'use strict';
-
var express = require('express'),
morgan = require('morgan'),
- passport = require('passport'),
path = require('path'),
+ fs = require('fs'),
+ archiver = require('archiver'),
compression = require('compression'),
session = require('express-session'),
+ serveIndex = require('serve-index'),
+ escapeHtml = require('escape-html'),
bodyParser = require('body-parser'),
cookieParser = require('cookie-parser'),
lastMile = require('connect-lastmile'),
+ HttpError = require('connect-lastmile').HttpError,
+ HttpSuccess = require('connect-lastmile').HttpSuccess,
multipart = require('./src/multipart'),
mkdirp = require('mkdirp'),
auth = require('./src/auth.js'),
- serveIndex = require('serve-index'),
+ webdav = require('webdav-server').v2,
files = require('./src/files.js')(path.resolve(__dirname, process.argv[2] || 'files'));
+
+const ROOT_FOLDER = path.resolve(__dirname, process.argv[2] || 'files');
+const CONFIG_FILE = path.resolve(__dirname, process.argv[3] || '.config.json');
+
+// Ensure the root folder exists
+mkdirp.sync(ROOT_FOLDER);
+
+var config = {
+ folderListingEnabled: false
+};
+
+function getSettings(req, res, next) {
+ res.send({ folderListingEnabled: !!config.folderListingEnabled });
+}
+
+function setSettings(req, res, next) {
+ return next(new HttpError(400, 'not editable'));
+ if (typeof req.body.folderListingEnabled === 'undefined') return next(new HttpError(400, 'missing folderListingEnabled boolean'));
+
+ config.folderListingEnabled = !!req.body.folderListingEnabled;
+
+ fs.writeFile(CONFIG_FILE, JSON.stringify(config), function (error) {
+ if (error) return next(new HttpError(500, 'unable to save settings'));
+
+ next(new HttpSuccess(201, {}));
+ });
+}
+
+// Load the config file
+try {
+ console.log(`Using config file at: ${CONFIG_FILE}`);
+ config = require(CONFIG_FILE);
+} catch (e) {
+ if (e.code === 'MODULE_NOT_FOUND') console.log(`Config file ${CONFIG_FILE} not found`);
+ else console.log(`Cannot load config file ${CONFIG_FILE}`, e);
+}
+
+if (typeof config.folderListingEnabled === 'undefined') config.folderListingEnabled = false;
+
+function isRoot(p) {
+ return path.join(ROOT_FOLDER, p) === path.join(ROOT_FOLDER, '/');
+}
+
+function sendArchive(format) {
+ var mime, extension;
+ if (format === "zip") {
+ mime = "application/zip";
+ extension = "zip";
+ } else {
+ mime = "application/tar+gzip";
+ extension = "tar.gz";
+ }
+ return function(req, res, next) {
+ if (isRoot(req.path) || !fs.existsSync(path.join(ROOT_FOLDER, req.path)))
+ return res.status(404).sendFile(__dirname + '/frontend/404.html');
+ res.writeHead(200, {
+ 'Content-Type': mime,
+ 'Content-disposition': 'attachment; filename=' + path.basename(req.path) + '.' + extension
+ });
+ var archive = archiver(format);
+ archive.pipe(res);
+ archive.directory(path.join(ROOT_FOLDER, req.path), path.basename(req.path))
+ archive.finalize();
+ }
+}
+
+function rawTemplate(locals, callback) {
+ var html = '<!DOCTYPE html><html><head><meta charset="utf-8"><title>wget/curl friendly directory listing of ';
+ html += locals.directory;
+ html += '</title></head><body><ul>\n';
+ html += locals.fileList.map(function (file) {
+ if (file.name === "..") { return ""; }
+ var isDir = file.stat && file.stat.isDirectory();
+ var fpath = locals.directory.split('/').map(function (c) { return encodeURIComponent(c); });
+ if (!isDir) { fpath.shift(); fpath[0] = ""; }
+ fpath.push(encodeURIComponent(file.name));
+ return '<li><a href="' + escapeHtml(path.normalize(fpath.join('/'))) + '">' + escapeHtml(file.name) + '</a></li>';
+ }).join("\n");
+ html += '\n</ul></body></html>';
+ callback(null, html);
+};
+
+// Setup the express server and routes
var app = express();
var router = new express.Router();
-var multipart = multipart({ maxFieldsSize: 2 * 1024, limit: '512mb', timeout: 3 * 60 * 1000 });
+var webdavServer = new webdav.WebDAVServer({
+ requireAuthentification: true,
+ httpAuthentication: new webdav.HTTPBasicAuthentication(new auth.WebdavUserManager(), 'Cloudron Surfer')
+});
-router.get ('/api/files/*', auth.verify, files.get);
-router.put ('/api/files/*', auth.verify, multipart, files.put);
-router.delete('/api/files/*', auth.verify, files.del);
-router.get ('/api/healthcheck', function (req, res) { res.status(200).send(); });
+webdavServer.setFileSystem('/', new webdav.PhysicalFileSystem(ROOT_FOLDER), function (success) {
+ if (success) console.log(`Mounting webdav resource from: ${ROOT_FOLDER}`);
+});
-// welcome screen in case / does not serve up any file yet
-router.get('/', function (req, res) { res.status(200).sendFile(path.join(__dirname, '/frontend/welcome.html')); });
+var multipart = multipart({ maxFieldsSize: 2 * 1024, limit: '512mb', timeout: 3 * 60 * 1000 });
-var rootFolder = path.resolve(__dirname, process.argv[2] || 'files');
+router.post ('/api/login', auth.login);
+router.post ('/api/logout', auth.verify, auth.logout);
+router.get ('/api/settings', auth.verify, getSettings);
+router.put ('/api/settings', auth.verify, setSettings);
+router.get ('/api/tokens', auth.verify, auth.getTokens);
+router.post ('/api/tokens', auth.verify, auth.createToken);
+router.delete('/api/tokens/:token', auth.verify, auth.delToken);
+router.get ('/api/profile', auth.verify, auth.getProfile);
+router.get ('/api/files/*', auth.verifyIfNeeded, files.get);
+router.post ('/api/files/*', auth.verify, multipart, files.post);
+router.put ('/api/files/*', auth.verify, files.put);
+router.delete('/api/files/*', auth.verify, files.del);
+app.use('/api/healthcheck', function (req, res) { res.status(200).send(); });
app.use(morgan('dev'));
app.use(compression());
-app.use('/_admin', express.static(__dirname + '/frontend'));
-app.use(express.static(rootFolder));
-app.use(serveIndex(rootFolder, { icons: true }));
-app.use(bodyParser.json());
-app.use(bodyParser.urlencoded({ extended: false, limit: '100mb' }));
-app.use(cookieParser());
-app.use(session({ secret: 'surfin surfin', resave: false, saveUninitialized: false }));
-app.use(passport.initialize());
-app.use(passport.session());
+app.use('/api', bodyParser.json());
+app.use('/api', bodyParser.urlencoded({ extended: false, limit: '100mb' }));
+app.use('/api', cookieParser());
+app.use('/api', session({ secret: 'surfin surfin', resave: false, saveUninitialized: false }));
app.use(router);
+app.use(webdav.extensions.express('/_webdav', webdavServer));
+app.use('/_admin', express.static(__dirname + '/frontend'));
+app.use('/raw', function serveRaw(req, res, next) {
+ if (isRoot(req.path) || !fs.existsSync(path.join(ROOT_FOLDER, req.path)))
+ return res.status(404).sendFile(__dirname + '/frontend/404.html');
+ serveIndex(ROOT_FOLDER, { template: rawTemplate })(req, res, next);
+});
+app.use('/zip', sendArchive("zip"));
+app.use('/tar', sendArchive("tar"));
+app.use('/', express.static(ROOT_FOLDER));
+app.use('/', function welcomePage(req, res, next) {
+ if (config.folderListingEnabled || !isRoot(req.path)) return next();
+ res.status(200).sendFile(path.join(__dirname, '/frontend/welcome.html'));
+});
+app.use('/', function (req, res) {
+ if (!fs.existsSync(path.join(ROOT_FOLDER, req.path))) return res.status(404).sendFile(__dirname + '/frontend/404.html');
+
+ res.status(200).sendFile(__dirname + '/frontend/public.html');
+});
app.use(lastMile());
-var server = app.listen(3000, function () {
+var server = app.listen(process.env.LISTEN, function () {
var host = server.address().address;
var port = server.address().port;
- var basePath = path.resolve(__dirname, process.argv[2] || 'files');
- mkdirp.sync(basePath);
+ console.log(`Base path: ${ROOT_FOLDER}`);
+ console.log();
+ console.log(`Listening on http://${host}:${port}`);
- console.log('Surfer listening at http://%s:%s', host, port);
- console.log('Using base path', basePath);
+ auth.init(config);
});
projects / perso / Immae / Projets / Nodejs / Surfer.git / blobdiff