@weibaohui/dsh-git-server 0.1.0 → 0.1.1

package/server/dist/webapi.js

@@ -1,377 +0,0 @@
-// /api/web/* JSON endpoints consumed by the React SPA (sign-in/up, MFA,
-// activate, reset password, repo header/watch/star/commit).
-import * as db from './db/db.js';
-import { conf } from './conf.js';
-import { completeSignIn } from './context.js';
-import { getCommit } from './gitx/git.js';
-function errBody(error, fields) {
-    const out = {};
-    if (error)
-        out.error = error;
-    if (fields)
-        out.fields = fields;
-    return out;
-}
-function isAlphaDashDot(s) {
-    return !/[^\d\w\-_.]/.test(s);
-}
-export async function handleWebAPI(c, subPath) {
-    // subPath begins after /api/web
-    const method = c.Method();
-    if (subPath === '/user/info' && method === 'GET') {
-        if (!c.User) {
-            c.Status(204);
-            c.res.end();
-            c.rendered = true;
-            return true;
-        }
-        c.JSONSuccess({
-            username: c.User.name,
-            avatarURL: c.User.AvatarURL(),
-            isAdmin: c.User.is_admin === 1,
-            canCreateOrganization: c.User.CanCreateOrganization(),
-        });
-        return true;
-    }
-    if (subPath === '/user/sign-up') {
-        if (method === 'GET') {
-            c.JSONSuccess({
-                registrationDisabled: conf.disableRegistration,
-                captchaEnabled: conf.enableRegistrationCaptcha,
-            });
-            return true;
-        }
-        if (method === 'POST') {
-            const req = await c.form();
-            const userName = String(req.userName ?? '');
-            const email = String(req.email ?? '');
-            const password = String(req.password ?? '');
-            if (conf.disableRegistration) {
-                c.JSON(403, errBody(c.Tr('auth.disable_register_prompt')));
-                return true;
-            }
-            if (conf.enableRegistrationCaptcha) {
-                const { validateCaptcha } = await import('./toolx.js');
-                const captchaID = c.GetCookie('gogs_captcha');
-                if (!validateCaptcha(captchaID, String(req.captcha ?? ''))) {
-                    const msg = c.Tr('form.captcha_incorrect');
-                    c.JSON(401, errBody(undefined, { captcha: msg }));
-                    return true;
-                }
-            }
-            if (!userName || !isAlphaDashDot(userName) || userName.length > 35) {
-                c.JSON(400, errBody(undefined, { userName: c.Tr('form.username') + c.Tr('form.alpha_dash_dot_error') }));
-                return true;
-            }
-            if (!email || !/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(email) || email.length > 254) {
-                c.JSON(400, errBody(undefined, { email: c.Tr('form.email') + c.Tr('form.email_error') }));
-                return true;
-            }
-            if (!password || password.length > 255) {
-                c.JSON(400, errBody(undefined, { password: c.Tr('form.password') + c.Tr('form.require_error') }));
-                return true;
-            }
-            let user;
-            try {
-                user = db.createUser(userName, email, { password, activated: !conf.requireEmailConfirmation });
-            }
-            catch (e) {
-                if (e instanceof db.AlreadyExistError) {
-                    if (String(e.message).includes('email')) {
-                        c.JSON(422, errBody(undefined, { email: c.Tr('form.email_been_used') }));
-                    }
-                    else {
-                        c.JSON(422, errBody(undefined, { userName: c.Tr('form.username_been_taken') }));
-                    }
-                    return true;
-                }
-                if (e instanceof db.NameNotAllowedError) {
-                    c.JSON(400, errBody(undefined, { userName: c.Tr('user.form.name_not_allowed', userName) }));
-                    return true;
-                }
-                throw e;
-            }
-            // first user becomes admin & activated
-            const count = db.db().prepare('SELECT COUNT(*) AS c FROM user WHERE type = 0').get().c;
-            if (count === 1) {
-                db.updateUserColumns(user.id, { is_active: 1, is_admin: 1 });
-            }
-            c.JSONSuccess({});
-            return true;
-        }
-    }
-    if (subPath === '/user/sign-in') {
-        if (method === 'GET') {
-            // local auth only in this port; no external login sources yet
-            c.JSONSuccess({ loginSources: [] });
-            return true;
-        }
-        if (method === 'POST') {
-            const req = await c.form();
-            const username = String(req.username ?? '');
-            const password = String(req.password ?? '');
-            const user = db.getUserByUsername(username) ?? db.getUserByEmail(username);
-            const { verifyPassword } = await import('./authx/password.js');
-            // 兜底管理员：永远允许本地登录（插件自有紧急账号）
-            const bootstrapName = (process.env.DSH_BOOTSTRAP_ADMIN || '').split(':')[0] || 'root';
-            if (user && user.type === 0 && user.name === bootstrapName && verifyPassword(password, user.salt, user.passwd)) {
-                completeSignIn(c, user);
-                c.JSONSuccess({});
-                return true;
-            }
-            // 账户单一来源：UM service 启用时登录只走 service；本地密码仅当
-            // service 不可用时兜底（防影子账号残留的旧同步密码绕过）
-            const um = await import('./authx/um.js');
-            if (um.umServiceEnabled()) {
-                const check = await um.umCheckLogin(username, password);
-                if (check.ok) {
-                    const shadow = um.ensureShadowUser(check.user);
-                    if (shadow && shadow.type === 0) {
-                        completeSignIn(c, shadow);
-                        c.JSONSuccess({});
-                        return true;
-                    }
-                }
-                if (!check.unavailable) {
-                    c.JSON(401, errBody(c.Tr('form.username_password_incorrect'), { username: null, password: null }));
-                    return true;
-                }
-            }
-            const authed = !!(user && user.type === 0 && verifyPassword(password, user.salt, user.passwd));
-            if (!authed) {
-                c.JSON(401, errBody(c.Tr('form.username_password_incorrect'), { username: null, password: null }));
-                return true;
-            }
-            completeSignIn(c, user);
-            c.JSONSuccess({});
-            return true;
-        }
-    }
-    if (subPath === '/user/sign-out' && method === 'POST') {
-        c.session.Clear();
-        c.session.Release();
-        c.SetCookie(conf.cookieUserName, '', 0);
-        c.NoContent();
-        return true;
-    }
-    if (subPath === '/user/reset-password') {
-        if (method === 'GET') {
-            const code = c.Query('code');
-            let valid = false;
-            if (code) {
-                const { verifyUserFromCode } = await import('./toolx.js');
-                const parsed = verifyUserFromCode(code, (u) => db.getUserByUsername(u));
-                valid = !!parsed?.valid;
-            }
-            c.JSONSuccess({ emailEnabled: conf.emailEnabled, valid });
-            return true;
-        }
-        if (method === 'POST') {
-            if (!conf.emailEnabled) {
-                c.JSON(403, errBody(c.Tr('auth.disable_register_mail')));
-                return true;
-            }
-            const req = await c.form();
-            const email = String(req.email ?? '').toLowerCase().trim();
-            const user = db.getUserByEmail(email);
-            if (!user) {
-                c.JSONSuccess({ hours: Math.floor(conf.activateCodeLives / 60) });
-                return true;
-            }
-            if (user.type !== 0) {
-                const msg = c.Tr('auth.non_local_account');
-                c.JSON(403, errBody(undefined, { email: msg }));
-                return true;
-            }
-            try {
-                const { createActivateCode } = await import('./toolx.js');
-                const { sendResetPasswordMail } = await import('./mailer.js');
-                const code = createActivateCode(user, conf.resetPwdCodeLives) + Buffer.from(user.name).toString('hex');
-                await sendResetPasswordMail(user, code);
-                c.JSONSuccess({ hours: Math.floor(conf.resetPwdCodeLives / 60) });
-            }
-            catch (e) {
-                console.error('[mailer] reset mail:', e?.message ?? e);
-                c.JSONSuccess({ hours: Math.floor(conf.resetPwdCodeLives / 60) });
-            }
-            return true;
-        }
-    }
-    if (subPath === '/user/reset-password/complete' && method === 'POST') {
-        const req = await c.form();
-        const code = String(req.code ?? '');
-        const { verifyUserFromCode } = await import('./toolx.js');
-        const parsed = verifyUserFromCode(code, (u) => db.getUserByUsername(u));
-        if (!parsed || !parsed.valid) {
-            c.JSON(400, errBody(c.Tr('auth.invalid_code')));
-            return true;
-        }
-        const password = String(req.password ?? '');
-        if (password.length < 6) {
-            const msg = c.Tr('auth.password_too_short');
-            c.JSON(400, errBody(undefined, { password: msg }));
-            return true;
-        }
-        const { encodePassword, randomSalt } = await import('./authx/password.js');
-        const salt = randomSalt();
-        db.updateUserColumns(parsed.user.id, { passwd: encodePassword(password, salt), salt });
-        c.Status(204);
-        c.res.end();
-        c.rendered = true;
-        return true;
-    }
-    if (subPath === '/user/activate') {
-        if (!c.User) {
-            c.Status(401);
-            c.res.end();
-            c.rendered = true;
-            return true;
-        }
-        if (method === 'POST') {
-            if (!conf.requireEmailConfirmation) {
-                c.JSON(403, errBody(c.Tr('auth.disable_register_mail')));
-                return true;
-            }
-            if (!conf.emailEnabled) {
-                c.JSON(403, errBody(c.Tr('auth.disable_register_mail')));
-                return true;
-            }
-            try {
-                const { createActivateCode } = await import('./toolx.js');
-                const { sendActivateMail } = await import('./mailer.js');
-                const code = createActivateCode(c.User, conf.activateCodeLives) + Buffer.from(c.User.name).toString('hex');
-                await sendActivateMail(c.User, code);
-                c.JSONSuccess({ codeLifetimeHours: Math.floor(conf.activateCodeLives / 60) });
-            }
-            catch (e) {
-                console.error('[mailer] activate mail:', e?.message ?? e);
-                c.JSON(500, errBody(String(e?.message ?? e)));
-            }
-            return true;
-        }
-        c.JSONSuccess({ email: c.User.email, codeLifetimeHours: Math.floor(conf.activateCodeLives / 60) });
-        return true;
-    }
-    if (subPath === '/user/activate/complete' && method === 'POST') {
-        const req = await c.form();
-        const code = String(req.code ?? '');
-        const { verifyUserFromCode } = await import('./toolx.js');
-        const parsed = verifyUserFromCode(code, (u) => db.getUserByUsername(u));
-        if (!parsed || !parsed.valid) {
-            c.JSON(400, errBody(c.Tr('auth.invalid_code')));
-            return true;
-        }
-        const { randomSalt } = await import('./authx/password.js');
-        const salt = randomSalt();
-        db.updateUserColumns(parsed.user.id, { is_active: 1, rands: salt });
-        completeSignIn(c, parsed.user);
-        c.Status(204);
-        c.res.end();
-        c.rendered = true;
-        return true;
-    }
-    // repo endpoints
-    const repoMatch = /^\/([^/]+)\/([^/]+)(\/.*)?$/.exec(subPath);
-    if (repoMatch) {
-        const [, ownerName, repoName, rest] = repoMatch;
-        const owner = db.getUserByUsername(ownerName);
-        const repo = owner ? db.getRepoByOwnerAndName(owner, repoName) : null;
-        if (owner && repo) {
-            const viewerID = c.UserID();
-            const mode = db.accessMode(viewerID, repo);
-            const canRead = mode >= db.AccessMode.READ || (!repo.is_private && !conf.requireSigninView);
-            if (rest === '/header' && method === 'GET') {
-                if (!canRead) {
-                    c.Status(404);
-                    c.res.end();
-                    c.rendered = true;
-                    return true;
-                }
-                c.JSONSuccess({
-                    id: repo.id,
-                    owner: owner.name,
-                    name: repo.name,
-                    avatarURL: owner.AvatarURL(),
-                    visibility: repo.is_private ? 'private' : 'public',
-                    watchCount: repo.num_watches,
-                    starCount: repo.num_stars,
-                    forkCount: repo.num_forks,
-                    issuesEnabled: repo.enable_issues === 1,
-                    openIssueCount: repo.num_issues - repo.num_closed_issues,
-                    pullRequestsEnabled: repo.enable_pulls === 1,
-                    openPullRequestCount: repo.num_pulls - repo.num_closed_pulls,
-                    wikiEnabled: repo.enable_wiki === 1,
-                    viewerCanAdminister: mode >= db.AccessMode.ADMIN,
-                    viewerIsWatching: !!db.isWatching(viewerID, repo.id),
-                    viewerIsStarring: !!db.isStaring(viewerID, repo.id),
-                });
-                return true;
-            }
-            if (rest === '/watch') {
-                if (method === 'POST') {
-                    db.watchRepo(viewerID, repo.id, true);
-                    c.NoContent();
-                    return true;
-                }
-                if (method === 'DELETE') {
-                    db.watchRepo(viewerID, repo.id, false);
-                    c.NoContent();
-                    return true;
-                }
-            }
-            if (rest === '/star') {
-                if (method === 'POST') {
-                    db.starRepo(viewerID, repo.id, true);
-                    c.NoContent();
-                    return true;
-                }
-                if (method === 'DELETE') {
-                    db.starRepo(viewerID, repo.id, false);
-                    c.NoContent();
-                    return true;
-                }
-            }
-            const commitMatch = /^\/commit\/([0-9a-f]{7,40})$/.exec(rest ?? '');
-            if (commitMatch && method === 'GET') {
-                if (!canRead) {
-                    c.Status(404);
-                    c.res.end();
-                    c.rendered = true;
-                    return true;
-                }
-                const commit = await getCommit(repo.RepoPath(), commitMatch[1]);
-                if (!commit) {
-                    c.Status(404);
-                    c.res.end();
-                    c.rendered = true;
-                    return true;
-                }
-                const authorUser = db.getUserByEmail(commit.author.email);
-                c.JSONSuccess({
-                    sha: commit.id,
-                    subject: commit.Summary(),
-                    body: commit.message.slice(commit.Summary().length).replace(/^\n/, ''),
-                    author: {
-                        name: commit.author.name,
-                        email: commit.author.email,
-                        when: commit.author.when.toISOString(),
-                        avatarURL: avatarURLForEmail(commit.author.email),
-                        ...(authorUser ? { profileURL: authorUser.HomeURLPath() } : {}),
-                    },
-                    parents: commit.parents,
-                });
-                return true;
-            }
-        }
-    }
-    return false;
-}
-function avatarURLForEmail(email) {
-    return conf.subpath + '/user/avatar/' + require_md5(email);
-}
-// small helper to avoid import cycle overhead
-import { md5 } from './authx/password.js';
-function require_md5(s) {
-    return md5(s.trim().toLowerCase());
-}
-//# sourceMappingURL=webapi.js.map