serverpreconfigured 2.2.15 → 2.2.17
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth/auth.d.ts +3 -0
- package/dist/auth/auth.js +22 -0
- package/dist/auth/config.d.ts +1 -0
- package/dist/auth/config.js +4 -0
- package/dist/database/database.d.ts +2 -0
- package/dist/database/database.js +10 -0
- package/dist/database/models/User.d.ts +9 -0
- package/dist/database/models/User.js +19 -0
- package/dist/database/models/WSAuth.d.ts +6 -0
- package/dist/database/models/WSAuth.js +19 -0
- package/dist/expressServer.d.ts +20 -0
- package/dist/expressServer.js +52 -0
- package/dist/logs/logs.d.ts +29 -0
- package/dist/logs/logs.js +132 -0
- package/dist/middlewares/auth.d.ts +6 -0
- package/dist/middlewares/auth.js +35 -0
- package/dist/middlewares/post.d.ts +1 -0
- package/dist/middlewares/post.js +6 -0
- package/dist/middlewares/wsauth.d.ts +1 -0
- package/dist/middlewares/wsauth.js +56 -0
- package/dist/modules/initcors.d.ts +1 -0
- package/dist/modules/initcors.js +13 -0
- package/dist/modules/postreader.d.ts +1 -0
- package/dist/modules/postreader.js +12 -0
- package/dist/modules/sessions.d.ts +1 -0
- package/dist/modules/sessions.js +20 -0
- package/dist/routes/userauth.d.ts +2 -0
- package/dist/routes/userauth.js +68 -0
- package/dist/routes/userresgister.d.ts +2 -0
- package/dist/routes/userresgister.js +42 -0
- package/dist/routes/wsauth.d.ts +1 -0
- package/dist/routes/wsauth.js +33 -0
- package/dist/server.d.ts +15 -0
- package/dist/server.js +42 -0
- package/dist/sessions/secureget.d.ts +1 -0
- package/dist/sessions/secureget.js +7 -0
- package/dist/sessions/secureset.d.ts +2 -0
- package/dist/sessions/secureset.js +11 -0
- package/dist/settings/database/database.d.ts +11 -0
- package/dist/settings/database/database.js +15 -0
- package/dist/settings/env.d.ts +15 -0
- package/dist/settings/env.js +30 -0
- package/dist/users/password.d.ts +3 -0
- package/dist/users/password.js +41 -0
- package/dist/users/types.d.ts +6 -0
- package/dist/users/types.js +3 -0
- package/dist/users/users.d.ts +12 -0
- package/dist/users/users.js +143 -0
- package/dist/utils/debug/debug.d.ts +1 -0
- package/dist/utils/debug/debug.js +15 -0
- package/dist/utils/response.d.ts +8 -0
- package/dist/utils/response.js +27 -0
- package/dist/utils/string/random.d.ts +1 -0
- package/dist/utils/string/random.js +14 -0
- package/dist/utils/validators/email.d.ts +1 -0
- package/dist/utils/validators/email.js +18 -0
- package/dist/wsauth/types.d.ts +0 -0
- package/dist/wsauth/types.js +1 -0
- package/dist/wsauth/wsauth.d.ts +5 -0
- package/dist/wsauth/wsauth.js +111 -0
- package/package.json +1 -1
- package/src/settings/env.ts +8 -2
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.logoutUser = exports.setUserLogged = exports.userIsLogged = void 0;
|
|
4
|
+
const secureget_1 = require("../sessions/secureget");
|
|
5
|
+
const config_1 = require("./config");
|
|
6
|
+
const server_1 = require("../server");
|
|
7
|
+
const server_2 = require("../server");
|
|
8
|
+
function userIsLogged(req) {
|
|
9
|
+
let user = (0, secureget_1.getSessionValue)(req, config_1.SESSION_LOGGED_DATA);
|
|
10
|
+
if (user)
|
|
11
|
+
return true;
|
|
12
|
+
return false;
|
|
13
|
+
}
|
|
14
|
+
exports.userIsLogged = userIsLogged;
|
|
15
|
+
function setUserLogged(req, email) {
|
|
16
|
+
(0, server_1.setSessionValue)(req, config_1.SESSION_LOGGED_DATA, email);
|
|
17
|
+
}
|
|
18
|
+
exports.setUserLogged = setUserLogged;
|
|
19
|
+
function logoutUser(req) {
|
|
20
|
+
(0, server_2.deleteSessionValue)(req, config_1.SESSION_LOGGED_DATA);
|
|
21
|
+
}
|
|
22
|
+
exports.logoutUser = logoutUser;
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare const SESSION_LOGGED_DATA = "email";
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.dataBase = void 0;
|
|
7
|
+
//@ts-nocheck
|
|
8
|
+
const sequelize_1 = require("sequelize");
|
|
9
|
+
const database_1 = __importDefault(require("./../settings/database/database"));
|
|
10
|
+
exports.dataBase = new sequelize_1.Sequelize(database_1.default);
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.User = void 0;
|
|
4
|
+
const sequelize_1 = require("sequelize");
|
|
5
|
+
const sequelize_2 = require("sequelize");
|
|
6
|
+
const database_1 = require("../database");
|
|
7
|
+
class User extends sequelize_1.Model {
|
|
8
|
+
}
|
|
9
|
+
exports.User = User;
|
|
10
|
+
User.init({
|
|
11
|
+
first_name: sequelize_2.DataTypes.STRING,
|
|
12
|
+
email: sequelize_2.DataTypes.STRING,
|
|
13
|
+
is_active: sequelize_2.DataTypes.BOOLEAN,
|
|
14
|
+
password_hash: sequelize_2.DataTypes.STRING,
|
|
15
|
+
last_action: sequelize_2.DataTypes.DATE,
|
|
16
|
+
}, {
|
|
17
|
+
sequelize: database_1.dataBase,
|
|
18
|
+
tableName: 'spc_users',
|
|
19
|
+
});
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.WebSocketAuth = void 0;
|
|
4
|
+
const sequelize_1 = require("sequelize");
|
|
5
|
+
const sequelize_2 = require("sequelize");
|
|
6
|
+
const database_1 = require("../database");
|
|
7
|
+
class WebSocketAuth extends sequelize_1.Model {
|
|
8
|
+
}
|
|
9
|
+
exports.WebSocketAuth = WebSocketAuth;
|
|
10
|
+
WebSocketAuth.init({
|
|
11
|
+
token: sequelize_2.DataTypes.STRING,
|
|
12
|
+
expiration: sequelize_2.DataTypes.DATE,
|
|
13
|
+
user_id: sequelize_2.DataTypes.INTEGER,
|
|
14
|
+
is_active: sequelize_2.DataTypes.BOOLEAN,
|
|
15
|
+
auth_connection_token: sequelize_2.DataTypes.STRING,
|
|
16
|
+
}, {
|
|
17
|
+
sequelize: database_1.dataBase,
|
|
18
|
+
tableName: 'spc_wsauth'
|
|
19
|
+
});
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
/// <reference types="node" />
|
|
2
|
+
import express from "express";
|
|
3
|
+
import { Express } from "express";
|
|
4
|
+
import { Server } from "http";
|
|
5
|
+
export default class ExpressServer {
|
|
6
|
+
app: Express;
|
|
7
|
+
authUserBaseUrl: string;
|
|
8
|
+
registerUserBaseUrl: string;
|
|
9
|
+
usePort: number;
|
|
10
|
+
server?: Server;
|
|
11
|
+
wsAuthBaseUrl: string;
|
|
12
|
+
constructor();
|
|
13
|
+
listen(port?: any): void;
|
|
14
|
+
initModules(): void;
|
|
15
|
+
initUserAuthSystem(baseUrl?: string): void;
|
|
16
|
+
initUserRegisterSystem(baseUrl?: string): void;
|
|
17
|
+
initWSAuthSystem(wsBaseUrl?: string): void;
|
|
18
|
+
getApp(): express.Express;
|
|
19
|
+
getServer(): Server | undefined;
|
|
20
|
+
}
|
|
@@ -0,0 +1,52 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
const express_1 = __importDefault(require("express"));
|
|
7
|
+
const sessions_1 = require("./modules/sessions");
|
|
8
|
+
const postreader_1 = require("./modules/postreader");
|
|
9
|
+
const initcors_1 = require("./modules/initcors");
|
|
10
|
+
const env_1 = __importDefault(require("./settings/env"));
|
|
11
|
+
const userauth_1 = __importDefault(require("./routes/userauth"));
|
|
12
|
+
const wsauth_1 = require("./routes/wsauth");
|
|
13
|
+
const userresgister_1 = __importDefault(require("./routes/userresgister"));
|
|
14
|
+
class ExpressServer {
|
|
15
|
+
constructor() {
|
|
16
|
+
this.authUserBaseUrl = "";
|
|
17
|
+
this.wsAuthBaseUrl = "";
|
|
18
|
+
this.registerUserBaseUrl = "";
|
|
19
|
+
this.usePort = env_1.default.PORT;
|
|
20
|
+
this.app = (0, express_1.default)();
|
|
21
|
+
this.initModules();
|
|
22
|
+
}
|
|
23
|
+
listen(port = null) {
|
|
24
|
+
if (port != null)
|
|
25
|
+
this.usePort = parseInt(port);
|
|
26
|
+
this.server = this.app.listen(this.usePort);
|
|
27
|
+
}
|
|
28
|
+
initModules() {
|
|
29
|
+
(0, sessions_1.initSessions)(this.app);
|
|
30
|
+
(0, postreader_1.initPostReader)(this.app);
|
|
31
|
+
(0, initcors_1.initCors)(this.app);
|
|
32
|
+
}
|
|
33
|
+
initUserAuthSystem(baseUrl = '/user') {
|
|
34
|
+
this.authUserBaseUrl = baseUrl;
|
|
35
|
+
this.app.use(this.authUserBaseUrl, userauth_1.default);
|
|
36
|
+
}
|
|
37
|
+
initUserRegisterSystem(baseUrl = '/userregister') {
|
|
38
|
+
this.registerUserBaseUrl = baseUrl;
|
|
39
|
+
this.app.use(this.registerUserBaseUrl, userresgister_1.default);
|
|
40
|
+
}
|
|
41
|
+
initWSAuthSystem(wsBaseUrl = '/ws') {
|
|
42
|
+
this.wsAuthBaseUrl = wsBaseUrl;
|
|
43
|
+
this.app.use(this.wsAuthBaseUrl, wsauth_1.router);
|
|
44
|
+
}
|
|
45
|
+
getApp() {
|
|
46
|
+
return this.app;
|
|
47
|
+
}
|
|
48
|
+
getServer() {
|
|
49
|
+
return this.server;
|
|
50
|
+
}
|
|
51
|
+
}
|
|
52
|
+
exports.default = ExpressServer;
|
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
import { Request } from 'express';
|
|
2
|
+
export declare const BASE_LOG_PATH = "./logs";
|
|
3
|
+
export declare enum LogSeverity {
|
|
4
|
+
danger = "danger",
|
|
5
|
+
servere = "severe",
|
|
6
|
+
moderate = "moderate",
|
|
7
|
+
info = "info"
|
|
8
|
+
}
|
|
9
|
+
export interface SaveLogOptions {
|
|
10
|
+
userId?: number;
|
|
11
|
+
data: string;
|
|
12
|
+
severity: LogSeverity;
|
|
13
|
+
addPath?: string;
|
|
14
|
+
filePrefix?: string;
|
|
15
|
+
penTestSuspcion?: boolean;
|
|
16
|
+
req?: Request;
|
|
17
|
+
ip?: string;
|
|
18
|
+
url?: string;
|
|
19
|
+
}
|
|
20
|
+
export declare function stringfyError(err: any): string;
|
|
21
|
+
export declare function getIpFromRequest(req: Request): string;
|
|
22
|
+
export declare function saveInternalErrorLog(req: Request, error: any, options?: {
|
|
23
|
+
penTestSuspcion?: boolean;
|
|
24
|
+
severity?: LogSeverity;
|
|
25
|
+
}): Promise<void>;
|
|
26
|
+
export declare function saveLog(options: SaveLogOptions): {
|
|
27
|
+
fileName: string;
|
|
28
|
+
basePath: string;
|
|
29
|
+
};
|
|
@@ -0,0 +1,132 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
+
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
+
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
+
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
+
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
+
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
+
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
+
});
|
|
10
|
+
};
|
|
11
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
12
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
13
|
+
};
|
|
14
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
15
|
+
exports.saveLog = exports.saveInternalErrorLog = exports.getIpFromRequest = exports.stringfyError = exports.LogSeverity = exports.BASE_LOG_PATH = void 0;
|
|
16
|
+
const fs_1 = __importDefault(require("fs"));
|
|
17
|
+
const path_1 = __importDefault(require("path"));
|
|
18
|
+
exports.BASE_LOG_PATH = './logs';
|
|
19
|
+
var LogSeverity;
|
|
20
|
+
(function (LogSeverity) {
|
|
21
|
+
LogSeverity["danger"] = "danger";
|
|
22
|
+
LogSeverity["servere"] = "severe";
|
|
23
|
+
LogSeverity["moderate"] = "moderate";
|
|
24
|
+
LogSeverity["info"] = "info";
|
|
25
|
+
})(LogSeverity = exports.LogSeverity || (exports.LogSeverity = {}));
|
|
26
|
+
function stringfyError(err) {
|
|
27
|
+
const type = typeof (err);
|
|
28
|
+
if (type !== 'object')
|
|
29
|
+
return err.toString();
|
|
30
|
+
let ret = stringfyObject(err, 0);
|
|
31
|
+
return ret || "";
|
|
32
|
+
function stringfyObject(obj, level = 0) {
|
|
33
|
+
if (!obj)
|
|
34
|
+
return "";
|
|
35
|
+
if (typeof (obj) !== 'object')
|
|
36
|
+
return obj.toString();
|
|
37
|
+
if (level == 5)
|
|
38
|
+
return "Is Object level max 8";
|
|
39
|
+
let ret = {};
|
|
40
|
+
for (let key of Object.keys(obj)) {
|
|
41
|
+
let value = obj[key];
|
|
42
|
+
//@ts-ignore
|
|
43
|
+
ret[key] = typeof (value) == 'object' ? stringfyObject(value, level + 1).replaceAll('\\', '') : value === null || value === void 0 ? void 0 : value.toString();
|
|
44
|
+
}
|
|
45
|
+
return JSON.stringify(ret);
|
|
46
|
+
}
|
|
47
|
+
}
|
|
48
|
+
exports.stringfyError = stringfyError;
|
|
49
|
+
function getIpFromRequest(req) {
|
|
50
|
+
//@
|
|
51
|
+
let ips = (req.headers['cf-connecting-ip'] ||
|
|
52
|
+
req.headers['x-real-ip'] ||
|
|
53
|
+
req.headers['x-forwarded-for'] ||
|
|
54
|
+
req.ip || '');
|
|
55
|
+
if (typeof (ips) == 'string') {
|
|
56
|
+
ips = ips.split(',');
|
|
57
|
+
}
|
|
58
|
+
return ips[0].trim();
|
|
59
|
+
}
|
|
60
|
+
exports.getIpFromRequest = getIpFromRequest;
|
|
61
|
+
function saveInternalErrorLog(req, error, options) {
|
|
62
|
+
var _a;
|
|
63
|
+
return __awaiter(this, void 0, void 0, function* () {
|
|
64
|
+
try {
|
|
65
|
+
const ip = getIpFromRequest(req);
|
|
66
|
+
const url = req.originalUrl;
|
|
67
|
+
//@ts-ignore
|
|
68
|
+
const userId = (_a = req.user) === null || _a === void 0 ? void 0 : _a.id;
|
|
69
|
+
let errorString = stringfyError(error);
|
|
70
|
+
saveLog({
|
|
71
|
+
ip: ip,
|
|
72
|
+
url: url,
|
|
73
|
+
userId: userId,
|
|
74
|
+
data: errorString,
|
|
75
|
+
severity: (options === null || options === void 0 ? void 0 : options.severity) || LogSeverity.info,
|
|
76
|
+
penTestSuspcion: options === null || options === void 0 ? void 0 : options.penTestSuspcion,
|
|
77
|
+
});
|
|
78
|
+
}
|
|
79
|
+
catch (e) {
|
|
80
|
+
console.log("Error ON Save Log", e);
|
|
81
|
+
}
|
|
82
|
+
});
|
|
83
|
+
}
|
|
84
|
+
exports.saveInternalErrorLog = saveInternalErrorLog;
|
|
85
|
+
function saveLog(options) {
|
|
86
|
+
if (!fs_1.default.existsSync(exports.BASE_LOG_PATH)) {
|
|
87
|
+
fs_1.default.mkdirSync(exports.BASE_LOG_PATH);
|
|
88
|
+
}
|
|
89
|
+
let basePath = exports.BASE_LOG_PATH;
|
|
90
|
+
if (options.addPath) {
|
|
91
|
+
basePath = path_1.default.join(basePath, options.addPath);
|
|
92
|
+
if (!fs_1.default.existsSync(basePath)) {
|
|
93
|
+
fs_1.default.mkdirSync(basePath);
|
|
94
|
+
}
|
|
95
|
+
}
|
|
96
|
+
if (options.userId) {
|
|
97
|
+
basePath = path_1.default.join(basePath, options.userId.toString());
|
|
98
|
+
}
|
|
99
|
+
else {
|
|
100
|
+
basePath = path_1.default.join(basePath, "unlogged");
|
|
101
|
+
}
|
|
102
|
+
if (!fs_1.default.existsSync(basePath)) {
|
|
103
|
+
fs_1.default.mkdirSync(basePath);
|
|
104
|
+
}
|
|
105
|
+
let fileName = path_1.default.join(basePath, `${options.filePrefix ? options.filePrefix + '_' : ""}${getDateString(new Date())}.csv`);
|
|
106
|
+
let data = "";
|
|
107
|
+
if (fs_1.default.existsSync(fileName)) {
|
|
108
|
+
data = fs_1.default.readFileSync(fileName).toString() + "\n";
|
|
109
|
+
}
|
|
110
|
+
if (!data) {
|
|
111
|
+
data = 'Data;Severidade;Usuário;Dados;IP;URL;Supeita de Ataque\n';
|
|
112
|
+
}
|
|
113
|
+
data += `${new Date()};${options.severity};${options.userId || "Deslogado"};${options.data};${options.ip || "Não Informado"};${options.url || "Não Informado"};${options.penTestSuspcion ? "SIM" : "NÃO"}`;
|
|
114
|
+
fs_1.default.writeFileSync(fileName, data);
|
|
115
|
+
return {
|
|
116
|
+
fileName,
|
|
117
|
+
basePath,
|
|
118
|
+
};
|
|
119
|
+
}
|
|
120
|
+
exports.saveLog = saveLog;
|
|
121
|
+
function getDateString(d) {
|
|
122
|
+
const year = d.getFullYear();
|
|
123
|
+
const month = zerof(d.getMonth() + 1);
|
|
124
|
+
const day = zerof(d.getDate());
|
|
125
|
+
const hour = zerof(d.getHours());
|
|
126
|
+
return `${year}_${month}_${day}_${hour}`;
|
|
127
|
+
function zerof(n) {
|
|
128
|
+
if (n > 9)
|
|
129
|
+
return n.toString();
|
|
130
|
+
return `0${n}`;
|
|
131
|
+
}
|
|
132
|
+
}
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
+
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
+
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
+
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
+
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
+
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
+
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
+
});
|
|
10
|
+
};
|
|
11
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
12
|
+
exports.setUserDataMiddleware = void 0;
|
|
13
|
+
const server_1 = require("../server");
|
|
14
|
+
const server_2 = require("../server");
|
|
15
|
+
const server_3 = require("../server");
|
|
16
|
+
const response_1 = require("../utils/response");
|
|
17
|
+
function setUserDataMiddleware(req, res, next) {
|
|
18
|
+
return __awaiter(this, void 0, void 0, function* () {
|
|
19
|
+
if (!(0, server_1.userIsLogged)(req))
|
|
20
|
+
return res.status(401).send((0, server_2.JSONResponse)({}, "User Must Be Logged"));
|
|
21
|
+
try {
|
|
22
|
+
const dealerEmail = (0, server_3.getUserSessionData)(req);
|
|
23
|
+
const user = yield server_1.User.findOne({ where: { email: dealerEmail, is_active: true } });
|
|
24
|
+
if (!user)
|
|
25
|
+
throw "Unknown user";
|
|
26
|
+
req.user = user;
|
|
27
|
+
yield (0, server_1.updateUserLastAction)(user);
|
|
28
|
+
next();
|
|
29
|
+
}
|
|
30
|
+
catch (e) {
|
|
31
|
+
return (0, response_1.sendIError)(req, res, e);
|
|
32
|
+
}
|
|
33
|
+
});
|
|
34
|
+
}
|
|
35
|
+
exports.setUserDataMiddleware = setUserDataMiddleware;
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare function checkAndFilterPostParams(req: any, res: any, next: any): void;
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare function checkWSAuth(ws: any, msg: any): Promise<boolean>;
|
|
@@ -0,0 +1,56 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
+
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
+
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
+
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
+
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
+
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
+
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
+
});
|
|
10
|
+
};
|
|
11
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
12
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
13
|
+
};
|
|
14
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
15
|
+
exports.checkWSAuth = void 0;
|
|
16
|
+
const random_1 = require("../utils/string/random");
|
|
17
|
+
const wsauth_1 = require("../wsauth/wsauth");
|
|
18
|
+
const response_1 = require("../utils/response");
|
|
19
|
+
const server_1 = require("../server");
|
|
20
|
+
const meta_sanitizer_1 = __importDefault(require("meta-sanitizer"));
|
|
21
|
+
const DEBUG = true;
|
|
22
|
+
function checkWSAuth(ws, msg) {
|
|
23
|
+
return __awaiter(this, void 0, void 0, function* () {
|
|
24
|
+
try {
|
|
25
|
+
if (ws.userId && ws.connectionToken) {
|
|
26
|
+
if ((yield (0, wsauth_1.checkConnectionAuth)(ws.userId, ws.connectionToken)))
|
|
27
|
+
return true;
|
|
28
|
+
}
|
|
29
|
+
const message = JSON.parse(msg);
|
|
30
|
+
if (message.action === "Authenticate") {
|
|
31
|
+
const token = meta_sanitizer_1.default.justCharsAndNumbers(message.token, false);
|
|
32
|
+
const userId = parseInt(meta_sanitizer_1.default.justNumbers(message.userId, false));
|
|
33
|
+
const connectionToken = (0, random_1.randomString)(35);
|
|
34
|
+
if ((yield (0, server_1.authenticateWS)(userId, token, connectionToken))) {
|
|
35
|
+
ws.userId = userId;
|
|
36
|
+
ws.connectionToken = connectionToken;
|
|
37
|
+
return true;
|
|
38
|
+
}
|
|
39
|
+
else {
|
|
40
|
+
return sendError(false, "Invalid Token or UserID");
|
|
41
|
+
}
|
|
42
|
+
}
|
|
43
|
+
else {
|
|
44
|
+
return sendError(false, "Need auth", "'action'='Authenticate' and must have 'token' and 'userId'");
|
|
45
|
+
}
|
|
46
|
+
}
|
|
47
|
+
catch (e) {
|
|
48
|
+
return sendError(false, "Internal Error", "", e);
|
|
49
|
+
}
|
|
50
|
+
function sendError(isOk, message, errorMessage = "", data = {}) {
|
|
51
|
+
ws.send((0, response_1.WSResponse)(isOk, message, errorMessage, data));
|
|
52
|
+
return false;
|
|
53
|
+
}
|
|
54
|
+
});
|
|
55
|
+
}
|
|
56
|
+
exports.checkWSAuth = checkWSAuth;
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare function initCors(app: any): void;
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.initCors = void 0;
|
|
7
|
+
const cors_1 = __importDefault(require("cors"));
|
|
8
|
+
const env_1 = __importDefault(require("../settings/env"));
|
|
9
|
+
function initCors(app) {
|
|
10
|
+
if (env_1.default.ALLOW_CORS)
|
|
11
|
+
app.use((0, cors_1.default)());
|
|
12
|
+
}
|
|
13
|
+
exports.initCors = initCors;
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare function initPostReader(app: any): void;
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.initPostReader = void 0;
|
|
7
|
+
const express_1 = __importDefault(require("express"));
|
|
8
|
+
function initPostReader(app) {
|
|
9
|
+
app.use(express_1.default.json());
|
|
10
|
+
app.use(express_1.default.urlencoded({ extended: true }));
|
|
11
|
+
}
|
|
12
|
+
exports.initPostReader = initPostReader;
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare function initSessions(app: any): void;
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.initSessions = void 0;
|
|
7
|
+
const express_session_1 = __importDefault(require("express-session"));
|
|
8
|
+
const env_1 = __importDefault(require("../settings/env"));
|
|
9
|
+
function initSessions(app) {
|
|
10
|
+
app.set('trust proxy', 1); // trust first proxy
|
|
11
|
+
app.use((0, express_session_1.default)({
|
|
12
|
+
secret: env_1.default.SESSION_SECRET,
|
|
13
|
+
resave: false,
|
|
14
|
+
saveUninitialized: true,
|
|
15
|
+
cookie: { secure: env_1.default.NODE_ENV == 'development' ? false : true,
|
|
16
|
+
httpOnly: true,
|
|
17
|
+
},
|
|
18
|
+
}));
|
|
19
|
+
}
|
|
20
|
+
exports.initSessions = initSessions;
|
|
@@ -0,0 +1,68 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
+
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
+
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
+
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
+
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
+
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
+
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
+
});
|
|
10
|
+
};
|
|
11
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
12
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
13
|
+
};
|
|
14
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
15
|
+
const express_1 = __importDefault(require("express"));
|
|
16
|
+
const response_1 = require("../utils/response");
|
|
17
|
+
const auth_1 = require("../auth/auth");
|
|
18
|
+
const meta_sanitizer_1 = __importDefault(require("meta-sanitizer"));
|
|
19
|
+
const users_1 = require("../users/users");
|
|
20
|
+
const auth_2 = require("../middlewares/auth");
|
|
21
|
+
const auth_3 = require("../auth/auth");
|
|
22
|
+
const auth_4 = require("../auth/auth");
|
|
23
|
+
const server_1 = require("../server");
|
|
24
|
+
const router = express_1.default.Router();
|
|
25
|
+
router.post('/logout', (req, res) => {
|
|
26
|
+
let is_ok = false;
|
|
27
|
+
if ((0, auth_1.userIsLogged)(req)) {
|
|
28
|
+
(0, auth_4.logoutUser)(req);
|
|
29
|
+
is_ok = true;
|
|
30
|
+
}
|
|
31
|
+
res.send((0, response_1.JSONResponse)("OK"));
|
|
32
|
+
});
|
|
33
|
+
router.post('/login', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
|
|
34
|
+
let email = "";
|
|
35
|
+
let password = "";
|
|
36
|
+
try {
|
|
37
|
+
email = meta_sanitizer_1.default.sanitizeEmail(req.body.email);
|
|
38
|
+
password = meta_sanitizer_1.default.queryProtector(req.body.password);
|
|
39
|
+
}
|
|
40
|
+
catch (e) {
|
|
41
|
+
return res.status(403).send((0, response_1.JSONResponse)({}, "Must have 'email' and 'password' params"));
|
|
42
|
+
}
|
|
43
|
+
if (password == "" || email == "")
|
|
44
|
+
return res.status(403).send((0, response_1.JSONResponse)({}, "Must have 'email' and 'password' params"));
|
|
45
|
+
email = email.toLocaleLowerCase();
|
|
46
|
+
try {
|
|
47
|
+
const checkPass = yield (0, users_1.checkUserPassword)(email, password);
|
|
48
|
+
if (checkPass) {
|
|
49
|
+
const user = yield server_1.User.findOne({ where: { email: email } });
|
|
50
|
+
if (!user)
|
|
51
|
+
throw "Dont find User";
|
|
52
|
+
if (!user.is_active) {
|
|
53
|
+
return res.status(403).send((0, response_1.JSONResponse)({}, "User deleted"));
|
|
54
|
+
}
|
|
55
|
+
(0, auth_3.setUserLogged)(req, email);
|
|
56
|
+
yield (0, users_1.updateUserLastAction)(user);
|
|
57
|
+
return res.status(200).send((0, response_1.JSONResponse)("Login Ok"));
|
|
58
|
+
}
|
|
59
|
+
return res.status(403).send((0, response_1.JSONResponse)({}, "Invalid Password"));
|
|
60
|
+
}
|
|
61
|
+
catch (e) {
|
|
62
|
+
return (0, response_1.sendIError)(req, res, e);
|
|
63
|
+
}
|
|
64
|
+
}));
|
|
65
|
+
router.post('/getuser', auth_2.setUserDataMiddleware, (req, res) => __awaiter(void 0, void 0, void 0, function* () {
|
|
66
|
+
res.send((0, response_1.JSONResponse)({ email: req.user.email, id: req.user.id }));
|
|
67
|
+
}));
|
|
68
|
+
exports.default = router;
|
|
@@ -0,0 +1,42 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
3
|
+
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
4
|
+
return new (P || (P = Promise))(function (resolve, reject) {
|
|
5
|
+
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
6
|
+
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
7
|
+
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
8
|
+
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
9
|
+
});
|
|
10
|
+
};
|
|
11
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
12
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
13
|
+
};
|
|
14
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
15
|
+
const express_1 = require("express");
|
|
16
|
+
const email_1 = require("../utils/validators/email");
|
|
17
|
+
const server_1 = require("../server");
|
|
18
|
+
const server_2 = require("../server");
|
|
19
|
+
const response_1 = require("../utils/response");
|
|
20
|
+
const meta_sanitizer_1 = __importDefault(require("meta-sanitizer"));
|
|
21
|
+
const router = (0, express_1.Router)();
|
|
22
|
+
router.post('/register', (req, res) => __awaiter(void 0, void 0, void 0, function* () {
|
|
23
|
+
try {
|
|
24
|
+
let email = meta_sanitizer_1.default.sanitizeEmail(req.body.email || '');
|
|
25
|
+
let password = meta_sanitizer_1.default.queryProtector(req.body.password || '');
|
|
26
|
+
let name = meta_sanitizer_1.default.SanitizerEngine(req.body.name || '', true, false, [' ']).sanitizedData;
|
|
27
|
+
if (email == "" || password == "" || name == "")
|
|
28
|
+
return res.send((0, server_2.JSONResponse)({}, "Invalid params"));
|
|
29
|
+
email = email.toLocaleLowerCase();
|
|
30
|
+
if (!(0, email_1.checkEmail)(email)) {
|
|
31
|
+
return res.status(403).send((0, server_2.JSONResponse)({}, "Invalid Email"));
|
|
32
|
+
}
|
|
33
|
+
yield (0, server_1.createUser)({ first_name: name, email: email, password_string: password });
|
|
34
|
+
return res.send((0, server_2.JSONResponse)("REGISTER OK"));
|
|
35
|
+
}
|
|
36
|
+
catch (e) {
|
|
37
|
+
if (e === "User exist")
|
|
38
|
+
return res.send((0, server_2.JSONResponse)({}, "User Exist"));
|
|
39
|
+
return (0, response_1.sendIError)(req, res, e);
|
|
40
|
+
}
|
|
41
|
+
}));
|
|
42
|
+
exports.default = router;
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare const router: import("express-serve-static-core").Router;
|