server.js

const express = require("express");
const mongoose = require("mongoose");
const bodyParser = require("body-parser");
const session = require("express-session");
const MongoStore = require("connect-mongo")(session);
const helmet = require("helmet");
const cors = require("cors");
const corsOptions = {
  origin: "https://dalambdanotes.netlify.com",
  credentials: true
};

const usersRouter = require("./users/usersRouter.js");
const notesRouter = require("./notes/notesRouter.js");

const server = express();

const path = process.env.MONGO_URI;

server.use(
  session({
    secret: process.env.SECRET,
    store: new MongoStore({
      url: process.env.SESSIONS_DB,
      ttl: 60 * 10
    }),
    resave: true,
    saveUninitialized: false,
    cookie: { maxAge: 1 * 24 * 60 * 60 * 1000 }, // 1 day in milliseconds
    name: "DontPWNmeh"
  })
);

server.use(bodyParser.json());
server.use(cors(corsOptions));
server.use(helmet());

mongoose
  .connect(path)
  .then(response => {
    console.log("connected to DB");
  })
  .catch(error => {
    console.log("Something went wrong with DB");
  });

const isLoggedIn = (req, res, next) => {
  if (!req.session.auth) res.status(422).json("You are not logged in");
  else if (req.session._id) next();
};

server.use("/api/notes", isLoggedIn, notesRouter);
server.use("/api/users", usersRouter);

server.get("/", (req, res) => res.send("API Running...!"));

const PORT = process.env.PORT || 5000;
server.listen(PORT, () => console.log(`Listening on ${PORT}`));