]> git.immae.eu Git - github/Chocobozzz/PeerTube.git/blame - server/middlewares/validators/oembed.ts
Merge branch 'release/4.1.0' into develop
[github/Chocobozzz/PeerTube.git] / server / middlewares / validators / oembed.ts
CommitLineData
41fb13c3 1import express from 'express'
c8861d5d 2import { query } from 'express-validator'
d8755eed 3import { join } from 'path'
868fce62 4import { loadVideo } from '@server/lib/model-loaders'
6fad8e51
C
5import { VideoPlaylistModel } from '@server/models/video/video-playlist'
6import { VideoPlaylistPrivacy, VideoPrivacy } from '@shared/models'
c0e8b12e 7import { HttpStatusCode } from '../../../shared/models/http/http-error-codes'
da854ddd 8import { isTestInstance } from '../../helpers/core-utils'
d4a8e7a6 9import { isIdOrUUIDValid, toCompleteUUID } from '../../helpers/custom-validators/misc'
da854ddd 10import { logger } from '../../helpers/logger'
6dd9de95 11import { WEBSERVER } from '../../initializers/constants'
10363c74 12import { areValidationErrors } from './shared'
d8755eed 13
a1eda903
C
14const playlistPaths = [
15 join('videos', 'watch', 'playlist'),
16 join('w', 'p')
17]
18
19const videoPaths = [
20 join('videos', 'watch'),
21 'w'
22]
23
24function buildUrls (paths: string[]) {
25 return paths.map(p => WEBSERVER.SCHEME + '://' + join(WEBSERVER.HOST, p) + '/')
26}
27
28const startPlaylistURLs = buildUrls(playlistPaths)
29const startVideoURLs = buildUrls(videoPaths)
6fad8e51 30
d8755eed
C
31const isURLOptions = {
32 require_host: true,
33 require_tld: true
34}
35
36// We validate 'localhost', so we don't have the top level domain
37if (isTestInstance()) {
38 isURLOptions.require_tld = false
39}
40
41const oembedValidator = [
42 query('url').isURL(isURLOptions).withMessage('Should have a valid url'),
43 query('maxwidth').optional().isInt().withMessage('Should have a valid max width'),
44 query('maxheight').optional().isInt().withMessage('Should have a valid max height'),
45 query('format').optional().isIn([ 'xml', 'json' ]).withMessage('Should have a valid format'),
46
a2431b7d 47 async (req: express.Request, res: express.Response, next: express.NextFunction) => {
d8755eed
C
48 logger.debug('Checking oembed parameters', { parameters: req.query })
49
a2431b7d
C
50 if (areValidationErrors(req, res)) return
51
52 if (req.query.format !== undefined && req.query.format !== 'json') {
76148b27
RK
53 return res.fail({
54 status: HttpStatusCode.NOT_IMPLEMENTED_501,
55 message: 'Requested format is not implemented on server.',
56 data: {
57 format: req.query.format
58 }
59 })
a2431b7d
C
60 }
61
67c604ae
C
62 const url = req.query.url as string
63
e93ee838
C
64 let urlPath: string
65
66 try {
67 urlPath = new URL(url).pathname
68 } catch (err) {
69 return res.fail({
70 status: HttpStatusCode.BAD_REQUEST_400,
71 message: err.message,
72 data: {
73 url
74 }
75 })
76 }
77
a1eda903
C
78 const isPlaylist = startPlaylistURLs.some(u => url.startsWith(u))
79 const isVideo = isPlaylist ? false : startVideoURLs.some(u => url.startsWith(u))
6fad8e51
C
80
81 const startIsOk = isVideo || isPlaylist
82
e5d9877f 83 const parts = urlPath.split('/')
67c604ae 84
e5d9877f 85 if (startIsOk === false || parts.length === 0) {
76148b27
RK
86 return res.fail({
87 status: HttpStatusCode.BAD_REQUEST_400,
88 message: 'Invalid url.',
89 data: {
90 url
91 }
92 })
a2431b7d 93 }
d8755eed 94
e5d9877f 95 const elementId = toCompleteUUID(parts.pop())
6fad8e51 96 if (isIdOrUUIDValid(elementId) === false) {
76148b27 97 return res.fail({ message: 'Invalid video or playlist id.' })
a2431b7d 98 }
d8755eed 99
6fad8e51 100 if (isVideo) {
868fce62 101 const video = await loadVideo(elementId, 'all')
6fad8e51
C
102
103 if (!video) {
76148b27
RK
104 return res.fail({
105 status: HttpStatusCode.NOT_FOUND_404,
106 message: 'Video not found'
107 })
6fad8e51 108 }
d8755eed 109
6fad8e51 110 if (video.privacy !== VideoPrivacy.PUBLIC) {
76148b27
RK
111 return res.fail({
112 status: HttpStatusCode.FORBIDDEN_403,
113 message: 'Video is not public'
114 })
6fad8e51
C
115 }
116
117 res.locals.videoAll = video
118 return next()
119 }
120
121 // Is playlist
122
123 const videoPlaylist = await VideoPlaylistModel.loadWithAccountAndChannelSummary(elementId, undefined)
124 if (!videoPlaylist) {
76148b27
RK
125 return res.fail({
126 status: HttpStatusCode.NOT_FOUND_404,
127 message: 'Video playlist not found'
128 })
6fad8e51
C
129 }
130
131 if (videoPlaylist.privacy !== VideoPlaylistPrivacy.PUBLIC) {
76148b27
RK
132 return res.fail({
133 status: HttpStatusCode.FORBIDDEN_403,
134 message: 'Playlist is not public'
135 })
6fad8e51
C
136 }
137
138 res.locals.videoPlaylistSummary = videoPlaylist
a2431b7d 139 return next()
d8755eed 140 }
6fad8e51 141
d8755eed
C
142]
143
144// ---------------------------------------------------------------------------
145
146export {
147 oembedValidator
148}