@@ -21,50 +21,17 @@ if (!DEVELOPMENT) {
2121}
2222
2323if ( DEVELOPMENT ) {
24- // Import development dependencies
25- const { env } = await import ( './app/lib/envValidation.js' ) ;
26- const { expressErrorHandler } = await import ( './app/lib/errorHandler.js' ) ;
27- const logger = ( await import ( './app/lib/logger.js' ) ) . default ;
28- const {
29- apiSecurity,
30- authSecurity,
31- formSecurity,
32- requestSizeLimit,
33- staticSecurity,
34- } = await import ( './app/lib/security.js' ) ;
24+ // In development, use Vite dev server
25+ console . log ( 'Starting development server with Vite...' ) ;
26+ const { createServer } = await import ( 'vite' ) ;
3527
36- // Trust proxy for accurate IP addresses
37- app . set ( 'trust proxy' , 1 ) ;
38-
39- // Security middleware
40- app . disable ( 'x-powered-by' ) ;
41- app . use ( compression ( ) ) ;
42- app . use ( requestSizeLimit ( '10MB' ) ) ;
43-
44- // Apply security middleware based on environment
45- if ( env . ENABLE_CORS ) {
46- app . use ( apiSecurity ) ;
47- }
48-
49- // Static file security
50- app . use ( staticSecurity ) ;
51-
52- // Request logging
53- app . use (
54- morgan ( 'combined' , {
55- stream : {
56- write : message => logger . info ( message . trim ( ) ) ,
57- } ,
58- } )
59- ) ;
28+ const viteDevServer = await createServer ( {
29+ server : { middlewareMode : true } ,
30+ } ) ;
6031
61- logger . info ( 'Starting development server' ) ;
62- const viteDevServer = await import ( 'vite' ) . then ( vite =>
63- vite . createServer ( {
64- server : { middlewareMode : true } ,
65- } )
66- ) ;
6732 app . use ( viteDevServer . middlewares ) ;
33+
34+ // Handle SSR
6835 app . use ( async ( req , res , next ) => {
6936 try {
7037 const source = await viteDevServer . ssrLoadModule ( './server/app.ts' ) ;
@@ -76,14 +43,6 @@ if (DEVELOPMENT) {
7643 next ( error ) ;
7744 }
7845 } ) ;
79-
80- // API routes with security middleware
81- app . use ( '/api' , apiSecurity ) ;
82- app . use ( '/api/auth' , authSecurity ) ;
83- app . use ( '/api/forms' , formSecurity ) ;
84-
85- // Global error handler (must be last)
86- app . use ( expressErrorHandler ) ;
8746} else {
8847 // In production, use the built server directly
8948 const builtServer = await import ( BUILD_PATH ) ;
0 commit comments