text: var express = require("express");
  var bodyParser = require('body-parser');
  var cons = require('consolidate');
  var nosql = require('nosql').load('database.nosql');
  var cors = require('cors');
  
  var app = express();
  
  app.use(bodyParser.urlencoded({extended: true})); // support form-encoded bodies (for bearer tokens)
  
  app.engine('html', cons.underscore);
  app.set('view engine', 'html');
  app.set('views', 'files/protectedResource');
  app.set('json spaces', 4);
  
  app.use('/', express.static('files/protectedResource'));
  app.use(cors());
  
  var resource = {
      "name": "Protected Resource",
      "description": "This data has been protected by OAuth 2.0"
  };
  
  var getAccessToken = function (req, res, next) {
      // check the auth header first
      var auth = req.headers['authorization'];
      var inToken = null;
      if (auth && auth.toLowerCase().indexOf('bearer') == 0) {
          inToken = auth.slice('bearer '.length);
      } else if (req.body && req.body.access_token) {
          // not in the header, check in the form body
          inToken = req.body.access_token;
      } else if (req.query && req.query.access_token) {
          inToken = req.query.access_token
      }
  
      console.log('Incoming token: %s', inToken);
      nosql.one().make(function (builder) {
          builder.where('access_token', inToken);
          builder.callback(function (err, token) {
              if (token) {
                  console.log("We found a matching token: %s", inToken);
              } else {
                  console.log('No matching token was found.');
              }
              ;
              req.access_token = token;
              next();
              return;
          });
      });
  };
  
  app.options('/resource', cors());
  app.post("/resource", cors(), getAccessToken, function (req, res) {
  
      if (req.access_token) {
          res.json(resource);
      } else {
          res.status(401).end();
      }
  
  });
  
  var server = app.listen(9002, 'localhost', function () {
      var host = server.address().address;
      var port = server.address().port;
  
      console.log('OAuth Resource Server is listening at http://%s:%s', host, port);
  });
   
  