app.js

require('dotenv').config();

const bodyParser = require('body-parser');
const connectMongo = require('connect-mongo');
const cookieParser = require('cookie-parser');
const express = require('express');
const fetch = require('node-fetch');
const passport = require('passport');
const session = require('express-session');
const {Strategy} = require('passport-custom');
const {ensureLoggedIn} = require('connect-ensure-login');

const mongoose = require('./modal/mongoose');

const Exchange = require('./modal/exchange.modal');
const Query = require('./modal/query.modal');
const User = require('./modal/user.modal');
const api = require('./js/api');

const app = express();

const MongoStore = connectMongo(session);
app.use(session({
    maxAge: 24 * 60 * 60 * 1000,
    resave: false,
    saveUninitialized: false,
    secret: process.env.SESSION_SECRET,
    store: new MongoStore({mongooseConnection: mongoose.connection}),
}));
app.use(passport.initialize());
app.use(passport.session());
app.use(cookieParser());
app.use(bodyParser.urlencoded({extended: true}));
app.use(bodyParser.json());

app.use('/js', [ensureLoggedIn(), express.static(__dirname + '/public/js')]);
app.use('/css', express.static(__dirname + '/public/css'));

passport.use('torn', new Strategy((req, done) => api.basic(req.body.apiKey).then(data => {
    if (data.error) return done(data.error);
    User.findOne({userId: data.player_id}, (err, user) => {
        if (err || user) return done(err, user);
        User.create({username: data.name, userId: data.player_id, created: new Date()}, done);
    });
})));
passport.serializeUser((user, done) => done(null, user));
passport.deserializeUser((user, done) => done(null, user));

const sendView = (res, name) => res.sendFile(`${__dirname}/public/${name}.html`);
const sendError = (res, err, status = 500) => res.status(status).json({error: err});
const sendJson = (res, p) => p.then(a => res.json(a));

app.get('/login', (req, res) => {
    if (req.session.key) return res.redirect('/app');
    sendView(res, 'login');
});
app.post('/login', (req, res, next) => passport.authenticate('torn', (err, user) => {
    if (err) return sendError(res, err);
    if (!user) return res.redirect('/login');
    req.logIn(user, err => {
        if (err) return sendError(res, err);
        req.session.user = user;
        req.session.key = req.body.apiKey;
        res.redirect('/app');
    });
})(req, res, next));
app.get('/logout', (req, res) => req.session.destroy(() => res.redirect('/login')));

app.get('/app', ensureLoggedIn(), (req, res) => sendView(res, 'app'));
app.get('/items', ensureLoggedIn(), (req, res) => sendJson(res, api.items(req.session.key)));
app.get('/inventory', ensureLoggedIn(), (req, res) => sendJson(res, api.inventory(req.session.key)));
app.get('/prices/:max/:items', ensureLoggedIn(), ({session: {key}, params: {items, max}}, res) => sendJson(res, api.prices(key, items.split(','), max)));
app.get('/account', ensureLoggedIn(), (req, res) => res.json(req.session.user));
app.get('/points', ensureLoggedIn(), (req, res) => sendJson(res, api.details(req.session.key).then(a => a.points)));
app.get('/exchanges', ensureLoggedIn(), (req, res) => Exchange.find({}, (err, doc) => res.json(doc)));
app.get('/exchange/:type', ensureLoggedIn(), ({session: {key}, params: {type}}, res) => Exchange.findOne({type}, (err, doc) => {
    if (!doc) return res.json({});
    const {items = [], points = 0} = doc;
    api.prices(key, [0, ...items.map(({id}) => id)], 1)
        .then(a => a.map(([[b]], i) => b * (i === 0 ? points : items[i - 1].count || 1)))
        .then(([pointPrices, ...itemPrices]) => {
            const totalCost = itemPrices.reduce((sum, a) => sum + a);
            res.json({profit: pointPrices - totalCost, min: totalCost / points});
        });
}));

app.get('/image/statDist', ensureLoggedIn(), (req, res) => {
    api.details(req.session.key).then(({battleStats: stats}) => {
        const labels = ['defense', 'strength', 'speed', 'dexterity'];
        const values = labels.map(type => stats[type].value * 100 / stats.total);
        const max = Math.ceil(Math.max(...values) / 10) * 10;
        const imageUrl = 'https://image-charts.com/chart?&cht=r&chxt=r&chxr=0,0,' + max +
            '&chs=600x550&chxl=0:|' + new Array(max / 5 + 1).fill(0).map((a, i) => i * 5 + '%').join('|') +
            '&chl=' + labels.map(a => a[0].toUpperCase() + a.slice(1)).join('|') +
            '&chd=t:' + [...values, values[0]].join(',') + '&chf=a,s,00000000';

        return fetch(encodeURI(imageUrl));
    }).then(data => data.body.pipe(res));
});

app.get('/help', ensureLoggedIn(), (req, res) => sendView(res, 'help'));

const query = ({userId}, text) => new Query({userId, text, created: new Date()});
app.post('/query', ensureLoggedIn(), (req, res) => query(req.session.user, req.body.text).save((err, doc) => {
    if (err) return sendError(res, err);
    res.status(200).send();
}));

app.post('/update', ensureLoggedIn(), (req, res) => User.findOneAndUpdate({userId: req.session.user.userId}, req.body, (err, doc) => {
    if (err) return sendError(res, err);
    req.session.user = doc;
    res.status(200).send();
}));
app.get('*', (req, res) => res.redirect('/login'));

const port = process.env.PORT || 3000;
app.listen(port, () => console.log('Express server listening on port ' + port));