index.js

'use strict';

// use dotenv if not in production
if (process.env.NODE_ENV !== 'production') require('dotenv').config();

const express = require('express');
const session = require('express-session');
const flash = require('connect-flash');
const passport = require('passport');
const methodOverride = require('method-override');
const favicon = require('serve-favicon');
const path = require('path');
const app = express();
const PORT = process.env.PORT || 8000;

// Routes Handlers
const routeHandler = require('./routes/index');

// Rate limiter middleware
const rateLimiterMiddleware = require('./middlewares/ratelimiter');

// Mongoose Config
require('./config/database');

// Passport
require('./config/passport')(passport);

// Body parser middleware
app.use(express.json());
app.use(express.urlencoded({ extended: true }));

// Set view engine
app.set('view engine', 'ejs');

// Tell express to use the public directory
app.use(express.static(path.join(__dirname + '/public')));

// Utility functions to be used in templates
app.locals.date = require('./utils/date');

// Express Sessions
// TODO: Use MongoStore or RedisStore for production
app.use(
  session({
    name: 'crypt_sid',
    secret: process.env.SESSION_SECRET,
    resave: true,
    saveUninitialized: true,
  }),
);

// Passport
app.use(passport.initialize());
app.use(passport.session());

// Connect flash
app.use(flash());

app.use(rateLimiterMiddleware);

// Security
// TODO: add helmet
// app.use(helmet());

// Method override
app.use(
  methodOverride(function (req, res) {
    if (req.body && typeof req.body === 'object' && '_method' in req.body) {
      let method = req.body._method;
      delete req.body._method;
      return method;
    }
  }),
);

// Global Variables
app.use((req, res, next) => {
  res.locals.success_msg = req.flash('success_msg');
  res.locals.error_msg = req.flash('error_msg');
  res.locals.error = req.flash('error');
  next();
});

// Routes
app.use(routeHandler);

// 404s
app.get('*', (req, res) => {
  res.render('errors/404');
});

app.listen(PORT, console.log(`Server started on port ${PORT}`));