X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=middlewares%2Fsecure.js;h=bfd28316a3b1551c38508cd09b59510596fb80c6;hb=c35ae59dba667b5b416d3b1803fedd58114d0382;hp=b7a18ad3e7500bdf761fe4fa27b049291beb683e;hpb=dac0a5319ab1c52a0958647b1593f85339b77e29;p=github%2FChocobozzz%2FPeerTube.git diff --git a/middlewares/secure.js b/middlewares/secure.js index b7a18ad3e..bfd28316a 100644 --- a/middlewares/secure.js +++ b/middlewares/secure.js @@ -1,51 +1,49 @@ -;(function () { - 'use strict' - - var logger = require('../helpers/logger') - var peertubeCrypto = require('../helpers/peertubeCrypto') - var Pods = require('../models/pods') - - var secureMiddleware = { - decryptBody: decryptBody - } - - function decryptBody (req, res, next) { - var url = req.body.signature.url - Pods.findByUrl(url, function (err, pod) { - if (err) { - logger.error('Cannot get signed url in decryptBody.', { error: err }) - return res.sendStatus(500) - } - - if (pod === null) { - logger.error('Unknown pod %s.', url) - return res.sendStatus(403) - } - - logger.debug('Decrypting body from %s.', url) - - var signature_ok = peertubeCrypto.checkSignature(pod.publicKey, url, req.body.signature.signature) - - if (signature_ok === true) { - peertubeCrypto.decrypt(req.body.key, req.body.data, function (err, decrypted) { - if (err) { - logger.error('Cannot decrypt data.', { error: err }) - return res.sendStatus(500) - } - - req.body.data = JSON.parse(decrypted) - delete req.body.key - - next() - }) - } else { - logger.error('Signature is not okay in decryptBody for %s.', req.body.signature.url) - return res.sendStatus(403) - } - }) - } - - // --------------------------------------------------------------------------- - - module.exports = secureMiddleware -})() +'use strict' + +var logger = require('../helpers/logger') +var peertubeCrypto = require('../helpers/peertubeCrypto') +var Pods = require('../models/pods') + +var secureMiddleware = { + decryptBody: decryptBody +} + +function decryptBody (req, res, next) { + var url = req.body.signature.url + Pods.findByUrl(url, function (err, pod) { + if (err) { + logger.error('Cannot get signed url in decryptBody.', { error: err }) + return res.sendStatus(500) + } + + if (pod === null) { + logger.error('Unknown pod %s.', url) + return res.sendStatus(403) + } + + logger.debug('Decrypting body from %s.', url) + + var signature_ok = peertubeCrypto.checkSignature(pod.publicKey, url, req.body.signature.signature) + + if (signature_ok === true) { + peertubeCrypto.decrypt(req.body.key, req.body.data, function (err, decrypted) { + if (err) { + logger.error('Cannot decrypt data.', { error: err }) + return res.sendStatus(500) + } + + req.body.data = JSON.parse(decrypted) + delete req.body.key + + next() + }) + } else { + logger.error('Signature is not okay in decryptBody for %s.', req.body.signature.url) + return res.sendStatus(403) + } + }) +} + +// --------------------------------------------------------------------------- + +module.exports = secureMiddleware