server.js

const express = require("express");
const session = require('express-session');
const passport = require('passport');
const LocalStrategy = require('passport-local').Strategy;
const rateLimit = require('express-rate-limit');
require('dotenv').config({path:'cred.env'});
const FirestoreSeshStore = require('./server/models/firestoreSessionStore.js');
// live site https://invoicedashboardfcr.ue.r.appspot.com/
const app = express();
const port = 7000
const PORT = process.env.PORT || port;
const users = JSON.parse(process.env.USERS || '[]');


//passport config
passport.use(new LocalStrategy(
    (username, password, done) => {
        const user = users.find(u => u.username === username && u.password === password);
        if (!user) {
            console.log("User not logged in:", username);
            return done(null, false, { message: 'Incorrect username or password.' });
        }
        console.log("User logged in: ", username);
        return done(null, user);
    }
));
passport.serializeUser((user, done) => {
    done(null, user.id);
});

passport.deserializeUser((id, done) => {
    const user = users.find(u => u.id === id);
    if (user) {
        done(null, user);
    } else {
        done(new Error('User not found'));
    }
});

function checkHttps(req, res, next) {
    if (req.secure) {
        return next();
    } else if (req.get('x-forwarded-proto') === 'https') {
        return next();
    } else {
        res.redirect('https://' + req.hostname + req.url);
    }
}
//if on local keep going if not check for https
if (PORT != port) {
    app.use(checkHttps);
}


//Limit on the users attempts
//idk what to do here D:
// const limiter = rateLimit({
//     windowMs: 30 * 60 * 1000, // 30 minutes for login attempts
//     max: 1000,
// });
// app.use("/login", limiter);


//seshh config
app.set('trust proxy', 1);
app.use(express.json());
app.use(express.urlencoded({ extended: true }));
app.use(session({
    store: new FirestoreSeshStore(),
    secret: process.env.SESSION_SECRET || 'default_session_secret',
    resave: false,
    saveUninitialized: false,
    cookie: {
        maxAge: 18 * 60 * 60 * 1000, // 18 hours
        httpOnly: true,
        secure: process.env.NODE_ENV === 'production' && PORT !== port
    }
}));

//init passport
app.use(passport.initialize());
app.use(passport.session());


//login route
app.post('/login', passport.authenticate('local', {
    failureRedirect: '/login',
}), (req, res) => {
    res.redirect('/');
});


// Import routes
const routes = require("./server/routes.js"); 
app.use(routes);


// Error handling
app.use((err, req, res, next) => {
    console.error(err.stack);
    res.status(500).send('Oh Noooo Something broke!');
});


// Start server
app.listen(PORT, function () {
  console.log(`Server is running on port ${PORT}`);
});