server.js

require('dotenv').config();

const express = require('express');
const session = require('express-session');
const morgan = require('morgan');
const SequelizeStore = require('express-session-sequelize')(session.Store);
const flash = require('connect-flash');
const methodOverride = require('method-override');
const path = require('path');
const RateLimit = require('express-rate-limit');
const nodemailer = require('nodemailer');
const crypto = require('crypto');
const swaggerUi = require('swagger-ui-express');
const YAML = require('yamljs');
const { sequelize, SessionSecret } = require('./models');
const { requireAuth, loadSites } = require('./middlewares');


// Function to get or create session secrets
async function getSessionSecrets() {
  const secrets = await SessionSecret.findAll({
    order: [['createdAt', 'DESC']],
    attributes: ['secret']
  });

  if (secrets.length === 0) {
    // Generate a new secret if none exist
    const newSecret = crypto.randomBytes(32).toString('hex');
    await SessionSecret.create({ secret: newSecret });
    console.log('Generated new session secret');
    return [newSecret];
  }

  return secrets.map(s => s.secret);
}

async function main() {
  const app = express();

  // setup views
  app.set('views', path.join(__dirname, 'views'));
  app.set('view engine', 'ejs');
  app.set('trust proxy', 1);

  // setup middleware
  app.use(morgan('combined'));
  app.use(express.json());
  app.use(express.urlencoded({ extended: true })); // Parse form data
  app.use(methodOverride((req, res) => {
    if (req.body && typeof req.body === 'object' && '_method' in req.body) {
      const method = req.body._method;
      delete req.body._method;
      return method;
    }
  }));

  // Configure session store
  const sessionStore = new SequelizeStore({
    db: sequelize,
  });

  app.use(session({
    secret: await getSessionSecrets(),
    store: sessionStore,
    resave: false,
    saveUninitialized: false,
    cookie: { 
      secure: process.env.NODE_ENV === 'production', // Only secure in production
      maxAge: 24 * 60 * 60 * 1000 // 24 hours
    }
  }));

  app.use(flash());
  // fix flash with postgres
  app.use((req, res, next) => {
    const _flash = req.flash;
    req.flash = function(type, msg) {
      const result = _flash.apply(this, arguments);
      if (type && msg) {
        return new Promise((resolve, reject) => {
          this.session.save((err) => {
            if (err) return reject(err);
            resolve(result);
          });
        });
      }
      return result;
    }
    next();
  });
  app.use(express.static('public'));

  // We rate limit unsucessful (4xx/5xx statuses) to only 10 per 5 minutes, this
  // should allow legitimate users a few tries to login or experiment without
  // allowing bad-actors to abuse requests.
  app.use(RateLimit({
    windowMs: 5 * 60 * 1000,
    max: 10,
    skipSuccessfulRequests: true,
  }));

  // Set version info once at startup in app.locals
  // Note: Version info is cached at startup. Server restart required to update version.
  const { getVersionInfo } = require('./utils');
  app.locals.versionInfo = getVersionInfo();

  // Middleware to load sites for authenticated users
  app.use((req, res, next) => {
    if (req.session && req.session.user) {
      return loadSites(req, res, next);
    }
    next();
  });

  // Redirect root to sites list
  app.get('/', (req, res) => res.redirect('/sites'));

  // --- Nodemailer Setup ---
  const transporter = nodemailer.createTransport({
    host: "opensource.mieweb.org",
    port: 25,
    secure: false, // use STARTTLS if supported
    tls: {
      rejectUnauthorized: false, // allow self-signed certs
    },
  });

  // --- Mount Routers ---
  const loginRouter = require('./routers/login');
  const registerRouter = require('./routers/register');
  const usersRouter = require('./routers/users');
  const groupsRouter = require('./routers/groups');
  const sitesRouter = require('./routers/sites'); // Includes nested nodes and containers routers
  const externalDomainsRouter = require('./routers/external-domains');
  const jobsRouter = require('./routers/jobs');
  const settingsRouter = require('./routers/settings');
  const apikeysRouter = require('./routers/apikeys');
  const resetPasswordRouter = require('./routers/reset-password');
  
  app.use('/jobs', jobsRouter);
  app.use('/login', loginRouter);
  app.use('/register', registerRouter);
  app.use('/users', usersRouter);
  app.use('/groups', groupsRouter);
  app.use('/sites', sitesRouter); // /sites/:siteId/nodes and /sites/:siteId/containers routes nested here
  app.use('/external-domains', externalDomainsRouter);
  app.use('/settings', settingsRouter);
  app.use('/apikeys', apikeysRouter);
  app.use('/reset-password', resetPasswordRouter);

  // --- API Documentation (Swagger UI) ---
  const openapiSpec = YAML.load(path.join(__dirname, 'openapi.yaml'));
  app.get('/api/openapi.json', (req, res) => res.json(openapiSpec));
  app.get('/api/openapi.yaml', (req, res) => {
    res.type('text/yaml').sendFile(path.join(__dirname, 'openapi.yaml'));
  });
  app.use('/api', swaggerUi.serve, swaggerUi.setup(openapiSpec, {
    customSiteTitle: 'Create-a-Container API',
  }));

  // --- Routes ---
  const PORT = 3000;
  app.listen(PORT, () => console.log(`Server running on http://localhost:${PORT}`));

  // Handles logout
  app.post('/logout', (req, res) => {
    req.session.destroy((err) => {
      if (err) {
        console.error('Error destroying session:', err);
        return res.status(500).json({ error: 'Failed to log out.' });
      }
      res.clearCookie('connect.sid'); // Clear the session cookie
      return res.redirect('/');
    });
  });
}

main();