app.js

const express = require('express');
const createHttpError = require('http-errors')
const morgan = require('morgan');
const connectDB = require('./db/connect')
const session = require('express-session');
const connectFlash = require('connect-flash')
require('dotenv').config();
const PORT = process.env.PORT || 3000;
const passport = require('passport')
const mongoose = require('mongoose');
const MongoStore = require('connect-mongo');// https://www.npmjs.com/package/express-session#compatible-session-stores [FROM expression-session package for persistent session storage after server reboots]
const {ensureLoggedIn} = require('connect-ensure-login');
const { roles } = require('./utils/constants');
const cors = require('cors');
const app = express();

//middlewares
app.use(morgan('dev'));
app.set('view engine', 'ejs');
app.use(express.static('public'));

app.use(express.json());
app.use(cors());
app.use(express.urlencoded({ extended: true })); //allow posting nested objects


//init session
app.use(session({
    secret: process.env.SESSION_SECRET,
    resave: false,
    saveUninitialized: false,
    cookie: {
        // secure:true, //for only https(secure)
        httpOnly: true,
    },
    store: MongoStore.create({ mongoUrl: process.env.MONGO_URI })
}))

//for passport js authentication
app.use(passport.initialize());
app.use(passport.session());
require('./utils/passport.auth');

app.use((req, res, next) => {
    res.locals.user = req.user;
    console.log(`OUPUT: ${res.locals.user}`)
    next();
})

//flash-message
app.use(connectFlash());
app.use((req, res, next) => {
    res.locals.messages = req.flash()
    next()
})

//routes
app.use('/', require('./routes/config.route'));
app.use('/v1/auth', require('./routes/auth.route'));

app.use('/v1/profile', require('./routes/profile.route'));
app.use('/v1/admin', require('./routes/admin.route'));
app.use('/v1/user', passport.authenticate('jwt', {session: false}), ensureAdmin, require('./routes/user.route'));

app.use("/v1/status", require('./routes/api_health'));
app.use("/v1/terminal", require('./routes/terminal'));
app.use("/v1/config",passport.authenticate('jwt', {session: false}), require('./routes/config.route'));
app.use('/v1/event', require('./routes/event.route'));
app.use('/v1/logs', require('./routes/log.route'));
app.use('/v1/instance', passport.authenticate('jwt', {session: false}), require('./routes/instance.route'));


//404 handler
app.use((req, res, next) => {
    next(createHttpError.NotFound())
})

app.use((error, req, res, next) => {
    error.status = error.status || 500
    res.status(error.status)
    res.render('404', { error })
})

const start = async () => {
    try {
        await connectDB(process.env.MONGO_URI);
        app.listen(PORT, () => console.log(`Listening on port: ${PORT}`))
    } catch (err) {
        console.log(err);
    }
}
// //my custom function to avoid user to unauthorised sessions routes [replaced with connectEnsureLogin]
// function ensureAuthenticated(req, res, next) {
//     if (req.isAuthenticated()) {
//         next();
//     } else {
//         res.redirect('/auth/login');
//     }
// };

function ensureAdmin(req, res, next) {
    if (req.user.role === roles.admin || req.user.role === roles.enterprise) {
        next()
    } else {
        req.flash('warning', 'You are not an authorised user to see this page')
        res.redirect('/')
    }
}

// function ensureModerator(req, res, next) {
//     if (req.user.role === roles.moderator) {
//         next()
//     } else {
//         req.flash('warning', 'You are not an authorised user to see this page')
//         res.redirect('/')
//     }
// }
start();