app.js
2.85 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
/**
* 应用入口
* @author xuqi<qi.xu@yoho.cn>
* @date: 2016/3/28
*/
var express = require('express'),
path = require('path'),
exphbs = require('express-handlebars'),
bodyParser = require('body-parser');
var morgan = require('morgan'),
favicon = require('serve-favicon'),
cookieParser = require('cookie-parser'),
session = require('express-session'),
connectRedis = require('connect-redis'),
cors = require('cors');
var app = express(),
RedisStore = connectRedis(session);
var config = require('./config');
var sign = require('./library/sign');
// 向模板注入变量
app.locals.devEnv = app.get('env') === 'development';
app.locals.proEnv = app.get('env') === 'production';
app.locals.assetsUrl = config.assetsUrl;
app.set('trust proxy', ['loopback', 'linklocal', 'uniquelocal']);
app.set('views', path.join(__dirname, 'views/action'));
app.engine('.hbs', exphbs({
extname: '.hbs',
defaultLayout: 'main',
layoutsDir: 'views/layouts/',
partialsDir: 'views/partials/',
helpers: 'helpers'
}));
app.set('view engine', '.hbs');
if (!app.locals.proEnv) {
app.use(morgan('dev'));
}
app.use(favicon(path.join(__dirname, '/public/favicon.ico')));
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({extended: false}));
app.use(cookieParser());
app.use(express.static(path.join(__dirname, 'public')));
app.use(cors({
origin: function(origin, callback) {
var originIsWhitelisted = /yohobuy\.com$/.test(origin) || /yoho\.cn$/.test(origin);
// 只支持 yohobuy.com 和 yoho.cn 下的子域名跨域
callback(null, originIsWhitelisted);
}
}));
// session 配置
app.use(session({
name: config.sessionName,
resave: true,
saveUninitialized: true,
httpOnly: true,
store: new RedisStore(config.sessionRedis),
secret: config.sessionSecret
}));
// app 访问校验参数是否合法
app.use(function(req, res, next) {
if (req.query.app_version || (req.query.openrefer === 'app' && req.query.uid)) {
if (sign.checkSign(req.query) || sign.webSign(req.query)) {
req.isApp = true;
return next();
} else {
return res.status(403).json({
code: 403,
message: '请勿伪造客户端请求'
});
}
}
next();
});
// 加载路由
app.use('/', require('./router'));
app.use('/web', require('./web-router'));
// 未知路由转入 404
app.use(function(req, res) {
var err = new Error('Not Found');
err.status = 404;
res.status(404).send(err);
});
// 捕获全局错误, 开发环境返回错误详情
app.use(function(err, req, res) {
if (app.locals.devEnv) {
console.warn(err);
} else {
err = {};
}
res.status(err.status || 500);
res.render('error', {
message: err.message,
error: err
});
});
module.exports = app;