aboutsummaryrefslogblamecommitdiffhomepage
path: root/server/controllers/api/oauth-clients.ts
blob: b9bc0534f24db865741f703dd917472e74e361d5 (plain) (tree)
1
2
3
4
5
6
7
8
9
                                  
 
                                           
                                      
                                                            
                                                  
 
                                           
 
                                                

                                                        
                                                                                                   

                                                  
                                         





                                                                                  
                                                                                                                     


                                             
                                                         


                                                               
                                    
                                 
                                        

                  




                                                                              
        
                    
 
import * as express from 'express'

import { CONFIG } from '../../initializers'
import { logger } from '../../helpers'
import { database as db } from '../../initializers/database'
import { OAuthClientLocal } from '../../../shared'

const oauthClientsRouter = express.Router()

oauthClientsRouter.get('/local', getLocalClient)

// Get the client credentials for the PeerTube front end
function getLocalClient (req: express.Request, res: express.Response, next: express.NextFunction) {
  const serverHostname = CONFIG.WEBSERVER.HOSTNAME
  const serverPort = CONFIG.WEBSERVER.PORT
  let headerHostShouldBe = serverHostname
  if (serverPort !== 80 && serverPort !== 443) {
    headerHostShouldBe += ':' + serverPort
  }

  // Don't make this check if this is a test instance
  if (process.env.NODE_ENV !== 'test' && req.get('host') !== headerHostShouldBe) {
    logger.info('Getting client tokens for host %s is forbidden (expected %s).', req.get('host'), headerHostShouldBe)
    return res.type('json').status(403).end()
  }

  db.OAuthClient.loadFirstClient(function (err, client) {
    if (err) return next(err)
    if (!client) return next(new Error('No client available.'))

    const json: OAuthClientLocal = {
      client_id: client.clientId,
      client_secret: client.clientSecret
    }
    res.json(json)
  })
}

// ---------------------------------------------------------------------------

export {
  oauthClientsRouter
}