unpkg/server/createServer.js

const fs = require('fs')
const path = require('path')
const express = require('express')
const bodyParser = require('body-parser')
const cors = require('cors')
const morgan = require('morgan')

const checkBlacklist = require('./middleware/checkBlacklist')
const fetchFile = require('./middleware/fetchFile')
const parseURL = require('./middleware/parseURL')
const requireAuth = require('./middleware/requireAuth')
const serveFile = require('./middleware/serveFile')
const userToken = require('./middleware/userToken')
const validatePackageURL = require('./middleware/validatePackageURL')

morgan.token('fwd', function(req) {
  return req.get('x-forwarded-for').replace(/\s/g, '')
})

function errorHandler(err, req, res, next) {
  console.error(err.stack)

  res
    .status(500)
    .type('text')
    .send('Internal Server Error')

  next(err)
}

function createRouter(setup) {
  const app = express.Router()
  setup(app)
  return app
}

function createServer() {
  const app = express()

  app.disable('x-powered-by')

  if (process.env.NODE_ENV !== 'test') {
    app.use(
      morgan(
        process.env.NODE_ENV === 'production'
          ? // Modified version of the Heroku router's log format
            // https://devcenter.heroku.com/articles/http-routing#heroku-router-log-format
            'method=:method path=":url" host=:req[host] request_id=:req[x-request-id] cf_ray=:req[cf-ray] fwd=:fwd status=:status bytes=:res[content-length]'
          : 'dev'
      )
    )
  }

  app.use(errorHandler)

  app.use(
    express.static('build', {
      maxAge: '365d'
    })
  )

  app.use(cors())
  app.use(bodyParser.json())
  app.use(userToken)

  app.get('/_publicKey', require('./actions/showPublicKey'))

  app.use(
    '/_auth',
    createRouter(app => {
      app.post('/', require('./actions/createAuth'))
      app.get('/', require('./actions/showAuth'))
    })
  )

  app.use(
    '/_blacklist',
    createRouter(app => {
      app.post(
        '/',
        requireAuth('blacklist.add'),
        require('./actions/addToBlacklist')
      )
      app.get(
        '/',
        requireAuth('blacklist.read'),
        require('./actions/showBlacklist')
      )
      app.delete(
        /.*/,
        requireAuth('blacklist.remove'),
        validatePackageURL,
        require('./actions/removeFromBlacklist')
      )
    })
  )

  if (process.env.NODE_ENV !== 'test') {
    app.get('/_stats', require('./actions/showStats'))
  }

  app.use('/', parseURL, checkBlacklist, fetchFile, serveFile)

  return app
}

module.exports = createServer