index.js

const PgDb = require('./lib/pgdb')
const cors = require('cors')
const express = require('express')
const basicAuth = require('express-basic-auth')
const { Engine } = require('apollo-engine')
const logger = require('./lib/logger')
const {getFormatter} = require('./lib/translate')
const MESSAGES = require('./lib/translations.json').data
const util = require('util')
const DEV = process.env.NODE_ENV && process.env.NODE_ENV !== 'production'
if (DEV) {
  require('dotenv').config()
}

process.env.PORT = process.env.PORT || 3001

const {
  PORT,
  ENGINE_API_KEY
} = process.env

const auth = require('./src/auth')
const graphql = require('./graphql')
const newsletter = require('./src/newsletter')
const requestLog = require('./src/requestLog')
const gsheets = require('./src/gsheets')
const paymentWebhooks = require('./src/paymentWebhooks')

const t = getFormatter(MESSAGES)

// crash on unhandled promise rejections
process.on('unhandledRejection', (reason, promise) => {
  logger.error('unhandled promise rejection', { promise: util.inspect(promise) })
  throw new Error(t('api/unexpected'))
})

// init apollo engine
const engine = ENGINE_API_KEY
  ? new Engine({
    engineConfig: {
      apiKey: ENGINE_API_KEY,
      logging: {
        level: 'INFO'   // Engine Proxy logging level. DEBUG, INFO, WARN or ERROR
      }
    },
    graphqlPort: PORT
  })
  : null
if (engine) {
  engine.start()
}

PgDb.connect().then((pgdb) => {
  const server = express()

  // apollo engine middleware
  if (engine) {
    server.use(engine.expressMiddleware())
  }

  // redirect to https
  if (!DEV) {
    server.enable('trust proxy')
    server.use((req, res, next) => {
      if (!req.secure) {
        res.redirect('https://' + req.hostname + req.url)
      }
      return next()
    })
  }

  // fetch needs explicit CORS headers otherwise, cookies are not sent
  if (process.env.CORS_WHITELIST_URL) {
    const corsOptions = {
      origin: process.env.CORS_WHITELIST_URL.split(','),
      credentials: true,
      optionsSuccessStatus: 200 // some legacy browsers (IE11, various SmartTVs) choke on 204
    }
    server.use('*', cors(corsOptions))
  }

  // middleware
  server.use(requestLog)
  server.use(newsletter(t))
  server.use(gsheets(pgdb, logger))
  server.use(paymentWebhooks(pgdb, t))

  if (process.env.BASIC_AUTH_PASS) {
    server.use(basicAuth({
      users: { [process.env.BASIC_AUTH_USER]: process.env.BASIC_AUTH_PASS },
      challenge: true,
      realm: process.env.BASIC_AUTH_REALM
    }))
  }

  // Once DB is available, setup sessions and routes for authentication
  auth.configure({
    server: server,
    secret: process.env.SESSION_SECRET,
    domain: process.env.COOKIE_DOMAIN || undefined,
    dev: DEV,
    pgdb: pgdb,
    t,
    logger
  })

  graphql(server, pgdb, t)

  // start the server
  server.listen(process.env.PORT, () => {
    logger.info('server is running on http://localhost:' + process.env.PORT)
  })
})