serverpreconfigured 2.2.14 → 2.2.16

package/dist/logs/logs.d.ts

@@ -0,0 +1,29 @@
+import { Request } from 'express';
+export declare const BASE_LOG_PATH = "./logs";
+export declare enum LogSeverity {
+    danger = "danger",
+    servere = "severe",
+    moderate = "moderate",
+    info = "info"
+}
+export interface SaveLogOptions {
+    userId?: number;
+    data: string;
+    severity: LogSeverity;
+    addPath?: string;
+    filePrefix?: string;
+    penTestSuspcion?: boolean;
+    req?: Request;
+    ip?: string;
+    url?: string;
+}
+export declare function stringfyError(err: any): string;
+export declare function getIpFromRequest(req: Request): string;
+export declare function saveInternalErrorLog(req: Request, error: any, options?: {
+    penTestSuspcion?: boolean;
+    severity?: LogSeverity;
+}): Promise<void>;
+export declare function saveLog(options: SaveLogOptions): {
+    fileName: string;
+    basePath: string;
+};

package/dist/logs/logs.js

@@ -0,0 +1,132 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.saveLog = exports.saveInternalErrorLog = exports.getIpFromRequest = exports.stringfyError = exports.LogSeverity = exports.BASE_LOG_PATH = void 0;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+exports.BASE_LOG_PATH = './logs';
+var LogSeverity;
+(function (LogSeverity) {
+    LogSeverity["danger"] = "danger";
+    LogSeverity["servere"] = "severe";
+    LogSeverity["moderate"] = "moderate";
+    LogSeverity["info"] = "info";
+})(LogSeverity = exports.LogSeverity || (exports.LogSeverity = {}));
+function stringfyError(err) {
+    const type = typeof (err);
+    if (type !== 'object')
+        return err.toString();
+    let ret = stringfyObject(err, 0);
+    return ret || "";
+    function stringfyObject(obj, level = 0) {
+        if (!obj)
+            return "";
+        if (typeof (obj) !== 'object')
+            return obj.toString();
+        if (level == 5)
+            return "Is Object level max 8";
+        let ret = {};
+        for (let key of Object.keys(obj)) {
+            let value = obj[key];
+            //@ts-ignore
+            ret[key] = typeof (value) == 'object' ? stringfyObject(value, level + 1).replaceAll('\\', '') : value === null || value === void 0 ? void 0 : value.toString();
+        }
+        return JSON.stringify(ret);
+    }
+}
+exports.stringfyError = stringfyError;
+function getIpFromRequest(req) {
+    //@
+    let ips = (req.headers['cf-connecting-ip'] ||
+        req.headers['x-real-ip'] ||
+        req.headers['x-forwarded-for'] ||
+        req.ip || '');
+    if (typeof (ips) == 'string') {
+        ips = ips.split(',');
+    }
+    return ips[0].trim();
+}
+exports.getIpFromRequest = getIpFromRequest;
+function saveInternalErrorLog(req, error, options) {
+    var _a;
+    return __awaiter(this, void 0, void 0, function* () {
+        try {
+            const ip = getIpFromRequest(req);
+            const url = req.originalUrl;
+            //@ts-ignore
+            const userId = (_a = req.user) === null || _a === void 0 ? void 0 : _a.id;
+            let errorString = stringfyError(error);
+            saveLog({
+                ip: ip,
+                url: url,
+                userId: userId,
+                data: errorString,
+                severity: (options === null || options === void 0 ? void 0 : options.severity) || LogSeverity.info,
+                penTestSuspcion: options === null || options === void 0 ? void 0 : options.penTestSuspcion,
+            });
+        }
+        catch (e) {
+            console.log("Error ON Save Log", e);
+        }
+    });
+}
+exports.saveInternalErrorLog = saveInternalErrorLog;
+function saveLog(options) {
+    if (!fs_1.default.existsSync(exports.BASE_LOG_PATH)) {
+        fs_1.default.mkdirSync(exports.BASE_LOG_PATH);
+    }
+    let basePath = exports.BASE_LOG_PATH;
+    if (options.addPath) {
+        basePath = path_1.default.join(basePath, options.addPath);
+        if (!fs_1.default.existsSync(basePath)) {
+            fs_1.default.mkdirSync(basePath);
+        }
+    }
+    if (options.userId) {
+        basePath = path_1.default.join(basePath, options.userId.toString());
+    }
+    else {
+        basePath = path_1.default.join(basePath, "unlogged");
+    }
+    if (!fs_1.default.existsSync(basePath)) {
+        fs_1.default.mkdirSync(basePath);
+    }
+    let fileName = path_1.default.join(basePath, `${options.filePrefix ? options.filePrefix + '_' : ""}${getDateString(new Date())}.csv`);
+    let data = "";
+    if (fs_1.default.existsSync(fileName)) {
+        data = fs_1.default.readFileSync(fileName).toString() + "\n";
+    }
+    if (!data) {
+        data = 'Data;Severidade;Usuário;Dados;IP;URL;Supeita de Ataque\n';
+    }
+    data += `${new Date()};${options.severity};${options.userId || "Deslogado"};${options.data};${options.ip || "Não Informado"};${options.url || "Não Informado"};${options.penTestSuspcion ? "SIM" : "NÃO"}`;
+    fs_1.default.writeFileSync(fileName, data);
+    return {
+        fileName,
+        basePath,
+    };
+}
+exports.saveLog = saveLog;
+function getDateString(d) {
+    const year = d.getFullYear();
+    const month = zerof(d.getMonth() + 1);
+    const day = zerof(d.getDate());
+    const hour = zerof(d.getHours());
+    return `${year}_${month}_${day}_${hour}`;
+    function zerof(n) {
+        if (n > 9)
+            return n.toString();
+        return `0${n}`;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "serverpreconfigured",
-  "version": "2.2.14",
+  "version": "2.2.16",
   "description": "\"Pre-configured server with authentication system and database integration\"",
   "main": "dist/server.js",
   "keywords": [

package/src/logs/logs.ts

@@ -0,0 +1,127 @@
+import fs from 'fs';
+import path from 'path';
+import { Request } from 'express';
+import axios from 'axios';
+export const BASE_LOG_PATH='./logs';
+export enum LogSeverity{
+    danger='danger',
+    servere='severe',
+    moderate='moderate',
+    info='info',
+}
+export interface SaveLogOptions{
+    userId?:number;
+    data:string;
+    severity:LogSeverity;
+    addPath?:string;
+    filePrefix?:string;
+    penTestSuspcion?:boolean;
+    req?:Request;
+    ip?:string;
+    url?:string;
+}
+
+
+export function stringfyError(err:any):string{
+   const type=typeof(err);
+   if(type!=='object')
+      return err.toString();
+   let ret=stringfyObject(err,0);
+   return ret||"";
+   function stringfyObject(obj:any,level:number=0){
+        if(!obj)
+           return "";
+        if(typeof(obj)!=='object')
+          return obj.toString();
+        if(level==5)
+           return "Is Object level max 8";
+        let ret:any={};
+        for(let key of Object.keys(obj)){
+            let value=obj[key];
+            //@ts-ignore
+            ret[key]=typeof(value)=='object'?stringfyObject(value,level+1).replaceAll('\\',''):value?.toString();
+        }
+        return JSON.stringify(ret);
+   }
+
+}
+
+
+export function getIpFromRequest(req:Request){
+        //@
+        let ips = (
+            req.headers['cf-connecting-ip'] ||
+            req.headers['x-real-ip'] ||
+            req.headers['x-forwarded-for'] ||
+            req.ip || ''
+        );
+        if(typeof(ips)=='string'){
+            ips=ips.split(',');
+        }
+        return ips[0].trim();
+}
+export async function saveInternalErrorLog(req:Request,error:any,options?:{penTestSuspcion?:boolean,severity?:LogSeverity}){
+     try{
+         const ip=getIpFromRequest(req);
+         const url=req.originalUrl;
+         //@ts-ignore
+         const userId=req.user?.id;
+         let errorString=stringfyError(error);
+         saveLog({
+            ip:ip,
+            url:url,
+            userId:userId,
+            data:errorString,
+            severity:options?.severity||LogSeverity.info,
+            penTestSuspcion:options?.penTestSuspcion,
+         });
+     }catch(e){
+        console.log("Error ON Save Log",e);
+     }
+}
+export function saveLog(options:SaveLogOptions){
+    if(!fs.existsSync(BASE_LOG_PATH)){
+        fs.mkdirSync(BASE_LOG_PATH);
+    }
+    let basePath=BASE_LOG_PATH;
+    if(options.addPath){
+        basePath=path.join(basePath,options.addPath);
+        if(!fs.existsSync(basePath)){
+            fs.mkdirSync(basePath);
+        }
+    }
+    if(options.userId){
+         basePath=path.join(basePath,options.userId.toString());
+    }else{
+        basePath=path.join(basePath,"unlogged");
+    } 
+    if(!fs.existsSync(basePath)){
+        fs.mkdirSync(basePath);
+    }
+    let fileName=path.join(basePath,`${options.filePrefix?options.filePrefix+'_':""}${getDateString(new Date())}.csv`);
+    let data="";
+    if(fs.existsSync(fileName)){
+        data=fs.readFileSync(fileName).toString()+"\n";
+    }
+    if(!data){
+        data='Data;Severidade;Usuário;Dados;IP;URL;Supeita de Ataque\n';
+    }
+    data+=`${new Date()};${options.severity};${options.userId||"Deslogado"};${options.data};${options.ip||"Não Informado"};${options.url||"Não Informado"};${options.penTestSuspcion?"SIM":"NÃO"}`;
+    fs.writeFileSync(fileName,data);
+    return {
+        fileName,
+        basePath,
+    };
+}
+function getDateString(d:Date){
+  const year=d.getFullYear();
+  const month=zerof(d.getMonth()+1);
+  const day=zerof(d.getDate());
+  const hour=zerof(d.getHours());
+  return `${year}_${month}_${day}_${hour}`;
+  function zerof(n:number){
+       if(n>9)
+         return n.toString();
+       return `0${n}`; 
+  }
+}

package/dist/routes/auth.d.ts

@@ -1,2 +0,0 @@
-declare const router: import("express-serve-static-core").Router;
-export default router;

package/dist/routes/auth.js

@@ -1,56 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const express_1 = __importDefault(require("express"));
-const secureset_1 = require("../sessions/secureset");
-const config_1 = require("../auth/config");
-const response_1 = require("../utils/response");
-const auth_1 = require("../auth/auth");
-const meta_sanitizer_1 = __importDefault(require("meta-sanitizer"));
-const users_1 = require("../users/users");
-var LoginErrorCode;
-(function (LoginErrorCode) {
-    LoginErrorCode[LoginErrorCode["NoError"] = 0] = "NoError";
-    LoginErrorCode[LoginErrorCode["InvalidParams"] = 1] = "InvalidParams";
-    LoginErrorCode[LoginErrorCode["InvalidPassword"] = 2] = "InvalidPassword";
-})(LoginErrorCode || (LoginErrorCode = {}));
-const router = express_1.default.Router();
-router.post('/logout', (req, res) => {
-    let is_ok = false;
-    if (auth_1.userIsLogged(req)) {
-        secureset_1.deleteSessionValue(req, config_1.SESSION_LOGGED_DATA);
-        is_ok = true;
-    }
-    res.send(response_1.JSONResponse(is_ok, 0, is_ok ? "" : "User Must be logged", {}));
-});
-router.post('/login', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
-    let email = "";
-    let password = "";
-    try {
-        email = meta_sanitizer_1.default.sanitizeEmail(req.body.email);
-        password = meta_sanitizer_1.default.queryProtector(req.body.password);
-    }
-    catch (e) {
-        return res.send(response_1.JSONResponse(false, LoginErrorCode.InvalidParams, "Must have 'email' and 'password' params"));
-    }
-    if (password == "" || email == "")
-        return res.send(response_1.JSONResponse(false, LoginErrorCode.InvalidParams, "Must have 'email' and 'password' params"));
-    const checkPass = yield users_1.checkUserPassword(email, password);
-    if (checkPass) {
-        secureset_1.setSessionValue(req, config_1.SESSION_LOGGED_DATA, email);
-        return res.send(response_1.JSONResponse(true, LoginErrorCode.NoError, "Login Ok"));
-    }
-    return res.send(response_1.JSONResponse(false, LoginErrorCode.InvalidPassword, "Invalid Password"));
-}));
-exports.default = router;

package/dist/routes/users.d.ts

@@ -1,2 +0,0 @@
-declare const router: import("express-serve-static-core").Router;
-export default router;

package/dist/routes/users.js

@@ -1,90 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const express_1 = __importDefault(require("express"));
-const response_1 = require("../utils/response");
-const auth_1 = require("../auth/auth");
-const meta_sanitizer_1 = __importDefault(require("meta-sanitizer"));
-const users_1 = require("../users/users");
-const users_2 = require("../users/users");
-const auth_2 = require("../middlewares/auth");
-const auth_3 = require("../auth/auth");
-const auth_4 = require("../auth/auth");
-const server_1 = require("../server");
-const email_1 = require("../utils/validators/email");
-const router = express_1.default.Router();
-router.post('/logout', (req, res) => {
-    let is_ok = false;
-    if ((0, auth_1.userIsLogged)(req)) {
-        (0, auth_4.logoutUser)(req);
-        is_ok = true;
-    }
-    res.send((0, response_1.JSONResponse)("OK"));
-});
-router.post('/login', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
-    let email = "";
-    let password = "";
-    try {
-        email = meta_sanitizer_1.default.sanitizeEmail(req.body.email);
-        password = meta_sanitizer_1.default.queryProtector(req.body.password);
-    }
-    catch (e) {
-        return res.status(403).send((0, response_1.JSONResponse)({}, "Must have 'email' and 'password' params"));
-    }
-    if (password == "" || email == "")
-        return res.status(403).send((0, response_1.JSONResponse)({}, "Must have 'email' and 'password' params"));
-    email = email.toLocaleLowerCase();
-    try {
-        const checkPass = yield (0, users_1.checkUserPassword)(email, password);
-        if (checkPass) {
-            const user = yield server_1.User.findOne({ where: { email: email } });
-            if (!user)
-                throw "Dont find User";
-            if (!user.is_active) {
-                return res.status(403).send((0, response_1.JSONResponse)({}, "User deleted"));
-            }
-            (0, auth_3.setUserLogged)(req, email);
-            yield (0, users_1.updateUserLastAction)(user);
-            return res.status(200).send((0, response_1.JSONResponse)("Login Ok"));
-        }
-        return res.status(403).send((0, response_1.JSONResponse)({}, "Invalid Password"));
-    }
-    catch (e) {
-        return (0, response_1.sendIError)(req, res, e);
-    }
-}));
-router.post('/register', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
-    try {
-        let email = meta_sanitizer_1.default.sanitizeEmail(req.body.email || '');
-        let password = meta_sanitizer_1.default.queryProtector(req.body.password || '');
-        let name = meta_sanitizer_1.default.SanitizerEngine(req.body.name || '', true, false, [' ']).sanitizedData;
-        if (email == "" || password == "" || name == "")
-            return res.send((0, response_1.JSONResponse)({}, "Invalid params"));
-        email = email.toLocaleLowerCase();
-        if (!(0, email_1.checkEmail)(email)) {
-            return res.status(403).send((0, response_1.JSONResponse)({}, "Invalid Email"));
-        }
-        yield (0, users_2.createUser)({ first_name: name, email: email, password_string: password });
-        return res.send((0, response_1.JSONResponse)("REGISTER OK"));
-    }
-    catch (e) {
-        if (e === "User exist")
-            return res.send((0, response_1.JSONResponse)({}, "User Exist"));
-        return (0, response_1.sendIError)(req, res, e);
-    }
-}));
-router.post('/getuser', auth_2.setUserDataMiddleware, (req, res) => __awaiter(void 0, void 0, void 0, function* () {
-    res.send((0, response_1.JSONResponse)({}, { email: req.user.email, id: req.user.id }));
-}));
-exports.default = router;