Helmet added (#34)

package-lock.json

@@ -13,6 +13,7 @@
         "cors": "^2.8.5",
         "express": "^4.18.1",
         "express-jwt": "^7.7.2",
+        "helmet": "^5.1.0",
         "joi": "^17.6.0",
         "jsonwebtoken": "^8.5.1",
         "mongodb": "^4.6.0",
@@ -1271,6 +1272,14 @@
         "node": ">=8"
       }
     },
+    "node_modules/helmet": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/helmet/-/helmet-5.1.0.tgz",
+      "integrity": "sha512-klsunXs8rgNSZoaUrNeuCiWUxyc+wzucnEnFejUg3/A+CaF589k9qepLZZ1Jehnzig7YbD4hEuscGXuBY3fq+g==",
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
     "node_modules/http-cache-semantics": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.1.0.tgz",
@@ -3949,6 +3958,11 @@
       "resolved": "https://registry.npmjs.org/has-yarn/-/has-yarn-2.1.0.tgz",
       "integrity": "sha512-UqBRqi4ju7T+TqGNdqAO0PaSVGsDGJUBQvk9eUWNGRY1CFGDzYhLWoM7JQEemnlvVcv/YEmc2wNW8BC24EnUsw=="
     },
+    "helmet": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/helmet/-/helmet-5.1.0.tgz",
+      "integrity": "sha512-klsunXs8rgNSZoaUrNeuCiWUxyc+wzucnEnFejUg3/A+CaF589k9qepLZZ1Jehnzig7YbD4hEuscGXuBY3fq+g=="
+    },
     "http-cache-semantics": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.1.0.tgz",

package.json

@@ -17,6 +17,7 @@
     "cors": "^2.8.5",
     "express": "^4.18.1",
     "express-jwt": "^7.7.2",
+    "helmet": "^5.1.0",
     "joi": "^17.6.0",
     "jsonwebtoken": "^8.5.1",
     "mongodb": "^4.6.0",

src/server.js

@@ -8,6 +8,7 @@ const tokenRouter = require('./routes/token')
 const swaggerJsDoc = require("swagger-jsdoc")
 const swaggerUi = require("swagger-ui-express")
 const cors = require('cors')
+const helmet = require('helmet')
 
 const swaggerOptions = {
     swaggerDefinition: {
@@ -24,6 +25,7 @@ app.use('/api-docs', swaggerUi.serve, swaggerUi.setup(swaggerDocs))
 
 app.use(express.json())
 app.use(cors())
+app.use(helmet())
 app.use(userRouter)
 app.use(tokenRouter)