server.js

const express = require('express');
const mongoose = require('mongoose');

// const session = require('express-session');
// const MongoDBtore = require('connect-mongodb-session')(session);
// const csrf = require('csurf');

const adminRouter = require('./routers/admin-router');
const orderRouter = require('./routers/order-router');
const productRouter = require('./routers/product-router');

mongoose.connect(`mongodb+srv://${process.env.DB_USER}:${process.env.DB_PASSWORD}@phoebes-garden.4nov7.mongodb.net/${process.env.DB_NAME}?retryWrites=true&w=majority`, {
  useCreateIndex: true,
  useNewUrlParser: true,
  useUnifiedTopology: true
});

const server = express();

// server.use(session({
//   resave: false,
//   saveUninitialized: false,
//   secret: process.env.SECRET,
//   store
// }));
server.use(function (req, res, next) {
  res.setHeader('Access-Control-Allow-Origin', '*');
  res.setHeader(
    'Access-Control-Allow-Headers',
    'Origin, X-Requested-With, Content-Type, Accept, Authorization'
  );
  res.setHeader('Access-Control-Allow-Methods', 'DELETE, GET, PATCH, POST');
  next();
});

// fulfilling order requires parsing of RAW req from Stripe, so using this router before using express.json
server.use('/api/order', orderRouter);

// const store = new MongoDBStore({
//   uri: process.env.DB_CONNECTION,
//   collection: 'sessions'
// });
// const csrfProtection = csrf();

server.use(express.json());
server.use(express.urlencoded({
  extended: true,
  useNewUrlParser: true,
  useUnifiedTopology: true
}));
// server.use(csrfProtection);

// server.use(function (req, res, next) {
//   res.csrf_token = req.csrfToken();
//   next();
// });

server.use('/api/admin', adminRouter);
server.use('/api/product', productRouter);

server.use(function (req, res, next) {
  res.status(404).send();
});

server.listen(process.env.PORT, function () {
    console.log(`Server is up on port ${process.env.PORT}.`);
});