X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=server.ts;h=9376a08755e4546102a16dc7cfaf9ea786f61fa3;hb=7a1ccd2acc09f9bab8416e8de483eedf9e9d5d53;hp=1834256d5f936d64d076383615493c59cb13a26c;hpb=76148b27f7501bac061992136852be4303370c8d;p=github%2FChocobozzz%2FPeerTube.git diff --git a/server.ts b/server.ts index 1834256d5..9376a0875 100644 --- a/server.ts +++ b/server.ts @@ -7,7 +7,6 @@ if (isTestInstance()) { } // ----------- Node modules ----------- -import * as bodyParser from 'body-parser' import * as express from 'express' import * as morgan from 'morgan' import * as cors from 'cors' @@ -107,6 +106,7 @@ import { downloadRouter } from './server/controllers' import { advertiseDoNotTrack } from './server/middlewares/dnt' +import { apiFailMiddleware } from './server/middlewares/error' import { Redis } from './server/lib/redis' import { ActorFollowScheduler } from './server/lib/schedulers/actor-follow-scheduler' import { RemoveOldViewsScheduler } from './server/lib/schedulers/remove-old-views-scheduler' @@ -124,11 +124,10 @@ import { PluginsCheckScheduler } from './server/lib/schedulers/plugins-check-sch import { PeerTubeVersionCheckScheduler } from './server/lib/schedulers/peertube-version-check-scheduler' import { Hooks } from './server/lib/plugins/hooks' import { PluginManager } from './server/lib/plugins/plugin-manager' -import { LiveManager } from './server/lib/live-manager' +import { LiveManager } from './server/lib/live' import { HttpStatusCode } from './shared/core-utils/miscs/http-error-codes' import { VideosTorrentCache } from '@server/lib/files-cache/videos-torrent-cache' import { ServerConfigManager } from '@server/lib/server-config-manager' -import { apiResponseHelpers } from '@server/helpers/express-utils' // ----------- Command line ----------- @@ -170,14 +169,23 @@ app.use(morgan('combined', { skip: req => CONFIG.LOG.LOG_PING_REQUESTS === false && req.originalUrl === '/api/v1/ping' })) +// Add .fail() helper to response +app.use(apiFailMiddleware) + // For body requests -app.use(bodyParser.urlencoded({ extended: false })) -app.use(bodyParser.json({ +app.use(express.urlencoded({ extended: false })) +app.use(express.json({ type: [ 'application/json', 'application/*+json' ], limit: '500kb', - verify: (req: express.Request, _, buf: Buffer) => { + verify: (req: express.Request, res: express.Response, buf: Buffer) => { const valid = isHTTPSignatureDigestValid(buf, req) - if (valid !== true) throw new Error('Invalid digest') + + if (valid !== true) { + res.fail({ + status: HttpStatusCode.FORBIDDEN_403, + message: 'Invalid digest' + }) + } } })) @@ -187,9 +195,6 @@ app.use(cookieParser()) // W3C DNT Tracking Status app.use(advertiseDoNotTrack) -// Response helpers used in developement -app.use(apiResponseHelpers) - // ----------- Views, routes and static files ----------- // API @@ -222,23 +227,22 @@ if (cliOptions.client) app.use('/', clientsRouter) // ----------- Errors ----------- -// Catch 404 and forward to error handler -app.use(function (req, res, next) { - const err = new Error('Not Found') - err['status'] = HttpStatusCode.NOT_FOUND_404 - next(err) +// Catch unmatched routes +app.use((req, res: express.Response) => { + res.status(HttpStatusCode.NOT_FOUND_404).end() }) -app.use(function (err, req, res, next) { +// Catch thrown errors +app.use((err, req, res: express.Response, next) => { + // Format error to be logged let error = 'Unknown error.' if (err) { error = err.stack || err.message || err } - - // Sequelize error + // Handling Sequelize error traces const sql = err.parent ? err.parent.sql : undefined - logger.error('Error in controller.', { err: error, sql }) + return res.fail({ status: err.status || HttpStatusCode.INTERNAL_SERVER_ERROR_500, message: err.message,