81 lines
2.8 KiB
TypeScript
81 lines
2.8 KiB
TypeScript
import 'reflect-metadata';
|
|
import { NestFactory } from '@nestjs/core';
|
|
import { AppModule } from './app.module';
|
|
import { DocumentBuilder, SwaggerModule } from '@nestjs/swagger';
|
|
import { HttpExceptionFilter } from './common/filters/http-exception.filter';
|
|
import { TransformInterceptor } from './common/interceptors/transform.interceptor';
|
|
import { ValidationPipe } from '@nestjs/common';
|
|
import { ConfigService } from '@nestjs/config';
|
|
import cookieParser from 'cookie-parser';
|
|
import { DEV_JWT_SECRET, DEV_JWT_REFRESH_SECRET } from './config/configuration';
|
|
|
|
export type BackendRuntimeConfig = {
|
|
nodeEnv: string;
|
|
jwtSecret: string;
|
|
jwtRefreshSecret: string;
|
|
corsOrigins: string[];
|
|
};
|
|
|
|
export function assertSafeProductionConfig(config: BackendRuntimeConfig): void {
|
|
if (config.nodeEnv !== 'production') return;
|
|
|
|
if (!config.jwtSecret || config.jwtSecret === DEV_JWT_SECRET) {
|
|
throw new Error('JWT_SECRET must be set to a non-default value in production');
|
|
}
|
|
|
|
if (!config.jwtRefreshSecret || config.jwtRefreshSecret === DEV_JWT_REFRESH_SECRET) {
|
|
throw new Error('JWT_REFRESH_SECRET must be set to a non-default value in production');
|
|
}
|
|
|
|
if (config.corsOrigins.length === 0) {
|
|
throw new Error('BACKEND_CORS_ORIGINS must contain at least one origin in production');
|
|
}
|
|
}
|
|
|
|
export function buildCorsOrigin(nodeEnv: string, corsOrigins: string[]): boolean | string[] {
|
|
return nodeEnv === 'production' ? corsOrigins : true;
|
|
}
|
|
|
|
async function bootstrap() {
|
|
const app = await NestFactory.create(AppModule);
|
|
|
|
app.setGlobalPrefix('api/v1');
|
|
|
|
app.useGlobalPipes(new ValidationPipe({ transform: true, whitelist: true }));
|
|
app.useGlobalFilters(new HttpExceptionFilter());
|
|
app.useGlobalInterceptors(new TransformInterceptor());
|
|
app.use(cookieParser());
|
|
|
|
const configService = app.get(ConfigService);
|
|
const runtimeConfig: BackendRuntimeConfig = {
|
|
nodeEnv: process.env.NODE_ENV || 'development',
|
|
jwtSecret: configService.get<string>('app.auth.jwtSecret', ''),
|
|
jwtRefreshSecret: configService.get<string>('app.auth.jwtRefreshSecret', ''),
|
|
corsOrigins: configService.get<string[]>('app.cors.origins', []),
|
|
};
|
|
|
|
assertSafeProductionConfig(runtimeConfig);
|
|
|
|
app.enableCors({
|
|
origin: buildCorsOrigin(runtimeConfig.nodeEnv, runtimeConfig.corsOrigins),
|
|
credentials: true,
|
|
});
|
|
|
|
const config = new DocumentBuilder()
|
|
.setTitle('MoexVibe API')
|
|
.setVersion('1.0.0')
|
|
.addBearerAuth()
|
|
.build();
|
|
const document = SwaggerModule.createDocument(app, config);
|
|
SwaggerModule.setup('api/docs', app, document);
|
|
|
|
const port = process.env.PORT || 3000;
|
|
await app.listen(port);
|
|
console.log(`MoexVibe API running on http://localhost:${port}/api/v1`);
|
|
console.log(`Swagger docs: http://localhost:${port}/api/docs`);
|
|
}
|
|
|
|
if (process.env.NODE_ENV !== 'test') {
|
|
void bootstrap();
|
|
}
|