app.js

const express = require("express");
const bodyParser = require("body-parser");
const path = require("path");
const morgan = require("morgan");
const multer = require("multer");

const flash = require("connect-flash");
const session = require("express-session");
const MongoDbStore = require("connect-mongodb-session")(session);
const csrf = require("csurf");
// const passport = require("passport");

// DB
const mongoose = require("mongoose");
const User = require("./models/user");

// ROUTES
const dashboardRoutes = require("./routes/dashboard.route");
const authRoutes = require("./routes/auth.route");
const userRoutes = require("./routes/user.route");
const adminRoutes = require("./routes/admin.route");
const shopRoutes = require("./routes/shop.route");

// CONTROLLERS
const errorController = require("./controllers/error.controller");

const PORT = process.env.PORT || 3000;
const MONGODB_URI = `mongodb+srv://${process.env.MONGO_USER}:${
  process.env.MONGO_PASSWORD
}@cluster0-av2gk.mongodb.net/${
  process.env.MONGO_DB
}?retryWrites=true&w=majority`;
// create express app.
const app = express();
const store = new MongoDbStore({
  uri: MONGODB_URI,
  collection: "sessions"
});

const fileStorage = multer.diskStorage({
  destination: (req, file, cb) => {
    cb(null, "images");
  },
  filename: (req, file, cb) => {
    cb(null, new Date().toISOString() + "-" + file.originalname);
  }
});

const fileFilter = (req, file, cb) => {
  if (
    file.mimetype === "image/png" ||
    file.mimetype === "image/jpg" ||
    file.mimetype === "image/jpeg"
  ) {
    cb(null, true);
  } else {
    cb(null, false);
  }
};

// serving static files.
app.use(express.static(path.join(__dirname, "public")));
app.use("/images", express.static(path.join(__dirname, "images")));
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({ extended: false }));
app.use(
  multer({ storage: fileStorage, fileFilter: fileFilter }).single("image")
);

// express session
app.use(
  session({
    secret: "a4f80asd71f-c87dq3-4447gd-8ed3gbe2",
    resave: false,
    saveUninitialized: false,
    store: store
  })
);

// csrf
app.use(csrf());
// connect flash
app.use(flash());

app.use((req, res, next) => {
  if (!req.session.user) {
    return next();
  }

  User.findById(req.session.user._id)
    .then(user => {
      if (!user) {
        return next();
      }
      req.user = user;
      next();
    })
    .catch(err => {
      console.log("err", err);
      const error = new Error(err);
      error.httpStatsCode = 500;
      return next(error);
    });
});

// global vars
app.use((req, res, next) => {
  res.locals.success_msg = req.flash("success_msg");
  res.locals.error_msg = req.flash("error_msg");
  res.locals.error = req.flash("error");
  res.locals.isAuthenticated = req.session.isLoggedIn;
  // res.locals.user = req.session.user;
  res.locals.csrfToken = req.csrfToken();
  next();
});

// app.use((req, res, next) => {

// });

// managing CORS errors
app.use((req, res, next) => {
  res.header("Access-Control-Allow-Origin", "*");
  res.header(
    "Access-Control-Allow-Headers",
    "Origin, X-Requested-With, Content-Type, Accept, Authorization"
  );
  if (req.method === "OPTIONS") {
    res.header("Access-Control-Allow-Methods", "PUT, POST, PATCH, DELETE, GET");
    return res.status(200).json({});
  }
  next();
});

// set the view engine to ejs
app.set("views", path.join(__dirname, "views"));
app.set("view engine", "ejs");

// remove caching for back button
app.use((req, res, next) => {
  res.set(
    "Cache-Control",
    "no-cache, private, no-store, must-revalidate, max-stale=0, post-check=0, pre-check=0"
  );
  next();
});

app.use(morgan("dev"));

app.use(dashboardRoutes);
app.use(authRoutes);
app.use(userRoutes);
app.use("/admin", adminRoutes);
app.use(shopRoutes);

// app.get("/random", (req, res) => {
//   res.render("random");
// });

app.get("/pricing", (req, res) => {
  // process.exit();
  res.render("pricing");
});

// error 404 not found
app.use(errorController.get404);

// error 500 internal server error
// app.use(errorController.get500);

mongoose
  .connect(MONGODB_URI)
  .then(() => {
    app.listen(PORT, () => {
      console.log(`Server running on port ${PORT}`);
    });
  })
  .catch(err => {
    console.log(err);
  });