Merge pull request #92 from timoa/feature/fastify-helmet

Add Helmet support to secure HTTP headers

Author: timoa

package-lock.json

@@ -37,8 +37,9 @@
   },
   "homepage": "https://github.com/timoa/nodejs-encryption-api-example#readme",
   "dependencies": {
-    "@snyk/protect": "1.907.0",
+    "@fastify/helmet": "8.0.0",
     "@hapi/boom": "9.1.4",
+    "@snyk/protect": "1.907.0",
     "fastify": "3.28.0",
     "fastify-healthcheck": "3.1.0",
     "fastify-swagger": "5.1.1",

package.json

@@ -1,4 +1,8 @@
 const fastify = require('fastify')();
+const fastifyHelmet = require('@fastify/helmet');
+const fastifyHealthcheck = require('fastify-healthcheck');
+const fastifySwagger = require('fastify-swagger');
+
 const logger = require('./lib/logger');
 const config = require('./config/config.json');
 const routes = require('./routes');
@@ -10,16 +14,21 @@ const port = process.env.NODE_PORT || config.app.port;
 // Connect to MongoDB
 db.connect();
 
+// Register Helmet
+fastify.register(fastifyHelmet, {
+  global: true,
+});
+
 // Register the Health plugin
-fastify.register(require('fastify-healthcheck'), {
+fastify.register(fastifyHealthcheck, {
   healthcheckUrl: `/${config.healthCheck.path}`,
 });
 
 // Import Swagger Options
 const swagger = require('./swagger/options');
 
 // Register the Swagger plugin
-fastify.register(require('fastify-swagger'), swagger.options);
+fastify.register(fastifySwagger, swagger.options);
 
 // Load the routes
 routes.forEach((route) => {