index.js

const path = require('path')
const express = require('express');
const morgan = require('morgan')
const app = express()
const rateLimit = require('express-rate-limit')
const helmet = require('helmet')
const mongoSanitize = require('express-mongo-sanitize')
const xss = require('xss-clean')
const hpp = require('hpp')
const cookieParser = require('cookie-parser')
const port = 8000
const fs= require('fs')
const compression = require('compression')
const AppError = require('./utils/appError')
const globalErrorHandler = require('./controllers/errorController')
const tours = JSON.parse(fs.readFileSync(`${__dirname}/starter/dev-data/data/tours-simple.json`));

// const tourRouter = require(`${__dirname}/routers/tourrouters.js`)

app.set('view engine', 'pug')
app.set('views', path.join(__dirname, 'views'))


// Serving Static files
// app.use(express.static(`${__dirname}/starter/public`))
app.use(express.static(path.join(__dirname, 'starter/public')))


// MIDDLEWARES
// Security HTTP Headers
app.use(helmet.crossOriginResourcePolicy({ policy: 'cross-origin' }));




// Rate limiting 

const limiter = rateLimit({
    max:100, 
    windowMs: 60 * 60 * 1000,
    message: 'Too many requests from this ip, try again after an hours'



})

app.use('/api', limiter)


// Environment logging
if (process.env.NODE_ENV == 'development'){
    app.use(morgan('dev'))
}
// Body Parser, reading data from the body into req.body
app.use(express.json());
app.use(cookieParser())
app.use(compression())

// Test Middlewares
app.use((req, res, next) => {
    req.requestTime = new Date().toISOString();
    // console.log(req.cookies)
    next(); 
})


app.use(hpp(
    {
        whitelist: ['duration', 'ratingsQuantity','maxGroupSize', 'difficulty', 'price']
    }
))

// ROute 

const tourRouter = require('./routers/tourrouters');
const userRouter = require('./routers/userRouters')
const reviewrouter = require('./routers/reviewrouter')
const viewRouter = require('./routers/viewRoutes');



// ROUTES


app.use('/', viewRouter)
app.use('/api/v1/tours',  tourRouter)
app.use('/api/v1/users',  userRouter)
app.use('/api/v1/reviews', reviewrouter)







// Data sanitization against noSQL query injection
// removes all the dollar signs and dots 
app.use(mongoSanitize());
// Data sanitization against xss attacks
app.use(xss())






app.all('*', (req,res,next)=>{
    next(new AppError(`Cant find ${req.originalUrl} on this server!`, 404))

})



app.use(globalErrorHandler)




module.exports = app;