X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=server.ts;h=9af83cde9ffa9973a447efcd5885d48c3fbbd009;hb=8bd67ef6af84f322722abba0fe6f68a3ed7a6637;hp=66c9173cad11d8fddfd4d2c42f8a894658a3ce5f;hpb=1cfbdd30d9913bfaa0c7e54f82e5b953646bb0d1;p=github%2FChocobozzz%2FPeerTube.git diff --git a/server.ts b/server.ts index 66c9173ca..9af83cde9 100644 --- a/server.ts +++ b/server.ts @@ -7,14 +7,14 @@ if (isTestInstance()) { } // ----------- Node modules ----------- -import * as express from 'express' -import * as morgan from 'morgan' -import * as cors from 'cors' -import * as cookieParser from 'cookie-parser' -import * as helmet from 'helmet' -import * as useragent from 'useragent' -import * as anonymize from 'ip-anonymize' -import * as cli from 'commander' +import express from 'express' +import morgan, { token } from 'morgan' +import cors from 'cors' +import cookieParser from 'cookie-parser' +import { frameguard } from 'helmet' +import { parse } from 'useragent' +import anonymize from 'ip-anonymize' +import { program as cli } from 'commander' process.title = 'peertube' @@ -61,7 +61,7 @@ if (CONFIG.CSP.ENABLED) { } if (CONFIG.SECURITY.FRAMEGUARD.ENABLED) { - app.use(helmet.frameguard({ + app.use(frameguard({ action: 'deny' // we only allow it for /videos/embed, see server/controllers/client.ts })) } @@ -106,6 +106,7 @@ import { downloadRouter } from './server/controllers' import { advertiseDoNotTrack } from './server/middlewares/dnt' +import { apiFailMiddleware } from './server/middlewares/error' import { Redis } from './server/lib/redis' import { ActorFollowScheduler } from './server/lib/schedulers/actor-follow-scheduler' import { RemoveOldViewsScheduler } from './server/lib/schedulers/remove-old-views-scheduler' @@ -123,11 +124,10 @@ import { PluginsCheckScheduler } from './server/lib/schedulers/plugins-check-sch import { PeerTubeVersionCheckScheduler } from './server/lib/schedulers/peertube-version-check-scheduler' import { Hooks } from './server/lib/plugins/hooks' import { PluginManager } from './server/lib/plugins/plugin-manager' -import { LiveManager } from './server/lib/live-manager' -import { HttpStatusCode } from './shared/core-utils/miscs/http-error-codes' +import { LiveManager } from './server/lib/live' +import { HttpStatusCode } from './shared/models/http/http-error-codes' import { VideosTorrentCache } from '@server/lib/files-cache/videos-torrent-cache' import { ServerConfigManager } from '@server/lib/server-config-manager' -import { apiResponseHelpers } from '@server/helpers/express-utils' // ----------- Command line ----------- @@ -148,29 +148,29 @@ if (isTestInstance()) { } // For the logger -morgan.token('remote-addr', (req: express.Request) => { +token('remote-addr', (req: express.Request) => { if (CONFIG.LOG.ANONYMIZE_IP === true || req.get('DNT') === '1') { return anonymize(req.ip, 16, 16) } return req.ip }) -morgan.token('user-agent', (req: express.Request) => { +token('user-agent', (req: express.Request) => { if (req.get('DNT') === '1') { - return useragent.parse(req.get('user-agent')).family + return parse(req.get('user-agent')).family } return req.get('user-agent') }) app.use(morgan('combined', { stream: { - write: (str: string) => logger.info(str, { tags: [ 'http' ] }) + write: (str: string) => logger.info(str.trim(), { tags: [ 'http' ] }) }, skip: req => CONFIG.LOG.LOG_PING_REQUESTS === false && req.originalUrl === '/api/v1/ping' })) -// Response helpers used for errors -app.use(apiResponseHelpers) +// Add .fail() helper to response +app.use(apiFailMiddleware) // For body requests app.use(express.urlencoded({ extended: false })) @@ -179,6 +179,7 @@ app.use(express.json({ limit: '500kb', verify: (req: express.Request, res: express.Response, buf: Buffer) => { const valid = isHTTPSignatureDigestValid(buf, req) + if (valid !== true) { res.fail({ status: HttpStatusCode.FORBIDDEN_403, @@ -304,13 +305,19 @@ async function startApplication () { updateStreamingPlaylistsInfohashesIfNeeded() .catch(err => logger.error('Cannot update streaming playlist infohashes.', { err })) - if (cliOptions.plugins) await PluginManager.Instance.registerPluginsAndThemes() - LiveManager.Instance.init() if (CONFIG.LIVE.ENABLED) LiveManager.Instance.run() // Make server listening - server.listen(port, hostname, () => { + server.listen(port, hostname, async () => { + if (cliOptions.plugins) { + try { + await PluginManager.Instance.registerPluginsAndThemes() + } catch (err) { + logger.error('Cannot register plugins and themes.', { err }) + } + } + logger.info('HTTP server listening on %s:%d', hostname, port) logger.info('Web server: %s', WEBSERVER.URL)