app.js

const express = require('express');
const path = require('path');
const parser = require('body-parser');
const fs = require('fs');

const session = require('express-session');
const MongoStore = require('connect-mongodb-session')(session);

const csurf = require('csurf');
const flash = require('connect-flash');

const helmet = require('helmet');
const compression = require('compression');
const morgan = require('morgan');

const mongoose = require('mongoose');

const { adminRouter } = require('./routes/admin');
const { router } = require('./routes/shop');
const { errorRouter } = require('./routes/error-page')
const { authRouter } = require('./routes/auth');

const User = require('./models/user');

const app = express();

const log = fs.createWriteStream(
    path.join(__dirname, 'access.log'),
    { flags: 'a' }
);

app.use(morgan('combined', { stream: log }));

const csrf = csurf();

const store = new MongoStore({
    uri: process.env.DB_HOST,
    collection: 'sessions'
});

app.set('view engine', 'ejs');
app.set('views', 'views')

app.use(session({ secret: 'my secret', resave: false, saveUninitialized: false, store: store }));

app.use(flash())

app.use(parser.urlencoded({ extended: false }));

app.use(express.static(path.join(__dirname, 'public')))

app.use(csrf);

app.use((req, res, next) => {
    if (!req.session.user) {
        return next();
    }
    User.findById(req.session.user._id)
        .then(user => {
            req.user = user;
            next();
        })
        .catch(err => console.log(err))
});

app.use((req, res, next) => {
    res.locals.isAuth = req.session.isAuth;
    res.locals.isAdmin = req.session.isAdmin;
    res.locals.token = req.csrfToken();
    next();
});

app.use('/admin', adminRouter);
app.use(router);
app.use(authRouter);
app.use(errorRouter);

app.use(helmet());
app.use(compression());

mongoose.connect(process.env.DB_HOST)
    .then(() => {
        app.listen(process.env.PORT || 3000);
    })
    .catch(err => console.log(err))