You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
288 lines
10 KiB
JavaScript
288 lines
10 KiB
JavaScript
/*
|
|
globals require console
|
|
*/
|
|
var Express = require('express');
|
|
var Http = require('http');
|
|
var Fs = require('fs');
|
|
var WebSocketServer = require('ws').Server;
|
|
var NetfluxSrv = require('chainpad-server/NetfluxWebsocketSrv');
|
|
var Package = require('./package.json');
|
|
var Path = require("path");
|
|
var nThen = require("nthen");
|
|
|
|
var config = require("./lib/load-config");
|
|
|
|
// support multiple storage back ends
|
|
var Storage = require('./storage/file');
|
|
|
|
var app = Express();
|
|
|
|
// mode can be FRESH (default), DEV, or PACKAGE
|
|
|
|
var FRESH_KEY = '';
|
|
var FRESH_MODE = true;
|
|
var DEV_MODE = false;
|
|
if (process.env.PACKAGE) {
|
|
// `PACKAGE=1 node server` uses the version string from package.json as the cache string
|
|
console.log("PACKAGE MODE ENABLED");
|
|
FRESH_MODE = false;
|
|
DEV_MODE = false;
|
|
} else if (process.env.DEV) {
|
|
// `DEV=1 node server` will use a random cache string on every page reload
|
|
console.log("DEV MODE ENABLED");
|
|
FRESH_MODE = false;
|
|
DEV_MODE = true;
|
|
} else {
|
|
// `FRESH=1 node server` will set a random cache string when the server is launched
|
|
// and use it for the process lifetime or until it is reset from the admin panel
|
|
console.log("FRESH MODE ENABLED");
|
|
FRESH_KEY = +new Date();
|
|
}
|
|
|
|
config.flushCache = function () {
|
|
FRESH_KEY = +new Date();
|
|
if (!(DEV_MODE || FRESH_MODE)) { FRESH_MODE = true; }
|
|
if (!config.log) { return; }
|
|
config.log.info("UPDATING_FRESH_KEY", FRESH_KEY);
|
|
};
|
|
|
|
const clone = (x) => (JSON.parse(JSON.stringify(x)));
|
|
|
|
var setHeaders = (function () {
|
|
if (typeof(config.httpHeaders) !== 'object') { return function () {}; }
|
|
|
|
const headers = clone(config.httpHeaders);
|
|
if (config.contentSecurity) {
|
|
headers['Content-Security-Policy'] = clone(config.contentSecurity);
|
|
if (!/;$/.test(headers['Content-Security-Policy'])) { headers['Content-Security-Policy'] += ';' }
|
|
if (headers['Content-Security-Policy'].indexOf('frame-ancestors') === -1) {
|
|
// backward compat for those who do not merge the new version of the config
|
|
// when updating. This prevents endless spinner if someone clicks donate.
|
|
// It also fixes the cross-domain iframe.
|
|
headers['Content-Security-Policy'] += "frame-ancestors *;";
|
|
}
|
|
}
|
|
const padHeaders = clone(headers);
|
|
if (config.padContentSecurity) {
|
|
padHeaders['Content-Security-Policy'] = clone(config.padContentSecurity);
|
|
}
|
|
if (Object.keys(headers).length) {
|
|
return function (req, res) {
|
|
const h = [
|
|
/^\/pad(2)?\/inner\.html.*/,
|
|
/^\/common\/onlyoffice\/.*\/index\.html.*/,
|
|
/^\/sheet\/inner\.html.*/,
|
|
/^\/ooslide\/inner\.html.*/,
|
|
/^\/oodoc\/inner\.html.*/,
|
|
].some((regex) => {
|
|
return regex.test(req.url)
|
|
}) ? padHeaders : headers;
|
|
for (let header in h) { res.setHeader(header, h[header]); }
|
|
};
|
|
}
|
|
return function () {};
|
|
}());
|
|
|
|
(function () {
|
|
if (!config.logFeedback) { return; }
|
|
|
|
const logFeedback = function (url) {
|
|
url.replace(/\?(.*?)=/, function (all, fb) {
|
|
config.log.feedback(fb, '');
|
|
});
|
|
};
|
|
|
|
app.head(/^\/common\/feedback\.html/, function (req, res, next) {
|
|
logFeedback(req.url);
|
|
next();
|
|
});
|
|
}());
|
|
|
|
app.use(function (req, res, next) {
|
|
if (req.method === 'OPTIONS' && /\/blob\//.test(req.url)) {
|
|
res.setHeader('Access-Control-Allow-Origin', '*');
|
|
res.setHeader('Access-Control-Allow-Methods', 'GET, OPTIONS');
|
|
res.setHeader('Access-Control-Allow-Headers', 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range');
|
|
res.setHeader('Access-Control-Max-Age', 1728000);
|
|
res.setHeader('Content-Type', 'application/octet-stream; charset=utf-8');
|
|
res.setHeader('Content-Length', 0);
|
|
res.statusCode = 204;
|
|
return void res.end();
|
|
}
|
|
|
|
setHeaders(req, res);
|
|
if (/[\?\&]ver=[^\/]+$/.test(req.url)) { res.setHeader("Cache-Control", "max-age=31536000"); }
|
|
next();
|
|
});
|
|
|
|
app.use(Express.static(__dirname + '/www'));
|
|
|
|
Fs.exists(__dirname + "/customize", function (e) {
|
|
if (e) { return; }
|
|
console.log("Cryptpad is customizable, see customize.dist/readme.md for details");
|
|
});
|
|
|
|
// FIXME I think this is a regression caused by a recent PR
|
|
// correct this hack without breaking the contributor's intended behaviour.
|
|
|
|
var mainPages = config.mainPages || ['index', 'privacy', 'terms', 'about', 'contact'];
|
|
var mainPagePattern = new RegExp('^\/(' + mainPages.join('|') + ').html$');
|
|
app.get(mainPagePattern, Express.static(__dirname + '/customize'));
|
|
app.get(mainPagePattern, Express.static(__dirname + '/customize.dist'));
|
|
|
|
app.use("/blob", Express.static(Path.join(__dirname, (config.blobPath || './blob')), {
|
|
maxAge: DEV_MODE? "0d": "365d"
|
|
}));
|
|
app.use("/datastore", Express.static(Path.join(__dirname, (config.filePath || './datastore')), {
|
|
maxAge: "0d"
|
|
}));
|
|
app.use("/block", Express.static(Path.join(__dirname, (config.blockPath || '/block')), {
|
|
maxAge: "0d",
|
|
}));
|
|
|
|
app.use("/customize", Express.static(__dirname + '/customize'));
|
|
app.use("/customize", Express.static(__dirname + '/customize.dist'));
|
|
app.use("/customize.dist", Express.static(__dirname + '/customize.dist'));
|
|
app.use(/^\/[^\/]*$/, Express.static('customize'));
|
|
app.use(/^\/[^\/]*$/, Express.static('customize.dist'));
|
|
|
|
var admins = [];
|
|
try {
|
|
admins = (config.adminKeys || []).map(function (k) {
|
|
k = k.replace(/\/+$/, '');
|
|
var s = k.split('/');
|
|
return s[s.length-1].replace(/-/g, '/');
|
|
});
|
|
} catch (e) { console.error("Can't parse admin keys"); }
|
|
|
|
// TODO, cache this /api/config responses instead of re-computing it each time
|
|
app.get('/api/config', function(req, res){
|
|
// TODO precompute any data that isn't dynamic to save some CPU time
|
|
var host = req.headers.host.replace(/\:[0-9]+/, '');
|
|
res.setHeader('Content-Type', 'text/javascript');
|
|
res.send('define(function(){\n' + [
|
|
'var obj = ' + JSON.stringify({
|
|
requireConf: {
|
|
waitSeconds: 600,
|
|
urlArgs: 'ver=' + Package.version + (FRESH_KEY? '-' + FRESH_KEY: '') + (DEV_MODE? '-' + (+new Date()): ''),
|
|
},
|
|
removeDonateButton: (config.removeDonateButton === true),
|
|
allowSubscriptions: (config.allowSubscriptions === true),
|
|
websocketPath: config.externalWebsocketURL,
|
|
httpUnsafeOrigin: config.httpUnsafeOrigin.replace(/^\s*/, ''),
|
|
adminEmail: config.adminEmail,
|
|
adminKeys: admins,
|
|
inactiveTime: config.inactiveTime,
|
|
supportMailbox: config.supportMailboxPublicKey
|
|
}, null, '\t'),
|
|
'obj.httpSafeOrigin = ' + (function () {
|
|
if (config.httpSafeOrigin) { return '"' + config.httpSafeOrigin + '"'; }
|
|
if (config.httpSafePort) {
|
|
return "(function () { return window.location.origin.replace(/\:[0-9]+$/, ':" +
|
|
config.httpSafePort + "'); }())";
|
|
}
|
|
return 'window.location.origin';
|
|
}()),
|
|
'return obj',
|
|
'});'
|
|
].join(';\n'));
|
|
});
|
|
|
|
var four04_path = Path.resolve(__dirname + '/customize.dist/404.html');
|
|
var custom_four04_path = Path.resolve(__dirname + '/customize/404.html');
|
|
|
|
var send404 = function (res, path) {
|
|
if (!path && path !== four04_path) { path = four04_path; }
|
|
Fs.exists(path, function (exists) {
|
|
res.setHeader('Content-Type', 'text/html; charset=utf-8');
|
|
if (exists) { return Fs.createReadStream(path).pipe(res); }
|
|
send404(res);
|
|
});
|
|
};
|
|
|
|
app.use(function (req, res, next) {
|
|
res.status(404);
|
|
send404(res, custom_four04_path);
|
|
});
|
|
|
|
var httpServer = Http.createServer(app);
|
|
|
|
httpServer.listen(config.httpPort,config.httpAddress,function(){
|
|
var host = config.httpAddress;
|
|
var hostName = !host.indexOf(':') ? '[' + host + ']' : host;
|
|
|
|
var port = config.httpPort;
|
|
var ps = port === 80? '': ':' + port;
|
|
|
|
console.log('[%s] server available http://%s%s', new Date().toISOString(), hostName, ps);
|
|
});
|
|
if (config.httpSafePort) {
|
|
Http.createServer(app).listen(config.httpSafePort, config.httpAddress);
|
|
}
|
|
|
|
var wsConfig = { server: httpServer };
|
|
|
|
var rpc;
|
|
var historyKeeper;
|
|
|
|
var log;
|
|
|
|
// Initialize logging, the the store, then tasks, then rpc, then history keeper and then start the server
|
|
var nt = nThen(function (w) {
|
|
// set up logger
|
|
var Logger = require("./lib/log");
|
|
//console.log("Loading logging module");
|
|
Logger.create(config, w(function (_log) {
|
|
log = config.log = _log;
|
|
}));
|
|
}).nThen(function (w) {
|
|
if (config.externalWebsocketURL) {
|
|
// if you plan to use an external websocket server
|
|
// then you don't need to load any API services other than the logger.
|
|
// Just abort.
|
|
w.abort();
|
|
return;
|
|
}
|
|
Storage.create(config, w(function (_store) {
|
|
config.store = _store;
|
|
}));
|
|
}).nThen(function (w) {
|
|
var Tasks = require("./storage/tasks");
|
|
Tasks.create(config, w(function (e, tasks) {
|
|
if (e) {
|
|
throw e;
|
|
}
|
|
config.tasks = tasks;
|
|
if (config.disableIntegratedTasks) { return; }
|
|
setInterval(function () {
|
|
tasks.runAll(function (err) {
|
|
if (err) {
|
|
// either TASK_CONCURRENCY or an error with tasks.list
|
|
// in either case it is already logged.
|
|
}
|
|
});
|
|
}, 1000 * 60 * 5); // run every five minutes
|
|
}));
|
|
}).nThen(function (w) {
|
|
require("./lib/rpc").create(config, w(function (e, _rpc) {
|
|
if (e) {
|
|
w.abort();
|
|
throw e;
|
|
}
|
|
rpc = _rpc;
|
|
}));
|
|
}).nThen(function () {
|
|
var HK = require('./lib/historyKeeper.js');
|
|
var hkConfig = {
|
|
tasks: config.tasks,
|
|
rpc: rpc,
|
|
store: config.store,
|
|
log: log,
|
|
retainData: Boolean(config.retainData),
|
|
};
|
|
historyKeeper = HK.create(hkConfig);
|
|
}).nThen(function () {
|
|
var wsSrv = new WebSocketServer(wsConfig);
|
|
NetfluxSrv.run(wsSrv, config, historyKeeper);
|
|
});
|