1 files changed, 43 insertions, 0 deletions

diff --git a/server/controllers/api/oauth-clients.ts b/server/controllers/api/oauth-clients.ts
new file mode 100644
index 000000000..b9bc0534f
--- /dev/null
+++ b/server/controllers/api/oauth-clients.ts
@@ -0,0 +1,43 @@
+import * as express from 'express'
+
+import { CONFIG } from '../../initializers'
+import { logger } from '../../helpers'
+import { database as db } from '../../initializers/database'
+import { OAuthClientLocal } from '../../../shared'
+
+const oauthClientsRouter = express.Router()
+
+oauthClientsRouter.get('/local', getLocalClient)
+
+// Get the client credentials for the PeerTube front end
+function getLocalClient (req: express.Request, res: express.Response, next: express.NextFunction) {
+  const serverHostname = CONFIG.WEBSERVER.HOSTNAME
+  const serverPort = CONFIG.WEBSERVER.PORT
+  let headerHostShouldBe = serverHostname
+  if (serverPort !== 80 && serverPort !== 443) {
+    headerHostShouldBe += ':' + serverPort
+  }
+
+  // Don't make this check if this is a test instance
+  if (process.env.NODE_ENV !== 'test' && req.get('host') !== headerHostShouldBe) {
+    logger.info('Getting client tokens for host %s is forbidden (expected %s).', req.get('host'), headerHostShouldBe)
+    return res.type('json').status(403).end()
+  }
+
+  db.OAuthClient.loadFirstClient(function (err, client) {
+    if (err) return next(err)
+    if (!client) return next(new Error('No client available.'))
+
+    const json: OAuthClientLocal = {
+      client_id: client.clientId,
+      client_secret: client.clientSecret
+    }
+    res.json(json)
+  })
+}
+
+// ---------------------------------------------------------------------------
+
+export {
+  oauthClientsRouter
+}