index.js

/* eslint-disable no-undef */
// Environment variables
const dotenv = require("dotenv");
dotenv.config();
const PORT = process.env.PORT || 5000;

// Modules
const bodyParser = require("body-parser");
const session = require("express-session");

// Express
const express = require("express");
const app = express();

app.use(bodyParser.json());
/*
Object.defineProperty(session.Cookie.prototype, 'sameSite', {
	// sameSite cannot be set to `None` if cookie is not marked secure
	get() {
		return this._sameSite === 'none' && !this.secure ? 'lax' : this._sameSite;
	},
	set(value) {
		this._sameSite = value;
	}
});
  */
// Session
app.use(session({
	secret: process.env.APP_SECRET,
	resave: true,
	saveUninitialized: true,
	cookie: {
		httpOnly: true, // empêche l'accès au cookie depuis du javascript côté front
		secure: false, // HTTPS est nécessaire si l'on veut passer l'option à true
		maxAge: 1000 * 60 * 60 * 24, // durée de vie du cookie en milliseconds, ici ça donne 1 jour
	}
})),

// CORS
app.use((req, res, next) => {
	// on autorise explicitement le domaine du front
	res.header("Access-Control-Allow-Origin", "http://174.129.9.82");
	// on autorise le partage du cookie
	res.header("Access-Control-Allow-Credentials", true);
	// on autorise le partage de ressources entre origines
	res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
	res.header("Access-Control-Allow-Methods", "GET, POST, OPTIONS, PUT, DELETE, PATCH");

	next();
});

app.use(express.static('uploads'));

// POST management
app.use(express.urlencoded({extended: true}));

// Sanitizer 
const sanitizeData = require("./app/middlewares/sanitizeMiddleware");
app.use( sanitizeData );

// router
const router = require("./app/router");
app.use(router);

// launch server
app.listen( PORT,  () => {
	console.log(`Listening on ${PORT}`);
});