9dab2c0ae5
- 在 userController 中添加了用户创建时的输入验证，包括 account 和 password 的长度限制 - 更新了 createUser 函数，使用 express-validator 进行参数验证 - 修正了 app.js 中的 authenticateSession 方法名 - 更新了 package.json 和 package-lock.json 中的 express-validator 版本
80 lines
1.9 KiB
JavaScript
80 lines
1.9 KiB
JavaScript
const createError = require('http-errors')
|
|
const express = require('express')
|
|
const path = require('path')
|
|
const logger = require('morgan')
|
|
const cors = require('cors')
|
|
const session = require('express-session')
|
|
const cookieParser = require('cookie-parser')
|
|
const indexRouter = require('./routes/index')
|
|
const userRouter = require('./routes/userRouter')
|
|
|
|
// mongodb数据库连接
|
|
const { connectMongoDB } = require('./db/mongodbConfig')
|
|
const loginUtil = require('./utils/loginUtil')
|
|
|
|
const app = express()
|
|
|
|
// 导入env
|
|
require('dotenv').config()
|
|
const loginSecret = process.env.SESSION_SECRET
|
|
|
|
app.use(logger('dev'))
|
|
app.use(express.json())
|
|
app.use(express.urlencoded({ extended: false }))
|
|
app.use(express.static(path.join(__dirname, 'public')))
|
|
app.use(cookieParser())
|
|
app.use(
|
|
session({
|
|
name: 'identityKey',
|
|
secret: loginSecret,
|
|
resave: false,
|
|
saveUninitialized: false,
|
|
cookie: {
|
|
secure: false,
|
|
maxAge: 1000 * 60 * 10
|
|
}
|
|
})
|
|
)
|
|
|
|
app.use(cors())
|
|
|
|
async function startServer() {
|
|
try {
|
|
await connectMongoDB()
|
|
} catch (error) {
|
|
console.error('Server error:', error)
|
|
process.exit(1)
|
|
}
|
|
}
|
|
|
|
startServer()
|
|
|
|
// app.use(loginUtil.authenticateSeesion)
|
|
|
|
// app.use('/', loginUtils.aopMiddleware, indexRouter);
|
|
app.use('/', indexRouter)
|
|
app.use('/user', loginUtil.authenticateSession, userRouter)
|
|
|
|
// catch 404 and forward to error handler
|
|
app.use(function (req, res, next) {
|
|
next(createError(404))
|
|
})
|
|
|
|
// error handler
|
|
app.use(function (err, req, res, next) {
|
|
// set locals, only providing error in development
|
|
res.locals.message = err.message
|
|
res.locals.error = req.app.get('env') === 'development' ? err : {}
|
|
|
|
// render the error page
|
|
res.status(err.status || 500)
|
|
res.json({
|
|
error: true,
|
|
message: err.message || 'Something went wrong',
|
|
// 只在开发环境下返回堆栈信息
|
|
...(req.app.get('env') === 'development' ? { stack: err.stack } : {})
|
|
})
|
|
})
|
|
|
|
module.exports = app
|