js

router.post('/files/:taskId', requireAngLogin, function (req, res) {

    Task.findById(req.params.taskId, function (err, task) {
        if (task.author !== req.user.username) {
            console.log('unauthorized access');
            return res.sendStatus(401);
        }

        var part = req.files.filefield;

        var writeStream = gfs.createWriteStream({
            filename: part.name,
            mode: 'w',
            content_type: part.mimetype
        });


        writeStream.on('close', function () {
            return res.status(200).send({
                message: 'Success'
            });
        });

        writeStream.write(part.data);

        writeStream.end();



    });




});