forked from sumory/sumorio
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathapp.js
More file actions
61 lines (52 loc) · 1.81 KB
/
Copy pathapp.js
File metadata and controls
61 lines (52 loc) · 1.81 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
var express = require('express');
var route = require('./route.js');
var config = require('./config.js').config;
var app = express.createServer();
var static_dir = __dirname + '/public';
app.configure(function() {
app.set('view engine', 'html');
app.set('views', __dirname + '/view');
app.register('.html', require('ejs'));
app.use(express.bodyParser({
uploadDir : config.tmp_upload_path//express的临时上传路径
}));
app.use(express.cookieParser());
app.use(express.session({
secret : config.session_secret,
}));
app.use(require('./controller/sign.js').auth_user);// custom middleware
var csrf = express.csrf();
app.use(function(req, res, next) {
if (req.body && req.method.toLowerCase() === 'post')// 一些ajax的post操作未加csrf,所以这里先放过
return next();
if (req.body && req.body.user_action === 'upload_image')// 含有name=‘user_action' value='upload_image'的请求放过
return next();
csrf(req, res, next);
});
});
app.helpers({
config : config
});
app.dynamicHelpers({
csrf : function(req, res) {
return req.session ? req.session._csrf : '';
}
});
app.configure('development', function() {
app.use(express.static(static_dir));
app.use(express.errorHandler({
dumpExceptions : true,
showStack : true
}));
});
app.configure('production', function() {
var one_year = 1000 * 60 * 60 * 24 * 30;
app.use(express.static(static_dir, {
maxAge : one_year
}));
app.use(express.errorHandler());
app.set('view cache', true);
});
route(app);// route
app.listen(config.app_port);
console.log("Sumorio is listening on port %d in %s mode", app.address().port, app.settings.env);