soyuz-web/server.js

const express = require('express')

const { getLatestPost, getNow, publishNewPost, requireLoggedIn, resetPassword, saveFile, updatePost, verifyUser, getSavedFile } = require('./utilities')

const bodyParser = require('body-parser')
const Database = require('better-sqlite3');
const session = require('express-session')
const SqliteStore = require("better-sqlite3-session-store")(session)
const sprightly = require('sprightly');

// configure Express
const app = express()
const PORT = process.env.SOYUZ_PORT
app.use(bodyParser.urlencoded({ extended: false }))
app.use(express.static('static'))

// configure session store
db = new Database('soyuz.db', {});
app.use(
  session({
    store: new SqliteStore({
      client: db,
      expired: {
        clear: true,
        intervalMs: 900000 //ms = 15min
      }
    }),
    saveUninitialized: false,
    secret: process.env.SOYUZ_SESSION_SECRET,
    resave: false,
    cookie: {
        sameSite: 'strict',
        maxAge: 1.21e+9 // 2 weeks
    },
    name: 'soyuz-web'
  })
)

// configure template engine
app.engine('spy', sprightly);
app.set('views', './templates');
app.set('view engine', 'spy');

/**
 * ROUTES
 */

// GET

app.get('/', requireLoggedIn, (req, res) => {
    let data = {
        title: 'Home',
        disabled: '', 
        message: getSavedFile(req.session.user.username)
    }
    let today = getNow().toISOString().slice(0,10)
    let latestPost = req.session.user.latest_post
    if (today === latestPost) {
        data.disabled = 'disabled'
        data.message = `Relax, ${req.session.user.username}, you have already posted today.`
    }
    res.render('index.spy', data)
})

app.get('/login', (req, res) => {
    if (req.session.user) {
        res.redirect('/')
    } else {
        res.render('login.spy', {title: 'Log In'}) 
    }
})

app.get('/edit', requireLoggedIn, (req, res) => {
    getLatestPost( req.session.user.directory, (data, path) => {
        res.render('edit.spy', {data: data, path: path, title: 'Edit'})
    })
})

app.get('/settings', requireLoggedIn, (req, res) => {
    res.render('settings.spy', {title: 'Settings'}) 
})

app.get('/try-again', requireLoggedIn, (req, res, next) => {
    res.render('try-again.spy', {title: 'Log In'}) 
})

app.get('/help', requireLoggedIn, (req, res, next) => {
    res.render('help.spy', {title: 'Help'}) 
})

// POST

app.post('/login', verifyUser,
    function(req, res){
        if (req.session.user) {
            res.redirect('/')
        } else {
            res.redirect('/try-again')
        }
})

app.post('/logout', function(req, res, next){
    req.session.destroy( (err) => {
        if (err) {console.error(err)}
        res.redirect('/login')
    })
})

app.post('/publish', requireLoggedIn, (req, res) => {
    publishNewPost(req, () => {
        res.redirect('/')
    })
})

app.post('/save', requireLoggedIn, (req, res) => {
    saveFile(req.session.user.username, req.body.textarea, () => {
        res.redirect('/')
    })
})

app.post('/update', requireLoggedIn, (req, res) => {
    updatePost(req, () => {
        res.redirect('/')
    })
})

app.post('/reset-password', requireLoggedIn, (req, res) => {
    resetPassword(req.session.user.username, req.body.password, password => {
        return req.session.destroy( (err) => {
            if (err) {console.error(err)}
            res.redirect('/login')
        })
    })
})

/**
 * Let's go!
 */
app.listen(PORT, () => {
  console.log(`Soyuz Web listening on port ${PORT}`)
})