aboutsummaryrefslogtreecommitdiffhomepage
path: root/server/controllers/api/clients.js
blob: 7755f6c2ba4a37e6e635557eb152c5ef76c01d2e (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
'use strict'

const express = require('express')
const mongoose = require('mongoose')

const constants = require('../../initializers/constants')
const logger = require('../../helpers/logger')

const Client = mongoose.model('OAuthClient')

const router = express.Router()

router.get('/local', getLocalClient)

// Get the client credentials for the PeerTube front end
function getLocalClient (req, res, next) {
  const serverHostname = constants.CONFIG.WEBSERVER.HOSTNAME
  const serverPort = constants.CONFIG.WEBSERVER.PORT
  let headerHostShouldBe = serverHostname
  if (serverPort !== 80 && serverPort !== 443) {
    headerHostShouldBe += ':' + serverPort
  }

  // Don't make this check if this is a test instance
  if (process.env.NODE_ENV !== 'test' && req.get('host') !== headerHostShouldBe) {
    logger.info('Getting client tokens for host %s is forbidden (expected %s).', req.get('host'), headerHostShouldBe)
    return res.type('json').status(403).end()
  }

  Client.loadFirstClient(function (err, client) {
    if (err) return next(err)
    if (!client) return next(new Error('No client available.'))

    res.json({
      client_id: client._id,
      client_secret: client.clientSecret
    })
  })
}

// ---------------------------------------------------------------------------

module.exports = router