127 lines
4.2 KiB
JavaScript
127 lines
4.2 KiB
JavaScript
require("dotenv").config({quiet:true});
|
|
const express = require("express");
|
|
const session = require("express-session");
|
|
const SQLiteStore = require('connect-sqlite3')(session);
|
|
const cors = require("cors");
|
|
const bcrypt = require('bcrypt');
|
|
|
|
var dbReady = false;
|
|
|
|
const DSN = `mysql://${process.env.DB_USER || "root"}:${process.env.DB_PASSWORD || ""}@tcp(${process.env.DB_HOST || "127.0.0.1"}:${process.env.DB_PORT || "3306"})/${process.env.DB_NAME}`;
|
|
const mariadb = require("mariadb");
|
|
const fs = require('fs');
|
|
const path = require('path');
|
|
|
|
const db = mariadb.createPool({
|
|
host: process.env.DB_HOST || "127.0.0.1",
|
|
port: process.env.DB_PORT || 3306,
|
|
user: process.env.DB_USER || "root",
|
|
password: process.env.DB_PASSWORD || null,
|
|
database: process.env.DB_NAME || "uhppoted",
|
|
});
|
|
global.db = db;
|
|
global.DSN = DSN;
|
|
global.log = require("./logger.js")
|
|
|
|
const app = express();
|
|
global.app = app;
|
|
const expressWs = require('express-ws')(app);
|
|
|
|
|
|
|
|
app.use(session({
|
|
secret: process.env.SESSION_SECRET || "uhppoted-secret-change-me",
|
|
cookie: { maxAge: 24 * 60 * 60 * 1000 }, // 1 day
|
|
resave: true,
|
|
saveUninitialized: false,
|
|
store: new SQLiteStore({ db: 'sessions.db', dir: './' })
|
|
}));
|
|
|
|
global.hashPassword = async function(password) {
|
|
const saltRounds = 12;
|
|
return await bcrypt.hash(password, saltRounds);
|
|
};
|
|
|
|
global.comparePassword = async function(password, hash) {
|
|
return await bcrypt.compare(password, hash);
|
|
};
|
|
|
|
global.checkACL = function(req, perm) {
|
|
if (!req.session.user) return false;
|
|
const perms = req.session.user.perms ? JSON.parse(req.session.user.perms) : [];
|
|
if (perms.includes('*') || perms.includes(perm)) {
|
|
return true;
|
|
}
|
|
return false;
|
|
};
|
|
|
|
app.use((req, res, next) => {
|
|
if (req.session.user) return next();
|
|
if (req.path === "/") return next();
|
|
if (req.path === '/login' || req.path === '/login/') return next();
|
|
if (req.path === '/logout' || req.path === '/logout/') return next();
|
|
if (req.path.startsWith('/public/') || req.path === '/favicon.ico' || req.path === '/robots.txt') return next();
|
|
res.redirect('/login?err=4');
|
|
});
|
|
app.use(cors());
|
|
app.use(express.json());
|
|
app.use(express.urlencoded({ extended: true }));
|
|
app.use(express.static("public"));
|
|
app.set("view engine", "ejs");
|
|
app.set("views", "./views");
|
|
|
|
app.use((req, res, next) => {
|
|
if (!dbReady) {
|
|
return res.render('error', { error: 'Database is not ready. Please try again later.' });
|
|
}
|
|
next();
|
|
});
|
|
|
|
const routersDir = path.join(__dirname, 'routes');
|
|
fs.readdirSync(routersDir).forEach(file => {
|
|
const router = require(path.join(routersDir, file));
|
|
if (file.endsWith('.js')) {
|
|
const route = '/' + file.replace('.js', '');
|
|
app.use(route, router);
|
|
}
|
|
});
|
|
|
|
|
|
const port = process.env.APP_PORT || 8080
|
|
app.listen(port, (err) => {
|
|
if (err) {
|
|
global.log.error(`Cannot start server: ${err}`);
|
|
process.exit(1);
|
|
}
|
|
global.log.info(`Listening on port :${port}`);
|
|
global.log.debug(`DSN: ${DSN}`);
|
|
db.query("SELECT * FROM ACL LIMIT 1;")
|
|
.then(async () => {
|
|
dbReady = true;
|
|
global.log.info("Database connection established");
|
|
|
|
// Do init stuff
|
|
await db.query("CREATE TABLE IF NOT EXISTS users ( id INT PRIMARY KEY AUTO_INCREMENT, username VARCHAR(255) UNIQUE, passwordHash VARCHAR(255), perms TEXT, createdAt TIMESTAMP DEFAULT CURRENT_TIMESTAMP );");
|
|
db.query("SELECT COUNT(*) AS count FROM users;").then(async (res) => {
|
|
if (res[0].count == 0) {
|
|
const defaultUser = process.env.DEFAULT_USER || "admin";
|
|
const defaultPassword = process.env.DEFAULT_PASSWORD || [...Array(32)].map(() => (Math.random().toString(36)+Math.random().toString(32)).charAt(2)).join('');
|
|
const passwordHash = await global.hashPassword(defaultPassword);
|
|
db.query("INSERT INTO users (username, passwordHash, perms) VALUES (?, ?, ?);", [defaultUser, passwordHash, JSON.stringify(["*", "login", "acl", "liveMonitor", "eventLog", "auditLog", "manageUsers"])])
|
|
.then(() => {
|
|
global.log.info(`Created default admin user '${defaultUser}' with password '${defaultPassword}'`);
|
|
})
|
|
.catch(err => {
|
|
global.log.error(`Cannot create default user: ${err}`);
|
|
});
|
|
}
|
|
});
|
|
|
|
global.dbEvent = require("./eventWatcher.js");
|
|
})
|
|
.catch(err => {
|
|
global.log.error(`Database connection failed: ${err}`);
|
|
process.exit(1);
|
|
});
|
|
})
|