server/src/app.ts

import express, { ErrorRequestHandler, NextFunction, Request, Response } from "express";
import prisma from "./lib/prisma";
import eventRouter from "./Routes/event.routes";
import adminAuthRouter from "./Routes/admin_auth.routes";
import argon2 from "argon2";
import cors from "cors";
import adminRouter from "./Routes/admin.routes";
import organisationRouter from "./Routes/organisation.routes";
import groupRouter from "./Routes/group.routes";
import disciplineRouter from "./Routes/discipline.routes";
import roleSchemaRouter from "./Routes/role_schema.routes";
import defaultErrorHandler from "./Middleware/error/handler";
import logger from "./Middleware/error/logger";
import debugLogger from "./Middleware/debug/logger";
import mediaRouter from "./Routes/media.routes";
import userRouter from "./Routes/user_auth.routes";
import teamRouter from "./Routes/team.routes";
import roleRouter from "./Routes/role.routes";
import participantRouter from "./Routes/participant.routes";
import { notFoundHandler, rootHandler } from "./Middleware/error/defaultRoutes";
import { env } from "process";
import { generateDefaultCredentials } from "./Middleware/auth/defaultAdmin";

// Set up async error handling
require("express-async-errors");

require("dotenv").config(); // Load dotenv config

const app = express();

async function main() {
  if (process.env.NODE_ENV === "development") {
    logger.info("Using development mode");
    logger.warning(
      "This mode should not be used in any production-near environment as it is significantly less secure than the production mode"
    );

    // Allow all CORS requests
    app.use(cors());
  } else {
    logger.info("Using production mode");

    // Configure cors
    /*app.use(
      cors({
        origin: process.env.ALLOW_ORIGIN,
        allowedHeaders: ["Content-Type", "Authorization"],
        preflightContinue: false,
        methods: ["GET", "PUT", "PATCH", "POST", "DELETE"],
        optionsSuccessStatus: 204,
      })
    );*/
    //Cors is for some reason broken on our server so set the Cors headers manually
    app.use(function (req, res, next) {
      res.header("Access-Control-Allow-Origin", process.env.DOMAIN);
      res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
      next();
    });
  }

  generateDefaultCredentials();

  // Todo: Everything

  // Bodyparser and urlencoded to parse post request bodies
  app.use(express.urlencoded({ extended: true }));
  app.use(express.json());

  app.use(debugLogger);

  // Admin authentication endpoints
  app.use("/api/authentication", adminAuthRouter);

  // All API endpoints are behind /api/...
  app.use("/api/events", eventRouter);

  app.use("/api/admins", adminRouter);

  app.use("/api/organisations", organisationRouter);

  app.use("/api/groups", groupRouter);

  app.use("/api/disciplines", disciplineRouter);

  app.use("/api/role-schemas", roleSchemaRouter);

  app.use("/api/media", mediaRouter);

  app.use("/api/users", userRouter);

  app.use("/api/teams", teamRouter);

  app.use("/api/roles", roleRouter);

  app.use("/api/participants", participantRouter);

  app.get("/", rootHandler);
  app.get("/api", rootHandler);

  // Error handling
  app.use(defaultErrorHandler); // This has to be the LAST ROUTE

  app.use(notFoundHandler);

  app.listen(process.env.PORT, () => {
    logger.info(`Listening on port ${process.env.PORT}`);
  });

  logger.info("Server started");

  process.on("exit", () => {
    logger.info("Server stopping...");
  });
}

main()
  .catch((e) => {
    logger.crit(e);
    throw e;
  })
  .finally(async () => {
    await prisma.$disconnect();
  });

export default app;