Third-party middleware usage in Node.js - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is third-party middleware in Node.js?

Third-party middleware is code created by others that you can add to your Node.js app to handle tasks like parsing data, logging, or security without writing it yourself.

beginner

How do you add third-party middleware to an Express app?

You first install the middleware package using npm, then require it in your code, and finally use app.use() to add it to your Express app.

beginner

Example: What does this code do?
<pre>const express = require('express');
const cors = require('cors');
const app = express();
app.use(cors());</pre>

This code adds the 'cors' middleware to the Express app, which allows the app to accept requests from different websites (cross-origin requests).

intermediate

Why use third-party middleware instead of writing your own?

Third-party middleware saves time, is tested by many users, and often handles complex tasks well, so you can focus on your app's unique features.

intermediate

What should you check before using a third-party middleware?

Check if it is well maintained, popular, secure, and fits your app's needs to avoid bugs or security issues.

What command installs a third-party middleware package in Node.js?

A install package-name

B node install package-name

C express add package-name

D npm install package-name

You use 'npm install package-name' to add third-party packages to your Node.js project.

Which Express method adds middleware to your app?

A app.use()

B app.add()

C app.middleware()

D app.insert()

app.use() is the standard method to add middleware functions in Express.

What does the 'cors' middleware help with?

A Allowing cross-origin requests

B Parsing JSON data

C Logging requests

D Handling file uploads

'cors' middleware enables your app to accept requests from other domains.

Why is it important to check a middleware's maintenance status?

A To change its license

B To make it run faster

C To ensure it is secure and updated

D To reduce file size

Well-maintained middleware is less likely to have bugs or security problems.

Which of these is NOT a common use of third-party middleware?

A Handling HTTP requests

B Managing database connections

C Parsing request bodies

D Logging request details

Managing database connections is usually handled by database libraries, not middleware.

Explain how to add and use a third-party middleware in a Node.js Express app.

Think about the steps from installation to usage in your app.

Describe the benefits and precautions when using third-party middleware.

Consider why you would trust or avoid a middleware package.

Practice

1. What is the main purpose of using third-party middleware in a Node.js Express app?

easy

A. To replace the Express framework completely

B. To add extra features without writing them from scratch

C. To write all server code manually

D. To make the app run without Node.js

Solution

1. Step 1: Understand middleware role

   Middleware adds features like logging or parsing to an app without extra coding.

2. Step 2: Compare options

   Only To add extra features without writing them from scratch correctly describes middleware's purpose; others are incorrect or unrelated.

3. Final Answer:

   To add extra features without writing them from scratch -> Option B

4. Quick Check:

   Middleware adds features [OK]

Hint: Middleware adds features without extra coding [OK]

Common Mistakes:

• Thinking middleware replaces Express
• Believing middleware runs without Node.js
• Confusing middleware with full app code

2. Which of the following is the correct way to add a third-party middleware called helmet to an Express app?

easy

A. use.app(helmet);

B. app.helmet();

C. helmet(app);

D. app.use(helmet());

Solution

1. Step 1: Recall Express middleware syntax

   Middleware is added using app.use() with the middleware function called.

2. Step 2: Check options

   Only app.use(helmet()); uses app.use(helmet()); correctly; others have wrong syntax.

3. Final Answer:

   app.use(helmet()); -> Option D

4. Quick Check:

   Middleware added with app.use() [OK]

Hint: Use app.use() with middleware function call [OK]

Common Mistakes:

• Forgetting parentheses after middleware name
• Using incorrect method names like app.helmet()
• Passing middleware without calling it

3. Given this code snippet, what will be the output when a GET request is made to '/'?

const express = require('express');
const morgan = require('morgan');
const app = express();
app.use(morgan('tiny'));
app.get('/', (req, res) => {
  res.send('Hello World');
});
app.listen(3000);

medium

A. Throws an error because morgan is not used correctly

B. Responds with 'Hello World' but no logs appear

C. Logs request details in console and responds with 'Hello World'

D. Server crashes on start

Solution

1. Step 1: Understand morgan middleware

   Morgan logs HTTP request info to the console when used with app.use().

2. Step 2: Analyze code behavior

   GET '/' triggers morgan logging and sends 'Hello World' response.

3. Final Answer:

   Logs request details in console and responds with 'Hello World' -> Option C

4. Quick Check:

   morgan logs + response sent [OK]

Hint: Morgan logs requests when used with app.use() [OK]

Common Mistakes:

• Assuming morgan changes response content
• Thinking morgan causes errors if used like this
• Ignoring middleware effect on logging

4. Identify the error in this code that tries to use the cors middleware:

const express = require('express');
const cors = require('cors');
const app = express();
app.use(cors);
app.get('/', (req, res) => res.send('OK'));
app.listen(3000);

medium

A. Missing parentheses when calling cors middleware

B. cors middleware is not installed

C. app.get() is missing a callback function

D. app.listen() is called without a port

Solution

1. Step 1: Check middleware usage

   Middleware must be called as a function: cors(), not just cors.

2. Step 2: Verify code

   Code uses app.use(cors); missing parentheses, causing error.

3. Final Answer:

   Missing parentheses when calling cors middleware -> Option A

4. Quick Check:

   Middleware must be called with () [OK]

Hint: Always call middleware as a function with () [OK]

Common Mistakes:

• Passing middleware reference without ()
• Assuming app.get() lacks callback
• Forgetting to specify port in listen

5. You want to add both helmet for security and express.json() for parsing JSON bodies in your Express app. Which code correctly adds both middlewares in the right order?

hard

A. app.use(helmet()); app.use(express.json());

B. app.use(express.json); app.use(helmet);

C. app.use(helmet); app.use(express.json);

D. app.use(express.json()); app.use(helmet());

Solution

1. Step 1: Understand middleware order importance

   Security middleware like helmet should run before body parsing for best protection.

2. Step 2: Check middleware calls

   Both must be called as functions with parentheses; options B and C miss these, A has them but wrong order.

3. Step 3: Confirm correct order and syntax

   app.use(helmet()); app.use(express.json()); calls helmet first, then express.json(), both correctly called.

4. Final Answer:

   app.use(helmet()); app.use(express.json()); -> Option A

5. Quick Check:

   Helmet before json, both called [OK]

Hint: Call middleware with () and order security before parsing [OK]

Common Mistakes:

• Not calling middleware as functions
• Placing parsing before security middleware
• Mixing up middleware order