server.js

const dotenv = require('dotenv')
dotenv.config()

const path = require('path')
const express = require('express')

const session = require('express-session')

const flash = require('connect-flash')

const mongoose = require('mongoose')
const MongoDBstore = require('connect-mongodb-session')(session)
const MONGODB_URI = 'mongodb+srv://mrc-bsllt:marcodevelon@cluster0.niomo.mongodb.net/shop'

const bodyParser = require('body-parser') // Con questo posso agilmente salvare i dati testuali nel req.body della richiesta

const multer = require('multer') // Con questo posso salvare i file in formato binario
const fileStorage = multer.diskStorage({
  destination: (req, file, callback) => {
    callback(null, 'storage/images')
  },
  filename: (req, file, callback) => {
    callback(null, file.filename + '-' + file.originalname)
  }
}) 
const fileFilter = (req, file, callback) => {
  if(file.mimetype === 'image/png' || file.mimetype === 'image/jpg' || file.mimetype === 'image/jpeg') {
    callback(null, true)
  } else {
    callback(null, false)
  }
}

const csrf = require('csurf')
const csrfProtection = csrf()

// MODELS
const User = require('./models/User')

const app = express()

app.use(bodyParser.urlencoded({ extended: false }))
app.use(multer({ storage: fileStorage, fileFilter }).single('image'))
app.set('view engine', 'ejs')
app.use(express.static(path.join(__dirname, 'public')))
app.use('/storage/images', express.static(path.join(__dirname, 'storage/images')))
app.use(flash())

const store = new MongoDBstore({
  uri: MONGODB_URI,
  collection: 'sessions'
})

app.use(session({
  secret: 'my secret',
  resave: false,
  saveUninitialized: false,
  store
}))

app.use(csrfProtection)
app.use((req, res, next) => { // Con res.locals posso passare delle variabili a tutte le viste che verranno renderizzate
  res.locals.csrfToken = req.csrfToken()
  next()
})

app.use((req, res, next) => {
  if(req.session.user) {
    User.findById(req.session.user._id).then(user => {
      req.user = user
      next()
    }).catch(error => {
      next(new Error(error))
    })
  } else {
    next()
  }
})

app.use((req, res, next) => {
  res.locals.user = req.session.user
  next()
})

// Exporter routes
const { userRoutes } = require('./routes/user')
const { adminRoutes } = require('./routes/admin')
const { authRoutes } = require('./routes/auth')

app.use(authRoutes)
app.use(userRoutes)
app.use('/admin', adminRoutes)
app.use('/', (req, res, next) => {
  res.status(404).render('404', { path: '404', user: req.user })
})
app.use((error, req, res, next) => {
  console.log(error)
  res.status(500).render('500', { path: '500', user: req.user })
})

mongoose.connect(`${MONGODB_URI}?retryWrites=true&w=majority`).then(() => {
  app.listen(3000)
}).catch(error => console.log(error))