-
Notifications
You must be signed in to change notification settings - Fork 1
/
app.js
91 lines (71 loc) · 2.09 KB
/
app.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
const express = require("express")
const morgan = require("morgan")
const rateLimit = require("express-rate-limit")
const helmet = require("helmet")
const mongoSanitize = require("express-mongo-sanitize")
const xss = require("xss-clean")
const hpp = require("hpp")
const AppError = require("./Utils/appError")
const globalErrorHandler = require("./controllers/errorController")
const nftsRouter = require("./routes/nftsRoute")
const usersRouter = require("./routes/usersRoute")
const app = express()
app.use(express.json({limit: "10kb"}))
// DATA SANITIZATION AGAINST NoSQL QUERY INJECTION
app.use(mongoSanitize())
// DATA SANITIZATION against site script XSS
app.use(xss())
// PREVENT PARAMETER POLLUTION
app.use(hpp())
//SECURE HEADER HTTP
app.use(helmet({
whitelist: [
"duration",
"difficulty",
"maxGroupSize",
"price",
"ratingsAverage",
"ratingsQuantity"
]
}))
//GLOBAL MIDDLEWARE
// if (process.env.NODE_ENV === "development") {
// app.use(morgan("dev"))
// }
//RATE LIMIT
const limiter = rateLimit({
max: 100,
windowsMs: 60 * 60 * 1000,
message: "Too many request from this IP, please try again in an hour"
})
app.use("/api", limiter)
app.use(morgan("dev"))
//SERVING TEMPLATE DEMO
app.use(express.static(`${__dirname}/nft-data/img`))
//CUSTOM MIDDLE WARE
app.use((req, res, next) => {
console.log("Hey i am from middleware function")
next()
})
app.use((req, res, next) => {
req.requestTime = new Date().toISOString()
// console.log(req.headers)
next()
})
app.use("/api/v1/users", usersRouter)
app.use("/api/v1/nfts", nftsRouter)
//ERROR SECTION
app.all("*", (req, res, next) => {
// res.status(404).json({
// status: "fail",
// message: `can't find ${req.originalUrl} on this server`
// })
// const err = new Error(`can't find ${req.originalUrl} on this server`)
// err.status = "fail"
// err.statusCode = 404
// next(err)
next(new AppError(`Can't find ${req.originalUrl} on this server`, 404))
})
//GLOBAL ERROR HANDLING
app.use(globalErrorHandler)
module.exports = app