app.js

require('express-async-errors');
const express = require('express');
const app = express();
const jwtValidator = require('./middleware/jwtValidator');
const api = require('./api');
const nunjucks = require('nunjucks');
const { GOOGLE_CLIENT_ID, COOKIE_SECRET } = require('./constants');
const cookieParser = require('cookie-parser');
const bodyParser = require('body-parser');
const logger = require('morgan');
const models = require('./database/models');
const crypto = require('crypto');

app.use(
	logger('dev', {
		skip: (req, res) =>
			res.statusCode < 400 && process.env.NODE_ENV === 'production'
	})
);

app.use(cookieParser(COOKIE_SECRET));
app.use(bodyParser.urlencoded({ extended: false }));
app.use(bodyParser.json());

app.use(jwtValidator);

app.use('/api', api);

nunjucks.configure('views', {
	autoescape: true,
	express: app
});

app.use((req, res, next) => {
	// If they're not signed in always send the sign in page
	if (!req.jwt) {
		res.render('sign-in.html', { GOOGLE_CLIENT_ID });
	} else {
		next();
	}
});

app.get('/', async (req, res) => {
	const application = await models.applications.findOne();

	const subHash = crypto
		.createHash('sha256')
		.update(String(application.id) + req.jwt.user.sub)
		.digest('hex');

	let userCode = await models.userCodes.findOne({
		where: {
			subHash
		}
	});

	if (!userCode) {
		userCode = await models.userCodes.create({
			applicationId: application.id,
			subHash,
			code: crypto.randomBytes(4).toString('hex').toUpperCase()
		});
	}

	const results = await models.results.findAll({
		where: {
			code: userCode.code
		}
	});

	results.forEach(res => {
		if(res.email !== req.jwt.user.email){
			res.email = req.jwt.user.email;
			res.save();
		}
	});

	const messages = await Promise.all(
		results.map(
			async res =>
				(
					(await models.acceptanceMessages.findOne({
						where: {
							application: res.application,
							status: res.status
						}
					})) || {
						application: res.application,
						message:
							'<p>After reading your application for Student Union membership positions, we are unfortunately not able to give you an interview. We had a pool of extremely talented and qualified applicants this year and as much as we would have liked to, we are not able to interview every applicant.\n' +
							'</p>'
					}
				)
		)
	);

	res.render('index.html', {
		user: req.jwt.user,
		userCode,
		messages
	});
});

module.exports = app;