nodeclub/app.js
alsotang 46427bc82d fix #546
/api page use csurf
2015-07-21 14:58:54 +08:00

176 lines
4.3 KiB
JavaScript

/*!
* nodeclub - app.js
*/
/**
* Module dependencies.
*/
var config = require('./config');
if (!config.debug) {
require('newrelic');
}
require('colors');
var path = require('path');
var Loader = require('loader');
var express = require('express');
var session = require('express-session');
var passport = require('passport');
require('./middlewares/mongoose_log'); // 打印 mongodb 查询日志
require('./models');
var GitHubStrategy = require('passport-github').Strategy;
var githubStrategyMiddleware = require('./middlewares/github_strategy');
var webRouter = require('./web_router');
var apiRouterV1 = require('./api_router_v1');
var auth = require('./middlewares/auth');
var errorPageMiddleware = require('./middlewares/error_page');
var proxyMiddleware = require('./middlewares/proxy');
var RedisStore = require('connect-redis')(session);
var _ = require('lodash');
var csurf = require('csurf');
var compress = require('compression');
var bodyParser = require('body-parser');
var busboy = require('connect-busboy');
var errorhandler = require('errorhandler');
var cors = require('cors');
var requestLog = require('./middlewares/request_log');
var renderMiddleware = require('./middlewares/render');
var logger = require('./common/logger');
var helmet = require('helmet');
// 静态文件目录
var staticDir = path.join(__dirname, 'public');
// assets
var assets = {};
if (config.mini_assets) {
try {
assets = require('./assets.json');
} catch (e) {
console.log('You must execute `make build` before start app when mini_assets is true.');
throw e;
}
}
var urlinfo = require('url').parse(config.host);
config.hostname = urlinfo.hostname || config.host;
var app = express();
// configuration in all env
app.set('views', path.join(__dirname, 'views'));
app.set('view engine', 'html');
app.engine('html', require('ejs-mate'));
app.locals._layoutFile = 'layout.html';
app.enable('trust proxy');
// Request logger。请求时间
app.use(requestLog);
if (config.debug) {
// 渲染时间
app.use(renderMiddleware.render);
}
// 静态资源
app.use(Loader.less(__dirname));
app.use('/public', express.static(staticDir));
app.use('/agent', proxyMiddleware.proxy);
// 通用的中间件
app.use(require('response-time')());
app.use(helmet.frameguard('sameorigin'));
app.use(bodyParser.json({limit: '1mb'}));
app.use(bodyParser.urlencoded({ extended: true, limit: '1mb' }));
app.use(require('method-override')());
app.use(require('cookie-parser')(config.session_secret));
app.use(compress());
app.use(session({
secret: config.session_secret,
store: new RedisStore({
port: config.redis_port,
host: config.redis_host,
}),
resave: true,
saveUninitialized: true,
}));
// oauth 中间件
app.use(passport.initialize());
// custom middleware
app.use(auth.authUser);
app.use(auth.blockUser());
if (!config.debug) {
app.use(function (req, res, next) {
if (req.path === '/api' || req.path.indexOf('/api') === -1) {
csurf()(req, res, next);
return;
}
next();
});
app.set('view cache', true);
}
// for debug
// app.get('/err', function (req, res, next) {
// next(new Error('haha'))
// });
// set static, dynamic helpers
_.extend(app.locals, {
config: config,
Loader: Loader,
assets: assets
});
app.use(errorPageMiddleware.errorPage);
_.extend(app.locals, require('./common/render_helper'));
app.use(function (req, res, next) {
res.locals.csrf = req.csrfToken ? req.csrfToken() : '';
next();
});
// github oauth
passport.serializeUser(function (user, done) {
done(null, user);
});
passport.deserializeUser(function (user, done) {
done(null, user);
});
passport.use(new GitHubStrategy(config.GITHUB_OAUTH, githubStrategyMiddleware));
app.use(busboy({
limits: {
fileSize: 10 * 1024 * 1024 // 10MB
}
}));
// routes
app.use('/api/v1', cors(), apiRouterV1);
app.use('/', webRouter);
// error handler
if (config.debug) {
app.use(errorhandler());
} else {
app.use(function (err, req, res, next) {
console.error('server 500 error:', err);
return res.status(500).send('500 status');
});
}
app.listen(config.port, function () {
logger.log('NodeClub listening on port', config.port);
logger.log('God bless love....');
logger.log('You can debug your app with http://' + config.hostname + ':' + config.port);
logger.log('');
});
module.exports = app;