server/controllers/api/oauth-clients.ts

   1 import express from 'express'
   2 import { OAuthClientModel } from '@server/models/oauth/oauth-client'
   3 import { HttpStatusCode, OAuthClientLocal } from '@shared/models'
   4 import { logger } from '../../helpers/logger'
   5 import { CONFIG } from '../../initializers/config'
   6 import { asyncMiddleware, openapiOperationDoc } from '../../middlewares'
   7
   8 const oauthClientsRouter = express.Router()
   9
  10 oauthClientsRouter.get('/local',
  11   openapiOperationDoc({ operationId: 'getOAuthClient' }),
  12   asyncMiddleware(getLocalClient)
  13 )
  14
  15 // Get the client credentials for the PeerTube front end
  16 async function getLocalClient (req: express.Request, res: express.Response, next: express.NextFunction) {
  17   const serverHostname = CONFIG.WEBSERVER.HOSTNAME
  18   const serverPort = CONFIG.WEBSERVER.PORT
  19   let headerHostShouldBe = serverHostname
  20   if (serverPort !== 80 && serverPort !== 443) {
  21     headerHostShouldBe += ':' + serverPort
  22   }
  23
  24   // Don't make this check if this is a test instance
  25   if (process.env.NODE_ENV !== 'test' && req.get('host') !== headerHostShouldBe) {
  26     logger.info('Getting client tokens for host %s is forbidden (expected %s).', req.get('host'), headerHostShouldBe)
  27     return res.fail({
  28       status: HttpStatusCode.FORBIDDEN_403,
  29       message: `Getting client tokens for host ${req.get('host')} is forbidden`
  30     })
  31   }
  32
  33   const client = await OAuthClientModel.loadFirstClient()
  34   if (!client) throw new Error('No client available.')
  35
  36   const json: OAuthClientLocal = {
  37     client_id: client.clientId,
  38     client_secret: client.clientSecret
  39   }
  40   return res.json(json)
  41 }
  42
  43 // ---------------------------------------------------------------------------
  44
  45 export {
  46   oauthClientsRouter
  47 }