@jesec/flood 0.0.0-master.4b23b16 → 0.0.0-master.4b36bdb

package/server/routes/auth.js

@@ -1,213 +0,0 @@
-const express = require('express');
-const joi = require('joi');
-const jwt = require('jsonwebtoken');
-const passport = require('passport');
-const ajaxUtil = require('../util/ajaxUtil');
-
-const requireAdmin = require('../middleware/requireAdmin');
-const config = require('../../config');
-
-const router = express.Router();
-const services = require('../services');
-const Users = require('../models/Users');
-
-const failedLoginResponse = 'Failed login.';
-
-const setAuthToken = (res, username, isAdmin) => {
-  const expirationSeconds = 60 * 60 * 24 * 7; // one week
-  const cookieExpiration = Date.now() + expirationSeconds * 1000;
-
-  // Create token if the password matched and no error was thrown.
-  const token = jwt.sign({username}, config.secret, {
-    expiresIn: expirationSeconds,
-  });
-
-  res.cookie('jwt', token, {expires: new Date(cookieExpiration), httpOnly: true, sameSite: 'Strict'});
-
-  return res.json({
-    success: true,
-    token: `JWT ${token}`,
-    username,
-    isAdmin,
-  });
-};
-
-const authValidation = joi.object().keys({
-  username: joi.string(),
-  password: joi.string(),
-  host: joi.string(),
-  port: joi.string(),
-  socketPath: joi.string(),
-  isAdmin: joi.bool(),
-});
-
-router.use('/', (req, res, next) => {
-  const validation = authValidation.validate(req.body);
-
-  if (!validation.error) {
-    next();
-  } else {
-    res.status(422).json({
-      message: 'Validation error.',
-      error: validation.error,
-    });
-  }
-});
-
-router.use('/users', passport.authenticate('jwt', {session: false}), requireAdmin);
-
-router.post('/authenticate', (req, res) => {
-  if (config.disableUsersAndAuth) {
-    return setAuthToken(res, Users.getConfigUser()._id, true);
-  }
-  const credentials = {
-    password: req.body.password,
-    username: req.body.username,
-  };
-
-  Users.comparePassword(credentials, (isMatch, isAdmin, err) => {
-    if (isMatch != null && !err) {
-      return setAuthToken(res, credentials.username, isAdmin);
-    }
-
-    // Incorrect username or password.
-    return res.status(401).json({
-      message: failedLoginResponse,
-    });
-  });
-});
-
-// Allow unauthenticated registration if no users are currently registered.
-router.use('/register', (req, res, next) => {
-  Users.initialUserGate({
-    handleInitialUser: () => {
-      next();
-    },
-    handleSubsequentUser: () => {
-      passport.authenticate('jwt', {session: false}, (passportReq, passportRes) => {
-        passportRes.json({username: req.username});
-      });
-    },
-  });
-});
-
-router.post('/register', (req, res) => {
-  // No user can be registered when disableUsersAndAuth is true
-  if (config.disableUsersAndAuth) {
-    // Return 404
-    res.status(404).send('Not found');
-    return;
-  }
-  // Attempt to save the user
-  Users.createUser(
-    {
-      username: req.body.username,
-      password: req.body.password,
-      host: req.body.host,
-      port: req.body.port,
-      socketPath: req.body.socketPath,
-      isAdmin: true,
-    },
-    (createUserResponse, createUserError) => {
-      if (createUserError) {
-        ajaxUtil.getResponseFn(res)(createUserResponse, createUserError);
-        return;
-      }
-
-      setAuthToken(res, req.body.username, true);
-    },
-  );
-});
-
-// Allow unauthenticated verification if no users are currently registered.
-router.use('/verify', (req, res, next) => {
-  if (config.disableUsersAndAuth) {
-    return setAuthToken(res, Users.getConfigUser()._id, true);
-  }
-  Users.initialUserGate({
-    handleInitialUser: () => {
-      req.initialUser = true;
-      next();
-    },
-    handleSubsequentUser: () => {
-      req.initialUser = false;
-      passport.authenticate('jwt', {session: false})(req, res, next);
-    },
-  });
-});
-
-router.get('/verify', (req, res) => {
-  res.json({
-    initialUser: req.initialUser,
-    username: req.user && req.user.username,
-    isAdmin: req.user && req.user.isAdmin,
-  });
-});
-
-// All subsequent routes are protected.
-router.use('/', passport.authenticate('jwt', {session: false}));
-
-router.get('/logout', (req, res) => {
-  res.clearCookie('jwt').send();
-});
-
-router.use('/users', (req, res, next) => {
-  // No operation on user when disableUsersAndAuth is true
-  if (config.disableUsersAndAuth) {
-    // Return 404
-    res.status(404).send('Not found');
-    return;
-  }
-
-  if (req.user && req.user.isAdmin) {
-    next();
-    return;
-  }
-
-  res.status(401).send('Not authorized');
-});
-
-router.get('/users', (req, res) => {
-  Users.listUsers(ajaxUtil.getResponseFn(res));
-});
-
-router.delete('/users/:username', (req, res) => {
-  Users.removeUser(req.params.username, ajaxUtil.getResponseFn(res));
-  services.destroyUserServices(req.user);
-});
-
-router.patch('/users/:username', (req, res) => {
-  const {username} = req.params;
-  const userPatch = req.body;
-
-  if (!userPatch.socketPath) {
-    userPatch.socketPath = null;
-  } else {
-    userPatch.host = null;
-    userPatch.port = null;
-  }
-
-  Users.updateUser(username, userPatch, () => {
-    Users.lookupUser({username}, (err, user) => {
-      if (err) return req.status(500).json({error: err});
-      services.updateUserServices(user);
-      res.send();
-    });
-  });
-});
-
-router.put('/users', (req, res) => {
-  Users.createUser(
-    {
-      username: req.body.username,
-      password: req.body.password,
-      host: req.body.host,
-      port: req.body.port,
-      socketPath: req.body.socketPath,
-      isAdmin: req.body.isAdmin,
-    },
-    ajaxUtil.getResponseFn(res),
-  );
-});
-
-module.exports = router;

package/server/routes/client.js

@@ -1,120 +0,0 @@
-const express = require('express');
-const multer = require('multer');
-
-const ajaxUtil = require('../util/ajaxUtil');
-const booleanCoerce = require('../middleware/booleanCoerce');
-const client = require('../models/client');
-
-const router = express.Router();
-
-const upload = multer({
-  dest: 'uploads/',
-  limits: {fileSize: 10000000},
-  storage: multer.memoryStorage(),
-});
-
-router.get('/connection-test', (req, res) => {
-  req.services.clientGatewayService
-    .testGateway()
-    .then(() => {
-      res.status(200).json({isConnected: true});
-    })
-    .catch(() => {
-      res.status(500).json({isConnected: false});
-    });
-});
-
-router.post('/connection-test', (req, res) => {
-  req.services.clientGatewayService
-    .testGateway(req.body)
-    .then(() => {
-      res.status(200).json({isConnected: true});
-    })
-    .catch(() => {
-      res.status(500).json({isConnected: false});
-    });
-});
-
-router.post('/add', (req, res) => {
-  client.addUrls(req.user, req.services, req.body, ajaxUtil.getResponseFn(res));
-});
-
-router.post('/add-files', upload.array('torrents'), booleanCoerce('isBasePath'), (req, res) => {
-  client.addFiles(req.user, req.services, req, ajaxUtil.getResponseFn(res));
-});
-
-router.get('/settings', (req, res) => {
-  client.getSettings(req.user, req.services, req.query, ajaxUtil.getResponseFn(res));
-});
-
-router.patch('/settings', (req, res) => {
-  client.setSettings(req.user, req.services, req.body, ajaxUtil.getResponseFn(res));
-});
-
-router.put('/settings/speed-limits', (req, res) => {
-  client.setSpeedLimits(req.user, req.services, req.body, ajaxUtil.getResponseFn(res));
-});
-
-router.post('/start', (req, res) => {
-  client.startTorrent(req.user, req.services, req.body.hashes, ajaxUtil.getResponseFn(res));
-});
-
-router.post('/stop', (req, res) => {
-  client.stopTorrent(req.user, req.services, req.body.hashes, ajaxUtil.getResponseFn(res));
-});
-
-router.post('/torrent-details', (req, res) => {
-  client.getTorrentDetails(req.user, req.services, req.body.hash, ajaxUtil.getResponseFn(res));
-});
-
-router.patch('/torrents/:hash/priority', (req, res) => {
-  client.setPriority(req.user, req.services, req.params.hash, req.body, ajaxUtil.getResponseFn(res));
-});
-
-router.patch('/torrents/:hash/file-priority', (req, res) => {
-  client.setFilePriority(req.user, req.services, req.params.hash, req.body, ajaxUtil.getResponseFn(res));
-});
-
-router.post('/torrents/check-hash', (req, res) => {
-  client.checkHash(req.user, req.services, req.body.hash, ajaxUtil.getResponseFn(res));
-});
-
-router.post('/torrents/move', (req, res) => {
-  client.moveTorrents(req.user, req.services, req.body, ajaxUtil.getResponseFn(res));
-});
-
-router.post('/torrents/delete', (req, res) => {
-  const {deleteData, hash: hashes} = req.body;
-  const callback = ajaxUtil.getResponseFn(res);
-
-  req.services.clientGatewayService
-    .removeTorrents({hashes, deleteData})
-    .then(callback)
-    .catch((err) => {
-      callback(null, err);
-    });
-});
-
-router.patch('/torrents/taxonomy', (req, res) => {
-  client.setTaxonomy(req.user, req.services, req.body, ajaxUtil.getResponseFn(res));
-});
-
-router.patch('/torrents/tracker', (req, res) => {
-  client.setTracker(req.user, req.services, req.body, ajaxUtil.getResponseFn(res));
-});
-
-router.get('/methods.json', (req, res) => {
-  const {type} = req.query;
-  const {args} = req.query;
-  let method = 'system.listMethods';
-
-  if (type === 'help') {
-    method = 'system.methodHelp';
-  } else if (type === 'signature') {
-    method = 'system.methodSignature';
-  }
-
-  client.listMethods(req.user, req.services, method, args, ajaxUtil.getResponseFn(res));
-});
-
-module.exports = router;

package/server/services/BaseService.js

@@ -1,22 +0,0 @@
-const EventEmitter = require('events');
-
-class BaseService extends EventEmitter {
-  constructor(user, services, ...eventEmitterConfig) {
-    super(...eventEmitterConfig);
-    if (!user || !user._id) throw new Error('Missing user ID');
-    this.user = user;
-    this.services = services;
-  }
-
-  destroy() {
-    delete this.services;
-    delete this.user;
-  }
-
-  updateUser(user, services) {
-    this.user = user;
-    this.services = services;
-  }
-}
-
-module.exports = BaseService;

package/server/services/clientGatewayService.js

@@ -1,265 +0,0 @@
-const path = require('path');
-const fs = require('fs');
-
-const BaseService = require('./BaseService');
-const clientGatewayServiceEvents = require('../constants/clientGatewayServiceEvents');
-const fileListPropMap = require('../constants/fileListPropMap');
-const methodCallUtil = require('../util/methodCallUtil');
-const scgiUtil = require('../util/scgiUtil');
-
-const fileListMethodCallConfig = methodCallUtil.getMethodCallConfigFromPropMap(fileListPropMap, ['pathComponents']);
-
-class ClientGatewayService extends BaseService {
-  constructor(...serviceConfig) {
-    super(...serviceConfig);
-
-    this.hasError = null;
-    this.torrentListReducers = [];
-    this.processClientRequestError = this.processClientRequestError.bind(this);
-    this.processClientRequestSuccess = this.processClientRequestSuccess.bind(this);
-  }
-
-  /**
-   * Adds a reducer to be applied when processing the torrent list.
-   *
-   * @param {Object} reducer - The reducer object
-   * @param {string} reducer.key - The key of the reducer, to be applied to the
-   *   torrent list object.
-   * @param {function} reducer.reduce - The actual reducer. This will recevie
-   *   the entire processed torrent list response and it should return it own
-   *   processed value, to be assigned to the provided key.
-   */
-  addTorrentListReducer(reducer = {}) {
-    if (typeof reducer.key !== 'string') {
-      throw new Error('reducer.key must be a string.');
-    }
-
-    if (typeof reducer.reduce !== 'function') {
-      throw new Error('reducer.reduce must be a function.');
-    }
-
-    this.torrentListReducers.push(reducer);
-  }
-
-  removeTorrents(options = {hashes: [], deleteData: false}) {
-    const methodCalls = options.hashes.reduce((accumulator, hash, index) => {
-      let eraseFileMethodCallIndex = index;
-
-      // If we're deleting files, we grab each torrents' file list before we
-      // remove them.
-      if (options.deleteData) {
-        // We offset the indices of these method calls so that we know exactly
-        // where to retrieve the responses in the future.
-        const directoryBaseMethodCallIndex = index + options.hashes.length;
-        // We also need to ensure that the erase method call occurs after
-        // our request for information.
-        eraseFileMethodCallIndex = index + options.hashes.length * 2;
-
-        accumulator[index] = {
-          methodName: 'f.multicall',
-          params: [hash, ''].concat(fileListMethodCallConfig.methodCalls),
-        };
-
-        accumulator[directoryBaseMethodCallIndex] = {
-          methodName: 'd.directory_base',
-          params: [hash],
-        };
-      }
-
-      accumulator[eraseFileMethodCallIndex] = {
-        methodName: 'd.erase',
-        params: [hash],
-      };
-
-      return accumulator;
-    }, []);
-
-    return this.services.clientRequestManager
-      .methodCall('system.multicall', [methodCalls])
-      .then((response) => {
-        if (options.deleteData) {
-          const torrentCount = options.hashes.length;
-          const filesToDelete = options.hashes.reduce((accumulator, hash, hashIndex) => {
-            const fileList = response[hashIndex][0];
-            const directoryBase = response[hashIndex + torrentCount][0];
-
-            const torrentFilesToDelete = fileList.reduce((fileListAccumulator, file) => {
-              // We only look at the first path component returned because
-              // if it's a directory within the torrent, then we'll remove
-              // the entire directory.
-              const filePath = path.join(directoryBase, file[0][0]);
-
-              // filePath might be a directory, so it may have already been
-              // added. If not, we add it.
-              if (!fileListAccumulator.includes(filePath)) {
-                fileListAccumulator.push(filePath);
-              }
-
-              return fileListAccumulator;
-            }, []);
-
-            return accumulator.concat(torrentFilesToDelete);
-          }, []);
-
-          filesToDelete.forEach((file) => {
-            try {
-              if (fs.lstatSync(file).isDirectory()) {
-                fs.rmdirSync(file, {recursive: true});
-              } else {
-                fs.unlinkSync(file);
-              }
-            } catch (error) {
-              console.error(`Error deleting file: ${file}\n${error}`);
-            }
-          });
-        }
-
-        this.emit(clientGatewayServiceEvents.TORRENTS_REMOVED);
-
-        return response;
-      })
-      .catch(this.processClientError);
-  }
-
-  /**
-   * Sends a multicall request to rTorrent with the requested method calls.
-   *
-   * @param  {Object} options - An object of options...
-   * @param  {Array} options.methodCalls - An array of strings representing
-   *   method calls, which the client uses to retrieve details.
-   * @param  {Array} options.propLabels - An array of strings that are used as
-   *   keys for the transformed torrent details.
-   * @param  {Array} options.valueTransformations - An array of functions that
-   *   will be called with the values as returned by the client. These return
-   *   values will be assigned to the key from the propLabels array.
-   * @return {Promise} - Resolves with the processed client response or rejects
-   *   with the processed client error.
-   */
-  fetchTorrentList(options) {
-    return this.services.clientRequestManager
-      .methodCall('d.multicall2', ['', 'main'].concat(options.methodCalls))
-      .then(this.processClientRequestSuccess)
-      .then((torrents) => this.processTorrentListResponse(torrents, options))
-      .catch(this.processClientRequestError);
-  }
-
-  fetchTransferSummary(options) {
-    const methodCalls = options.methodCalls.map((methodName) => ({methodName, params: []}));
-
-    return this.services.clientRequestManager
-      .methodCall('system.multicall', [methodCalls])
-      .then(this.processClientRequestSuccess)
-      .then((transferRate) => this.processTransferRateResponse(transferRate, options))
-      .catch(this.processClientRequestError);
-  }
-
-  processClientRequestSuccess(response) {
-    if (this.hasError == null || this.hasError === true) {
-      this.hasError = false;
-      this.emit(clientGatewayServiceEvents.CLIENT_CONNECTION_STATE_CHANGE);
-    }
-
-    return response;
-  }
-
-  processClientRequestError(error) {
-    if (!this.hasError) {
-      this.hasError = true;
-      this.emit(clientGatewayServiceEvents.CLIENT_CONNECTION_STATE_CHANGE);
-    }
-    throw error;
-  }
-
-  /**
-   * After rTorrent responds with the requested torrent details, we construct
-   * an object with hashes as keys and processed details as values.
-   *
-   * @param  {Array} response - The array of all torrents and their details.
-   * @param  {Object} options - An object of options that instruct us how to
-   *   process the client's response.
-   * @param  {Array} options.propLabels - An array of strings that map to the
-   *   method call. These are the keys of the torrent details.
-   * @param  {Array} options.valueTransformations - An array of functions that
-   *   transform the detail from the client's response.
-   * @return {Object} - An object that represents all torrents with hashes as
-   *   keys, each value being an object of detail labels and values.
-   */
-  processTorrentListResponse(torrentList, options) {
-    this.emit(clientGatewayServiceEvents.PROCESS_TORRENT_LIST_START);
-
-    // We map the array of details to objects with sensibly named keys. We want
-    // to return an object with torrent hashes as keys and an object of torrent
-    // details as values.
-    const processedTorrentList = torrentList.reduce(
-      (listAccumulator, torrentDetailValues) => {
-        // Transform the array of torrent detail values to an object with
-        // sensibly named keys.
-        const processedTorrentDetailValues = torrentDetailValues.reduce((valueAccumulator, value, valueIndex) => {
-          const key = options.propLabels[valueIndex];
-          const transformValue = options.valueTransformations[valueIndex];
-
-          valueAccumulator[key] = transformValue(value);
-          return valueAccumulator;
-        }, {});
-
-        // Assign values from external reducers to the torrent list object.
-        this.torrentListReducers.forEach((reducer) => {
-          const {key, reduce} = reducer;
-
-          processedTorrentDetailValues[key] = reduce(processedTorrentDetailValues);
-        });
-
-        listAccumulator.torrents[processedTorrentDetailValues.hash] = processedTorrentDetailValues;
-
-        this.emit(clientGatewayServiceEvents.PROCESS_TORRENT, processedTorrentDetailValues);
-
-        return listAccumulator;
-      },
-      {torrents: {}},
-    );
-
-    // Provide the number of torrents.
-    processedTorrentList.length = torrentList.length;
-    // Provide a unique ID for this specific torrent list.
-    processedTorrentList.id = Date.now();
-
-    this.emit(clientGatewayServiceEvents.PROCESS_TORRENT_LIST_END, processedTorrentList);
-
-    return processedTorrentList;
-  }
-
-  processTransferRateResponse(transferRate = [], options) {
-    this.emit(clientGatewayServiceEvents.PROCESS_TRANSFER_RATE_START);
-
-    return transferRate.reduce((accumulator, value, index) => {
-      const key = options.propLabels[index];
-      const transformValue = options.valueTransformations[index];
-
-      accumulator[key] = transformValue(value);
-
-      return accumulator;
-    }, {});
-  }
-
-  testGateway(clientSettings) {
-    if (!clientSettings) {
-      return this.services.clientRequestManager
-        .methodCall('system.methodExist', ['system.multicall'])
-        .then(this.processClientRequestSuccess)
-        .catch(this.processClientRequestError);
-    }
-
-    return scgiUtil.methodCall(
-      {
-        socket: clientSettings.socket,
-        socketPath: clientSettings.socketPath,
-        port: clientSettings.port,
-        host: clientSettings.host,
-      },
-      'system.methodExist',
-      ['system.multicall'],
-    );
-  }
-}
-
-module.exports = ClientGatewayService;

package/server/services/clientRequestManager.js

@@ -1,83 +0,0 @@
-const BaseService = require('./BaseService');
-const scgiUtil = require('../util/scgiUtil');
-
-class ClientRequestManager extends BaseService {
-  constructor(...serviceConfig) {
-    super(...serviceConfig);
-
-    this.isRequestPending = false;
-    this.lastResponseTimestamp = 0;
-    this.pendingRequests = [];
-
-    this.sendDefferedMethodCall = this.sendDefferedMethodCall.bind(this);
-    this.sendMethodCall = this.sendMethodCall.bind(this);
-    this.methodCall = this.methodCall.bind(this);
-  }
-
-  handleRequestEnd() {
-    this.isRequestPending = false;
-
-    // We avoid initiating any deffered requests until at least 250ms have
-    // since the previous response.
-    const currentTimestamp = Date.now();
-    const timeSinceLastResponse = currentTimestamp - this.lastResponseTimestamp;
-
-    if (timeSinceLastResponse <= 250) {
-      const delay = 250 - timeSinceLastResponse;
-      setTimeout(this.sendDefferedMethodCall, delay);
-      this.lastResponseTimestamp = currentTimestamp + delay;
-    } else {
-      this.sendDefferedMethodCall();
-      this.lastResponseTimestamp = currentTimestamp;
-    }
-  }
-
-  sendDefferedMethodCall() {
-    if (this.pendingRequests.length > 0) {
-      this.isRequestPending = true;
-
-      const nextRequest = this.pendingRequests.shift();
-
-      this.sendMethodCall(nextRequest.methodName, nextRequest.parameters)
-        .then(nextRequest.resolve)
-        .catch(nextRequest.reject);
-    }
-  }
-
-  sendMethodCall(methodName, parameters) {
-    const connectionMethod = {
-      host: this.user.host,
-      port: this.user.port,
-      socketPath: this.user.socketPath,
-    };
-
-    return scgiUtil
-      .methodCall(connectionMethod, methodName, parameters)
-      .then((response) => {
-        this.handleRequestEnd();
-        return response;
-      })
-      .catch((error) => {
-        this.handleRequestEnd();
-        throw error;
-      });
-  }
-
-  methodCall(methodName, parameters) {
-    // We only allow one request at a time.
-    if (this.isRequestPending) {
-      return new Promise((resolve, reject) => {
-        this.pendingRequests.push({
-          methodName,
-          parameters,
-          resolve,
-          reject,
-        });
-      });
-    }
-    this.isRequestPending = true;
-    return this.sendMethodCall(methodName, parameters);
-  }
-}
-
-module.exports = ClientRequestManager;