text: var mbaasApi = require('fh-mbaas-api');
  var express = require('express');
  var mbaasExpress = mbaasApi.mbaasExpress();
  var cors = require('cors');
  var Keycloak = require('keycloak-connect');
  
  // list the endpoints which you want to make securable here
  var securableEndpoints;
  securableEndpoints = ['/hello'];
  
  var app = express();
  
  
  // Enable CORS for all requests
  app.use(cors());
  
  
  
  
   
  
  // Note: the order which we add middleware to Express here is important!
  app.use('/sys', mbaasExpress.sys(securableEndpoints));
  app.use('/mbaas', mbaasExpress.mbaas);
  
  /* uncomment this code if you want to use $fh.auth in the app preview
   * localAuth is only used for local development. 
   * If the app is deployed on the platform, 
   * this function will be ignored and the request will be forwarded 
   * to the platform to perform authentication.
  
  app.use('/box', mbaasExpress.auth({localAuth: function(req, cb){
    return cb(null, {status:401, body: {"message": "bad request"}});
  }}));
  
  or
  
  app.use('/box', mbaasExpress.core({localAuth: {status:401, body: {"message": "not authorised”}}}));
  */
  
  // allow serving of static files from the public directory
  app.use(express.static(__dirname + '/public'));
  
  // Note: important that this is added just before your own Routes
  app.use(mbaasExpress.fhmiddleware());
  
  var keycloak = new Keycloak({
      store: ""
    });
  
    app.use(keycloak.middleware());
  
  //only authenticated users will able to access  "hello" route
  
  app.use('/hello',keycloak.protect(),require('./lib/hello.js')());
  
  
  
  // Important that this is last!
  app.use(mbaasExpress.errorHandler());
  
  var port = process.env.FH_PORT || process.env.OPENSHIFT_NODEJS_PORT || 8001;
  var host = process.env.OPENSHIFT_NODEJS_IP || '0.0.0.0';
  app.listen(port, host, function() {
    console.log("App started at: " + new Date() + " on port: " + port); 
  });
  