Merge branch 'feature-roles' into feature-endpoints

src/app.ts

@@ -3,6 +3,7 @@ import prisma from "./lib/prisma";
 import eventRouter from "./Routes/event.routes";
 import adminAuthRouter from "./Routes/admin_auth.routes";
 import argon2 from "argon2";
+import cors from "cors";
 import adminRouter from "./Routes/admin.routes";
 import organisationRouter from "./Routes/organisation.routes";
 import groupRouter from "./Routes/group.routes";
@@ -12,6 +13,9 @@ import defaultErrorHandler from "./Middleware/error/handler";
 import logger from "./Middleware/error/logger";
 import debugLogger from "./Middleware/debug/logger";
 import mediaRouter from "./Routes/media.routes";
+import userRouter from "./Routes/user_auth.routes";
+import TeamRouter from "./Routes/team.routes";
+import { notFoundHandler, rootHandler } from "./Middleware/error/defaultRoutes";
 
 // Set up async error handling
 require("express-async-errors");
@@ -20,21 +24,40 @@ require("dotenv").config(); // Load dotenv config
 
 const app = express();
 
-if (process.env.NODE_ENV === "development") {
-  logger.info("Using development mode");
-}
-
 async function main() {
-  // Dev
-  await prisma.admin.upsert({
-    where: { id: 1 },
-    create: {
-      name: "admin",
-      password: await argon2.hash("test", { type: argon2.argon2id }),
-      permission_level: "ELEVATED",
-    },
-    update: {},
-  });
+  if (process.env.NODE_ENV === "development") {
+    logger.info("Using development mode");
+    logger.warning(
+      "This mode should not be used in any production-near environment as it is significantly less secure than the production mode"
+    );
+
+    // TODO: How should you login to the prod server by default? Maybe random password?
+    await prisma.admin.upsert({
+      where: { id: 1 },
+      create: {
+        name: "admin",
+        password: await argon2.hash("test", { type: argon2.argon2id }),
+        permission_level: "ELEVATED",
+      },
+      update: {},
+    });
+
+    // Allow all CORS requests
+    app.use(cors());
+  } else {
+    logger.info("Using production mode");
+
+    // Configure cors
+    app.use(
+      cors({
+        origin: process.env.ALLOW_ORIGIN,
+        allowedHeaders: ["Content-Type", "Authorization"],
+        preflightContinue: false,
+        methods: ["GET", "PUT", "PATCH", "POST", "DELETE"],
+        optionsSuccessStatus: 204,
+      })
+    );
+  }
 
   // Todo: Everything
 
@@ -62,9 +85,18 @@ async function main() {
 
   app.use("/api/media", mediaRouter);
 
+  app.use("/api/users", userRouter);
+
+  app.use("/api/teams", TeamRouter);
+
+  app.get("/", rootHandler);
+  app.get("/api", rootHandler);
+
   // Error handling
   app.use(defaultErrorHandler); // This has to be the LAST ROUTE
 
+  app.use(notFoundHandler);
+
   app.listen(process.env.PORT, () => {
     logger.info(`Listening on port ${process.env.PORT}`);
   });