app.js

import path from 'node:path';
import * as dateTimeFns from '@cityssm/expressjs-server-js/dateTimeFns.js';
import * as htmlFns from '@cityssm/expressjs-server-js/htmlFns.js';
import * as stringFns from '@cityssm/expressjs-server-js/stringFns.js';
import compression from 'compression';
import cookieParser from 'cookie-parser';
import csurf from 'csurf';
import debug from 'debug';
import express from 'express';
import rateLimit from 'express-rate-limit';
import session from 'express-session';
import createError from 'http-errors';
import FileStore from 'session-file-store';
import * as databaseInitializer from './helpers/databaseInitializer.js';
import * as configFunctions from './helpers/functions.config.js';
import routerAdmin from './routes/admin.js';
import routerBatches from './routes/batches.js';
import routerDashboard from './routes/dashboard.js';
import routerLicences from './routes/licences.js';
import routerLogin from './routes/login.js';
import routerReports from './routes/reports.js';
import { version } from './version.js';
const debugApp = debug('general-licence-manager:app');
databaseInitializer.initLicencesDB();
export const app = express();
if (!configFunctions.getConfigProperty('reverseProxy.disableEtag')) {
    app.set('etag', false);
}
app.set('views', path.join('views'));
app.set('view engine', 'ejs');
if (!configFunctions.getConfigProperty('reverseProxy.disableCompression')) {
    app.use(compression());
}
app.use((request, _response, next) => {
    debugApp(`${request.method} ${request.url}`);
    next();
});
app.use(express.json());
app.use(express.urlencoded({
    extended: false
}));
app.use(cookieParser());
app.use(csurf({ cookie: true }));
const limiter = rateLimit({
    windowMs: 1000,
    max: 25 * Math.max(3, configFunctions.getConfigProperty('users.canLogin').length)
});
app.use(limiter);
const urlPrefix = configFunctions.getConfigProperty('reverseProxy.urlPrefix');
if (urlPrefix !== '') {
    debugApp('urlPrefix = ' + urlPrefix);
}
app.use(urlPrefix, express.static(path.join('public')));
app.use(urlPrefix + '/lib/fa', express.static(path.join('node_modules', '@fortawesome', 'fontawesome-free')));
app.use(urlPrefix + '/lib/cityssm-bulma-webapp-js', express.static(path.join('node_modules', '@cityssm', 'bulma-webapp-js')));
app.use(urlPrefix + '/lib/cityssm-bulma-js', express.static(path.join('node_modules', '@cityssm', 'bulma-js', 'dist')));
const sessionCookieName = configFunctions.getConfigProperty('session.cookieName');
const FileStoreSession = FileStore(session);
app.use(session({
    store: new FileStoreSession({
        path: './data/sessions',
        logFn: debug('general-licence-manager:session'),
        retries: 20
    }),
    name: sessionCookieName,
    secret: configFunctions.getConfigProperty('session.secret'),
    resave: true,
    saveUninitialized: false,
    rolling: true,
    cookie: {
        maxAge: configFunctions.getConfigProperty('session.maxAgeMillis'),
        sameSite: 'strict'
    }
}));
app.use((request, response, next) => {
    if (request.cookies[sessionCookieName] && !request.session.user) {
        response.clearCookie(sessionCookieName);
    }
    next();
});
function sessionChecker(request, response, next) {
    if (request.session.user && request.cookies[sessionCookieName]) {
        next();
        return;
    }
    response.redirect(`${urlPrefix}/login?redirect=${request.originalUrl}`);
}
app.use((request, response, next) => {
    response.locals.buildNumber = version;
    response.locals.user = request.session.user;
    response.locals.csrfToken = request.csrfToken();
    response.locals.configFunctions = configFunctions;
    response.locals.dateTimeFns = dateTimeFns;
    response.locals.stringFns = stringFns;
    response.locals.htmlFns = htmlFns;
    response.locals.urlPrefix = configFunctions.getConfigProperty('reverseProxy.urlPrefix');
    next();
});
app.get(`${urlPrefix}/`, sessionChecker, (_request, response) => {
    response.redirect(`${urlPrefix}/dashboard`);
});
app.use(`${urlPrefix}/dashboard`, sessionChecker, routerDashboard);
app.use(`${urlPrefix}/licences`, sessionChecker, routerLicences);
if (configFunctions.getConfigProperty('settings.includeBatches')) {
    app.use(`${urlPrefix}/batches`, sessionChecker, routerBatches);
}
app.use(`${urlPrefix}/reports`, sessionChecker, routerReports);
app.use(`${urlPrefix}/admin`, sessionChecker, routerAdmin);
app.all(`${urlPrefix}/keepAlive`, (_request, response) => {
    response.json(true);
});
app.use(`${urlPrefix}/login`, routerLogin);
app.get(`${urlPrefix}/logout`, (request, response) => {
    if (request.session.user && request.cookies[sessionCookieName]) {
        request.session.destroy(() => {
            response.clearCookie(sessionCookieName);
            response.redirect(`${urlPrefix}/`);
        });
    }
    else {
        response.redirect(`${urlPrefix}/login`);
    }
});
app.use((_request, _response, next) => {
    next(createError(404));
});
app.use((error, request, response) => {
    response.locals.message = error.message;
    response.locals.error =
        request.app.get('env') === 'development' ? error : {};
    response.status(error.status || 500);
    response.render('error');
});
export default app;