app.js

const path = require("path");
const express = require("express");
const morgan = require("morgan");
const rateLimit = require("express-rate-limit");
const helmet = require("helmet");
const mongoSanitize = require("express-mongo-sanitize");
const xss = require("xss-clean");
const hpp = require("hpp");
const cookieParser = require("cookie-parser");
const bodyParser = require("body-parser");
const compression = require("compression");

// const cors = require("cors");

const appError = require("./utils/appError.js");
const globalErrorHandler = require("./controllers/errorController.js");
const dishRouter = require("./routes/dishRoutes");
const userRouter = require("./routes/userRoutes");
const reviewRouter = require("./routes/reviewRoutes.js");
const bookingRouter = require("./routes/bookingRoutes.js");
const cartRouter = require("./routes/cartRoutes.js");
const discountRouter = require("./routes/discountRoutes.js");
const locationRouter = require("./routes/locationRoutes.js");
const bookingController = require("./controllers/bookingController.js");
const viewRouter = require("./routes/viewRoutes.js");

// Start express:

const app = express();

app.enable("trust proxy");

app.set("view engine", "pug");
app.set("views", [
  path.join(__dirname, "./views"),
  path.join(__dirname, "./views/templates/"),
  path.join(__dirname, "./views/admin/"),
  path.join(__dirname, "./views/auth/"),
]);

// 1) GLOBAL MIDDLEWARES

// CORS:
// app.use(cors());

// Security HTTP headers
app.use(
  helmet({
    contentSecurityPolicy: false,
  })
);

// Development loggin
if (process.env.NODE_ENV === "development") {
  app.use(morgan("dev"));
}

// Limiting fileds
const limiter = rateLimit({
  max: 250,
  windowMs: 60 * 60 * 1000,
  message: "You've made too many request, please try again in an hour",
});
app.use("/api", limiter);

app.post(
  "/webhook-checkout",
  bodyParser.raw({ type: "application/json" }),
  bookingController.webhookCheckout
);

// Body parser, reading data from body into req.body
app.use(express.json({ limit: "10kb" }));
app.use(express.urlencoded({ extended: true, limit: "10kb" }));
app.use(cookieParser());

// Data sanitization against NoSQL query injection:
app.use(mongoSanitize());

// Data sanitization against XSS:
app.use(xss());

// Prevent parameter pollution:
app.use(
  hpp({
    whitelist: [
      "deliveryTime",
      "ratingsAverage",
      "ratingsQuantity",
      "price",
      "foodType",
    ],
  })
);
app.use(compression());

// Serving static files
// app.use(express.static(`${__dirname}/public`));
app.use(express.static(path.join(__dirname, "public")));

// Test middleware
app.use((req, res, next) => {
  req.requestTime = new Date().toISOString();
  next();
});

// 3) ROUTES

app.use("/", viewRouter);
app.use("/api/v1/menu", dishRouter);
app.use("/api/v1/users", userRouter);
app.use("/api/v1/reviews", reviewRouter);
app.use("/api/v1/bookings", bookingRouter);
app.use("/api/v1/discounts", discountRouter);
app.use("/api/v1/locations", locationRouter);
app.use("/api/v1/cart", cartRouter);

app.all("*", (req, res, next) => {
  /*  res.status(404).json({
    status: "fail",
    message: `Cant find ${req.originalUrl} on this server!`,
  }); */

  next(new appError(`Cant find ${req.originalUrl} on this server!`, 404));
});

app.use(globalErrorHandler);

module.exports = app;