const express = require('express');
const compression = require('compression');

express()
  .use(compression())
  .use(express.static(`build/dist`))
  .get('/', (req, res) => res.send('Hello World!'))
  .get('/users/:userName', (req, res) => res.send(`Hello ${req.params.userName}!`))
  .listen(8085);Copy

const nocache = (res) => {
  res.setHeader('Cache-Control', 'private, no-cache, no-store, must-revalidate');
  res.setHeader('Expires', '-1');
  res.setHeader('Pragma', 'no-cache');
};

const CACHE_MIDDLEWARE = (res, path) => {
  switch(serveStatic.mime.lookup(path)){
    case 'application/xhtml+xml':
    case 'text/html':
      nocache(res);
      break;

    case 'text/javascript':
    case 'application/x-javascript':
    case 'application/javascript':
      if(path.indexOf('sw.js') >= 0){
        nocache(res);
      }
      else{
        res.setHeader('Cache-Control', 'private, max-age=14400');
      }
      break;

    case 'text/css':
      if(process.env.NODE_ENV === 'prod'){
        res.setHeader('Cache-Control', 'private, max-age=14400');
      }
      else{
        nocache(res);
      }
      break;

    case 'image/gif':
    case 'image/jpg':
    case 'image/jpeg':
    case 'image/png':
    case 'image/tiff':
    case 'image/svg+xml':
    case 'image/webp':
    case 'image/vnd.microsoft.icon':
    case 'image/icon':
    case 'image/ico':
    case 'image/x-ico':
      res.setHeader('Cache-Control', 'public, max-age=691200');
      break;

    default:
  }
};Copy

.use(express.static(`build/dist`, {setHeaders: CACHE_MIDDLEWARE}))Copy

const express = require('express');
const helmet = require('helmet');

const SECURITY_POLICY = {
  directives: {
    defaultSrc: ["'self'"],
    // We have to authorize inline CSS used to improve firstload
    styleSrc: ["'unsafe-inline'", "'self'"],
    // We have to authorize data:... for SVG images
    imgSrc: ["'self'", 'data:', 'https:'],
    // We have to authorize inline script used to load our JS app
    scriptSrc: ["'self'", "'unsafe-inline'", 'https://www.google-analytics.com/analytics.js',
      "https://storage.googleapis.com/workbox-cdn/*",
      "https://storage.googleapis.com/workbox-cdn/releases/3.6.3/workbox-core.prod.js"]
  }
};

express()
  .use(helmet())
  .use(helmet.contentSecurityPolicy(SECURITY_POLICY))
  // Reste de la config
  .listen(8085);Copy

const express = require('express');
const session = require('express-session');

const app = express()
  .enable('trust proxy')
  .use(session({
      secret: 'zezaeazezaeza',
      // A session life is 3h
      duration: 3 * 60 * 60 * 1000,
      // We don't authorize a session resave
      resave: false,
      saveUninitialized: true,
      // Secured cookies are only set in production
      cookie: {
        secure: process.env.NODE_ENV === 'prod',
        maxAge: 60 * 60 * 1000,
        sameSite: true
      },
      // User by default is empty
      user: {}
    })
  // Reste de la config
  .listen(8085);Copy

const express = require('express');

const app = express()
  .enable('trust proxy')
  // Reorientation pour ceux qui ne font pas de HTTPS
  .use((req, res, next) => {
         const httpInForwardedProto = req.headers && req.headers['x-forwarded-proto'] && req.headers['x-forwarded-proto'] === 'http';
         const httpInReferer = req.headers && req.headers.referer && req.headers.referer.indexOf('http://') >=0;
         const isHtmlPage = req.url.indexOf(".html") >= 0;

         if((isHtmlPage || req.url === '/')  && (httpInForwardedProto || httpInReferer)){
           console.log('User is not in HTTP, he is redirected');
           res.redirect('https://dev-mind.fr' + req.url);
         }
         else{
           next();
         }
     })
  // Paramétrage CORS
  use((req, res, next) => {
          res.header('Access-Control-Allow-Origin', '*');
          res.header('Access-Control-Allow-Headers', 'Origin, X-Requested-With, Content-Type, Accept');
          next();
        })
  // Reste de la config
  // En dernier on dit que pour toutes les autres requêtes on ouvre une page 404
  .all('*', (req, res) => res.redirect(`/404.html`));
  .listen(8085);Copy