All files / src app.js

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
 
 
 
 
 
 
 
 
 
 
 
 
77x
 
77x
 
 
77x
 
 
 
 
 
 
 
 
 
 
77x
 
77x
1x
1x
 
 
 
77x
 
 
import express, { json } from "express";
import cookieParser from 'cookie-parser';
import cors from 'cors';
import mainRouter from "./routers/index.js";
import corsWhitelist from "./CONSTANT/corsWhitelist.js";
import sanitizer from "express-mongo-sanitize";
import { xss } from "express-xss-sanitizer";
import rateLimit from "express-rate-limit";
import hpp from "hpp";
import errorsHandler from "./middlewares/errorsHandler.js";
import genTime from "./utilities/genTime.js";
 
const app = express();
 
app.set("trust proxy", +process.env.NUMBER_OF_PROXIES || 1);
 
// middleware
app.use([
    cors({ origin: corsWhitelist, optionsSuccessStatus: 200 }),
    rateLimit({ limit: 15000, windowMs: genTime("hours", 4) }),
    json({ limit: "5kb" }),
    sanitizer(), // a middleware prevents noSQL injection.
    hpp(), // a middleware protect against HTTP Parameter Pollution attacks.
    xss(), // a middleware prevents Cross Site Scripting (XSS) attack.
    cookieParser()
]);
 
// Main Routers
app.use("/api", mainRouter);
 
app.all("*", (_req, res) => {
    const message = "Sorry, the content you're looking for doesn't exist."
    res.status(404).json({ message, status: 404 })
});
 
// For catching unhandled rejections from express.js
app.use(errorsHandler);
 
export default app;