backend/app.js

// OwlBoard - © Fred Boniface 2022-2023 - Licensed under GPLv3 (or later)
// Please see the included LICENSE file

const mode = process.env.NODE_ENV || "development";

// Logging
const logger = require("./src/utils/logger.utils");
logger.logger.info("Logger Initialised");

// External Requires
const express = require("express");
const app = express();

// Middleware
const rateLimit = require("express-rate-limit");
const cors = require("cors");
const authenticate = require("./src/middlewares/auth.middlewares");

// Internal Requires
const version = require("./src/configs/version.configs");
const pis2Rtr = require("./src/routes/pis.routes"); // API Version 2 Routes
const ref2Rtr = require("./src/routes/ref.routes"); // API Version 2 Routes
const live2Rtr = require("./src/routes/live.routes"); // API Version 2 Routes
const tt2Rtr = require("./src/routes/timetable.routes"); // API Version 2
const user2Rtr = require("./src/routes/user.routes"); // API Version 2 Routes
const miscRtr = require("./src/routes/misc.routes"); // Non-Public API Routes

// Set Server Configurations
const srvListen = process.env.OWL_SRV_LISTEN || "0.0.0.0";
const srvPort = process.env.OWL_SRV_PORT || 8460;

const limiter = rateLimit({
  windowMs: 15 * (60 * 1000), // 15 minutes
  max: 100, // Limit each IP to 100 requests per `window` (here, per 15 minutes)
  standardHeaders: true, // Return rate limit info in the `RateLimit-*` headers
  legacyHeaders: false, // Disable the `X-RateLimit-*` headers
});

// Print version number:
logger.logger.info(`Starting version ${version.app} in ${mode} mode`);

// Remove X-Powered-By header:
app.disable("x-powered-by");

// Express Error Handling:
app.use((err, req, res, next) => {
  const statusCode = err.statuscode || 500;
  logger.logger.error(err, "Express Error");
  res.status(statusCode).json({ message: err.message });
  return;
});

// Pre Middleware:
app.use(
  cors({
    origin: "*", //[/\.owlboard\.info$/, 'localhost:5173', 'localhost:4173']
  })
);
app.use(express.json()); //JSON Parsing for POST Requests
//app.use(limiter);
app.use(authenticate);

// 2023 Rationalisation Routes (/api/v2, /misc)
app.use("/api/v2/pis", pis2Rtr); // API Version 2
app.use("/api/v2/live", live2Rtr); // API Version 2
app.use("/api/v2/ref", ref2Rtr); // API Version 2
app.use("/api/v2/timetable", tt2Rtr); // API Version 2
app.use("/api/v2/user", user2Rtr); // API Version 2
app.use("/misc", miscRtr); // Non public-api endpoints (Stats, Issue, etc.)

app.use("/api/v1/auth/test", authenticate, (req, res) =>
  res.status(200).json({
    status: "ok",
    message: "Authentication successful",
  })
); // Returns 401 if auth failed, 200 if successful.

// Number of proxies:
app.set("trust proxy", 4);
mode === "development"
  ? app.get("/api/v1/ip", (req, res) => res.send(req.ip))
  : null;

// Disable etags
app.set('etag', false)

// Start Express
app.listen(srvPort, srvListen, (error) => {
  if (!error) {
    logger.logger.info(`Listening on http://${srvListen}:${srvPort}`);
  } else {
    logger.logger.error(error, `Error starting server`);
  }
});