pastel.codes/routes/contact.js

var express = require('express');
var rate_limit = require('express-rate-limit');
const { verify } = require('hcaptcha');
var router = express.Router();

const sgMail = require('@sendgrid/mail');
sgMail.setApiKey(process.env.SENDGRID_API_KEY);

const contact_rate_limit = rate_limit({
  windowMs: 10 * 60 * 1000, // 10 minutes
  max: 5, // limit each IP to 10 requests per windowMs
  message: 'Too many contact requests, try again later.',
  handler: function (req, res /*, next*/) {
    res.render('error', {
      title: 'Error',
      message: 'Too many contact requests, try again later.',
      error: { status: null },
    });
  },
});

// POST route from contact form
router.post('/', contact_rate_limit, (req, res) => {
  const TO_MAIL_USER = process.env.TO_MAIL_USER;
  const FROM_MAIL_USER = process.env.FROM_MAIL_USER;
  const HCAPTCHA_KEY = process.env.HCAPTCHA_KEY;
  const REPLY_TO_MAIL = process.env.REPLY_TO_MAIL;
  const token = req.body['g-recaptcha-response'];
  const ip = req.headers['x-forwarded-for'] || req.connection.remoteAddress;

  verify(HCAPTCHA_KEY, token)
    .then((data) => {
      if (data.success === true) {
        const msg = {
          to: TO_MAIL_USER,
          from: FROM_MAIL_USER,
          subject: 'New message from contact form at pastel.codes',
          text: `${req.body.firstname} ${req.body.lastname} (${req.body.email})\nsays: ${req.body.message}\n\nip: ${ip}`,
        };

        sgMail
          .send(msg)
          .then(() => {
            res.render('contact', {
              title: 'Contact',
              message: 'I will get back to you soon!',
              success: 'Make sure the email is from ',
              email: REPLY_TO_MAIL,
            });
          })
          .catch((error) => {
            console.log(error);
            res.render('error', {
              title: 'Contact',
              message: 'Email did not send',
            });
          });
      } else {
        // rerender with same info in the text box and show error message
        res.render('contact', {
          title: 'Contact',
          message: 'Captcha failed, try again',
        });
      }
    })
    .catch((error) => {
      console.log(error);
      res.render('contact', {
        title: 'Contact',
        message: 'Something wrong happened, try again later',
      });
    });
});

/* GET home page. */
router.get('/', function (req, res, _next) {
  res.render('contact', { title: 'Contact', description: 'Contact me!' });
});

module.exports = router;