spec-3nweb-server 1.8.5 → 1.8.6

package/ts-code/mock/dns.ts

@@ -0,0 +1,106 @@
+/*
+ Copyright (C) 2016 3NSoft Inc.
+ 
+ This program is free software: you can redistribute it and/or modify it under
+ the terms of the GNU General Public License as published by the Free Software
+ Foundation, either version 3 of the License, or (at your option) any later
+ version.
+ 
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+ 
+ You should have received a copy of the GNU General Public License along with
+ this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+
+
+const DNS_ERR_CODE = {
+	NODATA: 'ENODATA',
+	NOTFOUND: 'ENOTFOUND'
+};
+Object.freeze(DNS_ERR_CODE);
+
+interface DnsError extends Error {
+	code: string;
+	hostname: string;
+}
+
+function makeDnsError(code: string, hostname: string): DnsError {
+	const e = <DnsError> new Error(`Mocked DNS error with code ${code}`);
+	e.code = code;
+	e.hostname = hostname;
+	return e;
+}
+
+/**
+ * @param address
+ * @return domain string, extracted from a given address
+ */
+function domainOfAddress(address: string): string {
+	address = address.trim();
+	const indOfAt = address.lastIndexOf('@');
+	const domain = ((indOfAt < 0) ? address : address.substring(indOfAt+1));
+	return domain;
+}
+
+export interface DnsTxtRecords {
+	[ domain: string ]: string[][];
+}
+
+export class DNSMock {
+
+	resolveTxt: (
+		domain: string,
+		callback: (err: Error, txt: string[][]) =>void
+	) => void;
+	
+	private domains = new Map<string, string[][]>();
+	private mailerIdRec: string;
+	
+	constructor(midUrlOrBulkRecs: string | DnsTxtRecords) {
+		if (typeof midUrlOrBulkRecs === 'string') {
+			if (midUrlOrBulkRecs.indexOf('://') >= 0) {
+				this.mailerIdRec = midUrlOrBulkRecs.substring(
+					midUrlOrBulkRecs.indexOf('://')+3);
+			} else {
+				this.mailerIdRec = midUrlOrBulkRecs;
+			}
+		} else {
+			const domains = Object.keys(midUrlOrBulkRecs);
+			for (const d of domains) {
+				this.domains.set(d, midUrlOrBulkRecs[d]);
+			}
+		}
+		this.resolveTxt = this.mockResolve.bind(this);
+		Object.freeze(this);
+	}
+	
+	private mockResolve(
+		domain: string,
+		callback: (err: any, txt: string[][]) => void
+	): void {
+		const d = domainOfAddress(domain);
+		const txt = this.domains.get(d);
+		if (txt) {
+			callback(null, txt);
+		} else {
+			callback(makeDnsError(DNS_ERR_CODE.NOTFOUND, d), null as any);
+		}
+	}
+
+	// TODO at this moment only mailerid record is added.
+	//		May be this method should take a more detailed options object.  
+	configureFor(userId: string): void {
+		if (!this.mailerIdRec) { throw new Error(
+			'DNS mock is not set to configure individial entries'); }
+		this.domains.set(domainOfAddress(userId),
+			[ [ `mailerid=${this.mailerIdRec}` ] ]);
+	}
+	
+}
+Object.freeze(DNSMock.prototype);
+Object.freeze(DNSMock);
+
+Object.freeze(exports);

package/ts-code/mock/mock-as-child-proc.ts

@@ -0,0 +1,130 @@
+/*
+ Copyright (C) 2016, 2020 3NSoft Inc.
+ 
+ This program is free software: you can redistribute it and/or modify it under
+ the terms of the GNU General Public License as published by the Free Software
+ Foundation, either version 3 of the License, or (at your option) any later
+ version.
+ 
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+ 
+ You should have received a copy of the GNU General Public License along with
+ this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+
+import { commToParent, RequestEnvelope } from './node-child-ipc';
+import { Configurations, servicesApp as makeServicesApp, accountsApp } from '../services';
+import * as dns from 'dns';
+import { DNSMock, DnsTxtRecords } from './dns';
+import { mkdir, rmDirWithContent, writeFile } from '../lib-common/async-fs-node';
+import { FileException } from '../lib-common/exceptions/file';
+import * as https from "https";
+import { sslOpts } from './tls-options';
+import { AppWithWSs } from '../lib-server/web-sockets/app';
+import { join } from 'path';
+import { makeMultiDomainSignupCtx } from '../signup/signup-tokens';
+
+const SERVER_MOCK_CHANNEL = 'server-mock';
+
+const parent = commToParent(SERVER_MOCK_CHANNEL);
+
+const DEFAULT_SERVICE_PORT = 8088;
+const DEFAULT_DATA_FOLDER = join(__dirname, '/../../mock-data');
+
+let dnsMock: DNSMock;
+let app: AppWithWSs|undefined;
+
+parent.addHandler('set-dns-mock', setDnsMock);
+async function setDnsMock(env: RequestEnvelope<DnsTxtRecords>) {
+	dnsMock = new DNSMock(env.req);
+	(dns as any).resolveTxt = dnsMock.resolveTxt;
+}
+
+interface ServiceUrls {
+	mailerId: string;
+	asmail: string;
+	storage: string;
+	signup: string;
+	tlsCert: string;
+}
+
+interface MockConfAtStart {
+	port?: number;
+	dataFolder?: string;
+	midServiceDomain: string;
+	signupDomains: string[];
+}
+
+async function cleanDataFolder(): Promise<void> {
+	await rmDirWithContent(DEFAULT_DATA_FOLDER).catch((exc: FileException) => {
+		if (!exc.notFound) { throw exc; }
+	});
+}
+
+parent.addHandler('start', start);
+async function start(
+	env: RequestEnvelope<MockConfAtStart>
+): Promise<ServiceUrls> {
+	
+	// get configurations to start services
+	const servicePort = (env.req.port ? env.req.port : DEFAULT_SERVICE_PORT);
+	const dataFolder = (env.req.dataFolder ?
+		env.req.dataFolder : DEFAULT_DATA_FOLDER);
+	const noTokensFilePath = join(dataFolder, 'no-tokens-signup.json');
+	const conf: Configurations = {
+		rootFolder: dataFolder,
+		domain: env.req.midServiceDomain,
+		signup: {
+			noTokenFile: noTokensFilePath
+		},
+		enabledServices: {
+			mailerId: true,
+			asmail: true,
+			storage: true
+		},
+		mailerId: {
+			certs: join(dataFolder, 'mid-certs.json')
+		}
+	};
+
+	// prepare data folders
+	await cleanDataFolder();
+	await mkdir(dataFolder);
+	// write to-tokens signup file
+	const noTokenCtx = makeMultiDomainSignupCtx(env.req.signupDomains);
+	await writeFile(
+		noTokensFilePath, JSON.stringify(noTokenCtx), { encoding: 'utf8' }
+	);
+
+	// setup app
+	app = new AppWithWSs();
+	app.use(accountsApp(conf));
+	app.use(makeServicesApp(conf));
+
+	// start app
+	await app.start(sslOpts, servicePort);
+
+	// set client https to trust the cert (MailerId checks need this)
+	(<any> https.globalAgent).options.ca = sslOpts.cert;
+
+	// return services' urls
+	const urls: ServiceUrls = {
+		mailerId: `${conf.domain}:${servicePort}/mailerid/`,
+		asmail: `${conf.domain}:${servicePort}/asmail/`,
+		storage: `${conf.domain}:${servicePort}/3nstorage/`,
+		signup: `${conf.domain}:${servicePort}/signup/`,
+		tlsCert: sslOpts.cert as string
+	};
+	return urls;
+}
+
+parent.addHandler('stop', stop);
+async function stop(env: RequestEnvelope<void>): Promise<void> {
+	if (!app) { return; }
+	await app.stop();
+	app = undefined;
+	await cleanDataFolder();
+}

package/ts-code/mock/node-child-ipc.ts

@@ -0,0 +1,69 @@
+/*
+ Copyright (C) 2016 - 2017 3NSoft Inc.
+ 
+ This program is free software: you can redistribute it and/or modify it under
+ the terms of the GNU General Public License as published by the Free Software
+ Foundation, either version 3 of the License, or (at your option) any later
+ version.
+ 
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+ 
+ You should have received a copy of the GNU General Public License along with
+ this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+
+
+import * as cProcs from 'child_process';
+import { RawDuplex, RequestServer, makeRequestServer, RequestingClient, makeRequestingClient, Envelope, Observer, SingleObserverWrap } from '../lib-common/ipc/generic-ipc';
+
+export { RequestEnvelope, RequestHandler } from '../lib-common/ipc/generic-ipc';
+
+export type IPCToChild = RequestingClient;
+export type IPCToParent = RequestServer;
+
+export function commToChild(channel: string, child: cProcs.ChildProcess):
+		IPCToChild {
+	const observer = new SingleObserverWrap<Envelope>();
+	const nodeListener = (env: Envelope) => observer.next(env);
+	const rawDuplex: RawDuplex<Envelope> = {
+		subscribe(obs: Observer<Envelope>): () => void {
+			observer.set(obs);
+			child.on('message', nodeListener);
+			child.once('disconnet', () => observer.complete());
+			return () => {
+				observer.detach();
+				child.removeListener('message', nodeListener);
+			};
+		},
+		postMessage(env: any): void {
+			child.send(env);
+		}
+	};
+	return makeRequestingClient(channel, rawDuplex);
+}
+
+export function commToParent(channel: string): IPCToParent {
+	const observer = new SingleObserverWrap<Envelope>();
+	const nodeListener = (env: Envelope) => {
+		if (observer && observer.next) { observer.next(env); }
+	};
+	const commPoint: RawDuplex<Envelope> = {
+		subscribe(obs: Observer<Envelope>): () => void {
+			observer.set(obs);
+			process.on('message', nodeListener);
+			return () => {
+				observer.detach();
+				process.removeListener('message', nodeListener);
+			};
+		},
+		postMessage(env: any): void {
+			process.send!(env);
+		}
+	};
+	return makeRequestServer(channel, commPoint);
+}
+
+Object.freeze(exports);

package/ts-code/mock/run-in-proc.ts

@@ -0,0 +1,111 @@
+/*
+ Copyright (C) 2020, 2023 3NSoft Inc.
+ 
+ This program is free software: you can redistribute it and/or modify it under
+ the terms of the GNU General Public License as published by the Free Software
+ Foundation, either version 3 of the License, or (at your option) any later
+ version.
+ 
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+ 
+ You should have received a copy of the GNU General Public License along with
+ this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+
+import * as https from "https";
+import { sslOpts } from './tls-options';
+import { AppWithWSs } from '../lib-server/web-sockets/app';
+import { mkdir, writeFile } from '../lib-common/async-fs-node';
+import { FileException } from '../lib-common/exceptions/file';
+import { accountsApp, Configurations, servicesApp } from '../services';
+import * as dns from 'dns';
+import { DNSMock, DnsTxtRecords } from './dns';
+import { join } from 'path';
+import { makeMultiDomainSignupCtx } from "../signup/signup-tokens";
+
+export function setTestCertsAndDNS(
+	domains: string[], thisSrvLoc: string
+): DNSMock {
+	if (thisSrvLoc.endsWith('/')) { throw new Error(
+		`Location value shouldn't have trailing slash`); }
+
+	// allow client test calls to trust above self-signed cert
+	https.globalAgent.options.ca = sslOpts.cert;
+
+	// inject dns mock
+	const dnsRecs: DnsTxtRecords = {};
+	for (const domain of domains) {
+		dnsRecs[domain] = [
+			[ 'asmail', '=', `${thisSrvLoc}/asmail` ],	// one record in DNS TXT
+			[
+				'mailerid=', `${thisSrvLoc}/mailerid`,
+				`3nstorage=${thisSrvLoc}/3nstorage`
+			]	// two 3NWeb records in one DNS TXT record
+			// XXX add other life-like records
+		];
+	}
+	const dnsMock = new DNSMock(dnsRecs);
+	(dns as any).resolveTxt = dnsMock.resolveTxt;
+
+	return dnsMock;
+}
+
+export async function startOn(
+	srvDomain: string, dataDir: string, port: number,
+	domains: { noTokenSignup: string[]; other: string[]; }
+): Promise<{ stop: () => Promise<void>; dnsMock: DNSMock; }> {
+
+	const noTokensFilePath = join(dataDir, 'no-tokens-signup.json');
+	const conf: Configurations = {
+		rootFolder: dataDir,
+		domain: srvDomain,
+		enabledServices: {
+			asmail: true,
+			mailerId: true,
+			storage: true
+		},
+		signup: {
+			noTokenFile: noTokensFilePath
+		},
+		mailerId: {
+			certs: join(dataDir, 'mid-certs.json')
+		},
+		servicesConnect: {
+			port,
+			sslOpts
+		}
+	};
+
+	// prepare data folders
+	await mkdir(dataDir)
+	.catch((exc: FileException) => {
+		if (!exc.alreadyExists) { throw exc; }
+	});
+	// write to-tokens signup file
+	const noTokenCtx = makeMultiDomainSignupCtx(domains.noTokenSignup);
+	await writeFile(
+		noTokensFilePath, JSON.stringify(noTokenCtx), { encoding: 'utf8' }
+	);
+
+	// certs and DNS
+	const allDomains = domains.noTokenSignup.concat(domains.other);
+	const dnsMock = setTestCertsAndDNS(allDomains, `${srvDomain}:${port}`);
+
+	// setup services and start
+	const app = new AppWithWSs();
+	app.use(accountsApp(conf));
+	app.use(servicesApp(conf));
+	await app.start(conf.servicesConnect!.sslOpts, conf.servicesConnect!.port);
+
+	return { dnsMock, stop: () => app.stop() };
+}
+
+export function startOnLocalhost(
+	dataDir: string, port: number,
+	domains: { noTokenSignup: string[]; other: string[]; }
+): Promise<{ stop: () => Promise<void>; dnsMock: DNSMock; }> {
+	return startOn('localhost', dataDir, port, domains);
+}

package/ts-code/mock/tls-options.ts

@@ -0,0 +1,73 @@
+/*
+ Copyright (C) 2016 3NSoft Inc.
+ 
+ This program is free software: you can redistribute it and/or modify it under
+ the terms of the GNU General Public License as published by the Free Software
+ Foundation, either version 3 of the License, or (at your option) any later
+ version.
+ 
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+ 
+ You should have received a copy of the GNU General Public License along with
+ this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+
+import { ServerOptions } from "https";
+
+export const sslOpts: ServerOptions = {
+	key: `-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----`,
+	cert: `-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----`
+};
+
+Object.freeze(exports);

package/ts-code/services.ts

@@ -0,0 +1,138 @@
+/*
+ Copyright (C) 2015 - 2017, 2020, 2024 - 2025 3NSoft Inc.
+ 
+ This program is free software: you can redistribute it and/or modify it under
+ the terms of the GNU General Public License as published by the Free Software
+ Foundation, either version 3 of the License, or (at your option) any later
+ version.
+ 
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+ 
+ You should have received a copy of the GNU General Public License along with
+ this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+
+/*
+ * This puts together two express servers: one serves 3NWeb services, another
+ * one is an administration interface.
+ */
+
+import * as https from "https";
+import { validator } from './lib-server/resources/mailerid-authorizer';
+import { AppWithWSs } from './lib-server/web-sockets/app';
+import { makeMailerIdApp } from './mailerId/mailerId-app';
+import { makeASMailApp } from './asmail/asmail-app';
+import { makeStorageApp } from './3nstorage/3nstorage-app';
+import { makeSignupApp } from './signup/signup-app';
+import { ErrLogger, makeErrLoggerToConsole } from "./lib-server/middleware/error-handler";
+import { makeLockerApp } from "./locker/locker-app";
+import { MidAuthorizer } from "./lib-server/routes/sessions/mid-auth";
+
+export interface Configurations {
+	enabledServices: {
+		asmail?: boolean;
+		storage?: boolean;
+		mailerId?: boolean;
+	};
+	auxiliaryServices?: {
+		locker?: boolean;
+	};
+	servicesConnect?: {
+		hostname?: string;
+		port: number;
+		sslOpts?: https.ServerOptions;
+		letsencrypt?: string;
+		skipReloadOnCertsChange?: boolean;
+	};
+	rootFolder: string;
+	domain: string;
+	mailerId?: {
+		certs: string;
+	};
+	signup?: {
+		noTokenFile?: string;
+		serviceUrl?: string;
+	};
+}
+
+export function servicesApp(
+	conf: Configurations, errLogger?: ErrLogger|'console', logSetup?: 'console'
+): AppWithWSs {
+
+	if (!conf.enabledServices || (typeof conf.enabledServices !== 'object')) {
+		throw new Error('Missing enabled-services sections in confs.');
+	}
+
+	const app = new AppWithWSs();
+	let midAuthorizer: MidAuthorizer;	// share, allowing for caching of certs
+
+	if (conf.enabledServices.mailerId) {
+		const { app: midApp, ownService } = makeMailerIdApp(
+			conf.rootFolder, conf.domain, conf.mailerId!.certs,
+			(errLogger === 'console') ? makeErrLoggerToConsole('MailerId') : errLogger
+		);
+		app.http.use('/mailerid', midApp);
+		if (logSetup === 'console') {
+			console.log(`Enabled MailerId service with provider domain ${conf.domain}`);
+		}
+		midAuthorizer = validator(ownService);
+	} else {
+		midAuthorizer = validator(undefined);
+	}
+
+	if (conf.enabledServices.asmail) {
+		app.use('/asmail', makeASMailApp(
+			conf.rootFolder, conf.domain, midAuthorizer,
+			(errLogger === 'console') ? makeErrLoggerToConsole('ASMail') : errLogger
+		));
+		if (logSetup === 'console') {
+			console.log(`Enabled ASMail service with provider domain ${conf.domain}`);
+		}
+	}
+
+	if (conf.enabledServices.storage) {
+		app.use('/3nstorage', makeStorageApp(
+			conf.rootFolder, conf.domain, midAuthorizer,
+			(errLogger === 'console') ? makeErrLoggerToConsole('3NStorage') : errLogger
+		));
+		if (logSetup === 'console') {
+			console.log(`Enabled 3NStorage service with provider domain ${conf.domain}`);
+		}
+	}
+
+	if (conf.auxiliaryServices?.locker) {
+		app.use('/locker', makeLockerApp(
+			conf.rootFolder,
+			(errLogger === 'console') ? makeErrLoggerToConsole('Locker') : errLogger
+		));
+		if (logSetup === 'console') {
+			console.log(`Enabled Locker service`);
+		}
+	}
+
+	return app;
+}
+
+export function accountsApp(
+	conf: Configurations, errLogger?: ErrLogger|'console', logSetup?: 'console'
+): AppWithWSs {
+
+	const app = new AppWithWSs();
+
+	if (conf.signup) {
+		app.http.use('/signup', makeSignupApp(
+			conf,
+			(errLogger === 'console') ? makeErrLoggerToConsole('Signup') : errLogger
+		));
+		if (logSetup === 'console') {
+			console.log(`Enabled signup service.`);
+		}
+	}
+
+	return app;
+}
+
+Object.freeze(exports);