,
15 | 	SESSION_ID_SECRET:process.env.SESSION_ID_SECRET,
16 | }


--------------------------------------------------------------------------------
/package.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "name": "dbximgs",
 3 |   "version": "1.0.0",
 4 |   "private": true,
 5 |   "scripts": {
 6 |     "start": "node ./bin/www"
 7 |   },
 8 |   "engines": {
 9 |     "node": "~8.2.1"
10 |   },
11 |   "dependencies": {
12 |     "body-parser": "~1.17.1",
13 |     "cookie-parser": "~1.4.3",
14 |     "debug": "~2.6.3",
15 |     "dotenv": "^4.0.0",
16 |     "express": "~4.15.2",
17 |     "express-session": "^1.15.6",
18 |     "express-sessions": "^1.0.6",
19 |     "hbs": "~4.0.1",
20 |     "helmet": "^3.9.0",
21 |     "morgan": "~1.8.1",
22 |     "node-cache": "^4.1.1",
23 |     "redis": "^2.8.0",
24 |     "request": "^2.83.0",
25 |     "request-promise": "^4.2.2",
26 |     "serve-favicon": "~2.4.2"
27 |   }
28 | }
29 | 


--------------------------------------------------------------------------------
/public/galleria/plugins/history/galleria.history.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).min.js:
--------------------------------------------------------------------------------
1 | !function(a,b){Galleria.requires(1.25,"The History Plugin requires Galleria version 1.2.5 or later."),Galleria.History=function(){var c,d=[],e=!1,f=b.location,g=b.document,h=Galleria.IE,i="onhashchange"in b&&(void 0===g.mode||g.mode>7),j=function(a){return a=c&&!i&&Galleria.IE?a||c.location:f,parseInt(a.hash.substr(2),10)},k=j(f),l=[],m=function(){a.each(l,function(a,c){c.call(b,j())})},n=function(){a.each(d,function(a,b){b()}),e=!0},o=function(a){return"/"+a};return i&&h<8&&(i=!1),i?n():a(function(){b.setInterval(function(){var a=j();isNaN(a)||a==k||(k=a,f.hash=o(a),m())},50);h?a('<iframe tabindex="-1" title="empty">').hide().attr("src","about:blank").one("load",function(){c=this.contentWindow,n()}).insertAfter(g.body):n()}),{change:function(a){l.push(a),i&&(b.onhashchange=m)},set:function(a){isNaN(a)||(!i&&h&&this.ready(function(){var b=c.document;b.open(),b.close(),c.location.hash=o(a)}),f.hash=o(a))},ready:function(a){e?a():d.push(a)}}}()}(jQuery,this);


--------------------------------------------------------------------------------
/public/galleria/plugins/history/galleria.history.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).js:
--------------------------------------------------------------------------------
 1 | /**
 2 |  * Galleria - v1.5.3 2017-02-13
 3 |  * https://galleria.io
 4 |  *
 5 |  * Copyright (c) 2010 - 2017 worse is better UG
 6 |  * Licensed under the MIT License.
 7 |  * https://raw.github.com/worseisbetter/galleria/master/LICENSE
 8 |  *
 9 |  */
10 | 
11 | !function(a,b){Galleria.requires(1.25,"The History Plugin requires Galleria version 1.2.5 or later."),Galleria.History=function(){var c,d=[],e=!1,f=b.location,g=b.document,h=Galleria.IE,i="onhashchange"in b&&(void 0===g.mode||g.mode>7),j=function(a){return a=c&&!i&&Galleria.IE?a||c.location:f,parseInt(a.hash.substr(2),10)},k=j(f),l=[],m=function(){a.each(l,function(a,c){c.call(b,j())})},n=function(){a.each(d,function(a,b){b()}),e=!0},o=function(a){return"/"+a};return i&&h<8&&(i=!1),i?n():a(function(){b.setInterval(function(){var a=j();isNaN(a)||a==k||(k=a,f.hash=o(a),m())},50);h?a('<iframe tabindex="-1" title="empty">').hide().attr("src","about:blank").one("load",function(){c=this.contentWindow,n()}).insertAfter(g.body):n()}),{change:function(a){l.push(a),i&&(b.onhashchange=m)},set:function(a){isNaN(a)||(!i&&h&&this.ready(function(){var b=c.document;b.open(),b.close(),c.location.hash=o(a)}),f.hash=o(a))},ready:function(a){e?a():d.push(a)}}}()}(jQuery,this);


--------------------------------------------------------------------------------
/public/galleria/plugins/history/galleria.history.min.js:
--------------------------------------------------------------------------------
1 | (function($,window){Galleria.requires(1.25,"The History Plugin requires Galleria version 1.2.5 or later.");Galleria.History=function(){var onloads=[],init=false,loc=window.location,doc=window.document,ie=Galleria.IE,support="onhashchange"in window&&(doc.mode===undefined||doc.mode>7),iframe,get=function(winloc){if(iframe&&!support&&Galleria.IE){winloc=winloc||iframe.location}else{winloc=loc}return parseInt(winloc.hash.substr(2),10)},saved=get(loc),callbacks=[],onchange=function(){$.each(callbacks,function(i,fn){fn.call(window,get())})},ready=function(){$.each(onloads,function(i,fn){fn()});init=true},setHash=function(val){return"/"+val};if(support&&ie<8){support=false}if(!support){$(function(){var interval=window.setInterval(function(){var hash=get();if(!isNaN(hash)&&hash!=saved){saved=hash;loc.hash=setHash(hash);onchange()}},50);if(ie){$('<iframe tabindex="-1" title="empty">').hide().attr("src","about:blank").one("load",function(){iframe=this.contentWindow;ready()}).insertAfter(doc.body)}else{ready()}})}else{ready()}return{change:function(fn){callbacks.push(fn);if(support){window.onhashchange=onchange}},set:function(val){if(isNaN(val)){return}if(!support&&ie){this.ready(function(){var idoc=iframe.document;idoc.open();idoc.close();iframe.location.hash=setHash(val)})}loc.hash=setHash(val)},ready:function(fn){if(!init){onloads.push(fn)}else{fn()}}}}()})(jQuery,this);


--------------------------------------------------------------------------------
/public/galleria/themes/classic/galleria.classic.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).min.js:
--------------------------------------------------------------------------------
1 | !function(a){Galleria.addTheme({name:"classic",version:1.5,author:"Galleria",css:"galleria.classic.css",defaults:{transition:"slide",thumbCrop:"height",_toggleInfo:!0},init:function(b){Galleria.requires(1.4,"This version of Classic theme requires Galleria 1.4 or later"),this.addElement("info-link","info-close"),this.append({info:["info-link","info-close"]});var c=this.$("info-link,info-close,info-text"),d=Galleria.TOUCH;this.$("loader,counter").show().css("opacity",.4),d||(this.addIdleState(this.get("image-nav-left"),{left:-50}),this.addIdleState(this.get("image-nav-right"),{right:-50}),this.addIdleState(this.get("counter"),{opacity:0})),b._toggleInfo===!0?c.bind("click:fast",function(){c.toggle()}):(c.show(),this.$("info-link, info-close").hide()),this.bind("thumbnail",function(b){d?a(b.thumbTarget).css("opacity",this.getIndex()?1:.6).bind("click:fast",function(){a(this).css("opacity",1).parent().siblings().children().css("opacity",.6)}):(a(b.thumbTarget).css("opacity",.6).parent().hover(function(){a(this).not(".active").children().stop().fadeTo(100,1)},function(){a(this).not(".active").children().stop().fadeTo(400,.6)}),b.index===this.getIndex()&&a(b.thumbTarget).css("opacity",1))});var e=function(b){a(b.thumbTarget).css("opacity",1).parent().siblings().children().css("opacity",.6)};this.bind("loadstart",function(a){a.cached||this.$("loader").show().fadeTo(200,.4),window.setTimeout(function(){e(a)},d?300:0),this.$("info").toggle(this.hasInfo())}),this.bind("loadfinish",function(a){this.$("loader").fadeOut(200)})}})}(jQuery);


--------------------------------------------------------------------------------
/public/galleria/themes/classic/galleria.classic.min.js:
--------------------------------------------------------------------------------
1 | (function($){Galleria.addTheme({name:"classic",version:1.5,author:"Galleria",css:"galleria.classic.css",defaults:{transition:"slide",thumbCrop:"height",_toggleInfo:true},init:function(options){Galleria.requires(1.4,"This version of Classic theme requires Galleria 1.4 or later");this.addElement("info-link","info-close");this.append({info:["info-link","info-close"]});var info=this.$("info-link,info-close,info-text"),touch=Galleria.TOUCH;this.$("loader,counter").show().css("opacity",.4);if(!touch){this.addIdleState(this.get("image-nav-left"),{left:-50});this.addIdleState(this.get("image-nav-right"),{right:-50});this.addIdleState(this.get("counter"),{opacity:0})}if(options._toggleInfo===true){info.bind("click:fast",function(){info.toggle()})}else{info.show();this.$("info-link, info-close").hide()}this.bind("thumbnail",function(e){if(!touch){$(e.thumbTarget).css("opacity",.6).parent().hover(function(){$(this).not(".active").children().stop().fadeTo(100,1)},function(){$(this).not(".active").children().stop().fadeTo(400,.6)});if(e.index===this.getIndex()){$(e.thumbTarget).css("opacity",1)}}else{$(e.thumbTarget).css("opacity",this.getIndex()?1:.6).bind("click:fast",function(){$(this).css("opacity",1).parent().siblings().children().css("opacity",.6)})}});var activate=function(e){$(e.thumbTarget).css("opacity",1).parent().siblings().children().css("opacity",.6)};this.bind("loadstart",function(e){if(!e.cached){this.$("loader").show().fadeTo(200,.4)}window.setTimeout(function(){activate(e)},touch?300:0);this.$("info").toggle(this.hasInfo())});this.bind("loadfinish",function(e){this.$("loader").fadeOut(200)})}})})(jQuery);


--------------------------------------------------------------------------------
/public/galleria/themes/classic/galleria.classic.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).js:
--------------------------------------------------------------------------------
 1 | /**
 2 |  * Galleria - v1.5.3 2017-02-13
 3 |  * https://galleria.io
 4 |  *
 5 |  * Copyright (c) 2010 - 2017 worse is better UG
 6 |  * Licensed under the MIT License.
 7 |  * https://raw.github.com/worseisbetter/galleria/master/LICENSE
 8 |  *
 9 |  */
10 | 
11 | !function(a){Galleria.addTheme({name:"classic",version:1.5,author:"Galleria",css:"galleria.classic.css",defaults:{transition:"slide",thumbCrop:"height",_toggleInfo:!0},init:function(b){Galleria.requires(1.4,"This version of Classic theme requires Galleria 1.4 or later"),this.addElement("info-link","info-close"),this.append({info:["info-link","info-close"]});var c=this.$("info-link,info-close,info-text"),d=Galleria.TOUCH;this.$("loader,counter").show().css("opacity",.4),d||(this.addIdleState(this.get("image-nav-left"),{left:-50}),this.addIdleState(this.get("image-nav-right"),{right:-50}),this.addIdleState(this.get("counter"),{opacity:0})),b._toggleInfo===!0?c.bind("click:fast",function(){c.toggle()}):(c.show(),this.$("info-link, info-close").hide()),this.bind("thumbnail",function(b){d?a(b.thumbTarget).css("opacity",this.getIndex()?1:.6).bind("click:fast",function(){a(this).css("opacity",1).parent().siblings().children().css("opacity",.6)}):(a(b.thumbTarget).css("opacity",.6).parent().hover(function(){a(this).not(".active").children().stop().fadeTo(100,1)},function(){a(this).not(".active").children().stop().fadeTo(400,.6)}),b.index===this.getIndex()&&a(b.thumbTarget).css("opacity",1))});var e=function(b){a(b.thumbTarget).css("opacity",1).parent().siblings().children().css("opacity",.6)};this.bind("loadstart",function(a){a.cached||this.$("loader").show().fadeTo(200,.4),window.setTimeout(function(){e(a)},d?300:0),this.$("info").toggle(this.hasInfo())}),this.bind("loadfinish",function(a){this.$("loader").fadeOut(200)})}})}(jQuery);


--------------------------------------------------------------------------------
/bin/www:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env node
 2 | 
 3 | /**
 4 |  * Module dependencies.
 5 |  */
 6 | 
 7 | var app = require('../app');
 8 | var debug = require('debug')('dbximgs:server');
 9 | var http = require('http');
10 | 
11 | /**
12 |  * Get port from environment and store in Express.
13 |  */
14 | 
15 | var port = normalizePort(process.env.PORT || '3000');
16 | app.set('port', port);
17 | 
18 | /**
19 |  * Create HTTP server.
20 |  */
21 | 
22 | var server = http.createServer(app);
23 | 
24 | /**
25 |  * Listen on provided port, on all network interfaces.
26 |  */
27 | 
28 | server.listen(port);
29 | server.on('error', onError);
30 | server.on('listening', onListening);
31 | 
32 | /**
33 |  * Normalize a port into a number, string, or false.
34 |  */
35 | 
36 | function normalizePort(val) {
37 |   var port = parseInt(val, 10);
38 | 
39 |   if (isNaN(port)) {
40 |     // named pipe
41 |     return val;
42 |   }
43 | 
44 |   if (port >= 0) {
45 |     // port number
46 |     return port;
47 |   }
48 | 
49 |   return false;
50 | }
51 | 
52 | /**
53 |  * Event listener for HTTP server "error" event.
54 |  */
55 | 
56 | function onError(error) {
57 |   if (error.syscall !== 'listen') {
58 |     throw error;
59 |   }
60 | 
61 |   var bind = typeof port === 'string'
62 |     ? 'Pipe ' + port
63 |     : 'Port ' + port;
64 | 
65 |   // handle specific listen errors with friendly messages
66 |   switch (error.code) {
67 |     case 'EACCES':
68 |       console.error(bind + ' requires elevated privileges');
69 |       process.exit(1);
70 |       break;
71 |     case 'EADDRINUSE':
72 |       console.error(bind + ' is already in use');
73 |       process.exit(1);
74 |       break;
75 |     default:
76 |       throw error;
77 |   }
78 | }
79 | 
80 | /**
81 |  * Event listener for HTTP server "listening" event.
82 |  */
83 | 
84 | function onListening() {
85 |   var addr = server.address();
86 |   var bind = typeof addr === 'string'
87 |     ? 'pipe ' + addr
88 |     : 'port ' + addr.port;
89 |   debug('Listening on ' + bind);
90 | }
91 | 


--------------------------------------------------------------------------------
/public/galleria/plugins/picasa/picasa-demo.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 |     <head>
 4 |         <meta charset="utf-8">
 5 |         <title>Galleria Picasa Plugin</title>
 6 |         <style>
 7 | 
 8 |             /* Demo styles */
 9 |             html,body{background:#222;margin:0;}
10 |             body{border-top:4px solid #000;}
11 |             .content{color:#777;font:12px/1.4 "helvetica neue",arial,sans-serif;width:620px;margin:20px auto;}
12 |             h1{font-size:12px;font-weight:normal;color:#ddd;margin:0;}
13 |             p{margin:0 0 20px}
14 |             a {color:#22BCB9;text-decoration:none;}
15 |             .cred{margin-top:20px;font-size:11px;}
16 | 
17 |             /* This rule is read by Galleria to define the gallery height: */
18 |             #galleria{height:320px;}
19 | 
20 |         </style>
21 | 
22 |         <!-- load jQuery -->
23 |         <script src="http://ajax.googleapis.com/ajax/libs/jquery/1/jquery.js"></script>
24 | 
25 |         <!-- load Galleria -->
26 |         <script src="../../galleria-1.5.7.min.js"></script>
27 | 
28 |         <!-- load picasa plugin -->
29 |         <script src="galleria.picasa.min.js"></script>
30 | 
31 |     </head>
32 | <body>
33 |     <div class="content">
34 |         <h1>Galleria Picasa Plugin Demo</h1>
35 |         <p>Demonstrating a basic gallery example with photos from a Picasa album.</p>
36 | 
37 |         <!-- Adding gallery images. This is just a container for the dynamic picasa images -->
38 | 
39 |         <div id="galleria"></div>
40 | 
41 |         <p class="cred">Made by <a href="http://galleria.io">Galleria</a>.</p>
42 |     </div>
43 |     <script>
44 |     $(function() {
45 |         // Load the classic theme
46 |         Galleria.loadTheme('../../themes/classic/galleria.classic.min.js');
47 | 
48 |         Galleria.run('#galleria', {
49 |             // The user & album. This example fetches the album "Demo" from the user "galleriajs"
50 |             picasa: 'useralbum:galleriajs/Demo'
51 |         });
52 |     });
53 |     </script>
54 |     </body>
55 | </html>


--------------------------------------------------------------------------------
/public/galleria/plugins/flickr/flickr-demo.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 |     <head>
 4 |         <meta charset="utf-8">
 5 |         <title>Galleria Flickr Plugin</title>
 6 |         <style>
 7 | 
 8 |             /* Demo styles */
 9 |             html,body{background:#222;margin:0;}
10 |             body{border-top:4px solid #000;}
11 |             .content{color:#777;font:12px/1.4 "helvetica neue",arial,sans-serif;width:620px;margin:20px auto;}
12 |             h1{font-size:12px;font-weight:normal;color:#ddd;margin:0;}
13 |             p{margin:0 0 20px}
14 |             a {color:#22BCB9;text-decoration:none;}
15 |             .cred{margin-top:20px;font-size:11px;}
16 | 
17 |             /* This rule is read by Galleria to define the gallery height: */
18 |             #galleria{height:320px;}
19 | 
20 |         </style>
21 | 
22 |         <!-- load jQuery -->
23 |         <script src="http://ajax.googleapis.com/ajax/libs/jquery/1/jquery.js"></script>
24 | 
25 |         <!-- load Galleria -->
26 |         <script src="../../galleria-1.5.7.min.js"></script>
27 | 
28 |         <!-- load flickr plugin -->
29 |         <script src="galleria.flickr.min.js"></script>
30 | 
31 |     </head>
32 | <body>
33 |     <div class="content">
34 |         <h1>Galleria Flickr Plugin Demo</h1>
35 |         <p>Demonstrating a basic gallery example with a Flickr search.</p>
36 | 
37 |         <!-- Adding gallery images. This is just a container for the dynamic flickr images -->
38 | 
39 |         <div id="galleria"></div>
40 | 
41 |         <p class="cred">Made by <a href="http://galleria.io">Galleria</a>.</p>
42 |         <a href="#" id="close">cloase</a>
43 |     </div>
44 |     <script>
45 |     $(function() {
46 |         // Load the classic theme
47 |         Galleria.loadTheme('../../themes/classic/galleria.classic.min.js');
48 | 
49 |         // Initialize Galleria
50 |         Galleria.run('#galleria', {
51 | 
52 |             // search flickr for "galleria"
53 |             flickr: 'search:galleria',
54 | 
55 |             flickrOptions: {
56 |                 // sort by interestingness
57 |                 sort: 'interestingness-desc'
58 |             }
59 |         });
60 |     });
61 |     </script>
62 |     </body>
63 | </html>


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/galleria.fullscreen.min.js:
--------------------------------------------------------------------------------
1 | (function($){Galleria.addTheme({name:"fullscreen",version:"1.5.4",author:"Galleria",css:"galleria.fullscreen.css",defaults:{transition:"none",imageCrop:true,thumbCrop:"height",easing:"galleriaOut",trueFullscreen:false,_hideDock:Galleria.TOUCH?false:true,_closeOnClick:false},init:function(options){Galleria.requires(1.5,"This version of Fullscreen theme requires Galleria version 1.5 or later");this.addElement("thumbnails-tab");this.appendChild("thumbnails-container","thumbnails-tab");var tab=this.$("thumbnails-tab"),loader=this.$("loader"),thumbs=this.$("thumbnails-container"),list=this.$("thumbnails-list"),infotext=this.$("info-text"),info=this.$("info"),OPEN=!options._hideDock,POS=0;if(Galleria.IE){this.addElement("iefix");this.appendChild("container","iefix");this.$("iefix").css({zIndex:3,position:"absolute",backgroundColor:this.hasVariation("light")?"#fff":"#000",opacity:.4,top:0})}if(options.thumbnails===false){thumbs.hide()}var fixCaption=this.proxy(function(img){var w=img.width||$(img).width();if(!(img||w)){return}w=Math.min(w,$(window).width());infotext.width(w-40);if(Galleria.IE&&this.getOptions("showInfo")){this.$("iefix").width(info.outerWidth()).height(info.outerHeight())}});this.bind("rescale",function(){POS=this.getStageHeight()-tab.height()-2;thumbs.css("top",OPEN?POS-list.outerHeight()+2:POS);var img=this.getActiveImage();if(img){fixCaption(img)}});this.bind("loadstart",function(e){if(!e.cached){loader.show().fadeTo(100,1)}$(e.thumbTarget).css("opacity",1).parent().siblings().children().css("opacity",.6)});this.bind("loadfinish",function(e){loader.fadeOut(300);this.$("info, iefix").toggle(this.hasInfo())});this.bind("image",function(e){e.imageTarget&&fixCaption(e.imageTarget)});this.bind("thumbnail",function(e){$(e.thumbTarget).parent(":not(.active)").children().css("opacity",.6);$(e.thumbTarget).on("click:fast",function(){if(OPEN&&options._closeOnClick){tab.trigger("click:fast")}})});this.trigger("rescale");if(!Galleria.TOUCH){this.addIdleState(thumbs,{opacity:0});this.addIdleState(this.get("info"),{opacity:0});this.$("image-nav-left, image-nav-right").css("opacity",.01).hover(function(){$(this).animate({opacity:1},100)},function(){$(this).animate({opacity:0})}).show()}if(Galleria.IE){this.addIdleState(this.get("iefix"),{opacity:0})}if(options._hideDock){tab.on("click:fast",this.proxy(function(){tab.toggleClass("open",!OPEN);if(!OPEN){thumbs.animate({top:POS-list.outerHeight()+2},400,options.easing)}else{thumbs.animate({top:POS},400,options.easing)}OPEN=!OPEN}))}else{this.bind("thumbnail",function(){thumbs.css("top",POS-list.outerHeight()+2)});tab.css("visibility","hidden")}this.$("thumbnails").children().hover(function(){$(this).not(".active").children().stop().fadeTo(100,1)},function(){$(this).not(".active").children().stop().fadeTo(400,.6)});this.enterFullscreen();this.attachKeyboard({escape:function(e){return false},up:function(e){if(!OPEN){tab.trigger("click:fast")}e.preventDefault()},down:function(e){if(OPEN){tab.trigger("click:fast")}e.preventDefault()}})}})})(jQuery);


--------------------------------------------------------------------------------
/public/galleria/plugins/picasa/galleria.picasa.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).min.js:
--------------------------------------------------------------------------------
1 | !function(a){Galleria.requires(1.25,"The Picasa Plugin requires Galleria version 1.2.5 or later.");var b=Galleria.utils.getScriptPath();Galleria.Picasa=function(){this.options={max:30,imageSize:"medium",thumbSize:"thumb",complete:function(){}}},Galleria.Picasa.prototype={constructor:Galleria.Picasa,search:function(a,b){return this._call("search","all",{q:a},b)},user:function(a,b){return this._call("user","user/"+a,b)},useralbum:function(a,b,c){return this._call("useralbum","user/"+a+"/album/"+b,c)},setOptions:function(b){return a.extend(this.options,b),this},_call:function(b,c,d,e){c="https://picasaweb.google.com/data/feed/api/"+c+"?","function"==typeof d&&(e=d,d={});var f=this;d=a.extend({kind:"photo",access:"public","max-results":this.options.max,thumbsize:this._getSizes().join(","),alt:"json-in-script",callback:"?"},d),a.each(d,function(a,b){c+="&"+a+"="+b});var g=!1;return Galleria.utils.wait({until:function(){return g},success:function(){f._parse.call(f,g.feed.entry,e)},error:function(){var a="";"user"==b?a="user not found.":"useralbum"==b&&(a="album or user not found."),Galleria.raise("Picasa request failed"+(a?": "+a:"."))},timeout:5e3}),a.getJSON(c,function(a){g=a}),f},_getSizes:function(){var b,c=this,d={small:"72c",thumb:"104u",medium:"640u",big:"1024u",original:"1600u"},e=c.options,f={},g=[32,48,64,72,94,104,110,128,144,150,160,200,220,288,320,400,512,576,640,720,800,912,1024,1152,1280,1440,1600];return a(["thumbSize","imageSize"]).each(function(){e[this]in d?f[this]=d[e[this]]:(b=Galleria.utils.parseValue(e[this]),b>1600?b=1600:a.each(g,function(a){if(b<this)return b=g[a-1],!1}),f[this]=b)}),[f.thumbSize,f.imageSize,"1280u"]},_parse:function(b,c){var d,e=[];a.each(b,function(){d=this.media$group.media$thumbnail,e.push({thumb:d[0].url,image:d[1].url,big:d[2].url,title:this.summary.$t})}),c.call(this,e)}};var c=Galleria.prototype.load;Galleria.prototype.load=function(){if(arguments.length||"string"!=typeof this._options.picasa)return void c.apply(this,Galleria.utils.array(arguments));var d,e=this,f=Galleria.utils.array(arguments),g=this._options.picasa.split(":"),h=a.extend({},e._options.picasaOptions),i="undefined"!=typeof h.loader?h.loader:a("<div>").css({width:48,height:48,opacity:.7,background:"#000 url("+b+"loader.gif) no-repeat 50% 50%"});if(g.length){if("function"!=typeof Galleria.Picasa.prototype[g[0]])return Galleria.raise(g[0]+" method not found in Picasa plugin"),c.apply(this,f);if(!g[1])return Galleria.raise("No picasa argument found"),c.apply(this,f);window.setTimeout(function(){e.$("target").append(i)},100),d=new Galleria.Picasa,"object"==typeof e._options.picasaOptions&&d.setOptions(e._options.picasaOptions);var j=[];if("useralbum"==g[0]){if(j=g[1].split("/"),2!=j.length)return void Galleria.raise("Picasa useralbum not correctly formatted (should be [user]/[album])")}else j.push(g[1]);j.push(function(a){e._data=a,i.remove(),e.trigger(Galleria.DATA),d.options.complete.call(d,a)}),d[g[0]].apply(d,j)}else c.apply(this,f)}}(jQuery);


--------------------------------------------------------------------------------
/app.js:
--------------------------------------------------------------------------------
  1 | var express = require('express');
  2 | var path = require('path');
  3 | var favicon = require('serve-favicon');
  4 | var logger = require('morgan');
  5 | var cookieParser = require('cookie-parser');
  6 | var bodyParser = require('body-parser');
  7 | 
  8 | var index = require('./routes/index');
  9 | 
 10 | var app = express();
 11 | 
 12 | //session management variables
 13 | var config = require('./config');
 14 | var redis = require('redis');
 15 | var client = redis.createClient(process.env.REDIS_URL);
 16 | var crypto = require('crypto');
 17 | var session = require('express-session');
 18 | 
 19 | var helmet = require('helmet');
 20 | 
 21 | //Headers security!!
 22 | app.use(helmet());
 23 | 
 24 | // Implement CSP with Helmet 
 25 | 
 26 | app.use(helmet.contentSecurityPolicy({
 27 |   directives: {
 28 |     defaultSrc: ["'self'"],
 29 |     scriptSrc: ["'self'","https://ajax.googleapis.com/"],
 30 |     styleSrc: ["'self'"], 
 31 |     imgSrc: ["'self'","https://dl.dropboxusercontent.com"],  
 32 |     mediaSrc: ["'none'"],  
 33 |     frameSrc: ["'none'"]  
 34 |   },
 35 | 
 36 |     // Set to true if you want to blindly set all headers: Content-Security-Policy, 
 37 |     // X-WebKit-CSP, and X-Content-Security-Policy. 
 38 |     setAllHeaders: true
 39 | 
 40 | }));
 41 | 
 42 | //initialize session
 43 | var sess = {
 44 | 	secret: config.SESSION_ID_SECRET,
 45 |   cookie: {}, //add empty cookie to the session by default
 46 |   resave: false,
 47 |   saveUninitialized: true,
 48 |   genid: (req) => {
 49 |   	return crypto.randomBytes(16).toString('hex');;
 50 |   },
 51 |   store: new (require('express-sessions'))({
 52 |   	storage: 'redis',
 53 |       instance: client, // optional 
 54 |       collection: 'sessions' // optional 
 55 |   })
 56 | }
 57 | 
 58 | 
 59 | if (app.get('env') === 'production') {
 60 | 	app.set('trust proxy', 1) // trust first proxy
 61 | 	sess.cookie.secure = true // serve secure cookies
 62 | }
 63 | 
 64 | app.use(session(sess));
 65 | 
 66 | 
 67 | // view engine setup
 68 | app.set('views', path.join(__dirname, 'views'));
 69 | app.set('view engine', 'hbs');
 70 | 
 71 | // uncomment after placing your favicon in /public
 72 | //app.use(favicon(path.join(__dirname, 'public', 'favicon.ico')));
 73 | app.use(logger('dev'));
 74 | app.use(bodyParser.json());
 75 | app.use(bodyParser.urlencoded({ extended: false }));
 76 | app.use(cookieParser());
 77 | app.use(express.static(path.join(__dirname, 'public')));
 78 | 
 79 | app.use('/', index);
 80 | 
 81 | // catch 404 and forward to error handler
 82 | app.use(function(req, res, next) {
 83 |   var err = new Error('Not Found');
 84 |   err.status = 404;
 85 |   next(err);
 86 | });
 87 | 
 88 | // error handler
 89 | app.use(function(err, req, res, next) {
 90 |   // set locals, only providing error in development
 91 |   res.locals.message = err.message;
 92 |   res.locals.error = req.app.get('env') === 'development' ? err : {};
 93 | 
 94 |   // render the error page
 95 |   res.status(err.status || 500);
 96 |   res.render('error');
 97 | });
 98 | 
 99 | module.exports = app;
100 | 


--------------------------------------------------------------------------------
/public/galleria/plugins/picasa/galleria.picasa.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).js:
--------------------------------------------------------------------------------
 1 | /**
 2 |  * Galleria - v1.5.3 2017-02-13
 3 |  * https://galleria.io
 4 |  *
 5 |  * Copyright (c) 2010 - 2017 worse is better UG
 6 |  * Licensed under the MIT License.
 7 |  * https://raw.github.com/worseisbetter/galleria/master/LICENSE
 8 |  *
 9 |  */
10 | 
11 | !function(a){Galleria.requires(1.25,"The Picasa Plugin requires Galleria version 1.2.5 or later.");var b=Galleria.utils.getScriptPath();Galleria.Picasa=function(){this.options={max:30,imageSize:"medium",thumbSize:"thumb",complete:function(){}}},Galleria.Picasa.prototype={constructor:Galleria.Picasa,search:function(a,b){return this._call("search","all",{q:a},b)},user:function(a,b){return this._call("user","user/"+a,b)},useralbum:function(a,b,c){return this._call("useralbum","user/"+a+"/album/"+b,c)},setOptions:function(b){return a.extend(this.options,b),this},_call:function(b,c,d,e){c="https://picasaweb.google.com/data/feed/api/"+c+"?","function"==typeof d&&(e=d,d={});var f=this;d=a.extend({kind:"photo",access:"public","max-results":this.options.max,thumbsize:this._getSizes().join(","),alt:"json-in-script",callback:"?"},d),a.each(d,function(a,b){c+="&"+a+"="+b});var g=!1;return Galleria.utils.wait({until:function(){return g},success:function(){f._parse.call(f,g.feed.entry,e)},error:function(){var a="";"user"==b?a="user not found.":"useralbum"==b&&(a="album or user not found."),Galleria.raise("Picasa request failed"+(a?": "+a:"."))},timeout:5e3}),a.getJSON(c,function(a){g=a}),f},_getSizes:function(){var b,c=this,d={small:"72c",thumb:"104u",medium:"640u",big:"1024u",original:"1600u"},e=c.options,f={},g=[32,48,64,72,94,104,110,128,144,150,160,200,220,288,320,400,512,576,640,720,800,912,1024,1152,1280,1440,1600];return a(["thumbSize","imageSize"]).each(function(){e[this]in d?f[this]=d[e[this]]:(b=Galleria.utils.parseValue(e[this]),b>1600?b=1600:a.each(g,function(a){if(b<this)return b=g[a-1],!1}),f[this]=b)}),[f.thumbSize,f.imageSize,"1280u"]},_parse:function(b,c){var d,e=[];a.each(b,function(){d=this.media$group.media$thumbnail,e.push({thumb:d[0].url,image:d[1].url,big:d[2].url,title:this.summary.$t})}),c.call(this,e)}};var c=Galleria.prototype.load;Galleria.prototype.load=function(){if(arguments.length||"string"!=typeof this._options.picasa)return void c.apply(this,Galleria.utils.array(arguments));var d,e=this,f=Galleria.utils.array(arguments),g=this._options.picasa.split(":"),h=a.extend({},e._options.picasaOptions),i="undefined"!=typeof h.loader?h.loader:a("<div>").css({width:48,height:48,opacity:.7,background:"#000 url("+b+"loader.gif) no-repeat 50% 50%"});if(g.length){if("function"!=typeof Galleria.Picasa.prototype[g[0]])return Galleria.raise(g[0]+" method not found in Picasa plugin"),c.apply(this,f);if(!g[1])return Galleria.raise("No picasa argument found"),c.apply(this,f);window.setTimeout(function(){e.$("target").append(i)},100),d=new Galleria.Picasa,"object"==typeof e._options.picasaOptions&&d.setOptions(e._options.picasaOptions);var j=[];if("useralbum"==g[0]){if(j=g[1].split("/"),2!=j.length)return void Galleria.raise("Picasa useralbum not correctly formatted (should be [user]/[album])")}else j.push(g[1]);j.push(function(a){e._data=a,i.remove(),e.trigger(Galleria.DATA),d.options.complete.call(d,a)}),d[g[0]].apply(d,j)}else c.apply(this,f)}}(jQuery);


--------------------------------------------------------------------------------
/public/galleria/plugins/picasa/galleria.picasa.min.js:
--------------------------------------------------------------------------------
1 | (function($){Galleria.requires(1.25,"The Picasa Plugin requires Galleria version 1.2.5 or later.");var PATH=Galleria.utils.getScriptPath();Galleria.Picasa=function(){this.options={max:30,imageSize:"medium",thumbSize:"thumb",complete:function(){}}};Galleria.Picasa.prototype={constructor:Galleria.Picasa,search:function(phrase,callback){return this._call("search","all",{q:phrase},callback)},user:function(username,callback){return this._call("user","user/"+username,callback)},useralbum:function(username,album,callback){return this._call("useralbum","user/"+username+"/album/"+album,callback)},setOptions:function(options){$.extend(this.options,options);return this},_call:function(type,url,params,callback){url="https://picasaweb.google.com/data/feed/api/"+url+"?";if(typeof params=="function"){callback=params;params={}}var self=this;params=$.extend({kind:"photo",access:"public","max-results":this.options.max,thumbsize:this._getSizes().join(","),alt:"json-in-script",callback:"?"},params);$.each(params,function(key,value){url+="&"+key+"="+value});var data=false;Galleria.utils.wait({until:function(){return data},success:function(){self._parse.call(self,data.feed.entry,callback)},error:function(){var msg="";if(type=="user"){msg="user not found."}else if(type=="useralbum"){msg="album or user not found."}Galleria.raise("Picasa request failed"+(msg?": "+msg:"."))},timeout:5e3});$.getJSON(url,function(result){data=result});return self},_getSizes:function(){var self=this,norm={small:"72c",thumb:"104u",medium:"640u",big:"1024u",original:"1600u"},op=self.options,t={},n,sz=[32,48,64,72,94,104,110,128,144,150,160,200,220,288,320,400,512,576,640,720,800,912,1024,1152,1280,1440,1600];$(["thumbSize","imageSize"]).each(function(){if(op[this]in norm){t[this]=norm[op[this]]}else{n=Galleria.utils.parseValue(op[this]);if(n>1600){n=1600}else{$.each(sz,function(i){if(n<this){n=sz[i-1];return false}})}t[this]=n}});return[t.thumbSize,t.imageSize,"1280u"]},_parse:function(data,callback){var self=this,gallery=[],img;$.each(data,function(){img=this.media$group.media$thumbnail;gallery.push({thumb:img[0].url,image:img[1].url,big:img[2].url,title:this.summary.$t})});callback.call(this,gallery)}};var load=Galleria.prototype.load;Galleria.prototype.load=function(){if(arguments.length||typeof this._options.picasa!=="string"){load.apply(this,Galleria.utils.array(arguments));return}var self=this,args=Galleria.utils.array(arguments),picasa=this._options.picasa.split(":"),p,opts=$.extend({},self._options.picasaOptions),loader=typeof opts.loader!=="undefined"?opts.loader:$("<div>").css({width:48,height:48,opacity:.7,background:"#000 url("+PATH+"loader.gif) no-repeat 50% 50%"});if(picasa.length){if(typeof Galleria.Picasa.prototype[picasa[0]]!=="function"){Galleria.raise(picasa[0]+" method not found in Picasa plugin");return load.apply(this,args)}if(!picasa[1]){Galleria.raise("No picasa argument found");return load.apply(this,args)}window.setTimeout(function(){self.$("target").append(loader)},100);p=new Galleria.Picasa;if(typeof self._options.picasaOptions==="object"){p.setOptions(self._options.picasaOptions)}var arg=[];if(picasa[0]=="useralbum"){arg=picasa[1].split("/");if(arg.length!=2){Galleria.raise("Picasa useralbum not correctly formatted (should be [user]/[album])");return}}else{arg.push(picasa[1])}arg.push(function(data){self._data=data;loader.remove();self.trigger(Galleria.DATA);p.options.complete.call(p,data)});p[picasa[0]].apply(p,arg)}else{load.apply(this,args)}}})(jQuery);


--------------------------------------------------------------------------------
/public/galleria/plugins/flickr/galleria.flickr.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).min.js:
--------------------------------------------------------------------------------
1 | !function(a){Galleria.requires(1.25,"The Flickr Plugin requires Galleria version 1.2.5 or later.");var b=Galleria.utils.getScriptPath();Galleria.Flickr=function(a){this.api_key=a||"2a2ce06c15780ebeb0b706650fc890b2",this.options={max:30,imageSize:"medium",thumbSize:"thumb",sort:"interestingness-desc",description:!1,complete:function(){},backlink:!1}},Galleria.Flickr.prototype={constructor:Galleria.Flickr,search:function(a,b){return this._find({text:a},b)},tags:function(a,b){return this._find({tags:a},b)},user:function(a,b){return this._call({method:"flickr.urls.lookupUser",url:"flickr.com/photos/"+a},function(a){this._find({user_id:a.user.id,method:"flickr.people.getPublicPhotos"},b)})},set:function(a,b){return this._find({photoset_id:a,method:"flickr.photosets.getPhotos"},b)},gallery:function(a,b){return this._find({gallery_id:a,method:"flickr.galleries.getPhotos"},b)},groupsearch:function(a,b){return this._call({text:a,method:"flickr.groups.search"},function(a){this.group(a.groups.group[0].nsid,b)})},group:function(a,b){return this._find({group_id:a,method:"flickr.groups.pools.getPhotos"},b)},setOptions:function(b){return a.extend(this.options,b),this},_call:function(b,c){var d="https://api.flickr.com/services/rest/?",e=this;return b=a.extend({format:"json",jsoncallback:"?",api_key:this.api_key},b),a.each(b,function(a,b){d+="&"+a+"="+b}),a.getJSON(d,function(a){"ok"===a.stat?c.call(e,a):Galleria.raise(a.code.toString()+" "+a.stat+": "+a.message,!0)}),e},_getBig:function(a){return a.url_l?a.url_l:parseInt(a.width_o,10)>1280?"https://farm"+a.farm+".static.flickr.com/"+a.server+"/"+a.id+"_"+a.secret+"_b.jpg":a.url_o||a.url_z||a.url_m},_getSize:function(a,b){var c;switch(b){case"thumb":c=a.url_t;break;case"small":c=a.url_s;break;case"big":c=this._getBig(a);break;case"original":c=a.url_o?a.url_o:this._getBig(a);break;default:c=a.url_z||a.url_m}return c},_find:function(b,c){return b=a.extend({method:"flickr.photos.search",extras:"url_t,url_m,url_o,url_s,url_l,url_z,description",sort:this.options.sort,per_page:Math.min(this.options.max,500)},b),this._call(b,function(a){var b,d,e=[],f=a.photos?a.photos.photo:a.photoset.photo,g=f.length;for(d=0;d<g;d++)b=f[d],e.push({thumb:this._getSize(b,this.options.thumbSize),image:this._getSize(b,this.options.imageSize),big:this._getBig(b),title:f[d].title,description:this.options.description&&f[d].description?f[d].description._content:"",link:this.options.backlink?"https://flickr.com/photos/"+b.owner+"/"+b.id:""});c.call(this,e)})}};var c=Galleria.prototype.load;Galleria.prototype.load=function(){if(arguments.length||"string"!=typeof this._options.flickr)return void c.apply(this,Galleria.utils.array(arguments));var d,e=this,f=Galleria.utils.array(arguments),g=this._options.flickr.split(":"),h=a.extend({},e._options.flickrOptions),i="undefined"!=typeof h.loader?h.loader:a("<div>").css({width:48,height:48,opacity:.7,background:"#000 url("+b+"loader.gif) no-repeat 50% 50%"});if(g.length){if("function"!=typeof Galleria.Flickr.prototype[g[0]])return Galleria.raise(g[0]+" method not found in Flickr plugin"),c.apply(this,f);if(!g[1])return Galleria.raise("No flickr argument found"),c.apply(this,f);window.setTimeout(function(){e.$("target").append(i)},100),d=new Galleria.Flickr,"object"==typeof e._options.flickrOptions&&d.setOptions(e._options.flickrOptions),d[g[0]](g[1],function(a){e._data=a,i.remove(),e.trigger(Galleria.DATA),d.options.complete.call(d,a)})}else c.apply(this,f)}}(jQuery);


--------------------------------------------------------------------------------
/public/galleria/themes/classic/galleria.classic.js:
--------------------------------------------------------------------------------
  1 | /**
  2 |  * Galleria Classic Theme 2017-02-13
  3 |  * http://galleria.io
  4 |  *
  5 |  * Copyright (c) 2010 - 2017 worse is better UG
  6 |  * Licensed under the MIT license
  7 |  * https://raw.github.com/worseisbetter/galleria/master/LICENSE
  8 |  *
  9 |  */
 10 | 
 11 | (function($) {
 12 | 
 13 | /*global window, jQuery, Galleria */
 14 | 
 15 | Galleria.addTheme({
 16 |     name: 'classic',
 17 |     version: 1.5,
 18 |     author: 'Galleria',
 19 |     css: 'galleria.classic.css',
 20 |     defaults: {
 21 |         transition: 'slide',
 22 |         thumbCrop:  'height',
 23 | 
 24 |         // set this to false if you want to show the caption all the time:
 25 |         _toggleInfo: true
 26 |     },
 27 |     init: function(options) {
 28 | 
 29 |         Galleria.requires(1.4, 'This version of Classic theme requires Galleria 1.4 or later');
 30 | 
 31 |         // add some elements
 32 |         this.addElement('info-link','info-close');
 33 |         this.append({
 34 |             'info' : ['info-link','info-close']
 35 |         });
 36 | 
 37 |         // cache some stuff
 38 |         var info = this.$('info-link,info-close,info-text'),
 39 |             touch = Galleria.TOUCH;
 40 | 
 41 |         // show loader & counter with opacity
 42 |         this.$('loader,counter').show().css('opacity', 0.4);
 43 | 
 44 |         // some stuff for non-touch browsers
 45 |         if (! touch ) {
 46 |             this.addIdleState( this.get('image-nav-left'), { left:-50 });
 47 |             this.addIdleState( this.get('image-nav-right'), { right:-50 });
 48 |             this.addIdleState( this.get('counter'), { opacity:0 });
 49 |         }
 50 | 
 51 |         // toggle info
 52 |         if ( options._toggleInfo === true ) {
 53 |             info.bind( 'click:fast', function() {
 54 |                 info.toggle();
 55 |             });
 56 |         } else {
 57 |             info.show();
 58 |             this.$('info-link, info-close').hide();
 59 |         }
 60 | 
 61 |         // bind some stuff
 62 |         this.bind('thumbnail', function(e) {
 63 | 
 64 |             if (! touch ) {
 65 |                 // fade thumbnails
 66 |                 $(e.thumbTarget).css('opacity', 0.6).parent().hover(function() {
 67 |                     $(this).not('.active').children().stop().fadeTo(100, 1);
 68 |                 }, function() {
 69 |                     $(this).not('.active').children().stop().fadeTo(400, 0.6);
 70 |                 });
 71 | 
 72 |                 if ( e.index === this.getIndex() ) {
 73 |                     $(e.thumbTarget).css('opacity',1);
 74 |                 }
 75 |             } else {
 76 |                 $(e.thumbTarget).css('opacity', this.getIndex() ? 1 : 0.6).bind('click:fast', function() {
 77 |                     $(this).css( 'opacity', 1 ).parent().siblings().children().css('opacity', 0.6);
 78 |                 });
 79 |             }
 80 |         });
 81 | 
 82 |         var activate = function(e) {
 83 |             $(e.thumbTarget).css('opacity',1).parent().siblings().children().css('opacity', 0.6);
 84 |         };
 85 | 
 86 |         this.bind('loadstart', function(e) {
 87 |             if (!e.cached) {
 88 |                 this.$('loader').show().fadeTo(200, 0.4);
 89 |             }
 90 |             window.setTimeout(function() {
 91 |                 activate(e);
 92 |             }, touch ? 300 : 0);
 93 |             this.$('info').toggle( this.hasInfo() );
 94 |         });
 95 | 
 96 |         this.bind('loadfinish', function(e) {
 97 |             this.$('loader').fadeOut(200);
 98 |         });
 99 |     }
100 | });
101 | 
102 | }(jQuery));
103 | 


--------------------------------------------------------------------------------
/public/galleria/plugins/flickr/galleria.flickr.min (SFConflict me@a1b0n.com 2017-02-12-23-35-56).js:
--------------------------------------------------------------------------------
 1 | /**
 2 |  * Galleria - v1.5.3 2017-02-13
 3 |  * https://galleria.io
 4 |  *
 5 |  * Copyright (c) 2010 - 2017 worse is better UG
 6 |  * Licensed under the MIT License.
 7 |  * https://raw.github.com/worseisbetter/galleria/master/LICENSE
 8 |  *
 9 |  */
10 | 
11 | !function(a){Galleria.requires(1.25,"The Flickr Plugin requires Galleria version 1.2.5 or later.");var b=Galleria.utils.getScriptPath();Galleria.Flickr=function(a){this.api_key=a||"2a2ce06c15780ebeb0b706650fc890b2",this.options={max:30,imageSize:"medium",thumbSize:"thumb",sort:"interestingness-desc",description:!1,complete:function(){},backlink:!1}},Galleria.Flickr.prototype={constructor:Galleria.Flickr,search:function(a,b){return this._find({text:a},b)},tags:function(a,b){return this._find({tags:a},b)},user:function(a,b){return this._call({method:"flickr.urls.lookupUser",url:"flickr.com/photos/"+a},function(a){this._find({user_id:a.user.id,method:"flickr.people.getPublicPhotos"},b)})},set:function(a,b){return this._find({photoset_id:a,method:"flickr.photosets.getPhotos"},b)},gallery:function(a,b){return this._find({gallery_id:a,method:"flickr.galleries.getPhotos"},b)},groupsearch:function(a,b){return this._call({text:a,method:"flickr.groups.search"},function(a){this.group(a.groups.group[0].nsid,b)})},group:function(a,b){return this._find({group_id:a,method:"flickr.groups.pools.getPhotos"},b)},setOptions:function(b){return a.extend(this.options,b),this},_call:function(b,c){var d="https://api.flickr.com/services/rest/?",e=this;return b=a.extend({format:"json",jsoncallback:"?",api_key:this.api_key},b),a.each(b,function(a,b){d+="&"+a+"="+b}),a.getJSON(d,function(a){"ok"===a.stat?c.call(e,a):Galleria.raise(a.code.toString()+" "+a.stat+": "+a.message,!0)}),e},_getBig:function(a){return a.url_l?a.url_l:parseInt(a.width_o,10)>1280?"https://farm"+a.farm+".static.flickr.com/"+a.server+"/"+a.id+"_"+a.secret+"_b.jpg":a.url_o||a.url_z||a.url_m},_getSize:function(a,b){var c;switch(b){case"thumb":c=a.url_t;break;case"small":c=a.url_s;break;case"big":c=this._getBig(a);break;case"original":c=a.url_o?a.url_o:this._getBig(a);break;default:c=a.url_z||a.url_m}return c},_find:function(b,c){return b=a.extend({method:"flickr.photos.search",extras:"url_t,url_m,url_o,url_s,url_l,url_z,description",sort:this.options.sort,per_page:Math.min(this.options.max,500)},b),this._call(b,function(a){var b,d,e=[],f=a.photos?a.photos.photo:a.photoset.photo,g=f.length;for(d=0;d<g;d++)b=f[d],e.push({thumb:this._getSize(b,this.options.thumbSize),image:this._getSize(b,this.options.imageSize),big:this._getBig(b),title:f[d].title,description:this.options.description&&f[d].description?f[d].description._content:"",link:this.options.backlink?"https://flickr.com/photos/"+b.owner+"/"+b.id:""});c.call(this,e)})}};var c=Galleria.prototype.load;Galleria.prototype.load=function(){if(arguments.length||"string"!=typeof this._options.flickr)return void c.apply(this,Galleria.utils.array(arguments));var d,e=this,f=Galleria.utils.array(arguments),g=this._options.flickr.split(":"),h=a.extend({},e._options.flickrOptions),i="undefined"!=typeof h.loader?h.loader:a("<div>").css({width:48,height:48,opacity:.7,background:"#000 url("+b+"loader.gif) no-repeat 50% 50%"});if(g.length){if("function"!=typeof Galleria.Flickr.prototype[g[0]])return Galleria.raise(g[0]+" method not found in Flickr plugin"),c.apply(this,f);if(!g[1])return Galleria.raise("No flickr argument found"),c.apply(this,f);window.setTimeout(function(){e.$("target").append(i)},100),d=new Galleria.Flickr,"object"==typeof e._options.flickrOptions&&d.setOptions(e._options.flickrOptions),d[g[0]](g[1],function(a){e._data=a,i.remove(),e.trigger(Galleria.DATA),d.options.complete.call(d,a)})}else c.apply(this,f)}}(jQuery);


--------------------------------------------------------------------------------
/public/galleria/plugins/history/galleria.history.js:
--------------------------------------------------------------------------------
  1 | /**
  2 |  * Galleria History Plugin 2016-09-03
  3 |  * http://galleria.io
  4 |  *
  5 |  * Copyright (c) 2010 - 2017 worse is better UG
  6 |  * Licensed under the MIT license
  7 |  * https://raw.github.com/worseisbetter/galleria/master/LICENSE
  8 |  *
  9 |  */
 10 | 
 11 | (function( $, window ) {
 12 | 
 13 | /*global jQuery, Galleria, window */
 14 | 
 15 | Galleria.requires(1.25, 'The History Plugin requires Galleria version 1.2.5 or later.');
 16 | 
 17 | Galleria.History = (function() {
 18 | 
 19 |     var onloads = [],
 20 | 
 21 |         init = false,
 22 | 
 23 |         loc = window.location,
 24 | 
 25 |         doc = window.document,
 26 | 
 27 |         ie = Galleria.IE,
 28 | 
 29 |         support = 'onhashchange' in window && ( doc.mode === undefined || doc.mode > 7 ),
 30 | 
 31 |         iframe,
 32 | 
 33 |         get = function( winloc ) {
 34 |             if( iframe && !support && Galleria.IE ) {
 35 |                 winloc = winloc || iframe.location;
 36 |             }  else {
 37 |                 winloc = loc;
 38 |             }
 39 |             return parseInt( winloc.hash.substr(2), 10 );
 40 |         },
 41 | 
 42 |         saved = get( loc ),
 43 | 
 44 |         callbacks = [],
 45 | 
 46 |         onchange = function() {
 47 |             $.each( callbacks, function( i, fn ) {
 48 |                 fn.call( window, get() );
 49 |             });
 50 |         },
 51 | 
 52 |         ready = function() {
 53 |             $.each( onloads, function(i, fn) {
 54 |                 fn();
 55 |             });
 56 | 
 57 |             init = true;
 58 |         },
 59 | 
 60 |         setHash = function( val ) {
 61 |             return '/' + val;
 62 |         };
 63 | 
 64 |     // always remove support if IE < 8
 65 |     if ( support && ie < 8 ) {
 66 |         support = false;
 67 |     }
 68 | 
 69 |     if ( !support ) {
 70 | 
 71 |         $(function() {
 72 | 
 73 |             var interval = window.setInterval(function() {
 74 | 
 75 |                 var hash = get();
 76 | 
 77 |                 if ( !isNaN( hash ) && hash != saved ) {
 78 |                     saved = hash;
 79 |                     loc.hash = setHash( hash );
 80 |                     onchange();
 81 |                 }
 82 | 
 83 |             }, 50);
 84 | 
 85 |             if ( ie ) {
 86 | 
 87 |                 $('<iframe tabindex="-1" title="empty">').hide().attr( 'src', 'about:blank' ).one('load', function() {
 88 | 
 89 |                     iframe = this.contentWindow;
 90 | 
 91 |                     ready();
 92 | 
 93 |                 }).insertAfter(doc.body);
 94 | 
 95 |             } else {
 96 |                 ready();
 97 |             }
 98 |         });
 99 |     } else {
100 |         ready();
101 |     }
102 | 
103 |     return {
104 | 
105 |         change: function( fn ) {
106 | 
107 |             callbacks.push( fn );
108 | 
109 |             if( support ) {
110 |                 window.onhashchange = onchange;
111 |             }
112 |         },
113 | 
114 |         set: function( val ) {
115 | 
116 |             if ( isNaN( val ) ) {
117 |                 return;
118 |             }
119 | 
120 |             if ( !support && ie ) {
121 | 
122 |                 this.ready(function() {
123 | 
124 |                     var idoc = iframe.document;
125 |                     idoc.open();
126 |                     idoc.close();
127 | 
128 |                     iframe.location.hash = setHash( val );
129 | 
130 |                 });
131 |             }
132 | 
133 |             loc.hash = setHash( val );
134 |         },
135 | 
136 |         ready: function(fn) {
137 |             if (!init) {
138 |                 onloads.push(fn);
139 |             } else {
140 |                 fn();
141 |             }
142 |         }
143 |     };
144 | }());
145 | 
146 | }( jQuery, this ));
147 | 
148 | 


--------------------------------------------------------------------------------
/public/galleria/plugins/flickr/galleria.flickr.min.js:
--------------------------------------------------------------------------------
1 | (function($){Galleria.requires(1.25,"The Flickr Plugin requires Galleria version 1.2.5 or later.");var PATH=Galleria.utils.getScriptPath();Galleria.Flickr=function(api_key){this.api_key=api_key||"2a2ce06c15780ebeb0b706650fc890b2";this.options={max:30,imageSize:"medium",thumbSize:"thumb",sort:"interestingness-desc",description:false,complete:function(){},backlink:false}};Galleria.Flickr.prototype={constructor:Galleria.Flickr,search:function(phrase,callback){return this._find({text:phrase},callback)},tags:function(tag,callback){return this._find({tags:tag},callback)},user:function(username,callback){return this._call({method:"flickr.urls.lookupUser",url:"flickr.com/photos/"+username},function(data){this._find({user_id:data.user.id,method:"flickr.people.getPublicPhotos"},callback)})},set:function(photoset_id,callback){return this._find({photoset_id:photoset_id,method:"flickr.photosets.getPhotos"},callback)},gallery:function(gallery_id,callback){return this._find({gallery_id:gallery_id,method:"flickr.galleries.getPhotos"},callback)},groupsearch:function(group,callback){return this._call({text:group,method:"flickr.groups.search"},function(data){this.group(data.groups.group[0].nsid,callback)})},group:function(group_id,callback){return this._find({group_id:group_id,method:"flickr.groups.pools.getPhotos"},callback)},setOptions:function(options){$.extend(this.options,options);return this},_call:function(params,callback){var url="https://api.flickr.com/services/rest/?";var scope=this;params=$.extend({format:"json",jsoncallback:"?",api_key:this.api_key},params);$.each(params,function(key,value){url+="&"+key+"="+value});$.getJSON(url,function(data){if(data.stat==="ok"){callback.call(scope,data)}else{Galleria.raise(data.code.toString()+" "+data.stat+": "+data.message,true)}});return scope},_getBig:function(photo){if(photo.url_l){return photo.url_l}else if(parseInt(photo.width_o,10)>1280){return"https://farm"+photo.farm+".static.flickr.com/"+photo.server+"/"+photo.id+"_"+photo.secret+"_b.jpg"}return photo.url_o||photo.url_z||photo.url_m},_getSize:function(photo,size){var img;switch(size){case"thumb":img=photo.url_t;break;case"small":img=photo.url_s;break;case"big":img=this._getBig(photo);break;case"original":img=photo.url_o?photo.url_o:this._getBig(photo);break;default:img=photo.url_z||photo.url_m;break}return img},_find:function(params,callback){params=$.extend({method:"flickr.photos.search",extras:"url_t,url_m,url_o,url_s,url_l,url_z,description",sort:this.options.sort,per_page:Math.min(this.options.max,500)},params);return this._call(params,function(data){var gallery=[],photos=data.photos?data.photos.photo:data.photoset.photo,len=photos.length,photo,i;for(i=0;i<len;i++){photo=photos[i];gallery.push({thumb:this._getSize(photo,this.options.thumbSize),image:this._getSize(photo,this.options.imageSize),big:this._getBig(photo),title:photos[i].title,description:this.options.description&&photos[i].description?photos[i].description._content:"",link:this.options.backlink?"https://flickr.com/photos/"+photo.owner+"/"+photo.id:""})}callback.call(this,gallery)})}};var load=Galleria.prototype.load;Galleria.prototype.load=function(){if(arguments.length||typeof this._options.flickr!=="string"){load.apply(this,Galleria.utils.array(arguments));return}var self=this,args=Galleria.utils.array(arguments),flickr=this._options.flickr.split(":"),f,opts=$.extend({},self._options.flickrOptions),loader=typeof opts.loader!=="undefined"?opts.loader:$("<div>").css({width:48,height:48,opacity:.7,background:"#000 url("+PATH+"loader.gif) no-repeat 50% 50%"});if(flickr.length){if(typeof Galleria.Flickr.prototype[flickr[0]]!=="function"){Galleria.raise(flickr[0]+" method not found in Flickr plugin");return load.apply(this,args)}if(!flickr[1]){Galleria.raise("No flickr argument found");return load.apply(this,args)}window.setTimeout(function(){self.$("target").append(loader)},100);f=new Galleria.Flickr;if(typeof self._options.flickrOptions==="object"){f.setOptions(self._options.flickrOptions)}f[flickr[0]](flickr[1],function(data){self._data=data;loader.remove();self.trigger(Galleria.DATA);f.options.complete.call(f,data)})}else{load.apply(this,args)}}})(jQuery);


--------------------------------------------------------------------------------
/public/galleria/themes/classic/galleria.classic.min.css:
--------------------------------------------------------------------------------
1 | #galleria-loader{height:1px!important}.galleria-theme-classic{position:relative;overflow:hidden;background:#000}.galleria-theme-classic img{-moz-user-select:none;-webkit-user-select:none;-o-user-select:none}.galleria-theme-classic .galleria-stage{position:absolute;top:10px;bottom:60px;left:10px;right:10px;overflow:hidden}.galleria-theme-classic .galleria-thumbnails-container{height:50px;bottom:0;position:absolute;left:10px;right:10px;z-index:2}.galleria-theme-classic .galleria-carousel .galleria-thumbnails-list{margin-left:30px;margin-right:30px}.galleria-theme-classic .galleria-thumbnails .galleria-image{height:40px;width:60px;background:#000;margin:0 5px 0 0;border:1px solid #000;float:left;cursor:pointer}.galleria-theme-classic .galleria-counter{position:absolute;bottom:10px;left:10px;text-align:right;color:#fff;font:400 11px/1 arial,sans-serif;z-index:1}.galleria-theme-classic .galleria-loader{width:20px;height:20px;position:absolute;top:10px;right:10px;z-index:2;display:none;background:url(classic-loader.gif) 2px 2px no-repeat}.galleria-theme-classic .galleria-info{width:50%;top:15px;left:15px;z-index:2;position:absolute}.galleria-theme-classic .galleria-info-text{background-color:#000;padding:12px;display:none;zoom:1}.galleria-theme-classic .galleria-info-title{font:700 12px/1.1 arial,sans-serif;margin:0 0 7px;color:#fff}.galleria-theme-classic .galleria-info-description{font:italic 12px/1.4 georgia,serif;margin:0;color:#bbb}.galleria-theme-classic .galleria-info-close{width:9px;height:9px;position:absolute;top:5px;right:5px;background-position:-753px -11px;opacity:.5;filter:alpha(opacity=50);cursor:pointer;display:none}.galleria-theme-classic .notouch .galleria-info-close:hover,.galleria-theme-classic .touch .galleria-info-close:active{opacity:1;filter:alpha(opacity=100)}.galleria-theme-classic .galleria-info-link{background-position:-669px -5px;opacity:.7;filter:alpha(opacity=70);position:absolute;width:20px;height:20px;cursor:pointer;background-color:#000}.galleria-theme-classic.notouch .galleria-info-link:hover,.galleria-theme-classic.touch .galleria-info-link:active{opacity:1;filter:alpha(opacity=100)}.galleria-theme-classic .galleria-image-nav{position:absolute;top:50%;margin-top:-62px;width:100%;height:62px;left:0}.galleria-theme-classic .galleria-image-nav-left,.galleria-theme-classic .galleria-image-nav-right{opacity:.3;filter:alpha(opacity=30);cursor:pointer;width:62px;height:124px;position:absolute;left:10px;z-index:2;background-position:0 46px}.galleria-theme-classic .galleria-image-nav-right{left:auto;right:10px;background-position:-254px 46px;z-index:2}.galleria-theme-classic.notouch .galleria-image-nav-left:hover,.galleria-theme-classic.notouch .galleria-image-nav-right:hover,.galleria-theme-classic.touch .galleria-image-nav-left:active,.galleria-theme-classic.touch .galleria-image-nav-right:active{opacity:1;filter:alpha(opacity=100)}.galleria-theme-classic .galleria-thumb-nav-left,.galleria-theme-classic .galleria-thumb-nav-right{cursor:pointer;display:none;background-position:-495px 5px;position:absolute;left:0;top:0;height:40px;width:23px;z-index:3;opacity:.8;filter:alpha(opacity=80)}.galleria-theme-classic .galleria-thumb-nav-right{background-position:-578px 5px;border-right:none;right:0;left:auto}.galleria-theme-classic .galleria-thumbnails-container .disabled{opacity:.2;filter:alpha(opacity=20);cursor:default}.galleria-theme-classic.notouch .galleria-thumb-nav-left:hover,.galleria-theme-classic.notouch .galleria-thumb-nav-right:hover,.galleria-theme-classic.touch .galleria-thumb-nav-left:active,.galleria-theme-classic.touch .galleria-thumb-nav-right:active{opacity:1;filter:alpha(opacity=100);background-color:#111}.galleria-theme-classic.notouch .galleria-thumbnails-container .disabled:hover{opacity:.2;filter:alpha(opacity=20);background-color:transparent}.galleria-theme-classic .galleria-carousel .galleria-thumb-nav-left,.galleria-theme-classic .galleria-carousel .galleria-thumb-nav-right{display:block}.galleria-theme-classic .galleria-image-nav-left,.galleria-theme-classic .galleria-image-nav-right,.galleria-theme-classic .galleria-info-close,.galleria-theme-classic .galleria-info-link,.galleria-theme-classic .galleria-thumb-nav-left,.galleria-theme-classic .galleria-thumb-nav-right{background-image:url(classic-map.png);background-repeat:no-repeat}.galleria-theme-classic.galleria-container.videoplay .galleria-counter,.galleria-theme-classic.galleria-container.videoplay .galleria-info{display:none!important}


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/galleria.fullscreen.min.css:
--------------------------------------------------------------------------------
1 | #galleria-loader{height:1px!important}body,html{background:#000}.galleria-theme-fullscreen{height:100%;overflow:hidden;position:fixed;top:0;left:0;width:100%;background:#000;-webkit-font-smoothing:antialiased}.galleria-theme-fullscreen img{-moz-user-select:none;-webkit-user-select:none;-o-user-select:none}.galleria-theme-fullscreen .galleria-stage{width:100%;height:100%;position:absolute}.galleria-theme-fullscreen .galleria-thumbnails-container{position:absolute;bottom:0;z-index:2;padding-top:16px;width:100%}.galleria-theme-fullscreen.videoplay .galleria-thumbnails-container{display:none!important}.galleria-theme-fullscreen.videoplay .galleria-image-nav{top:80px;bottom:80px;height:auto}.galleria-theme-fullscreen .galleria-thumbnails-tab{opacity:.7;-ms-filter:"progid:DXImageTransform.Microsoft.Alpha(Opacity=70)";filter:alpha(opacity=70);position:absolute;left:50%;margin-left:-50px;top:0;height:16px;width:100px;background:url(up.gif) 50% 5px no-repeat #000;cursor:pointer;-moz-border-radius-topleft:4px;-moz-border-radius-topright:4px;-webkit-border-top-right-radius:4px;-webkit-border-top-left-radius:4px}.galleria-theme-fullscreen.light .galleria-thumbnails-tab{background:url(up-neg.gif) 50% 50% no-repeat #fff;opacity:1;-ms-filter:"progid:DXImageTransform.Microsoft.Alpha(Opacity=100)";filter:alpha(opacity=100)}.galleria-theme-fullscreen .galleria-thumbnails-tab:hover{opacity:1;-ms-filter:"progid:DXImageTransform.Microsoft.Alpha(Opacity=100)";filter:alpha(opacity=100)}.galleria-theme-fullscreen .galleria-thumbnails-tab.open,.galleria-theme-fullscreen .galleria-thumbnails-tab.open:hover{background-image:url(down.gif);opacity:1;-ms-filter:"progid:DXImageTransform.Microsoft.Alpha(Opacity=100)";filter:alpha(opacity=100)}.galleria-theme-fullscreen.light .galleria-thumbnails-tab.open,.galleria-theme-fullscreen.light .galleria-thumbnails-tab.open:hover{background-image:url(down-neg.gif)}.galleria-theme-fullscreen .galleria-thumbnails{background:#000;overflow:hidden}.galleria-theme-fullscreen .galleria-thumbnails-list{background:#000;padding-top:5px;padding-bottom:5px;overflow:hidden}.galleria-theme-fullscreen.light .galleria-thumbnails,.galleria-theme-fullscreen.light .galleria-thumbnails-list{background:#fff}.galleria-theme-fullscreen .galleria-thumbnails .galleria-image{width:80px;height:50px;float:left;cursor:pointer;margin-right:5px}.galleria-theme-fullscreen .galleria-thumbnails .galleria-image img{background:#000}.galleria-theme-fullscreen .galleria-thumbnails .active{cursor:default}.galleria-theme-fullscreen .galleria-carousel .galleria-thumbnails-list{border-left:30px solid #000;border-right:30px solid #000}.galleria-theme-fullscreen.light .galleria-carousel .galleria-thumbnails-list{border-color:#fff}.galleria-theme-fullscreen .galleria-image-nav{width:100%;height:100%;position:absolute;top:0;left:0}.galleria-theme-fullscreen .galleria-image-nav-left,.galleria-theme-fullscreen .galleria-image-nav-right{width:100px;right:0;top:0;bottom:0;background:url(r.gif) 50% 50% no-repeat;position:absolute;cursor:pointer;z-index:2;display:none}.galleria-theme-fullscreen.smallarrows .galleria-image-nav-right{background-image:url(r-neg.png)}.galleria-theme-fullscreen .galleria-image-nav-left{left:0;right:auto;background-image:url(l.gif)}.galleria-theme-fullscreen.smallarrows .galleria-image-nav-left{background-image:url(l-neg.png)}.galleria-theme-fullscreen .galleria-loader{width:30px;height:30px;background:url(loader.gif) 50% 50% no-repeat #fff;position:absolute;top:50%;left:50%;margin-top:-15px;margin-left:-15px;z-index:3}.galleria-theme-fullscreen .galleria-info{z-index:4;font:13px/1.4 helvetica,arial,sans-serif;color:#fff;position:absolute;top:0;width:100%;border-top:2px solid #000;display:none;text-align:center;padding:10px 0;background:rgba(0,0,0,.5);border-bottom:1px solid rgba(0,0,0,.1)}.galleria-theme-fullscreen.light .galleria-info{background:rgba(255,255,255,.5);color:#000}.galleria-theme-fullscreen .galleria-info-text{width:50%;margin:0 auto}.galleria-theme-fullscreen .galleria-info-title{font-weight:700;display:inline-block;margin-right:10px}.galleria-theme-fullscreen .galleria-info-description{display:inline-block}.galleria-theme-fullscreen .galleria-thumb-nav-left,.galleria-theme-fullscreen .galleria-thumb-nav-right{cursor:pointer;display:none;background:url(p.gif) 50% 50% no-repeat;position:absolute;left:5px;top:21px;bottom:5px;width:20px;z-index:3;opacity:.8;-ms-filter:"progid:DXImageTransform.Microsoft.Alpha(Opacity=80)";filter:alpha(opacity=80)}.galleria-theme-fullscreen.light .galleria-thumb-nav-left{background-image:url(p-neg.png)}.galleria-theme-fullscreen .galleria-thumb-nav-right{background-image:url(n.gif);left:auto;right:5px}.galleria-theme-fullscreen.light .galleria-thumb-nav-right{background-image:url(n-neg.png)}.galleria-theme-fullscreen .galleria-carousel .galleria-thumb-nav-left,.galleria-theme-fullscreen .galleria-carousel .galleria-thumb-nav-right{display:block}.galleria-theme-fullscreen .galleria-carousel .galleria-thumb-nav-left:hover,.galleria-theme-fullscreen .galleria-carousel .galleria-thumb-nav-right:hover{background-color:#222}.galleria-theme-fullscreen .galleria-thumb-nav-left.disabled,.galleria-theme-fullscreen .galleria-thumb-nav-left.disabled:hover,.galleria-theme-fullscreen .galleria-thumb-nav-right.disabled,.galleria-theme-fullscreen .galleria-thumb-nav-right.disabled:hover{opacity:.2;-ms-filter:"progid:DXImageTransform.Microsoft.Alpha(Opacity=20)";filter:alpha(opacity=20);cursor:default}.galleria-theme-fullscreen.light .galleria-carousel .galleria-thumb-nav-left:hover,.galleria-theme-fullscreen.light .galleria-carousel .galleria-thumb-nav-right:hover{background-color:#ddd}


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/galleria.fullscreen.js:
--------------------------------------------------------------------------------
  1 | /**
  2 |  * Galleria Classic Theme 2017-02-27
  3 |  * http://galleria.io
  4 |  *
  5 |  * Copyright (c) 2010 - 2017 worse is better UG
  6 |  * Licensed 2017-02-27 under the MIT license
  7 |  * https://raw.github.com/worseisbetter/galleria/master/LICENSE
  8 |  *
  9 |  */
 10 | 
 11 | (function($) {
 12 | 
 13 | /*global jQuery, Galleria, window */
 14 | 
 15 | Galleria.addTheme({
 16 |     name: 'fullscreen',
 17 |     version: '1.5.4',
 18 |     author: 'Galleria',
 19 |     css: 'galleria.fullscreen.css',
 20 |     // begin site script
 21 |     defaults: {
 22 |         transition: 'none',
 23 |         imageCrop: true,
 24 |         thumbCrop: 'height',
 25 |         easing: 'galleriaOut',
 26 |         trueFullscreen: false,
 27 | 
 28 |         // set this to false if you want to keep the thumbnails:
 29 |         _hideDock: Galleria.TOUCH ? false : true,
 30 | 
 31 |         // set this to true if you want to shrink the carousel when clicking a thumbnail:
 32 |         _closeOnClick: false
 33 |     },
 34 |     init: function(options) {
 35 | 
 36 |         Galleria.requires( 1.5, 'This version of Fullscreen theme requires Galleria version 1.5 or later');
 37 | 
 38 |         this.addElement('thumbnails-tab');
 39 |         this.appendChild('thumbnails-container', 'thumbnails-tab');
 40 | 
 41 |         var tab      = this.$('thumbnails-tab'),
 42 |             loader   = this.$('loader'),
 43 |             thumbs   = this.$('thumbnails-container'),
 44 |             list     = this.$('thumbnails-list'),
 45 |             infotext = this.$('info-text'),
 46 |             info     = this.$('info'),
 47 |             OPEN     = !options._hideDock,
 48 |             POS      = 0;
 49 |             
 50 |         if (Galleria.IE) {
 51 |             this.addElement('iefix');
 52 |             this.appendChild('container', 'iefix');
 53 |             this.$('iefix').css({
 54 |                 zIndex: 3,
 55 |                 position: 'absolute',
 56 |                 backgroundColor: this.hasVariation('light') ? '#fff' : '#000',
 57 |                 opacity: 0.4,
 58 |                 top: 0
 59 |             });
 60 |         }
 61 | 
 62 |         if ( options.thumbnails === false ) {
 63 |             thumbs.hide();
 64 |         }
 65 | 
 66 |         var fixCaption = this.proxy(function(img) {
 67 | 
 68 |             var w = img.width || $(img).width();
 69 | 
 70 |             if (!(img || w)) {
 71 |                 return;
 72 |             }
 73 |             w = Math.min(w, $(window).width());
 74 |             infotext.width(w - 40);
 75 |             if (Galleria.IE && this.getOptions('showInfo')) {
 76 |                 this.$('iefix').width(info.outerWidth()).height(info.outerHeight());
 77 |             }
 78 |         });
 79 | 
 80 |         this.bind('rescale', function() {
 81 |             POS = this.getStageHeight() - tab.height() - 2;
 82 |             thumbs.css('top', OPEN ? POS - list.outerHeight() + 2 : POS);
 83 |             var img = this.getActiveImage();
 84 |             if (img) {
 85 |                 fixCaption(img);
 86 |             }
 87 |         });
 88 | 
 89 |         this.bind('loadstart', function(e) {
 90 |             if (!e.cached) {
 91 |                 loader.show().fadeTo(100, 1);
 92 |             }
 93 |             $(e.thumbTarget).css('opacity', 1).parent().siblings().children().css('opacity', 0.6);
 94 |         });
 95 | 
 96 |         this.bind('loadfinish', function(e) {
 97 |             loader.fadeOut(300);
 98 |             this.$('info, iefix').toggle(this.hasInfo());
 99 |         });
100 | 
101 |         this.bind('image', function(e) {
102 |             e.imageTarget && fixCaption(e.imageTarget);
103 |         });
104 | 
105 |         this.bind('thumbnail', function(e) {
106 |             $(e.thumbTarget).parent(':not(.active)').children().css('opacity', 0.6);
107 |             $(e.thumbTarget).on('click:fast', function() {
108 |                 if (OPEN && options._closeOnClick) {
109 |                     tab.trigger('click:fast');
110 |                 }
111 |             });
112 |         });
113 | 
114 |         this.trigger('rescale');
115 | 
116 |         if ( !Galleria.TOUCH ) {
117 | 
118 |             this.addIdleState(thumbs, { opacity: 0 });
119 |             this.addIdleState(this.get('info'), { opacity: 0 });
120 | 
121 |             this.$('image-nav-left, image-nav-right').css('opacity', 0.01).hover(function() {
122 |                 $(this).animate({opacity: 1}, 100);
123 |             }, function() {
124 |                 $(this).animate({opacity: 0});
125 |             }).show();
126 | 
127 |         }
128 | 
129 |         if (Galleria.IE) {
130 |             this.addIdleState(this.get('iefix'), { opacity: 0 });
131 |         }
132 | 
133 |         if (options._hideDock) {
134 |             tab.on('click:fast', this.proxy(function() {
135 |                 tab.toggleClass('open', !OPEN);
136 |                 if (!OPEN) {
137 |                     thumbs.animate({
138 |                         top: POS - list.outerHeight() + 2
139 |                     }, 400, options.easing);
140 |                 } else {
141 |                     thumbs.animate({
142 |                         top: POS
143 |                     }, 400, options.easing);
144 |                 }
145 |                 OPEN = !OPEN;
146 |             }));
147 |         } else {
148 |             this.bind('thumbnail', function() {
149 |                 thumbs.css('top', POS - list.outerHeight() + 2);
150 |             });
151 |             tab.css('visibility', 'hidden');
152 |         }
153 | 
154 |         this.$('thumbnails').children().hover(function() {
155 |             $(this).not('.active').children().stop().fadeTo(100, 1);
156 |         }, function() {
157 |             $(this).not('.active').children().stop().fadeTo(400, 0.6);
158 |         });
159 | 
160 |         this.enterFullscreen();
161 |         this.attachKeyboard({
162 |             escape: function(e) {
163 |                 return false;
164 |             },
165 |             up: function(e) {
166 |                 if (!OPEN) {
167 |                     tab.trigger('click:fast');
168 |                 }
169 |                 e.preventDefault();
170 |             },
171 |             down: function(e) {
172 |                 if (OPEN) {
173 |                     tab.trigger('click:fast');
174 |                 }
175 |                 e.preventDefault();
176 |             }
177 |         });
178 |     }
179 |     // end site script
180 | });
181 | 
182 | }(jQuery));
183 | 


--------------------------------------------------------------------------------
/controller.js:
--------------------------------------------------------------------------------
  1 | const 
  2 | crypto = require('crypto'),
  3 | config = require('./config'),
  4 | NodeCache = require( "node-cache" ),
  5 | rp = require('request-promise');
  6 | 
  7 | var mycache = new NodeCache();
  8 | 
  9 | 
 10 | //steps 1,2,3
 11 | module.exports.home = async (req,res,next)=>{    
 12 | 
 13 |   let token = req.session.token;
 14 |   if(token){
 15 |     try{
 16 | 
 17 |       let paths = await getLinksAsync(token); 
 18 | 
 19 |       if(paths.length>0){
 20 |         res.render('gallery', { imgs: paths, layout:false});
 21 |       }else{
 22 |         //if no images, ask user to upload some
 23 |         res.render('empty', {layout:false});
 24 |       }    
 25 | 
 26 |     }catch(error){
 27 |       return next(new Error("Error getting images from Dropbox"));
 28 |     }
 29 | 
 30 |   }else{
 31 |     res.redirect('/login');
 32 |   }
 33 | }
 34 | 
 35 | 
 36 | 
 37 | //steps 4,5,6
 38 | module.exports.login = (req,res,next)=>{
 39 | 
 40 |   //create a random state value
 41 |   let state = crypto.randomBytes(16).toString('hex');
 42 | 
 43 |   //Save state and temporarysession for 10 mins
 44 |   // mycache.set(state, "aTempSessionValue", 600);
 45 | 
 46 |   mycache.set(state, req.sessionID, 600);
 47 | 
 48 |   let dbxRedirect= config.DBX_OAUTH_DOMAIN 
 49 |   + config.DBX_OAUTH_PATH 
 50 |   + "?response_type=code&client_id="+config.DBX_APP_KEY
 51 |   + "&redirect_uri="+config.OAUTH_REDIRECT_URL 
 52 |   + "&state="+state;
 53 |   
 54 |   res.redirect(dbxRedirect);
 55 | }
 56 | 
 57 | 
 58 | //steps 8-12
 59 | module.exports.oauthredirect = async (req,res,next)=>{
 60 | 
 61 | 	if(req.query.error_description){
 62 | 		return next( new Error(req.query.error_description));
 63 | 	} 
 64 | 
 65 | 	let state= req.query.state;
 66 | 
 67 | 
 68 | 	//if(!mycache.get(state)){
 69 | 	if(mycache.get(state)!=req.sessionID){
 70 | 		return next(new Error("session expired or invalid state"));
 71 | 	} 
 72 | 
 73 |   //Exchange code for token
 74 |   if(req.query.code ){
 75 | 
 76 |   	let options={
 77 |   		url: config.DBX_API_DOMAIN + config.DBX_TOKEN_PATH, 
 78 |       //build query string
 79 |       qs: {'code': req.query.code, 
 80 |       'grant_type': 'authorization_code', 
 81 |       'client_id': config.DBX_APP_KEY, 
 82 |       'client_secret':config.DBX_APP_SECRET,
 83 |       'redirect_uri':config.OAUTH_REDIRECT_URL}, 
 84 |       method: 'POST',
 85 |       json: true 
 86 |     }
 87 | 
 88 |     try{
 89 | 
 90 |     	let response = await rp(options);
 91 | 
 92 |       //we will replace later cache with a proper storage
 93 | 			//mycache.set("aTempTokenKey", response.access_token, 3600);
 94 | 			await regenerateSessionAsync(req);
 95 | 			req.session.token = response.access_token;
 96 | 
 97 |       res.redirect("/");
 98 | 
 99 |     }catch(error){
100 |     	return next(new Error('error getting token. '+error.message));
101 |     }        
102 |   }
103 | }
104 | 
105 | 
106 | //Returns a promise that fulfills when a new session is created
107 | function regenerateSessionAsync(req){
108 |   return new Promise((resolve,reject)=>{
109 |     req.session.regenerate((err)=>{
110 |       err ? reject(err) : resolve();
111 |     });
112 |   });
113 | }
114 | 
115 | 
116 | 
117 | module.exports.logout = async (req,res,next)=>{
118 |   try{
119 | 
120 |     await destroySessionAsync(req);
121 |     res.redirect("/login");
122 | 
123 |   }catch(error){
124 |     return next(new Error('error logging out. '+error.message));
125 |   }  
126 | }
127 | 
128 | //Returns a promise that fulfills when a session is destroyed
129 | function destroySessionAsync(req){
130 |   return new Promise(async (resolve,reject)=>{
131 | 
132 |     try{
133 | 
134 |     //First ensure token gets revoked in Dropbox.com
135 |       let options={
136 |         url: config.DBX_API_DOMAIN + config.DBX_TOKEN_REVOKE_PATH, 
137 |         headers:{"Authorization":"Bearer "+req.session.token},
138 |         method: 'POST'
139 |       }
140 |       let result = await rp(options);
141 | 
142 |     }catch(error){
143 |       reject(new Error('error destroying token. '));
144 |     }  
145 | 
146 |     //then destroy the session
147 |     req.session.destroy((err)=>{
148 |       err ? reject(err) : resolve();
149 |     });
150 |   });
151 | }
152 | 
153 | 
154 | 
155 | /*Gets temporary links for a set of files in the root folder of the app
156 | It is a two step process:
157 | 1.  Get a list of all the paths of files in the folder
158 | 2.  Fetch a temporary link for each file in the folder */
159 | async function getLinksAsync(token){
160 | 
161 |   //List images from the root of the app folder
162 |   let result= await listImagePathsAsync(token,'');
163 | 
164 |   //Get a temporary link for each of those paths returned
165 |   let temporaryLinkResults= await getTemporaryLinksForPathsAsync(token,result.paths);
166 | 
167 |   //Construct a new array only with the link field
168 |   var temporaryLinks = temporaryLinkResults.map(function (entry) {
169 |     return entry.link;
170 |   });
171 | 
172 |   return temporaryLinks;
173 | }
174 | 
175 | 
176 | /*
177 | Returns an object containing an array with the path_lower of each 
178 | image file and if more files a cursor to continue */
179 | async function listImagePathsAsync(token,path){
180 | 
181 |   let options={
182 |     url: config.DBX_API_DOMAIN + config.DBX_LIST_FOLDER_PATH, 
183 |     headers:{"Authorization":"Bearer "+token},
184 |     method: 'POST',
185 |     json: true ,
186 |     body: {"path":path}
187 |   }
188 | 
189 |   try{
190 |     //Make request to Dropbox to get list of files
191 |     let result = await rp(options);
192 | 
193 |     //Filter response to images only
194 |     let entriesFiltered= result.entries.filter(function(entry){
195 |       return entry.path_lower.search(/\.(gif|jpg|jpeg|tiff|png)$/i) > -1;
196 |     });        
197 | 
198 |     //Get an array from the entries with only the path_lower fields
199 |     var paths = entriesFiltered.map(function (entry) {
200 |       return entry.path_lower;
201 |     });
202 | 
203 |     //return a cursor only if there are more files in the current folder
204 |     let response= {};
205 |     response.paths= paths;
206 |     if(result.hasmore) response.cursor= result.cursor;        
207 |     return response;
208 | 
209 |   }catch(error){
210 |     return next(new Error('error listing folder. '+error.message));
211 |   }        
212 | } 
213 | 
214 | 
215 | //Returns an array with temporary links from an array with file paths
216 | function getTemporaryLinksForPathsAsync(token,paths){
217 | 
218 |   var promises = [];
219 |   let options={
220 |     url: config.DBX_API_DOMAIN + config.DBX_GET_TEMPORARY_LINK_PATH, 
221 |     headers:{"Authorization":"Bearer "+token},
222 |     method: 'POST',
223 |     json: true
224 |   }
225 | 
226 |   //Create a promise for each path and push it to an array of promises
227 |   paths.forEach((path_lower)=>{
228 |     options.body = {"path":path_lower};
229 |     promises.push(rp(options));
230 |   });
231 | 
232 |   //returns a promise that fullfills once all the promises in the array complete or one fails
233 |   return Promise.all(promises);
234 | }


--------------------------------------------------------------------------------
/public/galleria/themes/classic/galleria.classic.css:
--------------------------------------------------------------------------------
  1 | /**
  2 |  * Galleria Classic Theme 2017-02-13
  3 |  * http://galleria.io
  4 |  *
  5 |  * Copyright (c) 2010 - 2017 worse is better UG
  6 |  * Licensed under the MIT license
  7 |  * https://raw.github.com/worseisbetter/galleria/master/LICENSE
  8 |  *
  9 |  */
 10 | 
 11 | #galleria-loader{height:1px!important}
 12 | 
 13 | .galleria-theme-classic {
 14 |     position: relative;
 15 |     overflow: hidden;
 16 |     background: #000;
 17 | }
 18 | .galleria-theme-classic img {
 19 |     -moz-user-select: none;
 20 |     -webkit-user-select: none;
 21 |     -o-user-select: none;
 22 | }
 23 | .galleria-theme-classic .galleria-stage {
 24 |     position: absolute;
 25 |     top: 10px;
 26 |     bottom: 60px;
 27 |     left: 10px;
 28 |     right: 10px;
 29 |     overflow:hidden;
 30 | }
 31 | .galleria-theme-classic .galleria-thumbnails-container {
 32 |     height: 50px;
 33 |     bottom: 0;
 34 |     position: absolute;
 35 |     left: 10px;
 36 |     right: 10px;
 37 |     z-index: 2;
 38 | }
 39 | .galleria-theme-classic .galleria-carousel .galleria-thumbnails-list {
 40 |     margin-left: 30px;
 41 |     margin-right: 30px;
 42 | }
 43 | .galleria-theme-classic .galleria-thumbnails .galleria-image {
 44 |     height: 40px;
 45 |     width: 60px;
 46 |     background: #000;
 47 |     margin: 0 5px 0 0;
 48 |     border: 1px solid #000;
 49 |     float: left;
 50 |     cursor: pointer;
 51 | }
 52 | .galleria-theme-classic .galleria-counter {
 53 |     position: absolute;
 54 |     bottom: 10px;
 55 |     left: 10px;
 56 |     text-align: right;
 57 |     color: #fff;
 58 |     font: normal 11px/1 arial,sans-serif;
 59 |     z-index: 1;
 60 | }
 61 | .galleria-theme-classic .galleria-loader {
 62 |     background: #000;
 63 |     width: 20px;
 64 |     height: 20px;
 65 |     position: absolute;
 66 |     top: 10px;
 67 |     right: 10px;
 68 |     z-index: 2;
 69 |     display: none;
 70 |     background: url(classic-loader.gif) no-repeat 2px 2px;
 71 | }
 72 | .galleria-theme-classic .galleria-info {
 73 |     width: 50%;
 74 |     top: 15px;
 75 |     left: 15px;
 76 |     z-index: 2;
 77 |     position: absolute;
 78 | }
 79 | .galleria-theme-classic .galleria-info-text {
 80 |     background-color: #000;
 81 |     padding: 12px;
 82 |     display: none;
 83 |     /* IE7 */ zoom:1;
 84 | }
 85 | .galleria-theme-classic .galleria-info-title {
 86 |     font: bold 12px/1.1 arial,sans-serif;
 87 |     margin: 0;
 88 |     color: #fff;
 89 |     margin-bottom: 7px;
 90 | }
 91 | .galleria-theme-classic .galleria-info-description {
 92 |     font: italic 12px/1.4 georgia,serif;
 93 |     margin: 0;
 94 |     color: #bbb;
 95 | }
 96 | .galleria-theme-classic .galleria-info-close {
 97 |     width: 9px;
 98 |     height: 9px;
 99 |     position: absolute;
100 |     top: 5px;
101 |     right: 5px;
102 |     background-position: -753px -11px;
103 |     opacity: .5;
104 |     filter: alpha(opacity=50);
105 |     cursor: pointer;
106 |     display: none;
107 | }
108 | .galleria-theme-classic .notouch .galleria-info-close:hover{
109 |     opacity:1;
110 |     filter: alpha(opacity=100);
111 | }
112 | .galleria-theme-classic .touch .galleria-info-close:active{
113 |     opacity:1;
114 |     filter: alpha(opacity=100);
115 | }
116 | .galleria-theme-classic .galleria-info-link {
117 |     background-position: -669px -5px;
118 |     opacity: .7;
119 |     filter: alpha(opacity=70);
120 |     position: absolute;
121 |     width: 20px;
122 |     height: 20px;
123 |     cursor: pointer;
124 |     background-color: #000;
125 | }
126 | .galleria-theme-classic.notouch .galleria-info-link:hover {
127 |     opacity: 1;
128 |     filter: alpha(opacity=100);
129 | }
130 | .galleria-theme-classic.touch .galleria-info-link:active {
131 |     opacity: 1;
132 |     filter: alpha(opacity=100);
133 | }
134 | .galleria-theme-classic .galleria-image-nav {
135 |     position: absolute;
136 |     top: 50%;
137 |     margin-top: -62px;
138 |     width: 100%;
139 |     height: 62px;
140 |     left: 0;
141 | }
142 | .galleria-theme-classic .galleria-image-nav-left,
143 | .galleria-theme-classic .galleria-image-nav-right {
144 |     opacity: .3;
145 |     filter: alpha(opacity=30);
146 |     cursor: pointer;
147 |     width: 62px;
148 |     height: 124px;
149 |     position: absolute;
150 |     left: 10px;
151 |     z-index: 2;
152 |     background-position: 0 46px;
153 | }
154 | .galleria-theme-classic .galleria-image-nav-right {
155 |     left: auto;
156 |     right: 10px;
157 |     background-position: -254px 46px;
158 |     z-index: 2;
159 | }
160 | .galleria-theme-classic.notouch .galleria-image-nav-left:hover,
161 | .galleria-theme-classic.notouch .galleria-image-nav-right:hover {
162 |     opacity: 1;
163 |     filter: alpha(opacity=100);
164 | }
165 | .galleria-theme-classic.touch .galleria-image-nav-left:active,
166 | .galleria-theme-classic.touch .galleria-image-nav-right:active {
167 |     opacity: 1;
168 |     filter: alpha(opacity=100);
169 | }
170 | .galleria-theme-classic .galleria-thumb-nav-left,
171 | .galleria-theme-classic .galleria-thumb-nav-right {
172 |     cursor: pointer;
173 |     display: none;
174 |     background-position: -495px 5px;
175 |     position: absolute;
176 |     left: 0;
177 |     top: 0;
178 |     height: 40px;
179 |     width: 23px;
180 |     z-index: 3;
181 |     opacity: .8;
182 |     filter: alpha(opacity=80);
183 | }
184 | .galleria-theme-classic .galleria-thumb-nav-right {
185 |     background-position: -578px 5px;
186 |     border-right: none;
187 |     right: 0;
188 |     left: auto;
189 | }
190 | .galleria-theme-classic .galleria-thumbnails-container .disabled {
191 |     opacity: .2;
192 |     filter: alpha(opacity=20);
193 |     cursor: default;
194 | }
195 | .galleria-theme-classic.notouch .galleria-thumb-nav-left:hover,
196 | .galleria-theme-classic.notouch .galleria-thumb-nav-right:hover {
197 |     opacity: 1;
198 |     filter: alpha(opacity=100);
199 |     background-color: #111;
200 | }
201 | .galleria-theme-classic.touch .galleria-thumb-nav-left:active,
202 | .galleria-theme-classic.touch .galleria-thumb-nav-right:active {
203 |     opacity: 1;
204 |     filter: alpha(opacity=100);
205 |     background-color: #111;
206 | }
207 | .galleria-theme-classic.notouch .galleria-thumbnails-container .disabled:hover {
208 |     opacity: .2;
209 |     filter: alpha(opacity=20);
210 |     background-color: transparent;
211 | }
212 | 
213 | .galleria-theme-classic .galleria-carousel .galleria-thumb-nav-left,
214 | .galleria-theme-classic .galleria-carousel .galleria-thumb-nav-right {
215 |     display: block;
216 | }
217 | .galleria-theme-classic .galleria-thumb-nav-left,
218 | .galleria-theme-classic .galleria-thumb-nav-right,
219 | .galleria-theme-classic .galleria-info-link,
220 | .galleria-theme-classic .galleria-info-close,
221 | .galleria-theme-classic .galleria-image-nav-left,
222 | .galleria-theme-classic .galleria-image-nav-right {
223 |     background-image: url(classic-map.png);
224 |     background-repeat: no-repeat;
225 | }
226 | .galleria-theme-classic.galleria-container.videoplay .galleria-info,
227 | .galleria-theme-classic.galleria-container.videoplay .galleria-counter{ display:none!important; }
228 | 


--------------------------------------------------------------------------------
/public/galleria/plugins/history/history-demo.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html>
  2 | <html lang="en">
  3 |     <head>
  4 |         <meta charset="utf-8">
  5 |         <title>Galleria History Plugin</title>
  6 |         <style>
  7 | 
  8 |             /* Demo styles */
  9 |             html,body{background:#222;margin:0;}
 10 |             body{border-top:4px solid #000;}
 11 |             .content{color:#777;font:12px/1.4 "helvetica neue",arial,sans-serif;width:620px;margin:20px auto;}
 12 |             h1{font-size:12px;font-weight:normal;color:#ddd;margin:0;}
 13 |             p{margin:0 0 20px}
 14 |             a {color:#22BCB9;text-decoration:none;}
 15 |             .cred{margin-top:20px;font-size:11px;}
 16 | 
 17 |             /* This rule is read by Galleria to define the gallery height: */
 18 |             #galleria{height:320px}
 19 | 
 20 |         </style>
 21 | 
 22 |         <!-- load jQuery -->
 23 |         <script src="http://ajax.googleapis.com/ajax/libs/jquery/1/jquery.js"></script>
 24 | 
 25 |         <!-- load Galleria -->
 26 |         <script src="../../galleria-1.5.7.min.js"></script>
 27 | 
 28 |         <!-- load the History plugin, no need for further scripting -->
 29 |         <script src="galleria.history.min.js"></script>
 30 | 
 31 |     </head>
 32 | <body>
 33 |     <div class="content">
 34 |         <h1>Galleria History Plugin</h1>
 35 |         <p>Demonstrating a basic history example. Supports most browsers, including FF 3.0+ and IE 7+</p>
 36 | 
 37 |         <!-- Adding gallery images. We use resized thumbnails here for better performance, but it’s not necessary -->
 38 | 
 39 |         <div id="galleria">
 40 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/3/34/Locomotives-Roundhouse2.jpg/800px-Locomotives-Roundhouse2.jpg">
 41 |                 <img title="Locomotives Roundhouse"
 42 |                      alt="Steam locomotives of the Chicago &amp; North Western Railway."
 43 |                      src="http://upload.wikimedia.org/wikipedia/commons/thumb/3/34/Locomotives-Roundhouse2.jpg/100px-Locomotives-Roundhouse2.jpg">
 44 |             </a>
 45 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/3/36/Icebergs_in_the_High_Arctic_-_20050907.jpg/1000px-Icebergs_in_the_High_Arctic_-_20050907.jpg">
 46 |                 <img title="Icebergs in the High Arctic"
 47 |                      alt="”The debris loading isn't particularly extensive, but the color is usual.”"
 48 |                      src="http://upload.wikimedia.org/wikipedia/commons/thumb/3/36/Icebergs_in_the_High_Arctic_-_20050907.jpg/100px-Icebergs_in_the_High_Arctic_-_20050907.jpg">
 49 |             </a>
 50 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/f/fe/Ara%C3%B1a._A_Estrada%2C_Galiza._02.jpg/1000px-Ara%C3%B1a._A_Estrada%2C_Galiza._02.jpg">
 51 |                 <img title="Araña"
 52 |                      alt="Xysticus cristatus, A Estrada, Galicia, Spain"
 53 |                      src="http://upload.wikimedia.org/wikipedia/commons/thumb/f/fe/Ara%C3%B1a._A_Estrada%2C_Galiza._02.jpg/100px-Ara%C3%B1a._A_Estrada%2C_Galiza._02.jpg">
 54 |             </a>
 55 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/2/2d/9104_-_Milano_-_Museo_storia_naturale_-_Fluorite_-_Foto_Giovanni_Dall%27Orto_22-Apr-2007.jpg/1000px-9104_-_Milano_-_Museo_storia_naturale_-_Fluorite_-_Foto_Giovanni_Dall%27Orto_22-Apr-2007.jpg">
 56 |                 <img title="Museo storia naturale"
 57 |                      src="http://upload.wikimedia.org/wikipedia/commons/thumb/2/2d/9104_-_Milano_-_Museo_storia_naturale_-_Fluorite_-_Foto_Giovanni_Dall%27Orto_22-Apr-2007.jpg/100px-9104_-_Milano_-_Museo_storia_naturale_-_Fluorite_-_Foto_Giovanni_Dall%27Orto_22-Apr-2007.jpg">
 58 |             </a>
 59 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/1/15/Grj%C3%B3tagj%C3%A1_caves_in_summer_2009_%282%29.jpg/1000px-Grj%C3%B3tagj%C3%A1_caves_in_summer_2009_%282%29.jpg">
 60 |                 <img title="Grjótagjá caves in summer 2009"
 61 |                      src="http://upload.wikimedia.org/wikipedia/commons/thumb/1/15/Grj%C3%B3tagj%C3%A1_caves_in_summer_2009_%282%29.jpg/100px-Grj%C3%B3tagj%C3%A1_caves_in_summer_2009_%282%29.jpg">
 62 |             </a>
 63 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/9/90/20091128_Loutra_Thermes_Xanthi_Thrace_Greece_2.jpg/1000px-20091128_Loutra_Thermes_Xanthi_Thrace_Greece_2.jpg">
 64 |                 <img title="Thermes"
 65 |                      alt="Xanthi hot-spa springs, Xanthi Prefecture, Greece"
 66 |                      src="http://upload.wikimedia.org/wikipedia/commons/thumb/9/90/20091128_Loutra_Thermes_Xanthi_Thrace_Greece_2.jpg/100px-20091128_Loutra_Thermes_Xanthi_Thrace_Greece_2.jpg">
 67 |             </a>
 68 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/5/58/Polish_Army_Ko%C5%82obrzeg_077.JPG/1024px-Polish_Army_Ko%C5%82obrzeg_077.JPG">
 69 |                 <img title="Polish Army Kołobrzeg"
 70 |                      alt="A display of the Polish Army. Both the soldier, and the vehicle belong to the 7th Pomeranian Coastal Defence Brigade, a part of the Szczecin-based 12th Mechanized Division ”Bolesław Krzywousty”"
 71 |                      src="http://upload.wikimedia.org/wikipedia/commons/thumb/5/58/Polish_Army_Ko%C5%82obrzeg_077.JPG/100px-Polish_Army_Ko%C5%82obrzeg_077.JPG">
 72 |             </a>
 73 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/2/2d/20100213_Zlatograd_Bulgaria_3.jpg/1024px-20100213_Zlatograd_Bulgaria_3.jpg">
 74 |                 <img title="Zlatograd Bulgaria"
 75 |                      src="http://upload.wikimedia.org/wikipedia/commons/thumb/2/2d/20100213_Zlatograd_Bulgaria_3.jpg/100px-20100213_Zlatograd_Bulgaria_3.jpg">
 76 |             </a>
 77 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/b/b5/FEMA_-_5399_-_Photograph_by_Andrea_Booher_taken_on_09-28-2001_in_New_York.jpg/1024px-FEMA_-_5399_-_Photograph_by_Andrea_Booher_taken_on_09-28-2001_in_New_York.jpg">
 78 |                 <img title="09-28-2001 in New York City"
 79 |                      alt="New York, NY, September 28, 2001 -- Debris on surrounding roofs at the site of the World Trade Center. Photo by Andrea Booher/ FEMA News Photo"
 80 |                      src="http://upload.wikimedia.org/wikipedia/commons/thumb/b/b5/FEMA_-_5399_-_Photograph_by_Andrea_Booher_taken_on_09-28-2001_in_New_York.jpg/100px-FEMA_-_5399_-_Photograph_by_Andrea_Booher_taken_on_09-28-2001_in_New_York.jpg">
 81 |             </a>
 82 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/e/e6/Antennae%2C_Hubble_images.jpg/1024px-Antennae%2C_Hubble_images.jpg">
 83 |                 <img src="http://upload.wikimedia.org/wikipedia/commons/thumb/e/e6/Antennae%2C_Hubble_images.jpg/100px-Antennae%2C_Hubble_images.jpg">
 84 |             </a>
 85 |         </div>
 86 | 
 87 |         <p class="cred">Made by <a href="http://galleria.io">Galleria</a>.</p>
 88 |     </div>
 89 | 
 90 |     <script>
 91 |     $(function() {
 92 |         // Load the classic theme
 93 |         Galleria.loadTheme('../../themes/classic/galleria.classic.min.js');
 94 | 
 95 |         // Initialize Galleria
 96 |         Galleria.run('#galleria');
 97 |     });
 98 |     </script>
 99 |     </body>
100 | </html>


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/fullscreen-demo.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html>
  2 | <html lang="sv">
  3 |     <head>
  4 |         <meta charset="utf-8">
  5 |         <meta name="viewport" content="width=device-width,initial-scale=0.5,user-scalable=no">
  6 |         <title>Galleria Fullscreen Theme Demo</title>
  7 | 
  8 |         <!-- load jQuery -->
  9 |         <!-- <script src="http://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.js"></script> -->
 10 |         <script src="http://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.js"></script>
 11 | 
 12 |         <!-- load Galleria -->
 13 |         <script src="../../galleria-1.5.7.min.js"></script>
 14 | 
 15 |         <style>
 16 |         body{background:#000;}
 17 |         </style>
 18 | 
 19 |     </head>
 20 | <body>
 21 |     <div class="galleria">
 22 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/800px-Biandintz_eta_zaldiak_-_modified2.jpg">
 23 |             <img 
 24 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/100px-Biandintz_eta_zaldiak_-_modified2.jpg",
 25 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/1280px-Biandintz_eta_zaldiak_-_modified2.jpg"
 26 |                 data-title="Biandintz eta zaldiak"
 27 |                 data-description="Horses on Bianditz mountain, in Navarre, Spain."
 28 |             >
 29 |         </a>
 30 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/800px-Athabasca_Rail_at_Brule_Lake.jpg">
 31 |             <img 
 32 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/100px-Athabasca_Rail_at_Brule_Lake.jpg",
 33 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/1280px-Athabasca_Rail_at_Brule_Lake.jpg"
 34 |                 data-title="Athabasca Rail"
 35 |                 data-description="The Athabasca River railroad track at the mouth of Brulé Lake in Alberta, Canada."
 36 |             >
 37 |         </a>
 38 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/1280px-Back-scattering_crepuscular_rays_panorama_1.jpg">
 39 |             <img 
 40 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/100px-Back-scattering_crepuscular_rays_panorama_1.jpg",
 41 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/1400px-Back-scattering_crepuscular_rays_panorama_1.jpg"
 42 |                 data-title="Back-scattering crepuscular rays"
 43 |                 data-description="Picture of the day on Wikimedia Commons 26 September 2010."
 44 |             >
 45 |         </a>
 46 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/800px-Interior_convento_3.jpg">
 47 |             <img 
 48 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/120px-Interior_convento_3.jpg",
 49 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/1400px-Interior_convento_3.jpg"
 50 |                 data-title="Interior convento"
 51 |                 data-description="Interior view of Yuriria Convent, founded in 1550."
 52 |             >
 53 |         </a>
 54 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/800px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg">
 55 |             <img 
 56 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/100px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg",
 57 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/1280px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg"
 58 |                 data-title="Oxbow Bend outlook"
 59 |                 data-description="View over the Snake River to the Mount Moran with the Skillet Glacier."
 60 |             >
 61 |         </a>
 62 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/800px-Hazy_blue_hour_in_Grand_Canyon.JPG">
 63 |             <img 
 64 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/100px-Hazy_blue_hour_in_Grand_Canyon.JPG",
 65 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/1280px-Hazy_blue_hour_in_Grand_Canyon.JPG"
 66 |                 data-title="Hazy blue hour"
 67 |                 data-description="Hazy blue hour in Grand Canyon. View from the South Rim."
 68 |             >
 69 |         </a>
 70 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/800px-2909_vallon_moy_res.jpg">
 71 |             <img 
 72 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/100px-2909_vallon_moy_res.jpg",
 73 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/1280px-2909_vallon_moy_res.jpg"
 74 |                 data-title="Haute Severaisse valley"
 75 |                 data-description="View of Haute Severaisse valley and surrounding summits from the slopes of Les Vernets."
 76 |             >
 77 |         </a>
 78 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/800px-Bohinjsko_jezero_2.jpg">
 79 |             <img 
 80 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/100px-Bohinjsko_jezero_2.jpg",
 81 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/1280px-Bohinjsko_jezero_2.jpg"
 82 |                 data-title="Bohinj lake"
 83 |                 data-description="Bohinj lake (Triglav National Park, Slovenia) in the morning."
 84 |             >
 85 |         </a>
 86 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/800px-Bowling_Balls_Beach_2_edit.jpg">
 87 |             <img 
 88 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/100px-Bowling_Balls_Beach_2_edit.jpg",
 89 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/1280px-Bowling_Balls_Beach_2_edit.jpg"
 90 |                 data-title="Bowling Balls"
 91 |                 data-description="Mendocino county, California, USA."
 92 |             >
 93 |         </a>
 94 |     </div>
 95 |     <script>
 96 |     $(function() {
 97 |         // Load the Fullscreen theme
 98 |         Galleria.loadTheme('galleria.fullscreen.min.js');
 99 | 
100 |         // Initialize Galleria
101 |         Galleria.run('.galleria');
102 |     });
103 |     </script>
104 |     </body>
105 | </html>
106 | 


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/fullscreen-demo-cdn.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html>
  2 | <html lang="sv">
  3 |     <head>
  4 |         <meta charset="utf-8">
  5 |         <meta name="viewport" content="width=device-width,initial-scale=0.5,user-scalable=no">
  6 |         <title>Galleria Fullscreen Theme Demo</title>
  7 | 
  8 |         <style>
  9 |         body{background:#000;}
 10 |         </style>
 11 | 
 12 |     </head>
 13 | <body>
 14 |     <div class="galleria">
 15 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/800px-Biandintz_eta_zaldiak_-_modified2.jpg">
 16 |             <img 
 17 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/100px-Biandintz_eta_zaldiak_-_modified2.jpg",
 18 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/1280px-Biandintz_eta_zaldiak_-_modified2.jpg"
 19 |                 data-title="Biandintz eta zaldiak"
 20 |                 data-description="Horses on Bianditz mountain, in Navarre, Spain."
 21 |             >
 22 |         </a>
 23 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/800px-Athabasca_Rail_at_Brule_Lake.jpg">
 24 |             <img 
 25 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/100px-Athabasca_Rail_at_Brule_Lake.jpg",
 26 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/1280px-Athabasca_Rail_at_Brule_Lake.jpg"
 27 |                 data-title="Athabasca Rail"
 28 |                 data-description="The Athabasca River railroad track at the mouth of Brulé Lake in Alberta, Canada."
 29 |             >
 30 |         </a>
 31 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/1280px-Back-scattering_crepuscular_rays_panorama_1.jpg">
 32 |             <img 
 33 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/100px-Back-scattering_crepuscular_rays_panorama_1.jpg",
 34 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/1400px-Back-scattering_crepuscular_rays_panorama_1.jpg"
 35 |                 data-title="Back-scattering crepuscular rays"
 36 |                 data-description="Picture of the day on Wikimedia Commons 26 September 2010."
 37 |             >
 38 |         </a>
 39 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/800px-Interior_convento_3.jpg">
 40 |             <img 
 41 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/120px-Interior_convento_3.jpg",
 42 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/1400px-Interior_convento_3.jpg"
 43 |                 data-title="Interior convento"
 44 |                 data-description="Interior view of Yuriria Convent, founded in 1550."
 45 |             >
 46 |         </a>
 47 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/800px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg">
 48 |             <img 
 49 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/100px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg",
 50 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/1280px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg"
 51 |                 data-title="Oxbow Bend outlook"
 52 |                 data-description="View over the Snake River to the Mount Moran with the Skillet Glacier."
 53 |             >
 54 |         </a>
 55 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/800px-Hazy_blue_hour_in_Grand_Canyon.JPG">
 56 |             <img 
 57 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/100px-Hazy_blue_hour_in_Grand_Canyon.JPG",
 58 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/1280px-Hazy_blue_hour_in_Grand_Canyon.JPG"
 59 |                 data-title="Hazy blue hour"
 60 |                 data-description="Hazy blue hour in Grand Canyon. View from the South Rim."
 61 |             >
 62 |         </a>
 63 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/800px-2909_vallon_moy_res.jpg">
 64 |             <img 
 65 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/100px-2909_vallon_moy_res.jpg",
 66 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/1280px-2909_vallon_moy_res.jpg"
 67 |                 data-title="Haute Severaisse valley"
 68 |                 data-description="View of Haute Severaisse valley and surrounding summits from the slopes of Les Vernets."
 69 |             >
 70 |         </a>
 71 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/800px-Bohinjsko_jezero_2.jpg">
 72 |             <img 
 73 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/100px-Bohinjsko_jezero_2.jpg",
 74 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/1280px-Bohinjsko_jezero_2.jpg"
 75 |                 data-title="Bohinj lake"
 76 |                 data-description="Bohinj lake (Triglav National Park, Slovenia) in the morning."
 77 |             >
 78 |         </a>
 79 |         <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/800px-Bowling_Balls_Beach_2_edit.jpg">
 80 |             <img 
 81 |                 src="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/100px-Bowling_Balls_Beach_2_edit.jpg",
 82 |                 data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/1280px-Bowling_Balls_Beach_2_edit.jpg"
 83 |                 data-title="Bowling Balls"
 84 |                 data-description="Mendocino county, California, USA."
 85 |             >
 86 |         </a>
 87 |     </div>
 88 | 
 89 |     <!-- load jQuery -->
 90 |     <!-- <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.js"></script> -->
 91 |     <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.js"></script>
 92 |     <!-- load Galleria -->
 93 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/galleria/1.5.4/galleria.min.js"></script>
 94 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/galleria/1.5.4/themes/fullscreen/galleria.fullscreen.min.js"></script>
 95 |     <script>
 96 |         $(function() {
 97 |             Galleria.run('.galleria');
 98 |         });
 99 |     </script>
100 |     </body>
101 | </html>
102 | 


--------------------------------------------------------------------------------
/public/galleria/themes/fullscreen/galleria.fullscreen.css:
--------------------------------------------------------------------------------
  1 | /**
  2 |  * Galleria Classic Theme 2017-02-27
  3 |  * http://galleria.io
  4 |  *
  5 |  * Copyright (c) 2010 - 2017 worse is better UG
  6 |  * Licensed 2017-02-27 under the MIT license
  7 |  * https://raw.github.com/worseisbetter/galleria/master/LICENSE
  8 |  *
  9 |  */
 10 | 
 11 | #galleria-loader{height:1px!important}
 12 | 
 13 | html,
 14 | body { background: #000 }
 15 | .galleria-theme-fullscreen {
 16 |     height: 100%;
 17 |     overflow: hidden;
 18 |     position: fixed;
 19 |     top: 0;
 20 |     left: 0;
 21 |     width: 100%;
 22 |     background: #000;
 23 |     -webkit-font-smoothing: antialiased;
 24 | }
 25 | .galleria-theme-fullscreen img {
 26 |     -moz-user-select: none;
 27 |     -webkit-user-select: none;
 28 |     -o-user-select: none;
 29 | }
 30 | .galleria-theme-fullscreen .galleria-stage {
 31 |     width: 100%;
 32 |     height: 100%;
 33 |     position: absolute;
 34 | }
 35 | .galleria-theme-fullscreen .galleria-thumbnails-container {
 36 |     position: absolute;
 37 |     bottom: 0;
 38 |     z-index: 2;
 39 |     padding-top: 16px;
 40 |     width: 100%;
 41 | }
 42 | .galleria-theme-fullscreen.videoplay .galleria-thumbnails-container { display:none!important; }
 43 | .galleria-theme-fullscreen.videoplay .galleria-image-nav { top:80px; bottom:80px; height:auto; }
 44 | 
 45 | .galleria-theme-fullscreen .galleria-thumbnails-tab {
 46 |     opacity: .7;
 47 |     -ms-filter: "progid:DXImageTransform.Microsoft.Alpha(Opacity=70)";
 48 |     filter: alpha(opacity=70);
 49 |     position: absolute;
 50 |     left: 50%;
 51 |     margin-left: -50px;
 52 |     top: 0;
 53 |     height: 16px;
 54 |     width: 100px;
 55 |     background: #000 url(up.gif) no-repeat 50% 5px;
 56 |     cursor: pointer;
 57 |     -moz-border-radius-topleft: 4px;
 58 |     -moz-border-radius-topright: 4px;
 59 |     -webkit-border-top-right-radius: 4px;
 60 |     -webkit-border-top-left-radius: 4px;
 61 | }
 62 | .galleria-theme-fullscreen.light .galleria-thumbnails-tab {
 63 |     background:#fff url(up-neg.gif) no-repeat 50% 50%;
 64 |     opacity: 1;
 65 |     -ms-filter: "progid:DXImageTransform.Microsoft.Alpha(Opacity=100)";
 66 |     filter: alpha(opacity=100);
 67 | }
 68 | .galleria-theme-fullscreen .galleria-thumbnails-tab:hover {
 69 |     opacity: 1;
 70 |     -ms-filter: "progid:DXImageTransform.Microsoft.Alpha(Opacity=100)";
 71 |     filter: alpha(opacity=100);
 72 | }
 73 | .galleria-theme-fullscreen .galleria-thumbnails-tab.open,
 74 | .galleria-theme-fullscreen .galleria-thumbnails-tab.open:hover {
 75 |     background-image: url(down.gif);
 76 |     opacity: 1;
 77 |     -ms-filter: "progid:DXImageTransform.Microsoft.Alpha(Opacity=100)";
 78 |     filter: alpha(opacity=100);
 79 | }
 80 | .galleria-theme-fullscreen.light .galleria-thumbnails-tab.open,
 81 | .galleria-theme-fullscreen.light .galleria-thumbnails-tab.open:hover {
 82 |     background-image: url(down-neg.gif);
 83 | }
 84 | .galleria-theme-fullscreen .galleria-thumbnails {
 85 |     background: #000;
 86 |     overflow: hidden;
 87 | }
 88 | .galleria-theme-fullscreen .galleria-thumbnails-list {
 89 |     background: #000;
 90 |     padding-top: 5px;
 91 |     padding-bottom: 5px;
 92 |     overflow: hidden;
 93 | }
 94 | .galleria-theme-fullscreen.light .galleria-thumbnails,
 95 | .galleria-theme-fullscreen.light .galleria-thumbnails-list {
 96 |     background:#fff;
 97 | }
 98 | .galleria-theme-fullscreen .galleria-thumbnails .galleria-image {
 99 |     width: 80px;
100 |     height: 50px;
101 |     float: left;
102 |     cursor: pointer;
103 |     margin-right: 5px;
104 | }
105 | .galleria-theme-fullscreen .galleria-thumbnails .galleria-image img { background: #000 }
106 | .galleria-theme-fullscreen .galleria-thumbnails .active { cursor: default }
107 | .galleria-theme-fullscreen .galleria-carousel .galleria-thumbnails-list {
108 |     border-left: 30px solid #000;
109 |     border-right: 30px solid #000;
110 | }
111 | .galleria-theme-fullscreen.light .galleria-carousel .galleria-thumbnails-list {
112 |     border-color: #fff;
113 | }
114 | .galleria-theme-fullscreen .galleria-image-nav {
115 |     width: 100%;
116 |     height: 100%;
117 |     position: absolute;
118 |     top: 0;
119 |     left: 0;
120 | }
121 | .galleria-theme-fullscreen .galleria-image-nav-right,
122 | .galleria-theme-fullscreen .galleria-image-nav-left {
123 |     width: 100px;
124 |     right: 0;
125 |     top: 0;
126 |     bottom: 0;
127 |     background: url(r.gif) no-repeat 50% 50%;
128 |     position: absolute;
129 |     cursor: pointer;
130 |     z-index: 2;
131 |     display: none;
132 | }
133 | .galleria-theme-fullscreen.smallarrows .galleria-image-nav-right {
134 |     background-image: url(r-neg.png);
135 | }
136 | .galleria-theme-fullscreen .galleria-image-nav-left {
137 |     left: 0;
138 |     right: auto;
139 |     background-image: url(l.gif);
140 | }
141 | .galleria-theme-fullscreen.smallarrows .galleria-image-nav-left {
142 |     background-image: url(l-neg.png);
143 | }
144 | .galleria-theme-fullscreen .galleria-loader {
145 |     width: 30px;
146 |     height: 30px;
147 |     background: #fff url(loader.gif) no-repeat 50% 50%;
148 |     position: absolute;
149 |     top: 50%;
150 |     left: 50%;
151 |     margin-top: -15px;
152 |     margin-left: -15px;
153 |     z-index: 3;
154 | }
155 | .galleria-theme-fullscreen .galleria-info {
156 |     z-index: 4;
157 |     font: 13px/1.4 helvetica,arial,sans-serif;
158 |     color: #fff;
159 |     position: absolute;
160 |     top: 0;
161 |     width: 100%;
162 |     border-top: 2px solid #000;
163 |     display: none;
164 |     text-align: center;
165 |     padding: 10px 0;
166 |     background: rgba(0,0,0,.5);
167 |     border-bottom:1px solid rgba(0,0,0,.1);
168 | }
169 | .galleria-theme-fullscreen.light .galleria-info{background:rgba(255,255,255,.5);color:#000;}
170 | .galleria-theme-fullscreen .galleria-info-text {
171 |     width: 50%;
172 |     margin: 0 auto;
173 | }
174 | .galleria-theme-fullscreen .galleria-info-title { font-weight: bold; display: inline-block; margin-right:10px; }
175 | .galleria-theme-fullscreen .galleria-info-description { display:inline-block; }
176 | .galleria-theme-fullscreen .galleria-thumb-nav-left,
177 | .galleria-theme-fullscreen .galleria-thumb-nav-right {
178 |     cursor: pointer;
179 |     display: none;
180 |     background: url(p.gif) no-repeat 50% 50%;
181 |     position: absolute;
182 |     left: 5px;
183 |     top: 21px;
184 |     bottom: 5px;
185 |     width: 20px;
186 |     z-index: 3;
187 |     opacity: .8;
188 |     -ms-filter: "progid:DXImageTransform.Microsoft.Alpha(Opacity=80)";
189 |     filter: alpha(opacity=80);
190 | }
191 | .galleria-theme-fullscreen.light .galleria-thumb-nav-left{
192 |     background-image: url(p-neg.png);
193 | }
194 | .galleria-theme-fullscreen .galleria-thumb-nav-right {
195 |     background-image: url(n.gif);
196 |     left: auto;
197 |     right: 5px;
198 | }
199 | .galleria-theme-fullscreen.light .galleria-thumb-nav-right{
200 |     background-image: url(n-neg.png);
201 | }
202 | .galleria-theme-fullscreen .galleria-carousel .galleria-thumb-nav-left,
203 | .galleria-theme-fullscreen .galleria-carousel .galleria-thumb-nav-right { display: block }
204 | .galleria-theme-fullscreen .galleria-carousel .galleria-thumb-nav-left:hover,
205 | .galleria-theme-fullscreen .galleria-carousel .galleria-thumb-nav-right:hover { background-color: #222 }
206 | .galleria-theme-fullscreen .galleria-thumb-nav-left.disabled,
207 | .galleria-theme-fullscreen .galleria-thumb-nav-right.disabled,
208 | .galleria-theme-fullscreen .galleria-thumb-nav-left.disabled:hover,
209 | .galleria-theme-fullscreen .galleria-thumb-nav-right.disabled:hover {
210 |     opacity: .2;
211 |     -ms-filter: "progid:DXImageTransform.Microsoft.Alpha(Opacity=20)";
212 |     filter: alpha(opacity=20);
213 |     cursor: default;
214 | }
215 | .galleria-theme-fullscreen.light .galleria-carousel .galleria-thumb-nav-left:hover,
216 | .galleria-theme-fullscreen.light .galleria-carousel .galleria-thumb-nav-right:hover { background-color: #ddd }
217 | 
218 | 


--------------------------------------------------------------------------------
/public/galleria/themes/classic/classic-demo-cdn.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html>
  2 | <html lang="en">
  3 |     <head>
  4 |         <meta charset="utf-8">
  5 |         <title>Galleria Classic Theme</title>
  6 |         <style>
  7 | 
  8 |             /* Demo styles */
  9 |             html,body{background:#222;margin:0;}
 10 |             body{border-top:4px solid #000;}
 11 |             .content{color:#777;font:12px/1.4 "helvetica neue",arial,sans-serif;width:620px;margin:20px auto;}
 12 |             h1{font-size:12px;font-weight:normal;color:#ddd;margin:0;}
 13 |             p{margin:0 0 20px}
 14 |             a {color:#22BCB9;text-decoration:none;}
 15 |             .cred{margin-top:20px;font-size:11px;}
 16 | 
 17 |             /* This rule is read by Galleria to define the gallery height: */
 18 |             #galleria{height:320px}
 19 | 
 20 |         </style>
 21 |     </head>
 22 | <body>
 23 |     <div class="content">
 24 |         <h1>Galleria Classic Theme</h1>
 25 |         <p>Demonstrating a basic gallery example.</p>
 26 | 
 27 |         <!-- Adding gallery images. We use resized thumbnails here for better performance, but it’s not necessary -->
 28 | 
 29 |         <div id="galleria">
 30 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/800px-Biandintz_eta_zaldiak_-_modified2.jpg">
 31 |                 <img 
 32 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/100px-Biandintz_eta_zaldiak_-_modified2.jpg",
 33 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/1280px-Biandintz_eta_zaldiak_-_modified2.jpg"
 34 |                     data-title="Biandintz eta zaldiak"
 35 |                     data-description="Horses on Bianditz mountain, in Navarre, Spain."
 36 |                 >
 37 |             </a>
 38 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/800px-Athabasca_Rail_at_Brule_Lake.jpg">
 39 |                 <img 
 40 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/100px-Athabasca_Rail_at_Brule_Lake.jpg",
 41 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/1280px-Athabasca_Rail_at_Brule_Lake.jpg"
 42 |                     data-title="Athabasca Rail"
 43 |                     data-description="The Athabasca River railroad track at the mouth of Brulé Lake in Alberta, Canada."
 44 |                 >
 45 |             </a>
 46 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/1280px-Back-scattering_crepuscular_rays_panorama_1.jpg">
 47 |                 <img 
 48 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/100px-Back-scattering_crepuscular_rays_panorama_1.jpg",
 49 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/1400px-Back-scattering_crepuscular_rays_panorama_1.jpg"
 50 |                     data-title="Back-scattering crepuscular rays"
 51 |                     data-description="Picture of the day on Wikimedia Commons 26 September 2010."
 52 |                 >
 53 |             </a>
 54 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/800px-Interior_convento_3.jpg">
 55 |                 <img 
 56 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/120px-Interior_convento_3.jpg",
 57 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/1400px-Interior_convento_3.jpg"
 58 |                     data-title="Interior convento"
 59 |                     data-description="Interior view of Yuriria Convent, founded in 1550."
 60 |                 >
 61 |             </a>
 62 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/800px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg">
 63 |                 <img 
 64 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/100px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg",
 65 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/1280px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg"
 66 |                     data-title="Oxbow Bend outlook"
 67 |                     data-description="View over the Snake River to the Mount Moran with the Skillet Glacier."
 68 |                 >
 69 |             </a>
 70 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/800px-Hazy_blue_hour_in_Grand_Canyon.JPG">
 71 |                 <img 
 72 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/100px-Hazy_blue_hour_in_Grand_Canyon.JPG",
 73 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/1280px-Hazy_blue_hour_in_Grand_Canyon.JPG"
 74 |                     data-title="Hazy blue hour"
 75 |                     data-description="Hazy blue hour in Grand Canyon. View from the South Rim."
 76 |                 >
 77 |             </a>
 78 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/800px-2909_vallon_moy_res.jpg">
 79 |                 <img 
 80 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/100px-2909_vallon_moy_res.jpg",
 81 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/1280px-2909_vallon_moy_res.jpg"
 82 |                     data-title="Haute Severaisse valley"
 83 |                     data-description="View of Haute Severaisse valley and surrounding summits from the slopes of Les Vernets."
 84 |                 >
 85 |             </a>
 86 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/800px-Bohinjsko_jezero_2.jpg">
 87 |                 <img 
 88 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/100px-Bohinjsko_jezero_2.jpg",
 89 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/1280px-Bohinjsko_jezero_2.jpg"
 90 |                     data-title="Bohinj lake"
 91 |                     data-description="Bohinj lake (Triglav National Park, Slovenia) in the morning."
 92 |                 >
 93 |             </a>
 94 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/800px-Bowling_Balls_Beach_2_edit.jpg">
 95 |                 <img 
 96 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/100px-Bowling_Balls_Beach_2_edit.jpg",
 97 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/1280px-Bowling_Balls_Beach_2_edit.jpg"
 98 |                     data-title="Bowling Balls"
 99 |                     data-description="Mendocino county, California, USA."
100 |                 >
101 |             </a>
102 |             <a href="https://vimeo.com/25750735">
103 |                 <span class="video">Works for vimeo too.</span>
104 |             </a>
105 |             <a href="https://www.youtube.com/watch?v=GOD-RyVB-3Q">
106 |                 <span class="video">Works for youtube too.</span>
107 |             </a>
108 | 
109 |         </div>
110 |         <p class="cred">Made by <a href="http://galleria.io">Galleria</a>.</p>
111 |     </div>
112 | 
113 |     <!-- load jQuery -->
114 |     <!-- <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.js"></script> -->
115 |     <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.js"></script>
116 |     <!-- load Galleria -->
117 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/galleria/1.5.7/galleria.min.js"></script>
118 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/galleria/1.5.7/themes/classic/galleria.classic.min.js"></script>
119 |     <script>
120 |         $(function() {
121 |             Galleria.run('#galleria');
122 |         });
123 |     </script>
124 |     </body>
125 | </html>


--------------------------------------------------------------------------------
/public/galleria/themes/classic/classic-demo.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html>
  2 | <html lang="en">
  3 |     <head>
  4 |         <meta charset="utf-8">
  5 |         <title>Galleria Classic Theme</title>
  6 |         <style>
  7 | 
  8 |             /* Demo styles */
  9 |             html,body{background:#222;margin:0;}
 10 |             body{border-top:4px solid #000;}
 11 |             .content{color:#777;font:12px/1.4 "helvetica neue",arial,sans-serif;width:620px;margin:20px auto;}
 12 |             h1{font-size:12px;font-weight:normal;color:#ddd;margin:0;}
 13 |             p{margin:0 0 20px}
 14 |             a {color:#22BCB9;text-decoration:none;}
 15 |             .cred{margin-top:20px;font-size:11px;}
 16 | 
 17 |             /* This rule is read by Galleria to define the gallery height: */
 18 |             #galleria{height:320px}
 19 | 
 20 |         </style>
 21 | 
 22 |         <!-- load jQuery -->
 23 |         <!-- <script src="http://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.js"></script> -->
 24 |         <script src="http://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.js"></script>
 25 | 
 26 |         <!-- load Galleria -->
 27 |         <script src="../../galleria-1.5.7.min.js"></script>
 28 | 
 29 |     </head>
 30 | <body>
 31 |     <div class="content">
 32 |         <h1>Galleria Classic Theme</h1>
 33 |         <p>Demonstrating a basic gallery example.</p>
 34 | 
 35 |         <!-- Adding gallery images. We use resized thumbnails here for better performance, but it’s not necessary -->
 36 | 
 37 |         <div id="galleria">
 38 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/800px-Biandintz_eta_zaldiak_-_modified2.jpg">
 39 |                 <img 
 40 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/100px-Biandintz_eta_zaldiak_-_modified2.jpg",
 41 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/1280px-Biandintz_eta_zaldiak_-_modified2.jpg"
 42 |                     data-title="Biandintz eta zaldiak"
 43 |                     data-description="Horses on Bianditz mountain, in Navarre, Spain."
 44 |                 >
 45 |             </a>
 46 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/800px-Athabasca_Rail_at_Brule_Lake.jpg">
 47 |                 <img 
 48 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/100px-Athabasca_Rail_at_Brule_Lake.jpg",
 49 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/1280px-Athabasca_Rail_at_Brule_Lake.jpg"
 50 |                     data-title="Athabasca Rail"
 51 |                     data-description="The Athabasca River railroad track at the mouth of Brulé Lake in Alberta, Canada."
 52 |                 >
 53 |             </a>
 54 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/1280px-Back-scattering_crepuscular_rays_panorama_1.jpg">
 55 |                 <img 
 56 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/100px-Back-scattering_crepuscular_rays_panorama_1.jpg",
 57 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/1400px-Back-scattering_crepuscular_rays_panorama_1.jpg"
 58 |                     data-title="Back-scattering crepuscular rays"
 59 |                     data-description="Picture of the day on Wikimedia Commons 26 September 2010."
 60 |                 >
 61 |             </a>
 62 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/800px-Interior_convento_3.jpg">
 63 |                 <img 
 64 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/120px-Interior_convento_3.jpg",
 65 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/1400px-Interior_convento_3.jpg"
 66 |                     data-title="Interior convento"
 67 |                     data-description="Interior view of Yuriria Convent, founded in 1550."
 68 |                 >
 69 |             </a>
 70 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/800px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg">
 71 |                 <img 
 72 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/100px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg",
 73 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/1280px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg"
 74 |                     data-title="Oxbow Bend outlook"
 75 |                     data-description="View over the Snake River to the Mount Moran with the Skillet Glacier."
 76 |                 >
 77 |             </a>
 78 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/800px-Hazy_blue_hour_in_Grand_Canyon.JPG">
 79 |                 <img 
 80 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/100px-Hazy_blue_hour_in_Grand_Canyon.JPG",
 81 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/1280px-Hazy_blue_hour_in_Grand_Canyon.JPG"
 82 |                     data-title="Hazy blue hour"
 83 |                     data-description="Hazy blue hour in Grand Canyon. View from the South Rim."
 84 |                 >
 85 |             </a>
 86 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/800px-2909_vallon_moy_res.jpg">
 87 |                 <img 
 88 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/100px-2909_vallon_moy_res.jpg",
 89 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/1280px-2909_vallon_moy_res.jpg"
 90 |                     data-title="Haute Severaisse valley"
 91 |                     data-description="View of Haute Severaisse valley and surrounding summits from the slopes of Les Vernets."
 92 |                 >
 93 |             </a>
 94 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/800px-Bohinjsko_jezero_2.jpg">
 95 |                 <img 
 96 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/100px-Bohinjsko_jezero_2.jpg",
 97 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/1280px-Bohinjsko_jezero_2.jpg"
 98 |                     data-title="Bohinj lake"
 99 |                     data-description="Bohinj lake (Triglav National Park, Slovenia) in the morning."
100 |                 >
101 |             </a>
102 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/800px-Bowling_Balls_Beach_2_edit.jpg">
103 |                 <img 
104 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/100px-Bowling_Balls_Beach_2_edit.jpg",
105 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/1280px-Bowling_Balls_Beach_2_edit.jpg"
106 |                     data-title="Bowling Balls"
107 |                     data-description="Mendocino county, California, USA."
108 |                 >
109 |             </a>
110 |             <a href="https://vimeo.com/25750735">
111 |                 <span class="video">Works for vimeo too.</span>
112 |             </a>
113 |             <a href="https://www.youtube.com/watch?v=GOD-RyVB-3Q">
114 |                 <span class="video">Works for youtube too.</span>
115 |             </a>
116 | 
117 |         </div>
118 |         <p class="cred">Made by <a href="http://galleria.io">Galleria</a>.</p>
119 |     </div>
120 | 
121 |     <script>
122 |     $(function() {
123 |         // Load the classic theme
124 |         Galleria.loadTheme('galleria.classic.min.js');
125 | 
126 |         // Initialize Galleria
127 |         Galleria.run('#galleria');
128 |     });
129 |     </script>
130 |     </body>
131 | </html>


--------------------------------------------------------------------------------
/public/galleria/themes/classic/classic-demo-cdn (SFConflict me@a1b0n.com 2017-02-12-23-35-56).html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html>
  2 | <html lang="en">
  3 |     <head>
  4 |         <meta charset="utf-8">
  5 |         <title>Galleria Classic Theme</title>
  6 |         <style>
  7 | 
  8 |             /* Demo styles */
  9 |             html,body{background:#222;margin:0;}
 10 |             body{border-top:4px solid #000;}
 11 |             .content{color:#777;font:12px/1.4 "helvetica neue",arial,sans-serif;width:620px;margin:20px auto;}
 12 |             h1{font-size:12px;font-weight:normal;color:#ddd;margin:0;}
 13 |             p{margin:0 0 20px}
 14 |             a {color:#22BCB9;text-decoration:none;}
 15 |             .cred{margin-top:20px;font-size:11px;}
 16 | 
 17 |             /* This rule is read by Galleria to define the gallery height: */
 18 |             #galleria{height:320px}
 19 | 
 20 |         </style>
 21 |     </head>
 22 | <body>
 23 |     <div class="content">
 24 |         <h1>Galleria Classic Theme</h1>
 25 |         <p>Demonstrating a basic gallery example.</p>
 26 | 
 27 |         <!-- Adding gallery images. We use resized thumbnails here for better performance, but it’s not necessary -->
 28 | 
 29 |         <div id="galleria">
 30 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/800px-Biandintz_eta_zaldiak_-_modified2.jpg">
 31 |                 <img 
 32 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/100px-Biandintz_eta_zaldiak_-_modified2.jpg",
 33 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Biandintz_eta_zaldiak_-_modified2.jpg/1280px-Biandintz_eta_zaldiak_-_modified2.jpg"
 34 |                     data-title="Biandintz eta zaldiak"
 35 |                     data-description="Horses on Bianditz mountain, in Navarre, Spain."
 36 |                 >
 37 |             </a>
 38 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/800px-Athabasca_Rail_at_Brule_Lake.jpg">
 39 |                 <img 
 40 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/100px-Athabasca_Rail_at_Brule_Lake.jpg",
 41 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6c/Athabasca_Rail_at_Brule_Lake.jpg/1280px-Athabasca_Rail_at_Brule_Lake.jpg"
 42 |                     data-title="Athabasca Rail"
 43 |                     data-description="The Athabasca River railroad track at the mouth of Brulé Lake in Alberta, Canada."
 44 |                 >
 45 |             </a>
 46 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/1280px-Back-scattering_crepuscular_rays_panorama_1.jpg">
 47 |                 <img 
 48 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/100px-Back-scattering_crepuscular_rays_panorama_1.jpg",
 49 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/1/1f/Back-scattering_crepuscular_rays_panorama_1.jpg/1400px-Back-scattering_crepuscular_rays_panorama_1.jpg"
 50 |                     data-title="Back-scattering crepuscular rays"
 51 |                     data-description="Picture of the day on Wikimedia Commons 26 September 2010."
 52 |                 >
 53 |             </a>
 54 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/800px-Interior_convento_3.jpg">
 55 |                 <img 
 56 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/120px-Interior_convento_3.jpg",
 57 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/7/75/Interior_convento_3.jpg/1400px-Interior_convento_3.jpg"
 58 |                     data-title="Interior convento"
 59 |                     data-description="Interior view of Yuriria Convent, founded in 1550."
 60 |                 >
 61 |             </a>
 62 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/800px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg">
 63 |                 <img 
 64 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/100px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg",
 65 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/6/6b/Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg/1280px-Oxbow_Bend_outlook_in_the_Grand_Teton_National_Park.jpg"
 66 |                     data-title="Oxbow Bend outlook"
 67 |                     data-description="View over the Snake River to the Mount Moran with the Skillet Glacier."
 68 |                 >
 69 |             </a>
 70 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/800px-Hazy_blue_hour_in_Grand_Canyon.JPG">
 71 |                 <img 
 72 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/100px-Hazy_blue_hour_in_Grand_Canyon.JPG",
 73 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/c/c9/Hazy_blue_hour_in_Grand_Canyon.JPG/1280px-Hazy_blue_hour_in_Grand_Canyon.JPG"
 74 |                     data-title="Hazy blue hour"
 75 |                     data-description="Hazy blue hour in Grand Canyon. View from the South Rim."
 76 |                 >
 77 |             </a>
 78 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/800px-2909_vallon_moy_res.jpg">
 79 |                 <img 
 80 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/100px-2909_vallon_moy_res.jpg",
 81 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/f/f4/2909_vallon_moy_res.jpg/1280px-2909_vallon_moy_res.jpg"
 82 |                     data-title="Haute Severaisse valley"
 83 |                     data-description="View of Haute Severaisse valley and surrounding summits from the slopes of Les Vernets."
 84 |                 >
 85 |             </a>
 86 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/800px-Bohinjsko_jezero_2.jpg">
 87 |                 <img 
 88 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/100px-Bohinjsko_jezero_2.jpg",
 89 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/4/46/Bohinjsko_jezero_2.jpg/1280px-Bohinjsko_jezero_2.jpg"
 90 |                     data-title="Bohinj lake"
 91 |                     data-description="Bohinj lake (Triglav National Park, Slovenia) in the morning."
 92 |                 >
 93 |             </a>
 94 |             <a href="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/800px-Bowling_Balls_Beach_2_edit.jpg">
 95 |                 <img 
 96 |                     src="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/100px-Bowling_Balls_Beach_2_edit.jpg",
 97 |                     data-big="http://upload.wikimedia.org/wikipedia/commons/thumb/3/32/Bowling_Balls_Beach_2_edit.jpg/1280px-Bowling_Balls_Beach_2_edit.jpg"
 98 |                     data-title="Bowling Balls"
 99 |                     data-description="Mendocino county, California, USA."
100 |                 >
101 |             </a>
102 |             <a href="https://vimeo.com/25750735">
103 |                 <span class="video">Works for vimeo too.</span>
104 |             </a>
105 |             <a href="https://www.youtube.com/watch?v=GOD-RyVB-3Q">
106 |                 <span class="video">Works for youtube too.</span>
107 |             </a>
108 | 
109 |         </div>
110 |         <p class="cred">Made by <a href="http://galleria.io">Galleria</a>.</p>
111 |     </div>
112 | 
113 |     <!-- load jQuery -->
114 |     <!-- <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.js"></script> -->
115 |     <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.js"></script>
116 |     <!-- load Galleria -->
117 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/galleria/1.5.3/galleria.min.js"></script>
118 |     <script src="https://cdnjs.cloudflare.com/ajax/libs/galleria/1.5.3/themes/classic/galleria.classic.min.js"></script>
119 |     <script>
120 |         $(function() {
121 |             Galleria.run('#galleria');
122 |         });
123 |     </script>
124 |     </body>
125 | </html>


--------------------------------------------------------------------------------
/public/galleria/plugins/picasa/galleria.picasa.js:
--------------------------------------------------------------------------------
  1 | /**
  2 |  * Galleria Picasa Plugin 2016-09-03
  3 |  * http://galleria.io
  4 |  *
  5 |  * Copyright (c) 2010 - 2017 worse is better UG
  6 |  * Licensed under the MIT license
  7 |  * https://raw.github.com/worseisbetter/galleria/master/LICENSE
  8 |  *
  9 |  */
 10 | 
 11 | (function($) {
 12 | 
 13 | /*global jQuery, Galleria, window */
 14 | 
 15 | Galleria.requires(1.25, 'The Picasa Plugin requires Galleria version 1.2.5 or later.');
 16 | 
 17 | // The script path
 18 | var PATH = Galleria.utils.getScriptPath();
 19 | 
 20 | /**
 21 | 
 22 |     @class
 23 |     @constructor
 24 | 
 25 |     @example var picasa = new Galleria.Picasa();
 26 | 
 27 |     @author http://wib.io
 28 | 
 29 |     @requires jQuery
 30 |     @requires Galleria
 31 | 
 32 |     @returns Instance
 33 | */
 34 | 
 35 | Galleria.Picasa = function() {
 36 | 
 37 |     this.options = {
 38 |         max: 30,                       // photos to return
 39 |         imageSize: 'medium',           // photo size ( thumb,small,medium,big,original ) or a number
 40 |         thumbSize: 'thumb',            // thumbnail size ( thumb,small,medium,big,original ) or a number
 41 |         complete: function(){}         // callback to be called inside the Galleria.prototype.load
 42 |     };
 43 | 
 44 | };
 45 | 
 46 | Galleria.Picasa.prototype = {
 47 | 
 48 |     // bring back the constructor reference
 49 | 
 50 |     constructor: Galleria.Picasa,
 51 | 
 52 |     /**
 53 |         Search for anything at Picasa
 54 | 
 55 |         @param {String} phrase The string to search for
 56 |         @param {Function} [callback] The callback to be called when the data is ready
 57 | 
 58 |         @returns Instance
 59 |     */
 60 | 
 61 |     search: function( phrase, callback ) {
 62 |         return this._call( 'search', 'all', {
 63 |             q: phrase
 64 |         }, callback );
 65 |     },
 66 | 
 67 |     /**
 68 |         Get a user's public photos
 69 | 
 70 |         @param {String} username The username to fetch photos from
 71 |         @param {Function} [callback] The callback to be called when the data is ready
 72 | 
 73 |         @returns Instance
 74 |     */
 75 | 
 76 |     user: function( username, callback ) {
 77 |         return this._call( 'user', 'user/' + username, callback );
 78 |     },
 79 | 
 80 |     /**
 81 |         Get photos from an album
 82 | 
 83 |         @param {String} username The username that owns the album
 84 |         @param {String} album The album ID
 85 |         @param {Function} [callback] The callback to be called when the data is ready
 86 | 
 87 |         @returns Instance
 88 |     */
 89 | 
 90 |     useralbum: function( username, album, callback ) {
 91 |         return this._call( 'useralbum', 'user/' + username + '/album/' + album, callback );
 92 |     },
 93 | 
 94 |     /**
 95 |         Set picasa options
 96 | 
 97 |         @param {Object} options The options object to blend
 98 | 
 99 |         @returns Instance
100 |     */
101 | 
102 |     setOptions: function( options ) {
103 |         $.extend(this.options, options);
104 |         return this;
105 |     },
106 | 
107 | 
108 |     // call Picasa
109 | 
110 |     _call: function( type, url, params, callback ) {
111 | 
112 |         url = 'https://picasaweb.google.com/data/feed/api/' + url + '?';
113 | 
114 |         if (typeof params == 'function') {
115 |             callback = params;
116 |             params = {};
117 |         }
118 | 
119 |         var self = this;
120 | 
121 |         params = $.extend({
122 |             'kind': 'photo',
123 |             'access': 'public',
124 |             'max-results': this.options.max,
125 |             'thumbsize': this._getSizes().join(','),
126 |             'alt': 'json-in-script',
127 |             'callback': '?'
128 |         }, params );
129 | 
130 |         $.each(params, function( key, value ) {
131 |             url += '&' + key + '=' + value;
132 |         });
133 | 
134 |         // since Picasa throws 404 when the call is malformed, we must set a timeout here:
135 | 
136 |         var data = false;
137 | 
138 |         Galleria.utils.wait({
139 |             until: function() {
140 |                 return data;
141 |             },
142 |             success: function() {
143 |                 self._parse.call( self, data.feed.entry, callback );
144 |             },
145 |             error: function() {
146 |                 var msg = '';
147 |                 if ( type == 'user' ) {
148 |                     msg = 'user not found.';
149 |                 } else if ( type == 'useralbum' ) {
150 |                     msg = 'album or user not found.';
151 |                 }
152 |                 Galleria.raise('Picasa request failed' + (msg ? ': ' + msg : '.'));
153 |             },
154 |             timeout: 5000
155 |         });
156 | 
157 |         $.getJSON( url, function( result ) {
158 |             data = result;
159 |         });
160 | 
161 |         return self;
162 |     },
163 | 
164 | 
165 |     // parse image sizes and return an array of three
166 | 
167 |     _getSizes: function() {
168 | 
169 |         var self = this,
170 |             norm = {
171 |                 small: '72c',
172 |                 thumb: '104u',
173 |                 medium: '640u',
174 |                 big: '1024u',
175 |                 original: '1600u'
176 |             },
177 |             op = self.options,
178 |             t = {},
179 |             n,
180 |             sz = [32,48,64,72,94,104,110,128,144,150,160,200,220,288,320,400,512,576,640,720,800,912,1024,1152,1280,1440,1600];
181 | 
182 |         $(['thumbSize', 'imageSize']).each(function() {
183 |             if( op[this] in norm ) {
184 |                 t[this] = norm[ op[this] ];
185 |             } else {
186 |                 n = Galleria.utils.parseValue( op[this] );
187 |                 if (n > 1600) {
188 |                     n = 1600;
189 |                 } else {
190 |                     $.each( sz, function(i) {
191 |                         if ( n < this ) {
192 |                             n = sz[i-1];
193 |                             return false;
194 |                         }
195 |                     });
196 |                 }
197 |                 t[this] = n;
198 |             }
199 |         });
200 | 
201 |         return [ t.thumbSize, t.imageSize, '1280u'];
202 | 
203 |     },
204 | 
205 | 
206 |     // parse the result and call the callback with the galleria-ready data array
207 | 
208 |     _parse: function( data, callback ) {
209 | 
210 |         var self = this,
211 |             gallery = [],
212 |             img;
213 | 
214 |         $.each( data, function() {
215 | 
216 |             img = this.media$group.media$thumbnail;
217 | 
218 |             gallery.push({
219 |                 thumb: img[0].url,
220 |                 image: img[1].url,
221 |                 big: img[2].url,
222 |                 title: this.summary.$t
223 |             });
224 |         });
225 | 
226 |         callback.call( this, gallery );
227 |     }
228 | };
229 | 
230 | 
231 | /**
232 |     Galleria modifications
233 |     We fake-extend the load prototype to make Picasa integration as simple as possible
234 | */
235 | 
236 | 
237 | // save the old prototype in a local variable
238 | 
239 | var load = Galleria.prototype.load;
240 | 
241 | 
242 | // fake-extend the load prototype using the picasa data
243 | 
244 | Galleria.prototype.load = function() {
245 | 
246 |     // pass if no data is provided or picasa option not found
247 |     if ( arguments.length || typeof this._options.picasa !== 'string' ) {
248 |         load.apply( this, Galleria.utils.array( arguments ) );
249 |         return;
250 |     }
251 | 
252 |     // define some local vars
253 |     var self = this,
254 |         args = Galleria.utils.array( arguments ),
255 |         picasa = this._options.picasa.split(':'),
256 |         p,
257 |         opts = $.extend({}, self._options.picasaOptions),
258 |         loader = typeof opts.loader !== 'undefined' ?
259 |             opts.loader : $('<div>').css({
260 |                 width: 48,
261 |                 height: 48,
262 |                 opacity: 0.7,
263 |                 background:'#000 url('+PATH+'loader.gif) no-repeat 50% 50%'
264 |             });
265 | 
266 |     if ( picasa.length ) {
267 | 
268 |         // validate the method
269 |         if ( typeof Galleria.Picasa.prototype[ picasa[0] ] !== 'function' ) {
270 |             Galleria.raise( picasa[0] + ' method not found in Picasa plugin' );
271 |             return load.apply( this, args );
272 |         }
273 | 
274 |         // validate the argument
275 |         if ( !picasa[1] ) {
276 |             Galleria.raise( 'No picasa argument found' );
277 |             return load.apply( this, args );
278 |         }
279 | 
280 |         // apply the preloader
281 |         window.setTimeout(function() {
282 |             self.$( 'target' ).append( loader );
283 |         },100);
284 | 
285 |         // create the instance
286 |         p = new Galleria.Picasa();
287 | 
288 |         // apply Flickr options
289 |         if ( typeof self._options.picasaOptions === 'object' ) {
290 |             p.setOptions( self._options.picasaOptions );
291 |         }
292 | 
293 |         // call the picasa method and trigger the DATA event
294 |         var arg = [];
295 |         if ( picasa[0] == 'useralbum' ) {
296 |             arg = picasa[1].split('/');
297 |             if (arg.length != 2) {
298 |                 Galleria.raise( 'Picasa useralbum not correctly formatted (should be [user]/[album])');
299 |                 return;
300 |             }
301 |         } else {
302 |             arg.push( picasa[1] );
303 |         }
304 | 
305 |         arg.push(function(data) {
306 |             self._data = data;
307 |             loader.remove();
308 |             self.trigger( Galleria.DATA );
309 |             p.options.complete.call(p, data);
310 |         });
311 | 
312 |         p[ picasa[0] ].apply( p, arg );
313 | 
314 |     } else {
315 | 
316 |         // if flickr array not found, pass
317 |         load.apply( this, args );
318 |     }
319 | };
320 | 
321 | }( jQuery ) );


--------------------------------------------------------------------------------
/public/galleria/plugins/flickr/galleria.flickr.js:
--------------------------------------------------------------------------------
  1 | /**
  2 |  * Galleria Flickr Plugin 2016-09-03
  3 |  * http://galleria.io
  4 |  *
  5 |  * Copyright (c) 2010 - 2017 worse is better UG
  6 |  * Licensed under the MIT license
  7 |  * https://raw.github.com/worseisbetter/galleria/master/LICENSE
  8 |  *
  9 |  */
 10 | 
 11 | (function($) {
 12 | 
 13 | /*global jQuery, Galleria, window */
 14 | 
 15 | Galleria.requires(1.25, 'The Flickr Plugin requires Galleria version 1.2.5 or later.');
 16 | 
 17 | // The script path
 18 | var PATH = Galleria.utils.getScriptPath();
 19 | 
 20 | /**
 21 | 
 22 |     @class
 23 |     @constructor
 24 | 
 25 |     @example var flickr = new Galleria.Flickr();
 26 | 
 27 |     @author http://galleria.io
 28 | 
 29 |     @requires jQuery
 30 |     @requires Galleria
 31 | 
 32 |     @param {String} [api_key] Flickr API key to be used, defaults to the Galleria key
 33 | 
 34 |     @returns Instance
 35 | */
 36 | 
 37 | Galleria.Flickr = function( api_key ) {
 38 | 
 39 |     this.api_key = api_key || '2a2ce06c15780ebeb0b706650fc890b2';
 40 | 
 41 |     this.options = {
 42 |         max: 30,                       // photos to return
 43 |         imageSize: 'medium',           // photo size ( thumb,small,medium,big,original )
 44 |         thumbSize: 'thumb',            // thumbnail size ( thumb,small,medium,big,original )
 45 |         sort: 'interestingness-desc',  // sort option ( date-posted-asc, date-posted-desc, date-taken-asc, date-taken-desc, interestingness-desc, interestingness-asc, relevance )
 46 |         description: false,            // set this to true to get description as caption
 47 |         complete: function(){},        // callback to be called inside the Galleria.prototype.load
 48 |         backlink: false                // set this to true if you want to pass a link back to the original image
 49 |     };
 50 | };
 51 | 
 52 | Galleria.Flickr.prototype = {
 53 | 
 54 |     // bring back the constructor reference
 55 | 
 56 |     constructor: Galleria.Flickr,
 57 | 
 58 |     /**
 59 |         Search for anything at Flickr
 60 | 
 61 |         @param {String} phrase The string to search for
 62 |         @param {Function} [callback] The callback to be called when the data is ready
 63 | 
 64 |         @returns Instance
 65 |     */
 66 | 
 67 |     search: function( phrase, callback ) {
 68 |         return this._find({
 69 |             text: phrase
 70 |         }, callback );
 71 |     },
 72 | 
 73 |     /**
 74 |         Search for anything at Flickr by tag
 75 | 
 76 |         @param {String} tag The tag(s) to search for
 77 |         @param {Function} [callback] The callback to be called when the data is ready
 78 | 
 79 |         @returns Instance
 80 |     */
 81 | 
 82 |     tags: function( tag, callback ) {
 83 |         return this._find({
 84 |             tags: tag
 85 |         }, callback);
 86 |     },
 87 | 
 88 |     /**
 89 |         Get a user's public photos
 90 | 
 91 |         @param {String} username The username as shown in the URL to fetch
 92 |         @param {Function} [callback] The callback to be called when the data is ready
 93 | 
 94 |         @returns Instance
 95 |     */
 96 | 
 97 |     user: function( username, callback ) {
 98 |         return this._call({
 99 |             method: 'flickr.urls.lookupUser',
100 |             url: 'flickr.com/photos/' + username
101 |         }, function( data ) {
102 |             this._find({
103 |                 user_id: data.user.id,
104 |                 method: 'flickr.people.getPublicPhotos'
105 |             }, callback);
106 |         });
107 |     },
108 | 
109 |     /**
110 |         Get photos from a photoset by ID
111 | 
112 |         @param {String|Number} photoset_id The photoset id to fetch
113 |         @param {Function} [callback] The callback to be called when the data is ready
114 | 
115 |         @returns Instance
116 |     */
117 | 
118 |     set: function( photoset_id, callback ) {
119 |         return this._find({
120 |             photoset_id: photoset_id,
121 |             method: 'flickr.photosets.getPhotos'
122 |         }, callback);
123 |     },
124 | 
125 |     /**
126 |         Get photos from a gallery by ID
127 | 
128 |         @param {String|Number} gallery_id The gallery id to fetch
129 |         @param {Function} [callback] The callback to be called when the data is ready
130 | 
131 |         @returns Instance
132 |     */
133 | 
134 |     gallery: function( gallery_id, callback ) {
135 |         return this._find({
136 |             gallery_id: gallery_id,
137 |             method: 'flickr.galleries.getPhotos'
138 |         }, callback);
139 |     },
140 | 
141 |     /**
142 |         Search groups and fetch photos from the first group found
143 |         Useful if you know the exact name of a group and want to show the groups photos.
144 | 
145 |         @param {String} group The group name to search for
146 |         @param {Function} [callback] The callback to be called when the data is ready
147 | 
148 |         @returns Instance
149 |     */
150 | 
151 |     groupsearch: function( group, callback ) {
152 |         return this._call({
153 |             text: group,
154 |             method: 'flickr.groups.search'
155 |         }, function( data ) {
156 |             this.group( data.groups.group[0].nsid, callback );
157 |         });
158 |     },
159 | 
160 |     /**
161 |         Get photos from a group by ID
162 | 
163 |         @param {String} group_id The group id to fetch
164 |         @param {Function} [callback] The callback to be called when the data is ready
165 | 
166 |         @returns Instance
167 |     */
168 | 
169 |     group: function ( group_id, callback ) {
170 |         return this._find({
171 |             group_id: group_id,
172 |             method: 'flickr.groups.pools.getPhotos'
173 |         }, callback );
174 |     },
175 | 
176 |     /**
177 |         Set flickr options
178 | 
179 |         @param {Object} options The options object to blend
180 | 
181 |         @returns Instance
182 |     */
183 | 
184 |     setOptions: function( options ) {
185 |         $.extend(this.options, options);
186 |         return this;
187 |     },
188 | 
189 | 
190 |     // call Flickr and raise errors
191 | 
192 |     _call: function( params, callback ) {
193 | 
194 |         var url = 'https://api.flickr.com/services/rest/?';
195 | 
196 |         var scope = this;
197 | 
198 |         params = $.extend({
199 |             format : 'json',
200 |             jsoncallback : '?',
201 |             api_key: this.api_key
202 |         }, params );
203 | 
204 |         $.each(params, function( key, value ) {
205 |             url += '&' + key + '=' + value;
206 |         });
207 | 
208 |         $.getJSON(url, function(data) {
209 |             if ( data.stat === 'ok' ) {
210 |                 callback.call(scope, data);
211 |             } else {
212 |                 Galleria.raise( data.code.toString() + ' ' + data.stat + ': ' + data.message, true );
213 |             }
214 |         });
215 |         return scope;
216 |     },
217 | 
218 | 
219 |     // "hidden" way of getting a big image (~1024) from flickr
220 | 
221 |     _getBig: function( photo ) {
222 | 
223 |         if ( photo.url_l ) {
224 |             return photo.url_l;
225 |         } else if ( parseInt( photo.width_o, 10 ) > 1280 ) {
226 | 
227 |             return 'https://farm'+photo.farm + '.static.flickr.com/'+photo.server +
228 |                 '/' + photo.id + '_' + photo.secret + '_b.jpg';
229 |         }
230 | 
231 |         return photo.url_o || photo.url_z || photo.url_m;
232 | 
233 |     },
234 | 
235 | 
236 |     // get image size by option name
237 | 
238 |     _getSize: function( photo, size ) {
239 | 
240 |         var img;
241 | 
242 |         switch(size) {
243 | 
244 |             case 'thumb':
245 |                 img = photo.url_t;
246 |                 break;
247 | 
248 |             case 'small':
249 |                 img = photo.url_s;
250 |                 break;
251 | 
252 |             case 'big':
253 |                 img = this._getBig( photo );
254 |                 break;
255 | 
256 |             case 'original':
257 |                 img = photo.url_o ? photo.url_o : this._getBig( photo );
258 |                 break;
259 | 
260 |             default:
261 |                 img = photo.url_z || photo.url_m;
262 |                 break;
263 |         }
264 |         return img;
265 |     },
266 | 
267 | 
268 |     // ask flickr for photos, parse the result and call the callback with the galleria-ready data array
269 | 
270 |     _find: function( params, callback ) {
271 | 
272 |         params = $.extend({
273 |             method: 'flickr.photos.search',
274 |             extras: 'url_t,url_m,url_o,url_s,url_l,url_z,description',
275 |             sort: this.options.sort,
276 |             per_page: Math.min( this.options.max, 500 )
277 |         }, params );
278 | 
279 |         return this._call( params, function(data) {
280 | 
281 |             var gallery = [],
282 |                 photos = data.photos ? data.photos.photo : data.photoset.photo,
283 |                 len = photos.length,
284 |                 photo,
285 |                 i;
286 | 
287 |             for ( i=0; i<len; i++ ) {
288 | 
289 |                 photo = photos[i];
290 | 
291 |                 gallery.push({
292 |                     thumb: this._getSize( photo, this.options.thumbSize ),
293 |                     image: this._getSize( photo, this.options.imageSize ),
294 |                     big: this._getBig( photo ),
295 |                     title: photos[i].title,
296 |                     description: this.options.description && photos[i].description ? photos[i].description._content : '',
297 |                     link: this.options.backlink ? 'https://flickr.com/photos/' + photo.owner + '/' + photo.id : ''
298 |                 });
299 |             }
300 |             callback.call( this, gallery );
301 |         });
302 |     }
303 | };
304 | 
305 | 
306 | /**
307 |     Galleria modifications
308 |     We fake-extend the load prototype to make Flickr integration as simple as possible
309 | */
310 | 
311 | 
312 | // save the old prototype in a local variable
313 | 
314 | var load = Galleria.prototype.load;
315 | 
316 | 
317 | // fake-extend the load prototype using the flickr data
318 | 
319 | Galleria.prototype.load = function() {
320 | 
321 |     // pass if no data is provided or flickr option not found
322 |     if ( arguments.length || typeof this._options.flickr !== 'string' ) {
323 |         load.apply( this, Galleria.utils.array( arguments ) );
324 |         return;
325 |     }
326 | 
327 |     // define some local vars
328 |     var self = this,
329 |         args = Galleria.utils.array( arguments ),
330 |         flickr = this._options.flickr.split(':'),
331 |         f,
332 |         opts = $.extend({}, self._options.flickrOptions),
333 |         loader = typeof opts.loader !== 'undefined' ?
334 |             opts.loader : $('<div>').css({
335 |                 width: 48,
336 |                 height: 48,
337 |                 opacity: 0.7,
338 |                 background:'#000 url('+PATH+'loader.gif) no-repeat 50% 50%'
339 |             });
340 | 
341 |     if ( flickr.length ) {
342 | 
343 |         // validate the method
344 |         if ( typeof Galleria.Flickr.prototype[ flickr[0] ] !== 'function' ) {
345 |             Galleria.raise( flickr[0] + ' method not found in Flickr plugin' );
346 |             return load.apply( this, args );
347 |         }
348 | 
349 |         // validate the argument
350 |         if ( !flickr[1] ) {
351 |             Galleria.raise( 'No flickr argument found' );
352 |             return load.apply( this, args );
353 |         }
354 | 
355 |         // apply the preloader
356 |         window.setTimeout(function() {
357 |             self.$( 'target' ).append( loader );
358 |         },100);
359 | 
360 |         // create the instance
361 |         f = new Galleria.Flickr();
362 | 
363 |         // apply Flickr options
364 |         if ( typeof self._options.flickrOptions === 'object' ) {
365 |             f.setOptions( self._options.flickrOptions );
366 |         }
367 | 
368 |         // call the flickr method and trigger the DATA event
369 |         f[ flickr[0] ]( flickr[1], function( data ) {
370 | 
371 |             self._data = data;
372 |             loader.remove();
373 |             self.trigger( Galleria.DATA );
374 |             f.options.complete.call(f, data);
375 | 
376 |         });
377 |     } else {
378 | 
379 |         // if flickr array not found, pass
380 |         load.apply( this, args );
381 |     }
382 | };
383 | 
384 | }( jQuery ) );


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
   1 | # Writing a photo gallery Web Service from scratch with Node.JS and Dropbox with production deployment on Heroku
   2 | *by Ruben Rincon* 
   3 | Nov 2017
   4 | 
   5 | In this step by step tutorial we will build a production-ready photo gallery Web Service using Node.JS and Dropbox. It will show you the artifacts needed to implement a Web Service (which we will also call middleware) that authenticates a user via OAuth with Dropbox to read a user folder, nicely display images in a photo gallery and deploy the code on Heroku for production.
   6 |  
   7 | These are the main technologies and concepts we will cover:
   8 |  
   9 | 
  10 | - Node.JS
  11 | - Express
  12 | - Front end and back end
  13 | - Dropbox API
  14 | - OAuth authentication
  15 | - Cookies and sessions
  16 | - Heroku
  17 | - Heroku addins
  18 | - Security on Node.JS
  19 | 
  20 |  
  21 | The Web Service will allow users to nicely display on a gallery images stored in a Dropbox folder of their own account.  To do this, users will first authenticate to Dropbox via OAuth, then the middleware will fetch a number of images from a specific folder and render them using a JavaScript library called Galleria.  
  22 |  
  23 | Dropbox API has two types of permissions, Full Dropbox access or Folder access.  For the sake of security (and your trust), we are only using the second (Folder access), so the middleware is only allowed to read/write to a specific folder on the users Dropbox account and nothing else.  
  24 |  
  25 | 
  26 | # 1.  Node.JS and Express
  27 | 
  28 | The great thing with Node is that you can write server code using JavaScript.  Nonetheless, the Web Service needs some structure and a separation of the back end and the front end code as well as any public resource. Express will help exactly with that.
  29 |  
  30 | To install Node.JS, you can simply go to [Nodejs.org](https://nodejs.org/en/) and get the latest version.  For this tutorial, we need support for certain elements of EcmaScript7  (ES7) so I recommend the 8.2.1 version or higher if exists when you read this.
  31 |  
  32 | After Node is installed in your local environment, we will create a project structure using Express generator, but before that, we need to pick a template engine.  Express uses different types of engines to generate HTML files on the fly before sending them as part of the response, this allows to create HTML content dynamically on each call to the server.  In this tutorial, we will use [Handlebars](http://handlebarsjs.com/),  a simplistic template engine that leverages actual HTML instead of developing its own template language.
  33 |  
  34 | First install express generator run
  35 | 
  36 | 
  37 |     npm install express-generator -g
  38 | 
  39 |  
  40 | Now create a project called *dbximgs* using handlebars template engine
  41 |  
  42 | 
  43 |     express --hbs dbximgs
  44 | 
  45 |  
  46 | This creates a folder called dbximgs with the structure below.  Notice, the dependencies of the project are not yet installed, only a file structure has been created.
  47 | 
  48 | ![Project structure created by  Express generator](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/1.png?raw=true)
  49 | 
  50 | 
  51 |  These are the main items to highlight on that structure
  52 | 
  53 | - **package.json**  lists the dependencies to be installed and general info on the project.  Also declares the entry point of the app, which is the bin/www file.
  54 | - **bin/www**  is the file that declares the port and actually gets the server running.  You won’t need to modify it in this sample.
  55 | - **app.js** middleware libraries get initialized on this file.  Think about middleware libraries like code that gets raw texts requests from the Web, transforms them and then formats them nicely.
  56 | - **routes/index.js**  this code gets executed when you hit an endpoint on the server.
  57 | - **public folder:**  is the front end or resources and files that will eventually find their way to the user.  Never store any critical code here, as it could be accessed by users via their browser, that is what the back end is for.
  58 | 
  59 |  
  60 | At this point, you can get your minimal Web Service running locally.  First you actually need to install the dependencies declared on your package.json using the `npm install` command
  61 | 
  62 | 
  63 |     cd dbximgs
  64 |     npm install
  65 | 
  66 |  
  67 | Once the installation is complete, run
  68 |  
  69 | 
  70 |     npm start
  71 | 
  72 |  
  73 | Go to your browser and enter [http://localhost:3000](http://localhost:3000) on the address bar and you will see your server running:
  74 |  
  75 | 
  76 | ![Bare Express server running](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/2.png?raw=true)
  77 | 
  78 | # 2.  Front end and back end
  79 | 
  80 | Before continuing with the code, it is important to set some additional structure to our project to have a clean separation of responsibilities.
  81 | 
  82 | **Back end**
  83 | In general, anything that is not in the public folder constitutes the back end.  Whenever you make a change to the back end, you need to restart the server to see it.  The main files that we will modify are:
  84 | 
  85 | 
  86 | - **app.js** to setup the middleware or code that handles the requests before they reach our router.
  87 | - **routes/index.js** will contain all the endpoints of our server.
  88 | 
  89 | Additionally,  create the following two files for the back end at the root folder of the project.
  90 | 
  91 | - **config.js** will contain all the configuration variables, paths, secrets, etc.
  92 | - **controller.js**  will contain all the business logic and implementation of the routes.
  93 | 
  94 | **Front end**
  95 | Defined as anything that lives in the **public** folder.  The user and the user’s browser will interact with and it is normally HTML, CSS, JavaScript and images contained there.  You don’t need to restart the server to see changes on it.
  96 |  
  97 | 
  98 | ## A bit of front end work with Galleria
  99 | 
 100 | We will be using a JavaScript library called [Galleria](https://galleria.io/). This library uses jQuery and will allow us to add images on the fly and display them nicely.
 101 |  
 102 | We will keep the front end development as simple as possible as the main topic of the tutorial is the back end end part.  So let us set a page that properly renders Galleria.
 103 |  
 104 | First download the Galleria library [from this link](https://galleria.io/get-started/) and uncompress it.
 105 |  
 106 | Now copy the galleria folder inside the **/public** folder and it should look like this
 107 |  
 108 | 
 109 | ![Public folder after decompressing galleria](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/3.png?raw=true)
 110 | 
 111 | 
 112 |  
 113 | Our first exercise is to put a simple template page running using handlebars.
 114 | If you want to know more about how to use handlebars, [here is a good resource](https://webapplog.com/handlebars/).
 115 | 
 116 | A template generates HTML code on the fly before it gets sent to the client.  Our first exercise will receive a request on the home endpoint `/` , package the path of several images on an array and pass it to a handlebars template.
 117 |  
 118 | 
 119 | 1. First put any three images in the **/public/images** folder, you can call them *a**.jpg*, *b**.jpg* and *c**.jpg* for simplicity.
 120 | 2. Add the route:  in the **routes/index.js** file,  replace the *router.get*  method with the following code.
 121 | 
 122 |  
 123 |  **routes/index.js**
 124 | 
 125 | ```javascript
 126 | //first add the reference to the controller
 127 | var controller = require('../controller');
 128 | 
 129 | /* GET home page. */
 130 | router.get('/', controller.home);
 131 | ```
 132 | 
 133 |  3.  Add the controller:  add the implementation of the endpoint in the controller.  If you haven’t, create a **controller.js** file at the root level and add the following code.
 134 |  
 135 | **controller.js**
 136 | 
 137 | ```javascript
 138 | module.exports.home = (req,res,next)=>{
 139 |   var paths = ['images/a.jpg','images/b.jpg','images/c.jpg'];              
 140 |   res.render('gallery', { imgs: paths, layout:false});
 141 | };
 142 | ```
 143 | 
 144 |  
 145 | The `res.render` gets two arguments: the first is the name of the template (which we have not created yet) and the second is a JSON object that will be passed to the template engine. In this case, we will pass our paths array as imgs and the layout:false will ensure that handlebars doesn’t use the template layout.
 146 |  
 147 | Now create the template  /views/gallery.hbs and copy this code
 148 | 
 149 | **/views/gallery.hbs**
 150 | 
 151 | ```html
 152 | <!DOCTYPE html>
 153 | <html>
 154 | <head>                       
 155 |       <script type='text/javascript' src='https://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js'></script>
 156 |       <script src="/galleria/galleria-1.5.7.min.js"></script>
 157 |       <script type='text/javascript' src='/javascripts/page.js'></script>
 158 |       <link rel="stylesheet" href="/stylesheets/page.css">
 159 | </head>
 160 | <body>
 161 |       <div class="galleria">
 162 |       {% raw %}
 163 |         {{#each imgs}}
 164 |             <img src="{{this}}">
 165 |         {{/each}}
 166 |       {% endraw %}
 167 |       </div>
 168 | </body>
 169 | </html>
 170 | ```
 171 | 
 172 | You can see in the body part that we iterate through the `imgs` object passed creating HTML code with an image tag per array element. Let’s now add the css and JavaScript file referenced in the header above.
 173 |  
 174 | **public/javascripts/page.js**
 175 | 
 176 | ```javascript
 177 |  jQuery(document).ready(function(){
 178 |       Galleria.loadTheme('/galleria/themes/classic/galleria.classic.min.js');
 179 |       Galleria.run('.galleria');
 180 | });
 181 | ```
 182 |  
 183 | **public/stylesheets/page.css** 
 184 | 
 185 | ```css
 186 | .galleria{
 187 |     max-width: 100%;
 188 |     height: 700px;
 189 |     margin: 0 auto;
 190 | }
 191 | ```
 192 |  
 193 | 
 194 | 🎯 The source code at this point can be found in [this link](https://github.com/dropbox/dbximages/tree/frontendonly)
 195 |  
 196 |  
 197 | Now let us run the server with
 198 | 
 199 |     npm start
 200 | 
 201 | And in your browser navigate to [http://localhost:3000](http://localhost:3000/gallery) and it will look like this
 202 | 
 203 | 
 204 | ![Web Server running Galleria using sample images](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/4.png?raw=true)
 205 | 
 206 | 
 207 | Now that we have our front end running.  Let us do the back end part, which is the main focus of this tutorial.  
 208 | 
 209 | 
 210 | # 3.  Dropbox app
 211 | 
 212 | We want to access the Dropbox folder of a user who authorizes the middleware to read it and populate a gallery. 
 213 |  
 214 | To do this, we will first need to create a Dropbox app.  For that you need a Dropbox account.  If you don’t have one, create one first and then go to [https://www.dropbox.com/developers/apps](https://www.dropbox.com/developers/apps)
 215 | And click on **Create App**
 216 | 
 217 | Then choose Dropbox API, App Folder,  put a name on your app and click on **Create App.**
 218 |  
 219 | 
 220 | ![Dropbox developer console](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/5.png?raw=true)
 221 | 
 222 | 
 223 | We chose **App folder** permission so the middleware can only read and write to a single folder to those users who authorize the app.
 224 |  
 225 | After this, you want to also enable additional users in this app, otherwise only you can use it.  In the settings page of your app you will find a button to do this.  
 226 |  
 227 | 
 228 | ![Enabling additional users for Dropbox app](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/6.png?raw=true)
 229 | 
 230 | 
 231 |  
 232 | 
 233 | # 4.  OAuth with authorization code grant flow
 234 | 
 235 |  
 236 | This application should be able to read a specific app folder for any Dropbox user who consents.  For this we need to build an authentication flow where user is redirected to Dropbox to enter credentials and then authorize this app to read users Dropbox.  After this is done, a folder inside Dropbox will be created with the name of this app and the middleware will be able to access the contents of that folder only. 
 237 | 
 238 | The most secure way to do this is using an ***authorization code flow.***  In this flow, after the authorization step, Dropbox issues a code to the middleware that is exchanged for a token.  The middleware stores the token and is never visible to the Web browser.  To know who is the user requesting the token, we use a session.  At first,  we will simply use a hardcoded session value and save it in a cache, but later we will replace it with a proper library to manage sessions and cookies and will be stored on a persistent database.
 239 | 
 240 | Before writing any code, we need to do an important configuration step in Dropbox:
 241 |  
 242 | Pre-register a redirect URL in the Dropbox admin console.  Temporarily we will use a localhost endpoint which is the only permitted http URL.  For anything different to home, you need to use https.  We will use a `/oauthredirect` endpoint.  So enter the URL [http://localhost:3000/](http://localhost:3000/dbxlogin)oauthredirect and press the **Add** button.  
 243 |  
 244 | Also we we will not use implicit grant, so you can disable it.  
 245 |  
 246 | 
 247 | ![Adding a redirect url in Dropbox developer console](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/7.png?raw=true)
 248 | 
 249 | 
 250 | 💡 If you are interested in learning more about OAuth, this is a [good read](https://spring.io/blog/2011/11/30/cross-site-request-forgery-and-oauth2) 👍 
 251 | 
 252 | The whole authorization flow will have all the following steps which I will explain right after.
 253 | 
 254 | 
 255 | ![Whole OAuth code flow](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/8.png?raw=true)
 256 | 
 257 | 1.  When a user calls the *home* `/` endpoint, the middleware retrieves a session for that specific user.  (we will first use a hardcoded value and a cache, but later we will use a proper library).
 258 | 2.  The middleware checks if there is an OAuth token already issued for that session.  In this case, it does not find any, so an authorization sequence is started. 
 259 | 3. The middleware redirects to a `/login` endpoint which will construct a URL to perform the authentication via Dropbox.
 260 | 4. Part of this URL is a state, which is a set of characters that will be passed to Dropbox and will be visible in the browser address bar as part of the URL.
 261 | 5. The state is saved along the session. 
 262 | 6. User is redirected to the authentication server in Dropbox along with the state and a URL to redirect back to the middleware, in this case we will use the `/oauthredirect` endpoint.
 263 | 7. The user will authenticate to Dropbox and authorize this application to read a specific folder.
 264 | 8. Dropbox will redirect the user to the `/oauthredirect`  endpoint of the middleware and will pass a code and give us back the state we passed.
 265 | 9. The middleware validates that there is an existing session for that state, this is a protection against CSRF attacks.
 266 | 10. The middleware makes a POST call to Dropbox to exchange the code for an OAuth token.  In this call, the middleware will pass the application key/secret to Dropbox.
 267 | 11. The middleware will save the token along with the session.  
 268 | 12. User will be redirected to home `/`  but now the user will have a token to make calls to Dropbox API.
 269 | 
 270 | Let us write all the code now… 👨‍💻 
 271 | 
 272 | First we need a number of configuration items in the **config.js** file at the root level.  You will need to replace the appkey/secret from your own Dropbox console.
 273 | 
 274 |  **config.js**
 275 | 
 276 | ```javascript
 277 | module.exports = {
 278 |   DBX_API_DOMAIN: 'https://api.dropboxapi.com',
 279 |   DBX_OAUTH_DOMAIN: 'https://www.dropbox.com',
 280 |   DBX_OAUTH_PATH: '/oauth2/authorize',
 281 |   DBX_TOKEN_PATH: '/oauth2/token',
 282 |   DBX_APP_KEY:'<appkey_in_dropbox_console>',
 283 |   DBX_APP_SECRET:'<appsecret_in_dropbox_console>', 
 284 |   OAUTH_REDIRECT_URL:"http://localhost:3000/oauthredirect",
 285 | }
 286 | ```
 287 |  
 288 | 
 289 | 🛑 ⚠️  If you are using a version control system such as git at this point, remember the Dropbox key/secret will be hard coded in some version of your code, which is especially bad if you are storing it on a public repository.  If that is the case, consider using **dotenv** library along with the .**gitignore** file explained on section 7.
 290 | 
 291 | 
 292 | Now let’s add the business logic.  To create a random state we will use the crypto library (which is part of Node) and to temporarily store it  in a cache, we will use node-cache library.  The node-cache simply receives a key/value pair and an expire it in a number of seconds.  We will arbitrarily set it to 10 mins = 600 seconds.
 293 |  
 294 | Let us first install the node-cache library
 295 |  
 296 | 
 297 |     npm install node-cache --save
 298 | 
 299 |  
 300 | 💡  The `--save` adds a dependency in the package.json file.
 301 |  
 302 | For the steps 1,2 and 3 in the flow above, modify the *home* method in the **controller**.**js**  If there is no token, we redirect to the  `/login` endpoint passing a temporary session in the query. Remember we will change this for  a session library later.
 303 |  
 304 | **controller.js**
 305 | 
 306 | ```javascript
 307 | const 
 308 | crypto = require('crypto'),
 309 | config = require('./config'),
 310 | NodeCache = require( "node-cache" );
 311 | var mycache = new NodeCache();
 312 | 
 313 | //steps 1,2,3
 314 | module.exports.home = (req,res,next)=>{    
 315 |     let token = mycache.get("aTempTokenKey");
 316 |     if(token){
 317 |         let paths = ['images/a.jpg','images/b.jpg','images/c.jpg'];              
 318 |         res.render('gallery', { imgs: paths });
 319 |     }else{
 320 |         res.redirect('/login');
 321 |     }
 322 | }
 323 | 
 324 | //steps 4,5,6
 325 | module.exports.login = (req,res,next)=>{
 326 |     
 327 |     //create a random state value
 328 |     let state = crypto.randomBytes(16).toString('hex');
 329 |      
 330 |     //Save state and temporarysession for 10 mins
 331 |     mycache.set(state, "aTempSessionValue", 600);
 332 |      
 333 |     let dbxRedirect= config.DBX_OAUTH_DOMAIN 
 334 |             + config.DBX_OAUTH_PATH 
 335 |             + "?response_type=code&client_id="+config.DBX_APP_KEY
 336 |             + "&redirect_uri="+config.OAUTH_REDIRECT_URL 
 337 |             + "&state="+state;
 338 |     
 339 |     res.redirect(dbxRedirect);
 340 | }
 341 | ```
 342 | 
 343 | Now we need to list the login endpoint in the **routes/index.js** , so add the following line.
 344 | 
 345 | **routes/index.js** 
 346 | 
 347 |     router.get('/login', controller.login);
 348 | 
 349 | At this point, you can test it again by running
 350 | 
 351 | 
 352 |     npm start
 353 | 
 354 | and hitting http://localhost:3000 should forward to an authentication/authorization page like this
 355 | 
 356 | 
 357 | ![AOuth Authorization page](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/9.png?raw=true)
 358 | 
 359 | 
 360 | Once you authorize, you will see an error as we have not added an endpoint to be redirected back, but take a look at the url, you will see there the **state** you sent and the **code** from Dropbox that you will use to get a token .
 361 | 
 362 | 
 363 | ![Redirect URL](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/10.png?raw=true)
 364 | 
 365 | ## Exchanging code for token
 366 | 
 367 | When Dropbox redirects to the middleware, there are two possible outcomes:
 368 | 
 369 | - A successful call will include a **code** and a **state**
 370 | - An error call will include an **error_description** query parameter  
 371 | 
 372 | In the success case, we will exchange the code by a token via a POST call to the **/oauth2/token** call in Dropbox.  To make that call we will use the **request-promise** library, which is a wrapper to the **request** library adding promise capabilities on top of it.
 373 | 
 374 | Let us first install the request-promise and request libraries with the following command
 375 | 
 376 | 
 377 |     npm install request request-promise --save
 378 | 
 379 | Now add one more method to the controller with the logic to exchange the code via the Dropbox API.  Once the token is obtained we will temporarily save it on cache and redirect to the home path.
 380 | 
 381 | **controller.js**
 382 | 
 383 | ```javascript
 384 | //add to the variable definition section on the top
 385 | rp = require('request-promise');
 386 | 
 387 | //steps 8-12
 388 | module.exports.oauthredirect = async (req,res,next)=>{
 389 | 
 390 |   if(req.query.error_description){
 391 |     return next( new Error(req.query.error_description));
 392 |   } 
 393 | 
 394 |   let state= req.query.state;
 395 |   if(!mycache.get(state)){
 396 |     return next(new Error("session expired or invalid state"));
 397 |   } 
 398 | 
 399 |   //Exchange code for token
 400 |   if(req.query.code ){
 401 |   
 402 |     let options={
 403 |       url: config.DBX_API_DOMAIN + config.DBX_TOKEN_PATH, 
 404 |           //build query string
 405 |       qs: {'code': req.query.code, 
 406 |       'grant_type': 'authorization_code', 
 407 |       'client_id': config.DBX_APP_KEY, 
 408 |       'client_secret':config.DBX_APP_SECRET,
 409 |       'redirect_uri':config.OAUTH_REDIRECT_URL}, 
 410 |       method: 'POST',
 411 |       json: true }
 412 | 
 413 |     try{
 414 | 
 415 |       let response = await rp(options);
 416 | 
 417 |       //we will replace later cache with a proper storage
 418 |       mycache.set("aTempTokenKey", response.access_token, 3600);
 419 |       res.redirect("/");
 420 | 
 421 |     }catch(error){
 422 |       return next(new Error('error getting token. '+error.message));
 423 |     }        
 424 |   }
 425 | }
 426 | ```
 427 | 
 428 | The beauty of using the **request-promise** library and ES7 **async await** is that we can write our code as if it was all synchronous while this code will not actually block the server.  The **await** indicator will simply yield until the `rp(options)` call has a returned a value (or error) and then it will be picked up again.  Notice that the function has to be marked **async** for this to work.  If the promise fails, it will be captured by the catch and we pass it to the app to handle it, so it is pretty safe.
 429 | 
 430 | 💡 If you have any questions on how the options for the request are formed, you can check the [request](https://www.npmjs.com/package/request) documentation.
 431 | 💡 If you wan to know more about async await this is a [good source](https://strongloop.com/strongblog/async-error-handling-expressjs-es7-promises-generators/)
 432 | 
 433 | Now we need to hook the route to the controller in the **routes/index.js** file.  
 434 | 
 435 | **routes/index.js**
 436 | 
 437 |     router.get('/oauthredirect',controller.oauthredirect);
 438 | 
 439 | and run the server again with `npm start` and try again http://localhost:3000
 440 | You should see again the gallery with the mock images displaying correctly.
 441 | 
 442 | 
 443 | 
 444 | # 5.  Fetching images from Dropbox
 445 | 
 446 | Now that we are able to see a gallery of images.  We want to read the images from Dropbox.
 447 | After the user authorizes the application to read a folder in Dropbox, a folder will be created within the ***Apps*** folder with the name of this app, in this case ***dbximgs demo***.  If the ***Apps*** folder didn’t exist before, it will be created.  So go ahead and populate that folder with some images you want.  For security purposes we will use temporary links that are valid only for 4 hours.
 448 | 
 449 | Now we need to make a call to the Dropbox API to fetch temporary links for those images. We will follow these steps:
 450 | 
 451 | 1.  Call Dropbox `/list_folder` endpoint which returns information about the files contained in the App/dbximgs demo
 452 | 2. Filter the response to images only, ignoring other types of files and folders
 453 | 3. Grab only the `path_lower` field from those results
 454 | 4. For each `path_lower` call the `get_temporary_link` endpoint, this link is valid for 4 hours.
 455 | 5. Grab the `link` field of the response
 456 | 6. Pass all the temporary links to the gallery
 457 | 
 458 | 💡 More information about these endpoints in the [Dropbox documentation](https://www.dropbox.com/developers/documentation/http/documentation#files-get_temporary_link)
 459 | 
 460 | First, you need to add a couple configuration fields 
 461 | 
 462 | **config.js**
 463 | 
 464 | ```javascript
 465 | DBX_LIST_FOLDER_PATH:'/2/files/list_folder',
 466 | DBX_LIST_FOLDER_CONTINUE_PATH:'/2/files/list_folder/continue',
 467 | DBX_GET_TEMPORARY_LINK_PATH:'/2/files/get_temporary_link',
 468 | ```
 469 | 
 470 | This is the code you need to add to controllers.js
 471 | 
 472 | **controller.js**
 473 | 
 474 | ```javascript
 475 | /*Gets temporary links for a set of files in the root folder of the app
 476 | It is a two step process:
 477 | 1.  Get a list of all the paths of files in the folder
 478 | 2.  Fetch a temporary link for each file in the folder */
 479 | async function getLinksAsync(token){
 480 | 
 481 |   //List images from the root of the app folder
 482 |   let result= await listImagePathsAsync(token,'');
 483 | 
 484 |   //Get a temporary link for each of those paths returned
 485 |   let temporaryLinkResults= await getTemporaryLinksForPathsAsync(token,result.paths);
 486 | 
 487 |   //Construct a new array only with the link field
 488 |   var temporaryLinks = temporaryLinkResults.map(function (entry) {
 489 |     return entry.link;
 490 |   });
 491 | 
 492 |   return temporaryLinks;
 493 | }
 494 | 
 495 | 
 496 | /*
 497 | Returns an object containing an array with the path_lower of each 
 498 | image file and if more files a cursor to continue */
 499 | async function listImagePathsAsync(token,path){
 500 | 
 501 |   let options={
 502 |     url: config.DBX_API_DOMAIN + config.DBX_LIST_FOLDER_PATH, 
 503 |     headers:{"Authorization":"Bearer "+token},
 504 |     method: 'POST',
 505 |     json: true ,
 506 |     body: {"path":path}
 507 |   }
 508 | 
 509 |   try{
 510 |     //Make request to Dropbox to get list of files
 511 |     let result = await rp(options);
 512 | 
 513 |     //Filter response to images only
 514 |     let entriesFiltered= result.entries.filter(function(entry){
 515 |       return entry.path_lower.search(/\.(gif|jpg|jpeg|tiff|png)$/i) > -1;
 516 |     });        
 517 | 
 518 |     //Get an array from the entries with only the path_lower fields
 519 |     var paths = entriesFiltered.map(function (entry) {
 520 |       return entry.path_lower;
 521 |     });
 522 | 
 523 |     //return a cursor only if there are more files in the current folder
 524 |     let response= {};
 525 |     response.paths= paths;
 526 |     if(result.hasmore) response.cursor= result.cursor;        
 527 |     return response;
 528 | 
 529 |   }catch(error){
 530 |     return next(new Error('error listing folder. '+error.message));
 531 |   }        
 532 | } 
 533 | 
 534 | 
 535 | //Returns an array with temporary links from an array with file paths
 536 | function getTemporaryLinksForPathsAsync(token,paths){
 537 | 
 538 |   var promises = [];
 539 |   let options={
 540 |     url: config.DBX_API_DOMAIN + config.DBX_GET_TEMPORARY_LINK_PATH, 
 541 |     headers:{"Authorization":"Bearer "+token},
 542 |     method: 'POST',
 543 |     json: true
 544 |   }
 545 | 
 546 |   //Create a promise for each path and push it to an array of promises
 547 |   paths.forEach((path_lower)=>{
 548 |     options.body = {"path":path_lower};
 549 |     promises.push(rp(options));
 550 |   });
 551 | 
 552 |   //returns a promise that fullfills once all the promises in the array complete or one fails
 553 |   return Promise.all(promises);
 554 | }
 555 | ```
 556 | 
 557 | 
 558 | Finally, modify again the home method in the **controller.js** to look like the code below.  First of all, you will notice we added an async modifier as we use an await call to get the links from Dropbox from the code above.  
 559 | 
 560 | **controller.js**  .home method
 561 | 
 562 | ```javascript
 563 | //steps 1,2,3
 564 | module.exports.home = async (req,res,next)=>{    
 565 |   let token = mycache.get("aTempTokenKey");
 566 |   if(token){
 567 |     try{
 568 |       let paths = await getLinksAsync(token); 
 569 |       res.render('gallery', { imgs: paths, layout:false});
 570 |     }catch(error){
 571 |       return next(new Error("Error getting images from Dropbox"));
 572 |     }
 573 |   }else{
 574 |   res.redirect('/login');
 575 |   }
 576 | }          
 577 | ```
 578 | 
 579 | You can run the server and test it.  You should be able to see the images from the folder in your gallery after login into Dropbox.
 580 | 
 581 | 👁️ Make sure you have images in the folder created after you login to Dropbox and authorize the application.
 582 | 
 583 | 
 584 | ![](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/11.png?raw=true)
 585 | 
 586 | 
 587 | 🎯 The source code at this point can be found in [this link](https://github.com/dropbox/dbximages/tree/backendnosession)
 588 |  
 589 | 
 590 | # 6.  Cookies, sessions and Redis database
 591 | 
 592 | Until now, we use a hardcoded session in the `/login` endpoint.  We are going to make several changes for the sake of security and it comes with three Web dev components: cookies, sessions and a session store.
 593 | 
 594 | **Cookies:**  data stored as plain text on the users browser.  In our case it will be a sessionID.
 595 | **Session**:  set of data that contains current status of a user as well as a token to access Dropbox resources.  Identified via sessionID.
 596 | **Session store:**  where sessions are stored.  We use Redis as this is a fast, lean and popular key value storage.
 597 | 
 598 | Our new flow will be something like this:
 599 | 
 600 | 1. When a user hits our main server endpoint `/` for the first time, a session gets automatically created and a sessionID gets stored via cookies in the browser.  We check if the session has a current token.
 601 | 2. If there is no token,  we redirect to the `login` endpoint, we create a random state value and store the sessionID in cache with the state as key.
 602 | 3. When we get redirected back, we find in the cache a SessionID for that state and compare against the current sessionID.  This indicates we originated that authentication flow.
 603 | 4. When the OAuth flow is complete, we regenerate the session (creating a new sessionID) and store the token as part of the new session.
 604 | 5. We redirect back to our main endpoint `/`.
 605 | 6. As a token is found in the current session, the gallery data is returned using the token.
 606 | 
 607 | **Installing redis**
 608 | To test this locally, you need to install Redis in your machine which can be obtained [here](https://redis.io/download)
 609 | 
 610 | Once you unpack redis on your local machine, just go to the redis folder and run.  
 611 | 
 612 | 
 613 |     src/redis-server
 614 | 
 615 | You don’t need to worry about configuration as this is only a local test instance, the production one will be using Heroku.  When it runs, it will look like this:
 616 | 
 617 | ![](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/12.png?raw=true)
 618 | 
 619 | 
 620 | We will also need the following Node libraries
 621 | 
 622 | [**express-session**](https://www.npmjs.com/package/express-session)**:**  Node library to manage sessions
 623 | [**express-sessions**](https://www.npmjs.com/package/express-sessions)**:**  Node library that wraps the session store
 624 | [**redis**](https://www.npmjs.com/package/redis)**:**  Node library to manipulate redis
 625 | 
 626 | so run the following commands:
 627 | 
 628 |     npm install express-sessions express-session redis --save
 629 | 
 630 | You need to add a sessionID secret in the config file (This is the secret used to sign the session ID cookie).  Pick your own.
 631 | 
 632 | **config.js**
 633 | 
 634 |     SESSION_ID_SECRET:'cAt2-D0g-cOW',
 635 | 
 636 | And now initialize the libraries in the app.js file where any middleware gets configured with the following configuration.  Simply add the code below right after the initialization of the **app** variable. `var app = express();`
 637 | 
 638 | **app.js**
 639 | 
 640 | ```javascript
 641 | var config = require('./config');
 642 | var redis = require('redis');
 643 | var client = redis.createClient();
 644 | var crypto = require('crypto');
 645 | var session = require('express-session');
 646 | 
 647 | //initialize session
 648 | var sess = {
 649 |     secret: config.SESSION_ID_SECRET,
 650 |     cookie: {}, //add empty cookie to the session by default
 651 |     resave: false,
 652 |     saveUninitialized: true,
 653 |     genid: (req) => {
 654 |             return crypto.randomBytes(16).toString('hex');;
 655 |           },
 656 |     store: new (require('express-sessions'))({
 657 |         storage: 'redis',
 658 |         instance: client, // optional 
 659 |         collection: 'sessions' // optional 
 660 |     })
 661 | }
 662 | app.use(session(sess));
 663 | ```
 664 | 
 665 | Finally,  we will make 5 changes in the controller: 1 in the login method,  1 in the home method, 2 in the oauthredirect method and we will also add a new method to regenerate a session.
 666 | 
 667 | 
 668 | 1.  We save now in the cache the sessionID instead of a hardcoded value.
 669 | 
 670 | **controller.js login method**
 671 | 
 672 | ```javascript
 673 | // mycache.set(state, "aTempSessionValue", 600);
 674 | mycache.set(state, req.sessionID, 600);
 675 | ```
 676 | 
 677 | 
 678 | 2. Instead of reading the token from cache, read it from the session.
 679 | 
 680 | **controller.js home method**
 681 | 
 682 | ```javascript
 683 | //let token = mycache.get("aTempTokenKey");
 684 | let token = req.session.token;
 685 | ```
 686 | 
 687 | 3.  In the oauthredirect, now we actually make sure that the state value we have just received from Dropbox is the same we previously stored.
 688 | 
 689 | **controller.js** oauthredirect **method**
 690 | 
 691 | ```javascript
 692 | //if(!mycache.get(state)){
 693 | if(mycache.get(state)!=req.sessionID){
 694 | ```
 695 | 
 696 | 4.  For security reasons, whenever we get a new token, we regenerate the session and then we save it.  Let us use a method called  regenerateSessionAsync that receives the request.
 697 | 
 698 | **controller.js** oauthredirect **method**
 699 | 
 700 | ```javascript
 701 | //mycache.set("aTempTokenKey", response.access_token, 3600);
 702 | await regenerateSessionAsync(req);
 703 | req.session.token = response.access_token;
 704 | ```
 705 | 
 706 | 5. Now we implement the regenerateSessionAsync method.  This method simply wraps the generation of the session in a Promise.  We do this because we don’t want to mix awaits and callbacks.  If we had to do this more often we would use a wrapping library, but this is the only time, so we do it in the rough way.   💡 you can read more about asynchronous calls [here](https://strongloop.com/strongblog/async-error-handling-expressjs-es7-promises-generators/)
 707 | 
 708 | **controller.js** regenerateSessionAsync **method**
 709 | 
 710 | ```javascript
 711 | //Returns a promise that fulfills when a new session is created
 712 | function regenerateSessionAsync(req){
 713 |   return new Promise((resolve,reject)=>{
 714 |     req.session.regenerate((err)=>{
 715 |       err ? reject(err) : resolve();
 716 |     });
 717 |   });
 718 | }
 719 | ```
 720 | 
 721 | And you can now run with `npm start`.
 722 | 🎯 The source code at this point can be found in [this link](https://github.com/dropbox/dbximages/tree/backendwithsession)
 723 | 
 724 | 
 725 | # 7.  Deploying to Heroku
 726 | 
 727 | **⚠️  While you will not be charged anything for following any of the steps below, provisioning the Redis database addin requires you to have a credit card on file on Heroku.  But again,** **we will be using only free tiers.**
 728 | 
 729 | ![](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/13.png?raw=true)
 730 | 
 731 | 
 732 | 
 733 | - First create a free account at https://heroku.com
 734 | - If they ask you about the technology you will be using, select Node.JS
 735 | - Then click on **Create an App** and give it a name.  In this specific case, I will call it **dbximgs** as I was lucky enough to have that name still available.  
 736 | 
 737 | 
 738 | Once you create the app, you are pretty much given the instructions to put the code there, **but don’t do all the steps** just yet as you need to make several changes.
 739 | 
 740 | 
 741 | 1.  Install the [Heroku CLI](https://devcenter.heroku.com/articles/heroku-command-line) and login 
 742 | 
 743 | 
 744 |     heroku login
 745 | 
 746 | 
 747 | 2.  A the root level of your project, initialize a git repository.  Make sure you use your own project name.
 748 |     git init
 749 |     heroku git:remote -a dbximgs
 750 | 
 751 | 
 752 | 3.  Now we need to add a .gitignore file at the root level so we don’t upload to Heroku all the libraries or files we want to leave behind for security purposes.
 753 | 
 754 | **.gitignore**
 755 | 
 756 |     # Node build artifacts
 757 |     node_modules
 758 |     npm-debug.log
 759 |     
 760 |     # Local development
 761 |     *.env
 762 |     package-lock.json
 763 | 
 764 | 
 765 | 4.  There is information that should not be hardcoded in the source code like the Dropbox client/secret and also the Redis secret.  Also, there are items that should be configured for a local test vs server production such as the redirectURL of the OAuth flow.    There are several ways to work on this, like the *Heroku local* command, but to have independence of Heroku for local testing, we will use the **dotenv** library which is not much different.
 766 | 
 767 | This library pushes a set of environment variables when the server starts from a **.env** file if found.  We will have a .env file only in the local environment but we will not push it to Heroku as stated in the .gitignore above.  Heroku instead uses configuration variables to feed the same information. 
 768 | 
 769 | First, let us install the dotenv library
 770 | 
 771 | 
 772 |     npm install dotenv --save
 773 | 
 774 | Then, let us add a .env file to the root of the project 
 775 | **.env**
 776 | 
 777 |     DBX_APP_KEY='<appkey_in_dropbox_console>'
 778 |     DBX_APP_SECRET='<appsecret_in_dropbox_console>'
 779 |     OAUTH_REDIRECT_URL='http://localhost:3000/oauthredirect'
 780 |     SESSION_ID_SECRET='cAt2-D0g-cAW'
 781 | 
 782 | Finally, replace the whole config file to the code below.  Notice how we are reading several variables from the environment (which is loaded at startup from the .env file)
 783 | **config.js**
 784 | 
 785 | ```javascript
 786 | require('dotenv').config({silent: true});
 787 | 
 788 | module.exports = {
 789 |         DBX_API_DOMAIN: 'https://api.dropboxapi.com',
 790 |         DBX_OAUTH_DOMAIN: 'https://www.dropbox.com',
 791 |         DBX_OAUTH_PATH: '/oauth2/authorize',
 792 |         DBX_TOKEN_PATH: '/oauth2/token',
 793 |         DBX_LIST_FOLDER_PATH:'/2/files/list_folder',
 794 |         DBX_LIST_FOLDER_CONTINUE_PATH:'/2/files/list_folder/continue',
 795 |         DBX_GET_TEMPORARY_LINK_PATH:'/2/files/get_temporary_link',
 796 |         DBX_APP_KEY:process.env.DBX_APP_KEY,
 797 |         DBX_APP_SECRET:process.env.DBX_APP_SECRET, 
 798 |         OAUTH_REDIRECT_URL:process.env.OAUTH_REDIRECT_URL,
 799 |         SESSION_ID_SECRET:process.env.SESSION_ID_SECRET,
 800 | }
 801 | ```
 802 | 
 803 | Since those variables won’t exist on Heroku, we need to manually add them.  So in your app in Heroku, click on **Settings** and then on **Reveal config vars**
 804 | 
 805 | ![](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/14.png?raw=true)
 806 | 
 807 | 
 808 | Then manually add the variables with the proper values
 809 | 
 810 | ![](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/15.png?raw=true)
 811 | 
 812 | 
 813 | 👁️  Notice something important here.  We changed the OAUTH_REDIRECT_URL to https://dbximgs.herokuapp.com/oauthredirect.  In this field you need to put the name of your app in the following way:
 814 | 
 815 |     https://<yourappname>.herokuapp.com/oauthredirect
 816 | 
 817 | 
 818 | 5.  As we are now using a different redirect URL for the authentication, we need to also add it to the [Dropbox app console.](https://www.dropbox.com/developers/apps/)
 819 | 
 820 | 
 821 | ![](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/16.png?raw=true)
 822 | 
 823 | 
 824 | 
 825 | 6.  When you deploy your app to Heroku, it installs all the libraries and dependencies from your package.json file, but the problem we will see is that Node.JS itself might be a version not compatible yet with elements of ES7 we put in our code like the async/await calls.  To avoid this, we need to set the Node.JS dependency in the package.json file.  For this add the following lines right before the **dependencies**
 826 | 
 827 | **package.json**
 828 | 
 829 |     "engines": {
 830 |       "node": "~8.2.1"
 831 |     },
 832 | 
 833 | It will look something like this
 834 | **package.json**
 835 | 
 836 |     {
 837 |       "name": "dbximgs",
 838 |       "version": "0.0.0",
 839 |       "private": true,
 840 |       "scripts": {
 841 |         "start": "node ./bin/www"
 842 |       },
 843 |       "engines": {
 844 |         "node": "~8.2.1"
 845 |       },
 846 |       "dependencies": {
 847 |           //many libraries listed here
 848 |       }
 849 |     }
 850 | 
 851 | 
 852 | 
 853 | 7. We use Redis to store sessions and luckily there is a free Heroku addin that can be configured only with a few steps:
 854 | 
 855 | 
 856 | ![](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/17.png?raw=true)
 857 | 
 858 | 
 859 | 
 860 | - First, go to the [Heroku Redis addin page](https://elements.heroku.com/addons/heroku-redis)
 861 | - Click on **Install Heroku Redis** button
 862 | - Select your application from the dropdown list
 863 | - Choose the free tier and press **provision**.  If you don’t have a credit card on file this will fail, so you will need to add one to continue in the billing settings of your profile.
 864 | 
 865 | 
 866 | 
 867 | Now you will see the addin in your app
 868 | 
 869 | ![](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/18.png?raw=true)
 870 | 
 871 | 
 872 | There is one more step you need to change in your code for Redis to work. You need to add an environment variable when you create the database client in the app.js file.  When this runs locally, this value will be empty, but when Heroku calls it, it will add a variable it has added to our config vars when you deployed the plugin.
 873 | 
 874 | **app.js**
 875 | 
 876 | ```javascript
 877 | //var client = redis.createClient();
 878 | var client = redis.createClient(process.env.REDIS_URL);
 879 | ```
 880 | 
 881 | You can see it yourself in the settings page of the Heroku app if you click on Reveal config vars
 882 | 
 883 | 
 884 | 8.  Seems we have all the elements in place to push the magic button.  (make sure you are logged to Heroku in your console, otherwise run the `heroku login` command at the root level of your project.
 885 | 
 886 | now run
 887 | 
 888 |     git add --all
 889 |     git commit -m "Heroku ready code"
 890 |     git push heroku master
 891 | 
 892 | 
 893 | which will start the deploy and will show you something like this
 894 | 
 895 | 
 896 | ![](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/19.png?raw=true)
 897 | 
 898 | 
 899 | You can also check the Heroku logs to make sure server is running correctly 
 900 | 
 901 |     heroku logs --tail
 902 | 
 903 | Something like this means things are working fine
 904 | 
 905 | ![](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/20.png?raw=true)
 906 | 
 907 | 
 908 | 
 909 | 9.  You can now go and test your app!!  🤡 
 910 | 
 911 | If you are not sure of the link, you can start it from the Heroku console using the Open App button.  Or run the `heroku open` command in the console.
 912 | 
 913 | 
 914 | ![](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/21.png?raw=true)
 915 | 
 916 | 
 917 | It will be something like this
 918 | 
 919 |     https://<yourappname>.herokuapp.com
 920 | 
 921 | 
 922 | 👁️ Remember to add some images to the folder if the Dropbox account you are linking is new.  Otherwise, you will simply see a sad white page.
 923 | 🎯 The source code at this point can be found in [this link](https://github.com/dropbox/dbximages/tree/herokuready)
 924 | 
 925 | 
 926 | # 8.  Security considerations and actions
 927 | 
 928 | In general, there are a set of security measures we can take to protect our app. I am checking the ones we have already implemented.
 929 | 
 930 | **Oauth**
 931 | 
 932 | - 💚 OAuth code flow where token is not exposed to the Web browser
 933 | - 💚 Check state parameter on the OAuth flow to avoid CSRF 
 934 | - 💚 Store token on a fresh session (regenerate the session)
 935 | 
 936 | **Cookies**
 937 | 
 938 | - 💚 Cookies:  disabling scripts to read/write cookies from browser in the session configuration.  By default the HttpOnly attribute is set.
 939 | - 💚 Cookies:  enforcing same domain origin (default on the session configuration)
 940 | - 🔴 Cookies:  make sure cookies are transported only via https.  😱 we will fix it later.
 941 | 
 942 | **Securing headers**
 943 | 
 944 | - Good information in [this blog post](https://blog.risingstack.com/node-js-security-checklist/), but here is the summary of what we should care about.
 945 | - 🔴 **Strict-Transport-Security** enforces secure (HTTP over SSL/TLS) connections to the server
 946 | - 🔴 **X-Frame-Options**  protection against clickjacking or disallowing to be iframed on another site.
 947 | - 🔴 **X-XSS-Protection**  Cross-site scripting (XSS) filter 
 948 | - 🔴 **X-Content-Type-Options** prevents browsers from MIME-sniffing a response away from the declared content-type
 949 | - 🔴 **Content-Security-Policy** prevents a wide range of attacks, including Cross-site scripting and other cross-site injections
 950 | 
 951 | The blogpost above has more security considerations if you intend to go deeper on the topic.
 952 | 
 953 | To secure the headers above, we will use the [helmet](https://www.npmjs.com/package/helmet) library.  
 954 | 💡 This is a [good blog post to read about helmet](http://scottksmith.com/blog/2014/09/21/protect-your-node-apps-noggin-with-helmet/)
 955 | 
 956 | 
 957 |     npm install helmet --save
 958 | 
 959 | And add the following code to the app.js file to set the headers.  Notice that we are only allowing scripts from the ajax.googleapi (this is where we find the jQuery library).  Another option is to simply copy the file locally, for that, change the reference in the page.js file.
 960 | 
 961 | **app.js**
 962 | 
 963 | ```javascript
 964 | var helmet = require('helmet');
 965 | 
 966 | //Headers security!!
 967 | app.use(helmet());
 968 | 
 969 | // Implement CSP with Helmet 
 970 | 
 971 | app.use(helmet.contentSecurityPolicy({
 972 |   directives: {
 973 |     defaultSrc: ["'self'"],
 974 |     scriptSrc: ["'self'","https://ajax.googleapis.com/"],
 975 |     styleSrc: ["'self'"], 
 976 |     imgSrc: ["'self'","https://dl.dropboxusercontent.com"],  
 977 |     mediaSrc: ["'none'"],  
 978 |     frameSrc: ["'none'"]  
 979 |   },
 980 | 
 981 |     // Set to true if you want to blindly set all headers: Content-Security-Policy, 
 982 |     // X-WebKit-CSP, and X-Content-Security-Policy. 
 983 |     setAllHeaders: true
 984 | 
 985 | }));
 986 | ```
 987 | 
 988 | With this we have secured the headers now 🤠 
 989 | 
 990 | - 💚 Securing headers
 991 | 
 992 | Let us know fix the cookie transport issue.  The best thing to do here is to enable http for development purposes and only allow https for production.  Development and production can be set with the NODE_ENV env variable.   Heroku is by defauld set to production, the local host is development by default.  You can modify this behavior [following these steps](https://devcenter.heroku.com/articles/nodejs-support#devdependencies)
 993 | 
 994 | After the sess variable is initialized (before the app.use) in the apps.js add the following code 
 995 | **app.js**
 996 | 
 997 | ```javascript
 998 | //cookie security for production: only via https
 999 | if (app.get('env') === 'production') {
1000 |     app.set('trust proxy', 1) // trust first proxy
1001 |     sess.cookie.secure = true // serve secure cookies
1002 | }
1003 | ```
1004 | 
1005 | It is important to do the *trust the first proxy* for Heroku as any requests enters via https to Heroku but the direct internal call to our middleware is http via some load balancer.
1006 | 
1007 |  And we are done! 👊 
1008 | 
1009 | - 💚 Cookies:  make sure cookies are transported only via https
1010 | 
1011 |  Now you want to push this to heroku
1012 | 
1013 |     git add --all
1014 |     git commit -m "security improvements"
1015 |     git push heroku master 
1016 | 
1017 |  
1018 | 🎯 The source code at this point can be found in [this link](https://github.com/dropbox/dbximages/tree/herokusecure)
1019 | 
1020 | 
1021 | ## Checking dependency vulnerabilities
1022 | 
1023 | The great thing about Node.JS is that you usually find a library that does exactly what you want.  But it comes to a great cost, libraries get outdated and then you find yourself in 🔥 *library hell* 🔥 when they have specific vulnerabilities that get patched.  Think about it, you have dependencies that have dependencies and suddenly you have hundreds of dependencies and libraries that might be outdated and vulnerable.
1024 | 
1025 | A good way to check you are protected against vulnerabilities to specific dependencies in your code is the `nsp check` command.  It will tell you which libraries have been compromised, what are the patched versions, where to find them and the version you have.
1026 | 
1027 | so run
1028 | 
1029 | 
1030 |     nsp check
1031 | 
1032 | and you will get a bunch of tables that look like this
1033 | 
1034 | 
1035 | ![](https://github.com/dropbox/nodegallerytutorial/blob/master/tutorial_resources/22.png?raw=true)
1036 | 
1037 | 
1038 | As with Heroku we don’t actually push the **node_modules** package, it makes sense to patch those files that are directly stated in the **package.json** file by simply changing the version required.  But make sure you test in case there were major changes for that dependency.  Every time you push your code to Heroku, it runs the `npm install` command recreating the node_modules folder.
1039 | 
1040 | If the vulnerability is in a library within one of your projects dependencies, check if updating the dependency will fix the issue.  Otherwise you have three options:  accept the risk of keeping it, replace the library for a similar without the vulnerability or finally, patch it yourself and then actually push all the libraries to Heroku yourself.
1041 | 
1042 | 
1043 | # 9.  Production and things to do from here
1044 | 
1045 | The master branch of this tutorial also includes a method to logout which revokes the token and deletes the session, it also removes some unused files.  [check it out.](https://github.com/dropbox/dbximages/tree/master)
1046 | 
1047 | This is an additional list of things to do to make this tutorial fully production material.
1048 | 
1049 | 
1050 | 1.  Manage the errors:  for this tutorial, all the errors will be propagated to the app.js page that will set the right error code on the http response and display the error template.
1051 |       res.render('error');
1052 | 
1053 | You could make that error page look nicer.
1054 | 
1055 | 
1056 | 3. The front end was barely worked, you can make it look much nicer.
1057 | 4.  Add app icons to the Dropbox page so the authorization looks better.
1058 | 5. Probably the most important one will be pagination on the images.  You can call Dropbox specifying a number of items you want back.  Then Dropbox will give you a cursor to iterate.  Adding that will just make this tutorial much longer, so that’s a good task for you if you want to extend it.
1059 | 
1060 | 
1061 | #  10.  Try it yourself
1062 | 
1063 | [https://dbximgs.herokuapp.com](https://dbximgs.herokuapp.com)
1064 | 
1065 | 
1066 | 🤓 After you hit the link, give it a couple minutes since free Heroku instances are dormant by default and need to be restarted.
1067 | 
1068 | You can revoke the token and delete the session using
1069 | [https://dbximgs.herokuapp.com/logout](https://dbximgs.herokuapp.com/logout)
1070 | 
1071 | 
1072 | # License
1073 | 
1074 | Apache 2.0
1075 | 
1076 | 
1077 | 
1078 | 


--------------------------------------------------------------------------------