psp_api/src/main.ts

import { VersioningType } from '@nestjs/common'
import { NestFactory, Reflector } from '@nestjs/core'
import { JwtService } from '@nestjs/jwt'
import { DocumentBuilder, SwaggerModule } from '@nestjs/swagger'
import { AppModule } from './app.module'
import { PrismaExceptionFilter } from './common/filters/prisma-exception.filter'
import { ValidationExceptionFilter } from './common/filters/validation-exception.filter'
import { JwtAuthGuard } from './common/guards/jwt-auth.guard'
import { PosGuard } from './common/guards/pos.gaurd'
import { LoggingInterceptor } from './common/interceptors/logging.interceptor'
import { ResponseMappingInterceptor } from './common/interceptors/response-mapping.interceptor'
import { PrismaService } from './prisma/prisma.service'
const cookieParser = require('cookie-parser')

async function bootstrap() {
  const app = await NestFactory.create(AppModule)

  app.use(cookieParser())

  const config = new DocumentBuilder()
    .setTitle('Pos')
    .setDescription('The Pos API description')
    .setVersion('1.0')
    .addTag('pos')
    .addBearerAuth({
      type: 'http',
      scheme: 'bearer',
      bearerFormat: 'JWT',
      name: 'Authorization',
      description: 'Enter JWT token',
      in: 'header',
    })
    .build()
  const documentFactory = () => SwaggerModule.createDocument(app, config)
  SwaggerModule.setup('swagger', app, documentFactory, {
    swaggerOptions: {
      persistAuthorization: true,
      requestInterceptor: req => {
        const _tokenStorage = localStorage.getItem('authorized')
        if (_tokenStorage) {
          const tokenStorage = JSON.parse(_tokenStorage)
          req.headers['Authorization'] = `Bearer ${tokenStorage?.bearer?.value}`
        }
        return req
      },
    },
  })

  // Set API prefix and enable URI versioning so alls routes live under /api/v1/*
  app.setGlobalPrefix('api')
  app.enableVersioning({
    type: VersioningType.URI,
    defaultVersion: '1',
  })

  // Enable CORS. You can set `CORS_ORIGINS` to a comma-separated list of allowed origins.
  // Defaults include common localhost origins used by front-end dev servers.
  const defaultOrigins = ['http://localhost:5000', 'http://127.0.0.1:5000']
  const envOrigins = process.env.CORS_ORIGINS
    ? process.env.CORS_ORIGINS.split(',')
        .map(s => s.trim())
        .filter(Boolean)
    : []
  const allowedOrigins = (envOrigins.length ? envOrigins : defaultOrigins).filter(
    origin => origin !== '*',
  )
  app.enableCors({
    origin: allowedOrigins,
    credentials: true,
    methods: 'GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS',
    allowedHeaders:
      'Content-Type, Accept, Authorization, X-Requested-With, X-CSRF-Token, pos_id',
  })

  // Register global logging and response mapping interceptors
  app.useGlobalInterceptors(new LoggingInterceptor(), new ResponseMappingInterceptor())

  // Enable request validation and transformation globally
  // app.useGlobalPipes(new ValidationPipe({ whitelist: true, transform: true }))

  // Register global exception filters: validation errors and Prisma errors
  app.useGlobalFilters(new ValidationExceptionFilter(), new PrismaExceptionFilter())

  app.useGlobalGuards(new JwtAuthGuard(app.get(JwtService), app.get(Reflector)))
  app.useGlobalGuards(
    new PosGuard(app.get(JwtService), app.get(Reflector), app.get(PrismaService)),
  )

  await app.listen(process.env.PORT ?? 5002)
}
bootstrap()