-
Notifications
You must be signed in to change notification settings - Fork 1
/
app.js
72 lines (60 loc) · 1.67 KB
/
app.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
const express = require("express");
const morgan = require("morgan");
const path = require("path");
const rateLimit = require("express-rate-limit");
const helmet = require("helmet");
const mongoSanitize = require("express-mongo-sanitize");
const xss = require("xss-clean");
const hpp = require("hpp");
const cors = require("cors");
const redis = require("redis");
const session = require("express-session");
const RedisStore = require("connect-redis")(session);
const authRoute = require("./routes/auth");
const globalError = require("./utils/globalError");
const redisClient = redis.createClient({
host: process.env.REDIS_HOST,
port: process.env.REDIS_POST,
auth_pass: process.env.REDIS_PASS,
});
const app = express();
//helmet
app.use(helmet());
app.use(cors());
app.use(express.json({ limit: "10kb" }));
app.use(express.urlencoded({ extended: false }));
app.use(
session({
store: new RedisStore({ client: redisClient }),
secret: process.env.SESSION_SECRET,
saveUninitialized: false,
resave: false,
cookie: {
secure: process.env.NODE_ENV === "production" ? true : false,
httpOnly: true,
maxAge: 300000000,
},
})
);
if (process.env.NODE_ENV === "development") {
app.use(morgan("tiny"));
}
app.use(hpp());
app.use(mongoSanitize());
const limiter = rateLimit({
windowMs: 15 * 60 * 1000,
max: 100,
});
//rate limit
app.use("/api/", limiter);
app.use(xss());
app.use("/api/v1/auth", authRoute);
app.use(globalError);
if (process.env.NODE_ENV === "production") {
//set static folder
app.use(express.static("./public"));
app.get("*", (req, res) => {
res.sendFile(path.join(__dirname, "/public/index.html"));
});
}
module.exports = app;