app.js

const express = require("express");
const helmet = require("helmet");
const cors = require('cors');
const fs = require("fs");
const YAML = require("js-yaml");
const path = require("path");
const swaggerUi = require("swagger-ui-express");
const session = require('express-session');
// const cron = require("node-cron");

const routes = require("./src/routes/index");
const errorHandler = require("./src/middlewares/errorHandler");
const { loadConfigsToCache } = require("./src/services/config.service");
const logger = require("./src/config/logger");
const { monitoringMiddleware, healthHandler, metricsHandler } = require("./src/middlewares/monitoring");
const client = require("./src/config/redis");
const passport = require("./src/config/passport");
require("dotenv").config();

const app = express();
app.use(express.json());

// Session configuration
app.use(session({
  secret: process.env.SESSION_SECRET || "your-secret-key",
  resave: false,
  saveUninitialized: false,
  cookie: {
    secure: process.env.NODE_ENV === "production",
    httpOnly: true,
    maxAge: 24 * 60 * 60 * 1000, // 24 hours
  },
}));

// Passport initialization
app.use(passport.initialize());
app.use(passport.session());

// Security headers
// app.use(
//   helmet({
//     contentSecurityPolicy: {
//       useDefaults: false,
//       directives: {
//         defaultSrc: ["'self'", "http://localhost:*"],
//         connectSrc: [
//           "'self'",
//           "http://localhost:*",
//           "https://www.facebook.com",
//           "https://graph.facebook.com",
//           "https://connect.facebook.net",
//           "https://accounts.google.com",
//           "https://oauth2.googleapis.com",
//           "https://www.googleapis.com",
//         ],
//         scriptSrc: ["'self'", "'unsafe-inline'", "https://connect.facebook.net"],
//         styleSrc: ["'self'", "'unsafe-inline'"],
//         imgSrc: ["'self'", "data:"],
//         frameSrc: ["'self'", "https://www.facebook.com"],
//       },
//     },
//     crossOriginOpenerPolicy: { policy: "same-origin-allow-popups" },
//   })
// );

// app.use(cors({
//   origin: process.env.CLIENT_URL || 'http://localhost:*',
//   methods: ['GET', 'POST', 'PUT', 'DELETE'],
//   credentials: true,
// }));

app.use(monitoringMiddleware);
app.get("/health", healthHandler);
app.get("/metrics", metricsHandler);

// Serve static frontend for OAuth testing BEFORE API routes and error handler
app.use(express.static(path.join(__dirname, "./src/views")));
app.get("/", (req, res) => {
  res.sendFile(path.join(__dirname, "./src/views/login.html"));
});

// cron.schedule("*/10 * * * * *", () => logger.info("Running every 10s"), { timezone: "Asia/Kolkata" });
// cron.schedule("0 9 * * *", () => logger.info("Good morning! 9:00 AM IST"), { timezone: "Asia/Kolkata" });
// cron.schedule("30 2 * * *", () => logger.info("New York 2:30 AM local time"), { timezone: "America/New_York" });
app.use(errorHandler);
app.use("/api", routes);

const swaggerFile = path.join(__dirname, "./src/api-docs/openapi.yaml");
const swaggerDocument = YAML.load(fs.readFileSync(swaggerFile, "utf8"));
app.use("/api-docs", swaggerUi.serve, swaggerUi.setup(swaggerDocument));

(async () => {
  try {
    await loadConfigsToCache();
    logger.info("Config cache loaded at startup");
  } catch (err) {
    logger.error("Failed to load config cache", err);
    process.exit(1);
  }
})();

(async () => {
  try {
    await client.connect();
    logger.info("Redis client connected");
  } catch (error) {
    logger.error("Failed to connect to Redis", error);
    process.exit(1);
  }
})();

process.on("SIGINT", async () => {
  logger.info("Shutting down gracefully Redis disconnected");
  await client.quit();
  process.exit(0);
});

module.exports = app;

// logger.info("info");
// logger.warn("warning");
// logger.error("error");
// logger.debug("debug");
// logger.http("http log");