server.ts

import "./config/env";
import express from "express";
import helmet from "helmet";
import cors from "cors";
import mongoose from "mongoose";
import path from "path";
import { rateLimit } from "express-rate-limit";
import auth from "./routes/auth";
import { getMongoURI } from "./config/env";
import { FIVE_MINUTES_MS, ONE_HOUR_MS } from "./const/times";

const app = express();

app.use(helmet());
app.use(
  cors({
    origin:
      process.env.NODE_ENV === "production"
        ? process.env.ALLOWED_ORIGINS?.split(",")
            .map((o) => o.trim())
            .filter(Boolean) || false
        : true,
    credentials: true,
  }),
);
app.use(express.json());
app.use(express.urlencoded({ extended: false }));

const globalLimiter = rateLimit({
  windowMs: FIVE_MINUTES_MS,
  limit: 200,
  message: "Too many requests. Please try again later.",
});
app.use(globalLimiter);

mongoose.connect(getMongoURI());

// const clientBuildPath = path.join(__dirname, "client", "build");
// app.use(express.static(clientBuildPath));

const loginLimiter = rateLimit({
  windowMs: FIVE_MINUTES_MS,
  limit: 3,
  message: "Maximum login attempts exceeded. Please try again later.",
});

const signupLimiter = rateLimit({
  windowMs: ONE_HOUR_MS,
  limit: 3,
  message: "Maximum accounts created. Please try again later.",
});

app.use("/auth/login", loginLimiter);
app.use("/auth/signup", signupLimiter);

app.use("/auth", auth);

// app.get("/{*splat}", (_req, res) => {
//   res.sendFile(path.join(clientBuildPath, "index.html"));
// });

const port = Number(process.env.PORT) || 3001;

const server = app.listen(port, () => {
  console.log(`Server listening on port: ${port}`);
});

export default server;