space-smasher-9001/server/server.js

import 'dotenv/config'

import express from 'express'
import jwt from 'jsonwebtoken'
import morgan from 'morgan'
import cors from 'cors'

import auth from './Auth.js'
import db from './Database.js'
import jg from './JusticeGuard.js'

const router = express.Router();

const protect = (req, res, next) => {
  const authHeader = req.headers.authorization;

  if (!authHeader) {
    res.sendStatus(401)
  }

  const token = authHeader.split(' ')[1];

  jwt.verify(token, process.env.secret, (err, user) => {
    if (err)
      return res.sendStatus(403)

    req.user = user
    next()
  })
}

const neededArguments = (args) => {
  return (req, res, next) => {
    for (let i = 0; i < args.length; i++) {
      const arg = args[i];
      if (!req.body[arg])
        return res.status(400).json({
          error: "missing argument " + arg
        })
    }
    next()
  }
}

const app = express()
app.use(morgan('combined'))
app.use(cors())

router.use(express.json())

router.get("/", (_, res) => {
  res.json({ message: "Hello! API here" })

});

router.get("/secured", protect, (req, res) => {
  res.json({ message: "You can see it!", payload: req.user })
})

router.post("/signup", neededArguments(['name']), async (req, res) => {

  const user = await auth.createAccount(req.body.name)

  if (user.error)
    return res.status(400).json({
      error: user.error
    })

  res.json(user)
})

router.post("/login", neededArguments(['key']), async (req, res) => {
  const user = auth.login(req.body.key)

  if (user.error)
    return res.status(400).json({
      error: user.error
    })

  res.json(user)
})

router.post("/record", protect, neededArguments(['points', 'shoots', 'time']), jg, async (req, res) => {
  db.updateRecord(req.user.name, req.body.points)
  const rank = db.getRank(req.user.name)

  console.log(req.user, rank)

  res.json({
    status: "ok",
    rank: rank
  })
})

router.get("/top", (req, res) => {
  res.json({
    status: "ok",
    records: db.getTop()
  })
})

router.get("/start", protect, async (req, res) => {
  await db.setLastPlayedToNow(req.user.name)

  res.json({
    status: "ok"
  })
})

if (process.env.STATIC) {
  app.use(express.static(process.env.STATIC));
  app.use("/api", router);
} else {
  app.use("/", router);
}

app.use(function (err, req, res, next) {
  if (err.name === 'UnauthorizedError') {
    res.status(401).send('invalid token...');
  }
});

(async function () { await db.read() })()

const port = process.env.PORT || 3000
app.listen(port, () => {
  console.log(`Server listening on port ${port}!`);
})