1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
|
const express = require('express');
const bodyParser = require('body-parser');
const cookieParser = require('cookie-parser');
const request = require('request');
const crypto = require('crypto');
const multer = require('multer');
var storage = multer.diskStorage({
destination: function (req, file, cb) {
cb(null, 'src/uploads/')
},
filename: function (req, file, cb) {
var ext = "";
if(file.originalname.includes(".")){
ext = "." + file.originalname.split(".")[1];
}
return cb(null, 'img-' + Date.now()+ext)
}
})
var upload = multer({ storage: storage })
const port = 80;
const server = express();
// server.use(bodyParser.json());
server.use(cookieParser())
server.use(bodyParser.urlencoded({ extended: true }));
// Route logging
server.use(function (req, res, next) {
console.debug("express:", req.method, req.originalUrl);
next()
})
function listen(){
server.listen(port, () => console.info(`Listening on port ${port}!`));
}
function setUpRoutes(models, jwtFunctions){
// Authentication routine
server.use(function(req, res, next) {
if(req.path.startsWith("/admin")){
let cookie = req.cookies.authorization
if (!cookie) {
console.debug("Redirecting to login - no cookie")
res.redirect('/login');
return;
}
try {
const decryptedUserId = jwtFunctions.verify(cookie);
models.users.findOne({where: {username: decryptedUserId}}).then((user, error) => {
if (user) {
res.locals.user = user.get({ plain: true });
} else {
console.debug("Redirecting to login - invalid cookie")
res.redirect('/login');
return;
}
});
} catch (e){
res.status(400).send(e.message);
}
}
next();
})
server.get('/', (req, res) => res.sendFile(__dirname + "/html/index.html"))
server.get('/index', (req, res) => res.sendFile(__dirname + "/html/index.html"))
server.get('/admin', (req, res) => res.sendFile(__dirname + "/html/admin.html"));
server.get('/login', (req, res) => res.sendFile(__dirname + "/html/login.html"))
server.get('/bread', (req, res) => res.sendFile(__dirname + "/html/bread.html"));
server.get('/essay', (req, res) => res.sendFile(__dirname + "/html/essay.html"));
server.get('/snake', (req, res) => res.sendFile(__dirname + "/html/snake.html"));
server.get('/setScore', (req, res) => {
request(`http://localhost:8000?${req.url.split("?")[1]}`, function(error, response, body) {
});
})
server.get('/posts/:type', async (req, res, next) => {
try {
const { type } = req.params;
var posts = await models.posts.findAll({where: { type: type }, order: [['createdAt', 'DESC']]});
posts = posts.map(x => x.get({ plain: true }));
for (const post of posts) {
const images = await models.pictures.findAll({ attributes: ["source"], where: { postId: post.id }}).map(x => x.source);
post.images = images;
}
res.status(200).send(posts);
next();
} catch (e) {
res.status(400).send(e.message);
}
})
server.post('/posts', upload.array('images'), async (req, res, next) => {
try {
const type = req.body.type
const newPost = await models.posts.create(req.body);
req.files.forEach(async (file) => {
await models.pictures.create({"source": "uploads/"+file.filename, "postId": newPost.id});
console.log("uploaded ", file.path);
})
console.log(newPost);
res.redirect(`/${type}`);
next();
} catch (e) {
res.status(400).send(e.message);
}
})
server.post('/login', async (req, res, next) => {
const hash = crypto.createHash("sha512").update(req.body.password, "binary").digest("base64");
const user = await models.users.findOne({where: { username: req.body.username, password: hash }})
if(user){
const token = jwtFunctions.sign(user.username);
res.cookie('authorization',token);
console.debug("Redirecting to admin - logged in")
res.redirect('/admin');
} else {
console.debug("Redirecting to login - invalid login")
res.redirect('/login');
}
})
server.get('/favicon.ico', (req, res) => res.sendFile(__dirname + "/icon/favicon.ico"))
server.get('/css/:id', (req, res) => {
res.sendFile(__dirname + "/css/"+req.params.id);
});
server.get('/uploads/:id', (req, res) => {
res.sendFile(__dirname + "/uploads/"+req.params.id);
});
server.get('/essay/:id', (req, res) => {
res.sendFile(__dirname + "/html/essay/"+req.params.id);
});
}
module.exports = {
listen,
setUpRoutes
};
|
