Merge pull request #243 from samyak-aditya/sam_backend

Add Helmet Middleware for Enhanced Security in the Backend

server/index.js

@@ -2,13 +2,15 @@ const express = require("express");
 const { Server } = require("socket.io");
 const connectToMongo = require("./db");
 const cors = require("cors");
+const helmet = require("helmet");
 const Avatar = require("./Models/Avatar");
 require('dotenv').config(); // Load environment variables from .env file
 
 // Connect to MongoDB
 connectToMongo();
 
-const app = express(); 
+const app = express();
+
 const httpServer = require("http").createServer(app);
 const io = new Server(httpServer, {
   cors: {
@@ -35,6 +37,7 @@ app.use(cors({
 
 // Middleware to parse JSON requests
 app.use(express.json());
+app.use(helmet());  
 
 // Available routes
 app.use("/api/auth", require("./routes/auth"));

server/package.json

@@ -26,6 +26,7 @@
     "express-validator": "^7.0.1",
     "firebase": "^10.10.0",
     "google-auth-library": "^9.7.0",
+    "helmet": "^8.0.0",
     "jotai": "^2.10.0",
     "jsonwebtoken": "^9.0.2",
     "mongodb": "^6.10.0",
@@ -38,4 +39,4 @@
   "devDependencies": {
     "nodemon": "^3.1.7"
   }
-}
+}