app.js

import dotenv from 'dotenv'
dotenv.config()
import express from 'express'
import session from 'express-session'
import bodyParser from 'body-parser'
import ejs from 'ejs'
import rateLimit from 'express-rate-limit'

// Routes
import lookupRouter from './routes/lookup.js'
import apiRouter from './routes/api.js'
import endpointsRouter from './routes/endpoints.js'
import authRouter from './routes/auth.js'
import dashboardRouter from './routes/dashboard.js'

// Rate limiter for API and cache
const globalLimiter = rateLimit({
  windowMs: 30 * 60 * 1000, // 50 web requests we allow ( non api ) per 30min
  max: 50,
})

const port = process.env.PORT || 8888
const app = express()

// Middleware
app.set('view engine', 'ejs')
app.set('trust proxy', true)
app.use(express.static('attributes', { extensions: ['ico'] }))
app.use(express.static('attributes'))
app.use(bodyParser.json())
app.use(express.urlencoded({ extended: true }))
// Apply the global rate limiter to all routes except the API routes
app.use((req, res, next) => {
  if (req.originalUrl.startsWith('/api')) {
    next()
  } else {
    globalLimiter(req, res, next)
  }
})
app.use(session({
  secret: process.env.EXPRESS_SESSION_SECRET,
  resave: false,
  saveUninitialized: false,
  cookie: {
    secure: false, // set this to true on production
  },
}))

app.use((req, res, next) => {
  res.locals.isAuthenticated = req.session.isAuthenticated || false
  next()
})

app.use((req, res, next) => {
  if (req.originalUrl === '/') {
    if (req.method === 'GET') {
      return lookupRouter(req, res, next)
    } else if (req.method === 'POST') {
      return lookupRouter.handle(req, res, next)
    }
  }
  next()
})

app.use('/api', apiRouter)
app.use('/endpoints', endpointsRouter)
app.use('/auth', authRouter)
app.use('/dashboard', dashboardRouter)

// Error handling middleware
// Specific error handling middleware for different types of errors.
app.use((err, req, res, next) => {
  if (err instanceof SyntaxError && err.status === 400 && 'body' in err) {
    // Handle JSON parsing errors
    res.status(400).send('Invalid JSON')
  } else if (err) {
    // Handle all other errors
    console.error(err)
    res.status(500).send('Something went wrong')
  } else {
    next()
  }
})

// Redirect to the lookup page
app.get('/', (req, res) => {
  res.redirect('/lookup')
})

// 404 handler
app.use((req, res, next) => {
  res.status(404).render('errors/404', { title: 'Error 404' })
})

// Handle unhandled Promise rejections
process.on('unhandledRejection', (reason, promise) => {
  console.error(`Unhandled Rejection at: ${promise}, reason: ${reason}`)
})

// Run server.
app.listen(port, () => {
  console.log(`Web-server started on port ${port}.`)
})