server.js

require('dotenv').config();
var express = require('express');
const cors = require('cors');
const bp = require('body-parser');
var path = require( 'path' );
var favicon = require( 'serve-favicon' );
var logger = require( 'morgan' );
const expressJWT = require('express-jwt')
const RateLimit = require('express-rate-limit');

const apiRoutes = require('./routes/recipe-router');
const auth = require('./routes/auth');
const ingredientsRoutes = require('./routes/ingredient-router');
const locked = require('./routes/locked');

var app = express();

// This allows us to accept POST data from axios
app.use(bp.json());
app.use(bp.urlencoded({extended: false}));

app.use(logger('dev'));
app.use(express.json());
app.use(cors());

// Configure both serve-favicon & static middleware to serve from the production 'build' folder
app.use(favicon(path.join(__dirname, 'build', 'favicon.ico')));
app.use(express.static(path.join(__dirname, 'build')));

const loginLimiter = new RateLimit({
    windowMs: 5*60*1000, // 5 minutes
    max: 3,
    delayMs: 0, // 0 means disabled
    message: "Maximum login attempts exceeded. Please try again later.",
});

const signupLimiter = new RateLimit({
    windowMs: 60*60*1000, // 60 minutes
    max: 3,
    delayMs: 0, // 0 means disabled
    message: "Maximum accounts created. Please try again later.",
})

app.use('/auth/login', loginLimiter);
app.use('/auth/signup', signupLimiter);

require('./config/database.js');
// Put API routes here, before the "catch all" route
app.use('/api', apiRoutes);
app.use('/auth', auth);
app.use('/ingredients', ingredientsRoutes)
app.use('/locked', expressJWT({secret: process.env.JWT_SECRET}).unless({method: 'POST'}), locked);

// The following "catch all" route (note the *)is necessary for a SPA's client-side routing to properly work
app.get('/*', (req, res) => {
    res.sendFile(path.join(__dirname, 'build', 'index.html'));
});

// Configure to use port 3000 during development to avoid collision with the React dev server (which is set to 8000)

var port = process.env.BACK_END_PORT || 3001;

var server = app.listen(port, () => {
    console.log(`Express app running on port ${port}`)
});

module.exports = server;