index.js

// MUST be the very first import to ensure env vars are loaded
import "./config/env.js";

import express from "express";
import cookieParser from "cookie-parser";
import cors from "cors";
import session from "express-session";
import passport from "./config/passport.js";

import authRoutes from "./routes/auth.routes.js";
import messageRoutes from "./routes/message.Routes.js";
import userRoutes from "./routes/user.routes.js";
import connectDB from "./db/dbConnect.js";
import { app, server } from "./socket/socket.js";

connectDB();
const PORT = 5000;

// Middleware
app.use(express.json()); // Parse JSON payloads
app.use(cookieParser());

// CORS Configuration
app.use(
  cors({
    origin: ["http://localhost:3000","https://chat-frontend-pi-one.vercel.app"], // Exact frontend origin
    credentials: true, // Allow cookies/auth headers
    methods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"], // Explicitly include OPTIONS
    allowedHeaders: ["Content-Type", "Authorization"], // Match frontend headers
  })
);

// Session configuration (must be before passport)
app.use(
  session({
    secret: process.env.SESSION_SECRET || "your-secret-key-change-this",
    resave: false,
    saveUninitialized: false,
    cookie: {
      secure: process.env.NODE_ENV === "production", // Use secure cookies in production
      httpOnly: true,
      maxAge: 24 * 60 * 60 * 1000, // 24 hours
    },
  })
);

// Initialize Passport
app.use(passport.initialize());
app.use(passport.session());

// Routes
app.use("/api/auth", authRoutes);
app.use("/api/messages", messageRoutes);
app.use("/api/users", userRoutes);

app.get("/", (req, res) => {
  res.send("Server is running");
});

// Start the server
server.listen(PORT, () => {
  console.log(`Server Running on port ${PORT}`);
});