feat: add request logging middleware and enhance logging configuration; update environment variable requirements

Author: adityavermaa-dev

logs/combined.log

@@ -4,3 +4,5 @@
 {"level":"info","message":"Database connection successful","timestamp":"2026-03-26T14:00:37.010Z"}
 {"level":"info","message":"Server listens","port":"9999","timestamp":"2026-03-26T14:00:37.014Z"}
 {"level":"warn","message":"Unauthorized","method":"GET","path":"/messages/does-not-exist","statusCode":401,"timestamp":"2026-03-26T14:01:11.022Z"}
+{"level":"info","message":"Database connection successful","timestamp":"2026-03-26T14:14:34.117Z"}
+{"level":"info","message":"Server listens","port":"9999","timestamp":"2026-03-26T14:14:34.121Z"}

src/app.js

@@ -11,6 +11,7 @@ const config = require("./config/index")
 const errorHandler = require("./middlewares/errorMiddleware")
 const AppError = require("./utils/AppError")
 const logger = require("./utils/logger")
+const requestLogger = require("./middlewares/requestLogger")
 
 const allowedOrigins = [
     "http://localhost:5173",
@@ -29,7 +30,6 @@ const limiter = rateLimit({
 
 app.use(express.json({ limit: '100mb' }))
 app.use(express.urlencoded({ limit: '100mb', extended: true }))
-app.use(express.raw({ limit: '100mb' }))
 app.use(cookieParser())
 
 
@@ -44,6 +44,8 @@ app.use(cors({
     credentials: true
 }))
 
+app.use(requestLogger);
+
 initializeSocket(server);
 
 const connectDb = require("./database/connection")

src/costants.js src/config/costants.jssrc/costants.js renamed to src/config/costants.js

@@ -17,6 +17,7 @@ const requiredEnv = [
     "CLOUDINARY_API_SECRET",
     "RAZORPAY_KEYID",
     "RAZORPAY_KEY_SECRET",
+    "RAZORPAY_WEBHOOK_SECRET",
     "SMTP_HOST",
     "SMTP_PORT",
     "SMTP_USER",

src/config/index.js

@@ -0,0 +1,45 @@
+const logger = require("../utils/logger");
+
+const requestLogger = (req, res, next) => {
+    const startMs = Date.now();
+
+    // Avoid noisy logs for preflight requests unless debugging
+    const shouldLog = req.method !== "OPTIONS";
+
+    res.on("finish", () => {
+        if (!shouldLog) return;
+
+        const durationMs = Date.now() - startMs;
+        const statusCode = res.statusCode;
+
+        // Prefer forwarded-for if present (behind proxies/load balancers)
+        const forwardedFor = req.headers["x-forwarded-for"];
+        const ip = Array.isArray(forwardedFor)
+            ? forwardedFor[0]
+            : (forwardedFor ? String(forwardedFor).split(",")[0].trim() : req.ip);
+
+        const meta = {
+            method: req.method,
+            path: req.originalUrl,
+            statusCode,
+            durationMs,
+            ip,
+        };
+
+        // If auth middleware has populated req.user, include it
+        if (req.user?._id) {
+            meta.userId = String(req.user._id);
+        }
+
+        // Keep request logging minimal; detailed error logging happens in error middleware
+        if (statusCode >= 400) {
+            logger.debug("Request completed", meta);
+        } else {
+            logger.info("Request completed", meta);
+        }
+    });
+
+    next();
+};
+
+module.exports = requestLogger;

src/middlewares/requestLogger.js

@@ -2,7 +2,7 @@ const express = require("express");
 const { userAuth } = require("../middlewares/auth");
 const instance = require("../integrations/razorpay");
 const paymentRouter = express.Router();
-const membershipType = require("../costants");
+const membershipType = require("../config/costants");
 const Payment = require("../models/Payment");
 const {validateWebhookSignature} = require("razorpay/dist/utils/razorpay-utils");
 const User = require("../models/user");

src/routes/payment.js

@@ -1,13 +1,14 @@
 const fs = require("fs");
 const path = require("path");
 const { createLogger, format, transports } = require("winston");
+const config = require("../config/index")
 
 const logsDir = path.resolve(process.cwd(), "logs");
 if (!fs.existsSync(logsDir)) {
     fs.mkdirSync(logsDir, { recursive: true });
 }
 
-const nodeEnv = process.env.NODE_ENV || "development";
+const nodeEnv = config.deployment.nodeEnv || "development";
 
 const logger = createLogger({
     level: nodeEnv === "development" ? "debug" : "info",