summary refs log tree commit diff
path: root/src/api/start.js
diff options
context:
space:
mode:
Diffstat (limited to 'src/api/start.js')
-rw-r--r--src/api/start.js40
1 files changed, 38 insertions, 2 deletions
diff --git a/src/api/start.js b/src/api/start.js

index 9d9c586..caf7a7c 100644 --- a/src/api/start.js +++ b/src/api/start.js
@@ -1,12 +1,48 @@ import express from "express"; +import morgan from "morgan"; +import { registerRoutes } from "./routes.js"; const app = express(); const PORT = process.env.PORT || 3000; -app.get("/", (req, res) => { - res.send("Welcome to the API!"); +// Configure Express +app.use(express.json()); +app.disable("x-powered-by"); +app.use((req, res, next) => { + res.set("Access-Control-Allow-Origin", "*"); + res.set( + "Content-security-policy", + "default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';", + ); + res.set( + "Access-Control-Allow-Headers", + req.header("Access-Control-Request-Headers") || "*", + ); + res.set( + "Access-Control-Allow-Methods", + req.header("Access-Control-Request-Methods") || "*", + ); + + next(); }); +const logRequests = process.env["LOG_REQUESTS"] ?? "-"; +const requestLogFormat = + ':remote-addr - :remote-user [:date[clf]] ":method :url HTTP/:http-version" :status :res[content-length] ":referrer" ":user-agent" ":response-time ms"'; +if (logRequests) { + app.use( + morgan(requestLogFormat, { + skip: (req, res) => { + let skip = !logRequests.includes(res.statusCode); + if (logRequests.startsWith("-")) skip = !skip; + return skip; + }, + }), + ); +} + +registerRoutes(app); + app.listen(PORT, () => { console.log(`Server is running on http://localhost:${PORT}`); });