http.createServer(function(req,res){
  var header=req.headers['authorization']||'',        // get the header
      token=header.split(/\s+/).pop()||'',            // and the encoded auth token
      auth=new Buffer(token, 'base64').toString(),    // convert from base64
      parts=auth.split(/:/),                          // split on colon
      username=parts[0],
      password=parts[1];

  res.writeHead(200,{'Content-Type':'text/plain'});
  res.end('username is "'+username+'" and password is "'+password+'"');

}).listen(1337,'127.0.0.1');

var getAccessToken = function (req, res, next) {
  // check the auth header first
  var auth = req.headers['authorization'];
  var inToken = null;
  if (auth && auth.toLowerCase().indexOf('bearer') == 0) {
    inToken = auth.slice('bearer '.length);
  } else if (req.body && req.body.access_token) {
    // not in the header, check in the form body
    inToken = req.body.access_token;
  } else if (req.query && req.query.access_token) {
    inToken = req.query.access_token;
  }

  console.log('Incoming token: %s', inToken);
  // nosql.one(function(token) {
  //   if (token.access_token == inToken) {
  //     return token;
  //   }
  // }, function(err, token) {
  //   if (token) {
  //     console.log("We found a matching token: %s", inToken);
  //   } else {
  //     console.log('No matching token was found.');
  //   }
  //   req.access_token = token;
  if (inToken != null) {
    req.access_token = inToken;
    next();

  } else {
    var error = new Error("token not found.");
    error.status = 401;
    next(error);
  }
  return;
};

router.get('/', function(req, res, next) {
  res.json(req.headers);
});

HTTP/1.1 200 OK
X-Backside-Transport: OK OK
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/json; charset=utf-8
Date: Tue, 16 Jan 2018 02:23:25 GMT
Etag: W/"3a6-I2LqYyt1WnLws2m4s0K7+gLqPP4"
X-Powered-By: Express
X-Global-Transaction-ID: 10706149
Access-Control-Expose-Headers: APIm-Debug-Trans-Id, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, X-Global-Transaction-ID
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Credentials: false
X-RateLimit-Limit: name=rate-limit,100;
X-RateLimit-Remaining: name=rate-limit,97;

{
  "host": "mybank.au-syd.mybluemix.net",
  "user-agent": "curl/7.54.0",
  "$wscs": "ECDHE-RSA-AES256-GCM-SHA384",
  "$wsis": "true",
  "$wsra": "168.1.38.46",
  "$wssc": "https",
  "$wssn": "mybank.au-syd.mybluemix.net",
  "$wssp": "443",
  "accept": "application/json",
  "cache-control": "no-transform",
  "ibm-app-user": "xxxxx-5d80-4c69-9900-57e7193ee238",
  "via": "1.1 AQAAAOPLJyM-,1.1 AQAAABQK4yg-",
  "x-archived-client-ip": "168.1.17.11",
  "x-b3-spanid": "xx",
  "x-b3-traceid": "xxxxx",
  "x-cf-applicationid": "xxxxx-ec5e-4482-a4cc-dd435edf3bfa",
  "x-cf-instanceid": "7xxxxx5a4-e7d9-46df-57e5-8a11",
  "x-cf-instanceindex": "0",
  "x-client-ip": "168.1.17.11,168.1.38.46",
  "x-forwarded-for": "168.1.17.11,168.1.38.46, 168.1.35.172",
  "x-forwarded-host": "api.au.apiconnect.ibmcloud.com",
  "x-forwarded-port": "443",
  "x-forwarded-proto": "https",
  "x-global-transaction-id": "10706149",
  "x-request-start": "1516069405383",
  "x-vcap-request-id": "7xxxx6-b42a-4048-4a24-aeee4ee240bc"
}

/**
 * IBM API Connect YAML Tool
 * =====
 *
 * Convert swagger-ui json file to IBM API Connect yaml file.
 *
 * The following features will be added by this tool:
 *
 * 1. x-ibm-name
 * 2. x-ibm-configuration: assemble
 * 3. securityDefinitions: oauth
 * 4. security: oauth
 * 5. schemes: https
 *
 * Please refer to ./data/template/api-connect.yaml for more details, this tool will use that template file as input.
 *
 * @author cyper
 *
 */
const jsyaml = require('js-yaml'),
  fs = require('fs'),
  path = require('path'),
  request = require('request');

const FILE_ENCODING = 'utf8';
const VERSION = '2018';
const SERVER_URL = 'https://xxxx.mybluemix.net';
const groupsOfApplication = ['Bank Information', 'Market Information', 'Appointments'];

const IBM_TEMPLATE_FILE = path.resolve(__dirname, './data/template/api-connect.yaml');

const outputDir = path.resolve(__dirname, './output');

// create output dir
if (!fs.existsSync(outputDir)) {
  fs.mkdirSync(outputDir);
}

// 从swagger-ui上抓取api definition.
request(SERVER_URL + '/swagger-resources', {json: true}, function (err, res, data) {
  if (err) {
    return console.log(err);
  }

  let groups = data;
  groups.forEach(group => {
    let groupName = group.name;
    let apiDocsUrl = SERVER_URL + group.location;

    console.log(apiDocsUrl);

    request(apiDocsUrl, {json: true}, function (err, res, data) {
      if (err) {
        return console.log(err);
      }

      let jsonFileName = groupName.toLowerCase().replace(/\s/g, '-') + ".json";
      let isApplicationType = groupsOfApplication.some(name => name.toLowerCase() === groupName.toLowerCase());

      processJson(jsonFileName, data, isApplicationType);

    });
  });

});


function processJson(fileName, json, isApplicationType) {

  // insert other info such as assembly
  let paths = json['paths'];

  let template = jsyaml.safeLoad(fs.readFileSync(IBM_TEMPLATE_FILE, FILE_ENCODING));

  // ['assembly']['execute'][0] is set-variable, 1 is operation-switch.
  let caseTemplate = template['x-ibm-configuration']['assembly']['execute'][1]['operation-switch']['case'][0];
  let cases = [];

  // loop through each API defined in the json file
  Object.keys(paths).forEach(key => {

    let api = json['paths'][key];
    let operations = [];
    let targetUrl = `${SERVER_URL}${key}`;

    // if it's GET request
    if (api.get) {
      console.log(`GET ${key}`);
      operations.push(api.get.operationId);
    }

    // if it's POST request
    if (api.post) {
      console.log(`POST ${key}`);
      operations.push(api.post.operationId);
    }

    // if it's DELETE request
    if (api.delete) {
      console.log(`DELETE ${key}`);
      operations.push(api.delete.operationId);
    }

    let oneCase = JSON.parse(JSON.stringify(caseTemplate));
    oneCase['operations'] = operations;
    oneCase['execute'][0]['proxy']['target-url'] = targetUrl;
    cases.push(oneCase);

  });

  template['x-ibm-configuration']['assembly']['execute'][1]['operation-switch']['case'] = cases;

  // Object.assign(json, template);
  // 增加OAuth2后变化的地方: 5大处.
  json['x-ibm-configuration'] = template['x-ibm-configuration'];
  json['securityDefinitions'] = template['securityDefinitions'];
  json['security'] = template['security'];
  json['schemes'] = template['schemes'];
  json['info']['version'] = VERSION;
  json['info']['x-ibm-name'] = json['info']['title'].toLowerCase().replace(/\s/g, '-');

  // application 和 accessCode的不同之处.
  if (isApplicationType) {
    json['securityDefinitions']['OAuth2']['flow'] = 'application';
    delete json['securityDefinitions']['OAuth2']['authorizationUrl'];
  }

  let result = jsyaml.dump(json);

  let outputFile = path.resolve(outputDir, fileName.slice(0, -5) + '.yaml');
  console.log(`output: ${outputFile}\n`);

  fs.writeFileSync(outputFile, result, FILE_ENCODING);
}