"use strict"; const Koa = require("koa"); const Router = require("koa-router"); const koaStatic = require("koa-static"); const koaCompress = require("koa-compress"); const koaBodyParser = require("koa-bodyparser"); const koaJwt = require("koa-jwt"); const jwt = require("jsonwebtoken"); const config = require("./config"); const api = require("./api"); const Authorizer = require("../common/authorizer"); const expression = require("../common/expression"); const koa = new Koa(); const router = new Router(); const JWT_SECRET = config.server.jwtSecret; const JWT_COOKIE = "genieacs-ui-jwt"; function getPermissionSets(roles) { const allPermissions = config.permissions; const permissionSets = roles.map(role => { return Object.values(allPermissions[role] || {}).map(p => { p = Object.assign({}, p); for (let [k, v] of Object.entries(p)) { p[k] = v = Object.assign({}, v); if (["devices", "faults", "files"].includes(k)) if (v.filter == null || v.filter === "") v.filter = true; else { v.filter = expression.parse(v.filter); } } return p; }); }); return permissionSets; } koa.use( koaJwt({ secret: JWT_SECRET, passthrough: true, cookie: JWT_COOKIE }) ); koa.use(async (ctx, next) => { if (ctx.state.user && ctx.state.user.roles) ctx.state.authorizer = new Authorizer( getPermissionSets(ctx.state.user.roles) ); else ctx.state.authorizer = new Authorizer([]); return next(); }); router.post("/login", async ctx => { const username = ctx.request.body.username; const password = ctx.request.body.password; const user = config.auth.simple.users[username]; if (!user || user.password !== password) { ctx.status = 400; ctx.body = "Incorrect username or password"; return; } let token = jwt.sign( { username: username, roles: user.roles.split(",") }, JWT_SECRET ); ctx.cookies.set(JWT_COOKIE, token); ctx.body = JSON.stringify(token); }); router.post("/logout", async ctx => { ctx.cookies.set(JWT_COOKIE); // Delete cookie ctx.body = ""; }); koa.use(koaBodyParser()); router.use("/api", api.routes(), api.allowedMethods()); router.get("/", async ctx => { let permissionSets = []; if (ctx.state.user && ctx.state.user.roles) permissionSets = getPermissionSets(ctx.state.user.roles); ctx.body = ` GenieACS `; }); koa.use( koaCompress({ flush: require("zlib").Z_SYNC_FLUSH }) ); koa.use(router.routes()); koa.use(koaStatic("./public")); koa.listen(config.server.port, () => { // eslint-disable-next-line no-console console.log(`Server listening on port ${config.server.port}`); });