Node.js Express server

server.js

const express = require('express')
const cors = require('cors')
const bodyParser = require('body-parser');
const app = express()

app.use(cors())
app.use(express.json())
app.use(bodyParser.json())
app.use(function (req, res, next) {
    res.header("Access-Control-Allow-Origin", "*") // update to match the domain you will make the request from
    res.header('Access-Control-Allow-Methods', 'GET, POST, OPTIONS, PUT, PATCH, DELETE') // If needed
    res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept")
    res.header('Access-Control-Allow-Credentials', true)
    next()
});
app.use('/protected/', require('./routes/index'))

app.listen('5000', () => console.log('Server started and listening on PORT 5000'))