server/controllers/client.ts

   1 import * as express from 'express'
   2 import { constants, promises as fs } from 'fs'
   3 import { readFile } from 'fs-extra'
   4 import { join } from 'path'
   5 import { logger } from '@server/helpers/logger'
   6 import { CONFIG } from '@server/initializers/config'
   7 import { Hooks } from '@server/lib/plugins/hooks'
   8 import { HttpStatusCode } from '@shared/core-utils'
   9 import { buildFileLocale, getCompleteLocale, is18nLocale, LOCALE_FILES } from '@shared/core-utils/i18n'
  10 import { root } from '../helpers/core-utils'
  11 import { STATIC_MAX_AGE } from '../initializers/constants'
  12 import { ClientHtml, sendHTML, serveIndexHTML } from '../lib/client-html'
  13 import { asyncMiddleware, embedCSP } from '../middlewares'
  14
  15 const clientsRouter = express.Router()
  16
  17 const distPath = join(root(), 'client', 'dist')
  18 const testEmbedPath = join(distPath, 'standalone', 'videos', 'test-embed.html')
  19
  20 // Special route that add OpenGraph and oEmbed tags
  21 // Do not use a template engine for a so little thing
  22 clientsRouter.use([ '/w/p/:id', '/videos/watch/playlist/:id' ], asyncMiddleware(generateWatchPlaylistHtmlPage))
  23 clientsRouter.use([ '/w/:id', '/videos/watch/:id' ], asyncMiddleware(generateWatchHtmlPage))
  24 clientsRouter.use([ '/accounts/:nameWithHost', '/a/:nameWithHost' ], asyncMiddleware(generateAccountHtmlPage))
  25 clientsRouter.use([ '/video-channels/:nameWithHost', '/c/:nameWithHost' ], asyncMiddleware(generateVideoChannelHtmlPage))
  26 clientsRouter.use('/@:nameWithHost', asyncMiddleware(generateActorHtmlPage))
  27
  28 const embedMiddlewares = [
  29   CONFIG.CSP.ENABLED
  30     ? embedCSP
  31     : (req: express.Request, res: express.Response, next: express.NextFunction) => next(),
  32
  33   // Set headers
  34   (req: express.Request, res: express.Response, next: express.NextFunction) => {
  35     res.removeHeader('X-Frame-Options')
  36
  37     // Don't cache HTML file since it's an index to the immutable JS/CSS files
  38     res.setHeader('Cache-Control', 'public, max-age=0')
  39
  40     next()
  41   },
  42
  43   asyncMiddleware(generateEmbedHtmlPage)
  44 ]
  45
  46 clientsRouter.use('/videos/embed', ...embedMiddlewares)
  47 clientsRouter.use('/video-playlists/embed', ...embedMiddlewares)
  48
  49 const testEmbedController = (req: express.Request, res: express.Response) => res.sendFile(testEmbedPath)
  50
  51 clientsRouter.use('/videos/test-embed', testEmbedController)
  52 clientsRouter.use('/video-playlists/test-embed', testEmbedController)
  53
  54 // Dynamic PWA manifest
  55 clientsRouter.get('/manifest.webmanifest', asyncMiddleware(generateManifest))
  56
  57 // Static client overrides
  58 // Must be consistent with static client overrides redirections in /support/nginx/peertube
  59 const staticClientOverrides = [
  60   'assets/images/logo.svg',
  61   'assets/images/favicon.png',
  62   'assets/images/icons/icon-36x36.png',
  63   'assets/images/icons/icon-48x48.png',
  64   'assets/images/icons/icon-72x72.png',
  65   'assets/images/icons/icon-96x96.png',
  66   'assets/images/icons/icon-144x144.png',
  67   'assets/images/icons/icon-192x192.png',
  68   'assets/images/icons/icon-512x512.png'
  69 ]
  70
  71 for (const staticClientOverride of staticClientOverrides) {
  72   const overridePhysicalPath = join(CONFIG.STORAGE.CLIENT_OVERRIDES_DIR, staticClientOverride)
  73   clientsRouter.use(`/client/${staticClientOverride}`, asyncMiddleware(serveClientOverride(overridePhysicalPath)))
  74 }
  75
  76 clientsRouter.use('/client/locales/:locale/:file.json', serveServerTranslations)
  77 clientsRouter.use('/client', express.static(distPath, { maxAge: STATIC_MAX_AGE.CLIENT }))
  78
  79 // 404 for static files not found
  80 clientsRouter.use('/client/*', (req: express.Request, res: express.Response) => {
  81   res.status(HttpStatusCode.NOT_FOUND_404).end()
  82 })
  83
  84 // Always serve index client page (the client is a single page application, let it handle routing)
  85 // Try to provide the right language index.html
  86 clientsRouter.use('/(:language)?', asyncMiddleware(serveIndexHTML))
  87
  88 // ---------------------------------------------------------------------------
  89
  90 export {
  91   clientsRouter
  92 }
  93
  94 // ---------------------------------------------------------------------------
  95
  96 function serveServerTranslations (req: express.Request, res: express.Response) {
  97   const locale = req.params.locale
  98   const file = req.params.file
  99
 100   if (is18nLocale(locale) && LOCALE_FILES.includes(file)) {
 101     const completeLocale = getCompleteLocale(locale)
 102     const completeFileLocale = buildFileLocale(completeLocale)
 103
 104     const path = join(__dirname, `../../../client/dist/locale/${file}.${completeFileLocale}.json`)
 105     return res.sendFile(path, { maxAge: STATIC_MAX_AGE.SERVER })
 106   }
 107
 108   return res.status(HttpStatusCode.NOT_FOUND_404).end()
 109 }
 110
 111 async function generateEmbedHtmlPage (req: express.Request, res: express.Response) {
 112   const hookName = req.originalUrl.startsWith('/video-playlists/')
 113     ? 'filter:html.embed.video-playlist.allowed.result'
 114     : 'filter:html.embed.video.allowed.result'
 115
 116   const allowParameters = { req }
 117
 118   const allowedResult = await Hooks.wrapFun(
 119     isEmbedAllowed,
 120     allowParameters,
 121     hookName
 122   )
 123
 124   if (!allowedResult || allowedResult.allowed !== true) {
 125     logger.info('Embed is not allowed.', { allowedResult })
 126
 127     return sendHTML(allowedResult?.html || '', res)
 128   }
 129
 130   const html = await ClientHtml.getEmbedHTML()
 131
 132   return sendHTML(html, res)
 133 }
 134
 135 async function generateWatchHtmlPage (req: express.Request, res: express.Response) {
 136   const html = await ClientHtml.getWatchHTMLPage(req.params.id + '', req, res)
 137
 138   return sendHTML(html, res)
 139 }
 140
 141 async function generateWatchPlaylistHtmlPage (req: express.Request, res: express.Response) {
 142   const html = await ClientHtml.getWatchPlaylistHTMLPage(req.params.id + '', req, res)
 143
 144   return sendHTML(html, res)
 145 }
 146
 147 async function generateAccountHtmlPage (req: express.Request, res: express.Response) {
 148   const html = await ClientHtml.getAccountHTMLPage(req.params.nameWithHost, req, res)
 149
 150   return sendHTML(html, res)
 151 }
 152
 153 async function generateVideoChannelHtmlPage (req: express.Request, res: express.Response) {
 154   const html = await ClientHtml.getVideoChannelHTMLPage(req.params.nameWithHost, req, res)
 155
 156   return sendHTML(html, res)
 157 }
 158
 159 async function generateActorHtmlPage (req: express.Request, res: express.Response) {
 160   const html = await ClientHtml.getActorHTMLPage(req.params.nameWithHost, req, res)
 161
 162   return sendHTML(html, res)
 163 }
 164
 165 async function generateManifest (req: express.Request, res: express.Response) {
 166   const manifestPhysicalPath = join(root(), 'client', 'dist', 'manifest.webmanifest')
 167   const manifestJson = await readFile(manifestPhysicalPath, 'utf8')
 168   const manifest = JSON.parse(manifestJson)
 169
 170   manifest.name = CONFIG.INSTANCE.NAME
 171   manifest.short_name = CONFIG.INSTANCE.NAME
 172   manifest.description = CONFIG.INSTANCE.SHORT_DESCRIPTION
 173
 174   res.json(manifest)
 175 }
 176
 177 function serveClientOverride (path: string) {
 178   return async (req: express.Request, res: express.Response, next: express.NextFunction) => {
 179     try {
 180       await fs.access(path, constants.F_OK)
 181       // Serve override client
 182       res.sendFile(path, { maxAge: STATIC_MAX_AGE.SERVER })
 183     } catch {
 184       // Serve dist client
 185       next()
 186     }
 187   }
 188 }
 189
 190 type AllowedResult = { allowed: boolean, html?: string }
 191 function isEmbedAllowed (_object: {
 192   req: express.Request
 193 }): AllowedResult {
 194   return { allowed: true }
 195 }