app.js

//Import modules
const path = require('path');

const express = require('express');
const bodyParser = require('body-parser');
//Import mongoose
const mongoose = require("mongoose");
const session = require("express-session");
const MongoDBStore = require("connect-mongodb-session")(session);
//Import multer to get image from request
const multer = require("multer");
//Import module to connect flash
const flash = require("connect-flash");
const csrf = require("csurf");

const csrfProtection = csrf();


const fileStorage = multer.diskStorage({
    destination: (err, file, cb) => {
        cb(null, 'images');
    },
    filename: (err, file, cb) => {
        cb(null, new Date().toISOString() + '-' + file.originalname);
    }
});

const fileFilter = (req, file, cb) => {
    if (file.mimetype === "image/jpeg" || file.mimetype === "image/png" || file.mimetype === "image/JPG") {
        cb(null, true);
    } else {
        cb(null, false);
    }
}



//Import routes
const shopRoutes = require('./routes/shopRoute');
const adminRoutes = require('./routes/adminRoute');
const authRoutes = require("./routes/authRoute");

//Import controllers
const errorController = require('./controllers/errorController');

//Import Models
const User = require("./models/user");

const MONGODB_URI = "mongodb://localhost:27017/mongooseShop";

const store = new MongoDBStore({
    uri: MONGODB_URI,
    collections: "sessions"
})

//Instantiate express app
const app = express();

//Set template engine
app.set("view engine", "ejs");
app.set("views", "views");

//Set Session
app.use(session({ secret: "secretKey", resave: false, saveUninitialized: false, store: store }))


// Set multer
app.use(multer({ storage: fileStorage, fileFilter: fileFilter }).single("image"));
//Set body parser
app.use(bodyParser.urlencoded({ extended: false }));


//For serving static files
app.use(express.static(path.join(__dirname, 'public')));
app.use("/images", express.static(path.join(__dirname, 'images')));

app.use(csrfProtection);

//Set middleware
app.use((req, res, next) => {
    if (!req.session.user) {
        next();
    } else {
        User.findById(req.session.user._id).then(user => {
            req.user = user;
            next();
        }).catch(err => {
            const error = new Error(err);
            error.httpStatusCode = 500;
            return next(error);
        })

    }

})
app.use(flash());

//Set locals for render
app.use((req, res, next) => {
    let role;
    if (req.user) {
        role = req.user.role;
    } else {
        role = undefined;
    }
    res.locals.isAuthenticated = req.session.isLoggedIn;
    res.locals.csrfToken = req.csrfToken();
    res.locals.role = role;
    next();
})


//Middleware for shop routes
app.use(shopRoutes);
//Middleware for admin routes
app.use('/admin', adminRoutes);
//Middleware for auth routes
app.use(authRoutes);


//Serve 404 page
app.use(errorController.get404);
//Don't invoke function here

// Express middleware to handle errors
app.use((err, req, res, next) => {
    if (!err.httpStatusCode)
        err.httpStatusCode = 500;
    res.status(err.httpStatusCode).render("500.ejs", {
        pageTitle: "Server Error-webTRON Shop",
        path: "/500",
        errMessage: [],
        isAuthenticated: req.session.isLoggedIn,
    })
})

mongoose.connect(MONGODB_URI, {
    useUnifiedTopology: true,
    useNewUrlParser: true
}).then(() => {
    app.listen(3000);
}).catch(err => {
    console.error(err);
})