RetirementCalculator/app.js

const status = require("./src/util/statuses");
const MongoStore = require("connect-mongo");
const session = require("express-session");
const express = require('express');
const path = require('path');
const bcrypt = require('bcrypt');
const joi = require('joi');
require('dotenv').config();

const app = express();
const port = process.env.PORT || 3000;

const mongoURI = process.env.MONGO_URI;
const database = process.env.DATABASE; // Database name
const secret = process.env.SECRET || "123-secret-xyz";

/*** Sessions ***/
app.use(session({
    secret: secret,
    store: MongoStore.create({ mongoUrl: `${mongoURI}${database}`, crypto: { secret: secret } }),
    resave: true,
    saveUninitialized: false,
    cookie: { maxAge: 3600000 },
}));

app.set('view engine', 'ejs');
app.set('views', path.join(__dirname, 'src/views'));
app.use(express.urlencoded({ extended: true }));
app.use("/static", express.static("./src/public"));
app.use("/images", express.static("./src/public/images"));
app.use(express.json());

/*** Database ***/
const { connectMongo, getCollection } = require("./src/database/connection");

let users;
let assets;
let plans;
async function initDatabase() {
    const db = await connectMongo(mongoURI, database);

    // For any collection, init here
    users = await getCollection(db, "users");
    assets = await getCollection(db, "assets");
    plans = await getCollection(db, "plans");
}

/*** ROUTINGS ***/

app.get('/', (req, res) => {
    if (!req.session.errMessage) req.session.errMessage = "";
    res.render('landing');
    return res.status(status.Ok);
});

app.get('/signup', (req, res) => {
    const ignore = ["User not found", "Incorrect password"];
    if (ignore.includes(req.session.errMessage)) req.session.errMessage = "";
    res.render('signup', { errMessage: req.session.errMessage });
    return res.status(status.Ok);
});

app.get('/login', (req, res) => {
    if (req.session.authenticated) {
        res.redirect("/home");
        return res.status(status.Ok);
    }
    res.render('login', { errMessage: req.session.errMessage });
    return res.status(status.Ok);
});

app.get('/aboutUs', (req, res) => {
    res.render('aboutUs');
    return res.status(status.Ok);
});

app.get('/forgotPassword', (req, res) => {
    const error = req.session.error;
    const reset = req.session.reset;
    req.session.reset = '';
    req.session.error = '';
    res.render('forgotPass', { error: error, reset: reset });
    return res.status(status.Ok);
});


// Reset with token given to user via email
app.get('/reset/:token', async (req, res) => {
    const token = req.params.token;

    const user = await users.findOne({
        resetToken: token,
        resetTokenExpires: { $gt: Date.now() },
    });

    if (!user) {
        req.session.error = 'reset link not valid or has expired';
        return res.redirect('/forgotPassword');
    }
    const error = req.session.error;
    delete req.session.error;

    res.render('resetPass', {
        token: token,
        errMessage: error,
    });
});

app.post('/resetLink', async (req, res) => {
    const { token, password, confirmPassword, } = req.body;
    const passwordSchema = joi.object({
        password: joi.string().max(20).required(),
        confirmPassword: joi.string().max(20).required(),
    });
    const valid = passwordSchema.validate({ password, confirmPassword });
    if (valid.error) {
        console.log("houston we have a problem");
        req.session.error = 'Invalid input';
        res.status(status.BadRequest);
        return res.redirect(`/reset/${token}`);
    }
    if (!token || !password || !confirmPassword) {
        req.session.error = 'field may be missing';
        return res.redirect(`/reset/${token}`);
    }
    if (password !== confirmPassword) {
        req.session.error = 'passwords do not match';
        return res.redirect(`/reset/${token}`);
    }
    const user = await users.findOne({
        resetToken: token,
        resetTokenExpires: { $gt: Date.now() },
    });

    if (!user) {
        req.session.error = 'Reset link is invalid.';
        return res.redirect(`/reset`);
    }
    const hashPassword = await bcrypt.hash(password, 12);

    await users.updateOne(
        {
            email: user.email
        },
        {
            $set: {
                password: hashPassword,
                resetToken: '',
                resetTokenExpires: 0,
            },
        }
    );
    req.session.success = 'Password has been reset';
    res.redirect('/login');
});

// 404 handler - keep the actual notFound route please
// REALLY DONT DELETE THIS
app.get('/notFound', (req, res) => {
    res.render('notFound');
    return res.status(status.NotFound);
});

// Initialize database and start app
initDatabase().then(() => {
    console.log("Successfully connected to MongoDB");

    // Import authentication handler
    app.use(require("./src/auth/authentication")(users));
    app.use(require('./src/auth/forgotPass')(users));


    // Import middleware & apply to user routes
    const middleware = require("./src/auth/middleware")(users);
    app.use(require('./src/router/user')(middleware, users, plans, assets));

    // 404 handler
    app.get('/*splat', (req, res) => {
        res.render('notFound');
        return res.status(status.NotFound);
    });

    // Start app
    app.listen(port, () => {
        console.log(`Server listening on port ${port}`);
    });
});