GSA/code-gov-api

require('newrelic');
const bodyParser = require('body-parser');
const compression = require('compression');
const getConfig = require("./config");
const cookieParser = require('cookie-parser');
const cors = require('cors');
const express = require("express");
const { getApiRoutes } = require('./routes');
const helmet = require('helmet');
const Logger = require("./utils/logger");
const path = require("path");
const RateLimit = require('express-rate-limit');

const addRequestId = require('express-request-id')();

/* eslint-disable */
const pug = require("pug");
const favicon = require('serve-favicon');
/* eslint-enable */

/* ------------------------------------------------------------------ *
                            API CONFIG
 * ------------------------------------------------------------------ */
const config = getConfig(process.env.NODE_ENV);
const logger = new Logger({name: "code-gov-api", level: config.LOGGER_LEVEL});

const app = express();

app.set('json escape', true);

if( config.USE_RATE_LIMITER) {
  const limiter = new RateLimit({
    windowMs: parseInt(process.env.WINDOW_MS || 60000, 10),
    max: parseInt(process.env.MAX_IP_REQUESTS || 500, 10),
    delayMs:parseInt(process.env.DELAY_MS || 0, 10),
    headers: true
  });
  app.use(limiter);
}

app.use(bodyParser.json());
app.use(bodyParser.urlencoded({ extended: false }));
app.use(cookieParser());
app.use(cors());

if (config.USE_HSTS) {
  app.use(helmet.hsts({
    maxAge: config.HSTS_MAX_AGE,
    preload: config.HSTS_PRELOAD,
    includeSubDomains: config.HSTS_SUBDOMAINS,
  }));
}

app.use(function(req, res, next) {
  res.setHeader('Server', '');
  res.setHeader('Via', '');
  next();
});

app.use(addRequestId);
app.use(compression());

app.use(function(req, res, next) {
  logger.info({ req: req, res: res });
  next();
});

app.set('view engine', 'pug');
app.set('views', path.join(__dirname, 'views'));
app.use('/static', express.static(path.join(__dirname, 'public')));
app.set('json spaces', 2);

/* ------------------------------------------------------------------ *
                            API ROUTES
 * ------------------------------------------------------------------ */

const router = getApiRoutes(config, new express.Router());
app.use('/api', router);

/* ------------------------------------------------------------------ *
                            ERROR HANDLING
 * ------------------------------------------------------------------ */

// catch 404 and forward to error handler
app.use(function(req, res, next) {
  let err = new Error('Not Found');
  err.status = 404;
  next(err);
});

app.use(function(err, req, res, next) {
  logger.error({req: req, res: res, err: err});
  res.status(err.status || 500)
    .json({
      message: err.message,
      error: app.get('env') === 'development' ? err : {}
    });
});

/* ------------------------------------------------------------------ *
                            SERVER
 * ------------------------------------------------------------------ */

// start the server, but only if we're not in the middle of a test
if(!module.parent) {
  app.listen(config.PORT, () => logger.info(`Started API server at http://0.0.0.0:${config.PORT}/`));
}

module.exports = app;