app.js

const express = require('express');
const app = express();
const mongoose = require('mongoose');
const config = require('./config');
const csrf = require('csurf');
const cookieParser = require('cookie-parser');

app.use(require('helmet')());
app.use(function (req, res, next) {
    res.setHeader('Access-Control-Allow-Origin', '*');
    res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS, PUT, PATCH, DELETE');
    res.setHeader('Access-Control-Allow-Headers', 'X-Requested-With,content-type,Authorization');
    next();
});
app.use(express.json());
app.set('json spaces', 4);

// -- CSRF --
app.use(cookieParser());
/*app.use(csrf({cookie: true}));
app.get('/', function (req, res) {
   res.cookie('XSRF-TOKEN', req.csrfToken(), {sameSite: 'lax'});
   res.status(200).json({
       message: `Version disponible : v1`
   });
});*/
// --

app.use('/v1', require('./api/v1/routes'));

mongoose.connect(`mongodb://${config.db_host}/${config.database}`,
    {
        useNewUrlParser: true,
        useUnifiedTopology: true,
        useCreateIndex: true,
        useFindAndModify: false
    },
    function (error) {
        if (error) throw error;
        console.log(`Mongoose has been successfully started. (DB=${config.database})`);
    });

module.exports = app;