beech-api 3.7.23 → 3.8.0

package/packages/cli/core/index.js

@@ -1,9 +1,17 @@
-const appRoot = require("app-root-path");
+global.appRoot = require("app-root-path");
+const moment = require("moment");
 const { performance } = require("perf_hooks");
 const moduleAlias = require("module-alias");
 moduleAlias.addAlias("@", appRoot + "/src");
 const _express_ = require("express");
 global._app_ = _express_();
+// Compression
+const compression = require("compression");
+_app_.use(compression());
+// Helmet
+const helmet = require("helmet");
+_app_.use(helmet());
+// CORS
 const cors = require("cors");
 global.endpoint = _express_.Router();
 const cookieParser = require("cookie-parser");
@@ -15,9 +23,15 @@ const globalVariable = require(appRoot + "/global.config.js");
 globalVariable.init();
 // Local environments
 global._config_ = require(appRoot + "/app.config");
+const _beech_ = require(appRoot + "/beech.config.js").defineConfig;
+global._publicPath_ = _beech_.base;
 const mySqlDbConnect = require("./databases/mysql");
 const SequelizeDbConnect = require("./databases/sequelize");
-// database test
+// Rate Request middleware
+const { Limiter, Duplicater } = require("./middleware/index");
+endpoint.use(Limiter);
+endpoint.use(Duplicater);
+// Database test
 const {
   testConnectInProcess,
   filterDbIsTrue,
@@ -28,36 +42,63 @@ const { QueryTypes, DataTypes, Op } = require("sequelize");
 global.QueryTypes = QueryTypes;
 global.DataTypes = DataTypes;
 global.Op = Op;
-// allow whitelist cors
+// Allow whitelist cors
+const { whitelist, sign, avg } = require("./middleware/index");
 _app_.use(cors({ origin: true, credentials: true }));
-const { whitelist, sign } = require("./origin/index");
+_app_.use((req, res, next) => {
+  whitelist(async (lists, originSensitive) => {
+    sign(req, res, lists, originSensitive, (err) => {
+      if (!err) {
+        next();
+      } else {
+        throw err;
+      }
+    });
+  });
+});
 // View engine
 _app_.use(bodyParser.json());
 _app_.use(bodyParser.urlencoded({ extended: true }));
 _app_.use(methodOverride());
 _app_.use(cookieParser());
-_app_.use(
-  expressSession({
-    secret: "surprise you mother f*cker",
-    resave: true,
-    saveUninitialized: true,
-  })
-);
+_app_.use(expressSession({
+  secret: "surprise you mother f*cker",
+  resave: true,
+  saveUninitialized: true,
+}));
 _app_.use(expressValidator());
 // Dev. activity
+global._requestTime_ = moment(new Date()).format("YYYY-MM-DD HH:mm:ss");
 _app_.use((req, res, next) => {
-  console.log("Request URL:", req.method, req.originalUrl);
-  var t0 = performance.now();
-  res.on("finish", () => {
-    var t1 = performance.now();
-    console.log(`Responded with status : ${res.statusCode} (${(t1 - t0).toFixed(2)}ms)`);
+  console.log(`[${_requestTime_}] : Request ${req.method} ${req.originalUrl}`);
+  const t0 = performance.now();
+  res.on('finish', () => {
+    const responseTime = moment(new Date()).format("YYYY-MM-DD HH:mm:ss");
+    const t1 = performance.now();
+    const duration = (t1 - t0).toFixed(0);
+    console.log(`[${responseTime}] : Response ${res.statusCode} (${duration}ms)`);
   });
   next();
 });
-// engine import
+// Check Syntax error.
+_app_.use((error, req, res, next) => {
+  if (error instanceof SyntaxError) {
+    res.status(400).json({
+      ...error,
+      status: "BAD_REQUEST",
+      message: "Bad Request.",
+      body: error.body,
+    });
+  } else {
+    next();
+  }
+});
+// Advance Guard
+_app_.use(avg);
+// Engine import
 const httpExpress = require("./services/http.express");
 const fileWalk = require("./file-walk/file-walk");
-// passport initialization
+// Passport initialization
 const authPassport = require("./auth/Passport");
 const passport = require("passport");
 _app_.use(passport.initialize());
@@ -68,6 +109,8 @@ passport.serializeUser((user, done) => {
 passport.deserializeUser((user, done) => {
   done(null, user);
 });
+// Endpoint magic
+const { Base } = require("../../lib/index");
 // Read folder in ./src/endpoints/*
 const walk = require("walk");
 let jsfiles = [];
@@ -120,24 +163,13 @@ init = async (jsfiles) => {
     });
     Promise.all([testConnectToDB]).then(async (x) => {
       if (x[0]) {
-        await (pool_base == "basic"
-          ? new Promise((resolve) => resolve(mySqlDbConnect.connect()))
-          : new Promise((resolve) => resolve(SequelizeDbConnect.connect())));
-        await whitelist(async (lists, originSensitive) => {
-          await _app_.use((req, res, next) => {
-            sign(req, res, lists, originSensitive, (err) => {
-              if (!err) {
-                next();
-              } else {
-                throw err;
-              }
-            });
-          });
+        await (pool_base == "basic" ? new Promise((resolve) => resolve(mySqlDbConnect.connect())) : new Promise((resolve) => resolve(SequelizeDbConnect.connect())));
           await authPassport.init().then(async (x) => {
             if (x[0]) {
               throw x[0];
             } else {
               await new Promise((resolve) => resolve(fileWalk.fileWalk(jsfiles)));
+              await (pool_base == "basic" ? new Promise((resolve) => resolve()) : new Promise((resolve) => resolve(Base())));
               await new Promise((resolve) => {
                 httpExpress.expressStart().then((expss) => {
                   resolve(expss);
@@ -145,7 +177,6 @@ init = async (jsfiles) => {
               });
             }
           });
-        });
       }
     });
   } catch (error) {
@@ -153,5 +184,5 @@ init = async (jsfiles) => {
     throw error;
   }
 };
-// use router
-_app_.use(endpoint);
+// Use router
+_app_.use(_publicPath_, endpoint);

package/packages/cli/core/middleware/express/duplicateRequest.js

@@ -0,0 +1,12 @@
+const _beech_ = require(appRoot + "/beech.config.js");
+const { duplicateRequest } = require("express-duplicate-request");
+const nextDuplicater = (req, res, next) => {
+  next();
+};
+let configure = {
+  expiration: _beech_.defineConfig.server.duplicateRequest ? _beech_.defineConfig.server.duplicateRequest.expiration : 0,
+};
+configure = { ...configure, ..._beech_.defineConfig.server.duplicateRequest };
+const Duplicater = configure.expiration ? duplicateRequest(configure) : nextDuplicater;
+
+module.exports = { Duplicater, duplicateRequest };

package/packages/cli/core/middleware/express/jwtCheckAllow.js

@@ -0,0 +1,68 @@
+const passport = require("passport");
+
+const checkRoleMiddleware = (options) => {
+  return function (req, res, next) {
+    if(!Array.isArray(options)) {
+      return next();
+    } else {
+      passport.authenticate("jwt", {
+        session: false,
+      }, (err, user, info) => {
+        // error check
+        if (err) {
+          console.log(err, info);
+          return res.status(403).json({
+            code: 403,
+            status: "FORBIDDEN",
+            message: "Forbidden: Insufficient role",
+            info: {
+              error: err,
+            },
+          });
+        } else {
+          let isPerfectly = true;
+          options.forEach((element, key) => {
+            let checkVal = Object.values(element).flat();
+            let checkKey = Object.keys(element);
+            if(user && user[checkKey]) {
+              if(checkVal.includes(user[checkKey])) {
+                if(options.length -1 === key) {
+                  if(isPerfectly) {
+                    // Perfectly
+                    return next();
+                  }
+                }
+              } else {
+                if(isPerfectly) {
+                  res.status(403).json({
+                    code: 403,
+                    status: "FORBIDDEN",
+                    message: "Forbidden: Insufficient role",
+                  });
+                }
+                isPerfectly = false;
+              }
+            } else {
+              if(isPerfectly) {
+                res.status(403).json({
+                  code: 403,
+                  status: "FORBIDDEN",
+                  message: `No ${checkKey} assigned to token.`,
+                });
+              }
+              isPerfectly = false;
+            }
+          });
+        }
+      })(req, res, next);
+    }
+  }
+}
+
+const checkRoleMiddlewareWithDefaultProject = (options) => {
+  return function (req, res, next) {
+    return checkRoleMiddleware(options)(req, res, next);
+  }
+}
+
+module.exports = { checkRoleMiddleware, checkRoleMiddlewareWithDefaultProject }

package/packages/cli/core/middleware/express/rateLimit.js

@@ -0,0 +1,17 @@
+const _beech_ = require(appRoot + "/beech.config.js");
+const rateLimit = require("express-rate-limit");
+const tooManyMsg = {
+  code: 429,
+  status: "TOO_MANY_REQUEST",
+  message: "Too Many Requests.",
+};
+let configure = {
+  windowMs: (_beech_.defineConfig.server.rateLimit) ? _beech_.defineConfig.server.rateLimit.windowMs : 0,
+  standardHeaders: (_beech_.defineConfig.server.rateLimit) ? (_beech_.defineConfig.server.rateLimit.standardHeaders || "draft-7") : "draft-7",
+  legacyHeaders: (_beech_.defineConfig.server.rateLimit) ? (_beech_.defineConfig.server.rateLimit.legacyHeaders || false) : false,
+  message: (_beech_.defineConfig.server.rateLimit) ? (_beech_.defineConfig.server.rateLimit.message || tooManyMsg) : tooManyMsg,
+};
+configure = { ...configure, ..._beech_.defineConfig.server.rateLimit };
+const Limiter = rateLimit(configure);
+
+module.exports = { Limiter, rateLimit };

package/packages/cli/core/middleware/express/slowDown.js

@@ -0,0 +1,2 @@
+const { slowDown } = require("express-slow-down");
+module.exports = { slowDown };

package/packages/cli/core/middleware/index.js

@@ -0,0 +1,6 @@
+const { whitelist, sign } = require("./origin/whitelist/cors");
+const { avg } = require("./origin/guard/advance");
+const { Limiter } = require("./express/rateLimit");
+const { Duplicater } = require("./express/duplicateRequest");
+
+module.exports = { whitelist, sign, Limiter, Duplicater, avg };

package/packages/cli/core/middleware/origin/guard/advance.js

@@ -0,0 +1,74 @@
+const fs = require("fs");
+const passport_config_file = "/passport.config.js";
+const { avgDeHashIt } = require(__dirname + "/../../../helpers/math");
+const moment = require("moment");
+
+function avg(req, res, next) {
+  // check passport file ?
+  const checkPassport = new Promise((resolve) => {
+    if (fs.existsSync(appRoot + "/passport.config.js")) {
+      resolve([true, require(appRoot + passport_config_file)]);
+    } else {
+      resolve([false, null]);
+    }
+  });
+  // promise all
+  Promise.all([checkPassport]).then((final) => {
+    let item = final[0];
+    let passport_config = item[1];
+    /**
+     * item[0] : Boolean = passport file found.
+     * item[1] : Object  = passport object.
+     */
+    if(item[0]) {
+      if ((passport_config.model.guard.advanced_guard) ? passport_config.model.guard.advanced_guard.allow : false) {
+        let advanced_guard_entity = req.headers[passport_config.model.guard.advanced_guard.entity || "timing"];
+        if (advanced_guard_entity) {
+          if(advanced_guard_entity.length > 60) {
+            //logic check advanced guard
+            avgDeHashIt(advanced_guard_entity, (err, unixTime) => {
+              if (err) {
+                res.status(502).json({ code: 502, status: "BAD_GATEWAY", message: String(err) });
+                return;
+              }
+              // prepare date & check it.
+              let unixTimeNow = moment(new Date()).unix();
+              let unixTiming = moment(new Date(unixTime * 1000)).add((passport_config.model.guard.advanced_guard.time_expired.minutes || 0), "minutes").add((passport_config.model.guard.advanced_guard.time_expired.seconds || 0), "seconds").unix();
+              if((String(unixTimeNow).length == String(unixTiming).length) && unixTimeNow < unixTiming) {
+                next();
+              } else {
+                res.status(408).json({ code: 408 , status: "REQUEST_TIMEOUT", message: "Request Timeout." });
+              }
+            });
+          } else {
+            res.status(400).json({
+              code: 400,
+              status: 'BAD_REQUEST',
+              message: "Bad request.",
+              info: {
+                status: "BAD_VALUE",
+                message: "Bad with wrong Advance guard."
+              },
+            });
+          }
+        } else {
+          res.status(400).json({
+            code: 400,
+            status: 'BAD_REQUEST',
+            message: "Bad request.",
+            info: {
+              status: "BAD_ENTITY",
+              message: "Bad Advanced guard Entity."
+            },
+          });
+        }
+      } else {
+        next();
+      }
+    } else {
+      next();
+    }
+  });
+}
+
+module.exports = { avg };

package/packages/cli/core/{origin → middleware/origin}/whitelist/cors.js

@@ -1,5 +1,5 @@
 const fs = require("fs");
-const appRoot = require("app-root-path");
+
 function whitelist(cb) {
   var whitelists = [];
   const getWhitelists = new Promise((resolve) => {
@@ -37,8 +37,8 @@ function sign(req, res, whitelist, originSensitive, cb) {
     const origin = req.headers.origin;
     let doYouSignSomeOrigin = false;
     //var host = req.get("host");
-    console.log("Request from origin:", origin || "localhost");
-
+    console.log(`[${_requestTime_}] : From origin: ${origin || 'http://localhost'}`);
+    // check whitelist length ?
     if (whitelist.length > 0) {
       whitelist.forEach((val, k) => {
         if (origin) {
@@ -53,21 +53,19 @@ function sign(req, res, whitelist, originSensitive, cb) {
         }
         if (whitelist.length == k + 1) {
           if (!doYouSignSomeOrigin) {
-            res.setHeader(
-              "Access-Control-Allow-Origin",
-              "http://localhost:" + _config_.main_config.app_port
-            );
+            setLocalHeader(res);
           }
         }
       });
     } else {
-      res.setHeader("Access-Control-Allow-Origin", origin);
+      if(origin) {
+        res.setHeader("Access-Control-Allow-Origin", origin); // add origin when not sign origin: []|["*"]
+      } else {
+        setLocalHeader(res);
+      }
     }
     // Request methods you wish to allow
-    res.setHeader(
-      "Access-Control-Allow-Methods",
-      "GET, POST, OPTIONS, PUT, PATCH, DELETE"
-    );
+    res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS, PUT, PATCH, DELETE");
     // Request headers you wish to allow
     res.setHeader(
       "Access-Control-Allow-Headers",
@@ -88,4 +86,9 @@ function sign(req, res, whitelist, originSensitive, cb) {
   }
 }
 
+function setLocalHeader(res) {
+  res.setHeader("Access-Control-Allow-Origin", "http://localhost:" + _config_.main_config.app_port);
+  res.setHeader("Access-Control-Allow-Origin", "http://127.0.0.1:" + _config_.main_config.app_port);
+}
+
 module.exports = { whitelist, sign };