app.js

var express = require('express');
var path = require('path');
var cookieParser = require('cookie-parser');
var logger = require('morgan');
var nunjucks = require("nunjucks");
const passport = require('passport');
const AtlassianOAuth2Strategy = require('passport-atlassian-oauth2');
const session = require('express-session');
const compression = require('compression');
const { log } = require('./utils/logger');

var fs = require('fs');

if (!fs.existsSync('.env')) {
  log.error("No .env file found. Please create one using the .env.example file as a template.");
  process.exit(1);
}

log.info(`Loading .env file from: ${path.resolve('.env')}`);
log.debug(`JIRA_API_DISABLE_HTTPS_VALIDATION before dotenv: "${process.env.JIRA_API_DISABLE_HTTPS_VALIDATION}"`);

const dotenv = require('dotenv').config({
    override: true  // This forces .env to override system variables
});

log.debug(`Dotenv config result:`, dotenv);
log.debug(`JIRA_API_DISABLE_HTTPS_VALIDATION after dotenv: "${process.env.JIRA_API_DISABLE_HTTPS_VALIDATION}"`);

const https = require('https');

var indexRouter = require('./routes/index');


var app = express();

// view engine setup
app.set('view engine', 'njk');
app.set('views', path.join(__dirname, 'views'));

nunjucks.configure('views', {
  autoescape: true,
  express: app
});

app.use(logger('dev'));
app.use(express.json());
app.use(express.urlencoded({ extended: false }));
app.use(cookieParser());
app.use(express.static(path.join(__dirname, 'public')));
app.use(compression());

// Logger is now imported from utils/logger.js

if (process.env.JIRA_AUTH_TYPE == "OAUTH") {
  
  app.use(session({ 
    secret: 'plywoods-amazing-session-secret', 
    resave: false, 
    saveUninitialized: false,
    cookie: {
        secure: process.env.NODE_ENV === 'production',
        maxAge: 24 * 60 * 60 * 1000 // 24 hours
    }
  }));

  app.use(passport.initialize());
  app.use(passport.session());

  const authStrategy = new AtlassianOAuth2Strategy({
      clientID: process.env.JIRA_OAUTH_CLIENT_ID,
      clientSecret: process.env.JIRA_OAUTH_CLIENT_SECRET,
      callbackURL: process.env.JIRA_OAUTH_CALLBACK_URL,
      scope: 'offline_access read:jira-work read:jira-user write:jira-work read:avatar:jira read:project:jira',
  },
  function(accessToken, refreshToken, profile, cb) {
      try {
          log.auth('attempt', profile.email);

          profile.accessToken = accessToken;
          profile.refreshToken = refreshToken;
          const cloudId = profile.accessibleResources.find(
              site => site.url.includes(process.env.JIRA_URL)
          )?.id;
          
          if (!cloudId) {
              log.error('No matching Jira site found', {
                url: process.env.JIRA_URL,
                resources: profile.accessibleResources
              });
              return cb(new Error('No matching Jira site found'));
          }
          
          profile.cloudId = cloudId;
          cb(null, profile);
      } catch (error) {
          log.error('Authentication error', {
            error: error.message,
            stack: error.stack
          });
          cb(error);
      }
  });

  // Use the same HTTPS validation setting for OAuth strategy
  const shouldValidateHttps = !(process.env.JIRA_API_DISABLE_HTTPS_VALIDATION === 'true' || 
                                process.env.JIRA_API_DISABLE_HTTPS_VALIDATION === 'True' || 
                                process.env.JIRA_API_DISABLE_HTTPS_VALIDATION === 'TRUE' || 
                                process.env.JIRA_API_DISABLE_HTTPS_VALIDATION === '1');
  
  authStrategy._oauth2.setAgent(new https.Agent({
    rejectUnauthorized: shouldValidateHttps
  }));
  passport.use(authStrategy);

  passport.serializeUser(function(user, cb) {
      cb(null, user);
  });

  passport.deserializeUser(function(obj, cb) {
      cb(null, obj);
  });

  app.use(passport.initialize());
  app.use(passport.session());

  var authRouter = require('./routes/auth');
  app.use('/auth', authRouter);
}

app.use('/', indexRouter);

var configRouter = require('./routes/config');
app.use('/config', configRouter);

const configController = require('./controllers/configController');

// error handler
app.use(function(err, req, res, next) {
  log.error('Application error', {
    error: err.message,
    stack: err.stack,
    path: req.path
  });
  next(err);
});

app.use(function(err, req, res, next) {
  // set locals, only providing error in development
  res.locals.message = err.message;
  res.locals.error = err;

  // render the error page
  res.status(err.status || 500).json(res.locals.error).send();
  //res.render('error');
});

module.exports = app;