pinafore/src/server.js

81 lines
1.9 KiB
JavaScript
Raw Normal View History

import * as sapper from '../__sapper__/server.js'
2018-03-25 22:47:01 +02:00
const express = require('express')
const compression = require('compression')
2018-02-09 07:29:29 +01:00
const serveStatic = require('serve-static')
2018-03-25 22:47:01 +02:00
const app = express()
const helmet = require('helmet')
const uuidv4 = require('uuid/v4')
2018-04-15 00:50:16 +02:00
const headScriptChecksum = require('../inline-script-checksum').checksum
2018-01-07 00:51:25 +01:00
2018-02-09 07:29:29 +01:00
const { PORT = 4002 } = process.env
2018-01-07 00:51:25 +01:00
2018-02-08 17:22:14 +01:00
// this allows us to do e.g. `fetch('/_api/blog')` on the server
2018-02-09 07:29:29 +01:00
const fetch = require('node-fetch')
2018-01-07 00:51:25 +01:00
global.fetch = (url, opts) => {
if (url[0] === '/') {
url = `http://localhost:${PORT}${url}`
}
2018-02-09 07:29:29 +01:00
return fetch(url, opts)
}
2018-01-07 00:51:25 +01:00
const debugPaths = ['/report.html', '/stats.json']
const debugOnly = (fn) => (req, res, next) => (
!~debugPaths.indexOf(req.path) ? next() : fn(req, res, next)
)
const nonDebugOnly = (fn) => (req, res, next) => (
~debugPaths.indexOf(req.path) ? next() : fn(req, res, next)
)
app.use(compression({ threshold: 0 }))
2018-01-07 00:51:25 +01:00
app.use((req, res, next) => {
res.locals.nonce = uuidv4()
next()
})
// report.html needs to have CSP disable because it has inline scripts
app.use(debugOnly(helmet()))
app.use(nonDebugOnly(helmet({
contentSecurityPolicy: {
directives: {
scriptSrc: [
`'self'`,
`'sha256-${headScriptChecksum}'`,
(req, res) => `'nonce-${res.locals.nonce}'`
],
workerSrc: [`'self'`],
styleSrc: [`'self'`, `'unsafe-inline'`],
frameSrc: [`'none'`],
objectSrc: [`'none'`],
manifestSrc: [`'self'`]
}
},
referrerPolicy: {
policy: 'no-referrer'
2018-04-15 00:50:16 +02:00
}
})))
2018-04-15 00:50:16 +02:00
app.use(serveStatic('static', {
2018-03-21 04:46:37 +01:00
setHeaders: (res) => {
res.setHeader('Cache-Control', 'public,max-age=600')
2018-03-21 04:46:37 +01:00
}
}))
2018-01-07 00:51:25 +01:00
debugPaths.forEach(debugPath => {
app.use(debugPath, express.static(`__sapper__/build/client${debugPath}`))
})
2018-03-25 22:47:01 +02:00
app.use(sapper.middleware())
2018-01-07 00:51:25 +01:00
app.listen(PORT, () => {
2018-02-09 07:29:29 +01:00
console.log(`listening on port ${PORT}`)
})
// Handle SIGINT (source: https://git.io/vhJgF)
process.on('SIGINT', function () {
process.exit(0)
})