app.js

require('dotenv').config()
require('./db.js')

// Third-party & Built-in Modules
const express = require('express')
const path = require('path')
const cookieParser = require('cookie-parser')
const logger = require('morgan')
const cors = require('cors')
const createError = require('http-errors')

// Middlewares
const adminVerifyToken = require('./middleware/token.admin.middleware')

// Routers
const indexRouter = require('./routes/index')
const authRouter = require('./routes/auth')
const usersRouter = require('./routes/users')
const productsRouter = require('./routes/products')
const ordersRouter = require('./routes/orders')

const app = express()

// View engine setup
app.set('views', path.join(__dirname, 'views'))
app.set('view engine', 'jade')

// CORS setup
const allowedOrigins = process.env.FRONTEND_URL 
    ? process.env.FRONTEND_URL.split(',') 
    : ['http://localhost:8080', 'http://127.0.0.1:8080']

app.use(cors({ origin: allowedOrigins }))

// Standard Middlewares
app.use(logger('dev'))
app.use(express.json())
app.use(express.urlencoded({ extended: false }))
app.use(cookieParser())
app.use(express.static(path.join(__dirname, 'public')))

// API Route Bindings
app.use('/', indexRouter)
app.use('/api/v1/', authRouter)
app.use('/api/v1/users', adminVerifyToken, usersRouter)
app.use('/api/v1/products', productsRouter)
app.use('/api/v1/orders', ordersRouter)

// Catch 404 and forward to error handler
app.use((req, res, next) => {
    next(createError(404))
})

// Error handler
app.use((err, req, res, next) => {
    // Set locals, only providing error in development
    res.locals.message = err.message
    res.locals.error = req.app.get('env') === 'development' ? err : {}

    // Render the error page
    res.status(err.status || 500)
    res.render('error')
})

module.exports = app