unpkg/server/createServer.js

const fs = require('fs')
const path = require('path')
const express = require('express')
const cors = require('cors')
const morgan = require('morgan')

const checkBlacklist = require('./middleware/checkBlacklist')
const packageURL = require('./middleware/packageURL')
const fetchFile = require('./middleware/fetchFile')
const serveFile = require('./middleware/serveFile')

const createSearchServer = require('./createSearchServer')
const createStatsServer = require('./createStatsServer')

morgan.token('fwd', function (req) {
  return req.get('x-forwarded-for').replace(/\s/g, '')
})

/**
 * A list of packages we refuse to serve.
 */
const PackageBlacklist = require('./PackageBlacklist').blacklist

function errorHandler(err, req, res, next) {
  console.error(err.stack)
  res.status(500).type('text').send('Internal Server Error')
  next(err)
}

function createApp() {
  const app = express()

  app.disable('x-powered-by')

  if (process.env.NODE_ENV !== 'test') {
    app.use(morgan(process.env.NODE_ENV === 'production'
      // Modified version of the Heroku router's log format
      // https://devcenter.heroku.com/articles/http-routing#heroku-router-log-format
      ? 'method=:method path=":url" host=:req[host] request_id=:req[x-request-id] cf_ray=:req[cf-ray] fwd=:fwd status=:status bytes=:res[content-length]'
      : 'dev'
    ))
  }

  app.use(errorHandler)
  app.use(cors())

  app.use(express.static('build', {
    maxAge: '365d'
  }))

  app.use('/_search', createSearchServer())
  app.use('/_stats', createStatsServer())

  app.use('/',
    packageURL,
    checkBlacklist(PackageBlacklist),
    fetchFile,
    serveFile
  )

  return app
}

module.exports = createApp