Mirror/filesafe
1
0
Fork 0
mirror of https://github.com/BobbyWibowo/lolisafe.git synced 2025-02-07 13:59:01 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

ES6 rewrite

Browse Source
This commit is contained in:
Pitu 2017-10-03 21:13:38 -03:00
parent 128b7113bf
commit 702075b66d
7 changed files with 517 additions and 641 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

207
controllers/albumsController.js
View File

@ -1,163 +1,123 @@
const config = require('../config.js') const config = require('../config.js');
const db = require('knex')(config.database) const db = require('knex')(config.database);
const randomstring = require('randomstring') const randomstring = require('randomstring');
const utils = require('./utilsController.js') const utils = require('./utilsController.js');
const path = require('path') const path = require('path');
let albumsController = {} const albumsController = {};
albumsController.list = function(req, res, next) { albumsController.list = async (req, res, next) => {
const user = await utils.authorize(req, res);
let token = req.headers.token
if (token === undefined) return res.status(401).json({ success: false, description: 'No token provided' })
db.table('users').where('token', token).then((user) => {
if (user.length === 0) return res.status(401).json({ success: false, description: 'Invalid token' })
let fields = ['id', 'name']
const fields = ['id', 'name'];
if (req.params.sidebar === undefined) { if (req.params.sidebar === undefined) {
fields.push('timestamp') fields.push('timestamp');
fields.push('identifier') fields.push('identifier');
} }
db.table('albums').select(fields).where({ enabled: 1, userid: user[0].id }).then((albums) => { const albums = await db.table('albums').select(fields).where({ enabled: 1, userid: user.id });
if (req.params.sidebar !== undefined) {
return res.json({ success: true, albums });
}
if (req.params.sidebar !== undefined) let ids = [];
return res.json({ success: true, albums })
let ids = []
for (let album of albums) { for (let album of albums) {
album.date = new Date(album.timestamp * 1000) album.date = new Date(album.timestamp * 1000)
album.date = utils.getPrettyDate(album.date) // album.date.getFullYear() + '-' + (album.date.getMonth() + 1) + '-' + album.date.getDate() + ' ' + (album.date.getHours() < 10 ? '0' : '') + album.date.getHours() + ':' + (album.date.getMinutes() < 10 ? '0' : '') + album.date.getMinutes() + ':' + (album.date.getSeconds() < 10 ? '0' : '') + album.date.getSeconds() album.date = utils.getPrettyDate(album.date)
let basedomain = req.get('host') album.identifier = `${config.domain}/a/${album.identifier}`;
for (let domain of config.domains) ids.push(album.id);
if (domain.host === req.get('host'))
if (domain.hasOwnProperty('resolve'))
basedomain = domain.resolve
album.identifier = basedomain + '/a/' + album.identifier
ids.push(album.id)
} }
db.table('files').whereIn('albumid', ids).select('albumid').then((files) => { const files = await db.table('files').whereIn('albumid', ids).select('albumid');
const albumsCount = {};
let albumsCount = {} for (let id of ids) albumsCount[id] = 0;
for (let file of files) albumsCount[file.albumid] += 1;
for (let album of albums) album.files = albumsCount[album.id];
for (let id of ids) albumsCount[id] = 0 return res.json({ success: true, albums });
for (let file of files) albumsCount[file.albumid] += 1 };
for (let album of albums) album.files = albumsCount[album.id]
return res.json({ success: true, albums }) albumsController.create = async (req, res, next) => {
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) const user = await utils.authorize(req, res);
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
} const name = req.body.name;
if (name === undefined || name === '') {
return res.json({ success: false, description: 'No album name specified' });
}
albumsController.create = function(req, res, next) { const album = await db.table('albums').where({
let token = req.headers.token
if (token === undefined) return res.status(401).json({ success: false, description: 'No token provided' })
db.table('users').where('token', token).then((user) => {
if (user.length === 0) return res.status(401).json({ success: false, description: 'Invalid token' })
let name = req.body.name
if (name === undefined || name === '')
return res.json({ success: false, description: 'No album name specified' })
db.table('albums').where({
name: name, name: name,
enabled: 1, enabled: 1,
userid: user[0].id userid: user.id
}).then((album) => { }).first();
if (album.length !== 0) return res.json({ success: false, description: 'There\'s already an album with that name' })
db.table('albums').insert({ if (album) {
return res.json({ success: false, description: 'There\'s already an album with that name' })
}
await db.table('albums').insert({
name: name, name: name,
enabled: 1, enabled: 1,
userid: user[0].id, userid: user.id,
identifier: randomstring.generate(8), identifier: randomstring.generate(8),
timestamp: Math.floor(Date.now() / 1000) timestamp: Math.floor(Date.now() / 1000)
}).then(() => { });
return res.json({ success: true })
})
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
} return res.json({ success: true });
};
albumsController.delete = function(req, res, next) { albumsController.delete = async (req, res, next) => {
let token = req.headers.token const user = await utils.authorize(req, res);
if (token === undefined) return res.status(401).json({ success: false, description: 'No token provided' })
db.table('users').where('token', token).then((user) => { const id = req.body.id;
if (user.length === 0) return res.status(401).json({ success: false, description: 'Invalid token'}) if (id === undefined || id === '') {
return res.json({ success: false, description: 'No album specified' });
let id = req.body.id
if (id === undefined || id === ''){
return res.json({ success: false, description: 'No album specified' })
} }
db.table('albums').where({ id: id, userid: user[0].id }).update({ enabled: 0 }).then(() => { await db.table('albums').where({ id: id, userid: user.id }).update({ enabled: 0 });
return res.json({ success: true }) return res.json({ success: true });
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) };
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
}
albumsController.rename = function(req, res, next) { albumsController.rename = async (req, res, next) => {
let token = req.headers.token const user = await utils.authorize(req, res);
if (token === undefined) return res.status(401).json({ success: false, description: 'No token provided' })
db.table('users').where('token', token).then((user) => { const id = req.body.id;
if (user.length === 0) return res.status(401).json({ success: false, description: 'Invalid token'}) if (id === undefined || id === '') {
return res.json({ success: false, description: 'No album specified' });
}
let id = req.body.id const name = req.body.name;
if (id === undefined || id === '') if (name === undefined || name === '') {
return res.json({ success: false, description: 'No album specified' }) return res.json({ success: false, description: 'No name specified' });
}
let name = req.body.name const album = await db.table('albums').where({ name: name, userid: user.id }).first();
if (name === undefined || name === '') if (album) {
return res.json({ success: false, description: 'No name specified' }) return res.json({ success: false, description: 'Name already in use' })
}
db.table('albums').where({ name: name, userid: user[0].id }).then((results) => { await db.table('albums').where({ id: id, userid: user.id }).update({ name: name })
if (results.length !== 0) return res.json({ success: false, description: 'Name already in use' }) return res.json({ success: true });
};
db.table('albums').where({ id: id, userid: user[0].id }).update({ name: name }).then(() => { albumsController.get = async (req, res, next) => {
return res.json({ success: true }) const identifier = req.params.identifier;
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) if (identifier === undefined) return res.status(401).json({ success: false, description: 'No identifier provided' });
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
} const album = await db.table('albums').where('identifier', identifier).first();
if (!album) return res.json({ success: false, description: 'Album not found' });
albumsController.get = function(req, res, next) { const title = album.name;
let identifier = req.params.identifier const files = await db.table('files').select('name').where('albumid', album.id).orderBy('id', 'DESC');
if (identifier === undefined) return res.status(401).json({ success: false, description: 'No identifier provided' })
db.table('albums')
.where('identifier', identifier)
.then((albums) => {
if (albums.length === 0) return res.json({ success: false, description: 'Album not found' })
let title = albums[0].name
db.table('files').select('name').where('albumid', albums[0].id).orderBy('id', 'DESC').then((files) => {
let basedomain = req.get('host')
for (let domain of config.domains)
if (domain.host === req.get('host'))
if (domain.hasOwnProperty('resolve'))
basedomain = domain.resolve
for (let file of files) { for (let file of files) {
file.file = basedomain + '/' + file.name file.file = `${config.domain}/${file.name}`;
let ext = path.extname(file.name).toLowerCase() const ext = path.extname(file.name).toLowerCase();
if (utils.imageExtensions.includes(ext) || utils.videoExtensions.includes(ext)) { if (utils.imageExtensions.includes(ext) || utils.videoExtensions.includes(ext)) {
file.thumb = basedomain + '/thumbs/' + file.name.slice(0, -ext.length) + '.png' file.thumb = `${config.domain}/thumbs/${file.name.slice(0, -ext.length)}.png`;
utils.generateThumbs(file)
} }
} }
@ -166,10 +126,7 @@ albumsController.get = function(req, res, next) {
title: title, title: title,
count: files.length, count: files.length,
files files
}) });
};
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) module.exports = albumsController;
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
}
module.exports = albumsController

128
controllers/authController.js
View File

@ -1,88 +1,86 @@
const config = require('../config.js') const config = require('../config.js');
const db = require('knex')(config.database) const db = require('knex')(config.database);
const bcrypt = require('bcrypt') const bcrypt = require('bcrypt');
const saltRounds = 10 const randomstring = require('randomstring');
const randomstring = require('randomstring') const utils = require('./utilsController.js');
let authController = {} let authController = {};
authController.verify = function(req, res, next) { authController.verify = async (req, res, next) => {
const username = req.body.username;
const password = req.body.password;
let username = req.body.username if (username === undefined) return res.json({ success: false, description: 'No username provided' });
let password = req.body.password if (password === undefined) return res.json({ success: false, description: 'No password provided' });
if (username === undefined) return res.json({ success: false, description: 'No username provided' }) const user = await db.table('users').where('username', username).first();
if (password === undefined) return res.json({ success: false, description: 'No password provided' }) if (!user) return res.json({ success: false, description: 'Username doesn\'t exist' });
db.table('users').where('username', username).then((user) => { bcrypt.compare(password, user.password, (err, result) => {
if (user.length === 0) return res.json({ success: false, description: 'Username doesn\'t exist' }) if (err) {
console.log(err);
return res.json({ success: false, description: 'There was an error' });
}
if (result === false) return res.json({ success: false, description: 'Wrong password' });
return res.json({ success: true, token: user.token });
});
};
bcrypt.compare(password, user[0].password, function(err, result) { authController.register = async (req, res, next) => {
if (result === false) return res.json({ success: false, description: 'Wrong password' }) if (config.enableUserAccounts === false) {
return res.json({ success: true, token: user[0].token }) return res.json({ success: false, description: 'Register is disabled at the moment' });
}) }
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
} const username = req.body.username;
const password = req.body.password;
authController.register = function(req, res, next) { if (username === undefined) return res.json({ success: false, description: 'No username provided' });
if (password === undefined) return res.json({ success: false, description: 'No password provided' });
if (config.enableUserAccounts === false) if (username.length < 4 || username.length > 32) {
return res.json({ success: false, description: 'Register is disabled at the moment' })
let username = req.body.username
let password = req.body.password
if (username === undefined) return res.json({ success: false, description: 'No username provided' })
if (password === undefined) return res.json({ success: false, description: 'No password provided' })
if (username.length < 4 || username.length > 32)
return res.json({ success: false, description: 'Username must have 4-32 characters' }) return res.json({ success: false, description: 'Username must have 4-32 characters' })
if (password.length < 6 || password.length > 64) }
if (password.length < 6 || password.length > 64) {
return res.json({ success: false, description: 'Password must have 6-64 characters' }) return res.json({ success: false, description: 'Password must have 6-64 characters' })
}
db.table('users').where('username', username).then((user) => { const user = await db.table('users').where('username', username).first();
if (user.length !== 0) return res.json({ success: false, description: 'Username already exists' }) if (user) return res.json({ success: false, description: 'Username already exists' });
bcrypt.hash(password, saltRounds, function(err, hash) { bcrypt.hash(password, 10, async (err, hash) => {
if (err) return res.json({ success: false, description: 'Error generating password hash (╯°□°）╯︵ ┻━┻' }) if (err) {
console.log(err);
let token = randomstring.generate(64) return res.json({ success: false, description: 'Error generating password hash (╯°□°）╯︵ ┻━┻' });
}
db.table('users').insert({ const token = randomstring.generate(64);
await db.table('users').insert({
username: username, username: username,
password: hash, password: hash,
token: token token: token
}).then(() => { });
return res.json({ success: true, token: token }) return res.json({ success: true, token: token })
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) });
}) };
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) authController.changePassword = async (req, res, next) => {
const user = await utils.authorize(req, res);
} let password = req.body.password;
if (password === undefined) return res.json({ success: false, description: 'No password provided' });
authController.changePassword = function(req, res, next) { if (password.length < 6 || password.length > 64) {
return res.json({ success: false, description: 'Password must have 6-64 characters' });
}
let token = req.headers.token bcrypt.hash(password, 10, async (err, hash) => {
if (token === undefined) return res.status(401).json({ success: false, description: 'No token provided' }) if (err) {
console.log(err);
return res.json({ success: false, description: 'Error generating password hash (╯°□°）╯︵ ┻━┻' });
}
db.table('users').where('token', token).then((user) => { await db.table('users').where('id', user.id).update({ password: hash });
if (user.length === 0) return res.status(401).json({ success: false, description: 'Invalid token'}) return res.json({ success: true });
});
};
let password = req.body.password module.exports = authController;
if (password === undefined) return res.json({ success: false, description: 'No password provided' })
if (password.length < 6 || password.length > 64)
return res.json({ success: false, description: 'Password must have 6-64 characters' })
bcrypt.hash(password, saltRounds, function(err, hash) {
if (err) return res.json({ success: false, description: 'Error generating password hash (╯°□°）╯︵ ┻━┻' })
db.table('users').where('id', user[0].id).update({ password: hash }).then(() => {
return res.json({ success: true })
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
})
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
}
module.exports = authController

62
controllers/tokenController.js
View File

@ -1,46 +1,34 @@
const config = require('../config.js') const config = require('../config.js');
const db = require('knex')(config.database) const db = require('knex')(config.database);
const randomstring = require('randomstring') const randomstring = require('randomstring');
const utils = require('./utilsController.js');
let tokenController = {} const tokenController = {};
tokenController.verify = function(req, res, next) { tokenController.verify = async (req, res, next) => {
const token = req.body.token;
if (token === undefined) return res.status(401).json({ success: false, description: 'No token provided' });
if (req.body.token === undefined) return res.json({ success: false, description: 'No token provided' }) const user = await db.table('users').where('token', token).first();
let token = req.body.token if (!user) return res.status(401).json({ success: false, description: 'Invalid token' });
return res.json({ success: true, username: user.username });
};
db.table('users').where('token', token).then((user) => { tokenController.list = async (req, res, next) => {
if (user.length === 0) return res.json({ success: false, description: 'Token mismatch' }) const user = await utils.authorize(req, res);
return res.json({ success: true, username: user[0].username }) return res.json({ success: true, token: user.token });
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) };
} tokenController.change = async (req, res, next) => {
const user = await utils.authorize(req, res);
const newtoken = randomstring.generate(64);
tokenController.list = function(req, res, next) { await db.table('users').where('token', user.token).update({
let token = req.headers.token
if (token === undefined) return res.status(401).json({ success: false, description: 'No token provided' })
db.table('users').where('token', token).then((user) => {
if (user.length === 0) return res.json({ success: false, description: 'Token mismatch' })
return res.json({ success: true, token: token })
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
}
tokenController.change = function(req, res, next) {
let token = req.headers.token
if (token === undefined) return res.status(401).json({ success: false, description: 'No token provided' })
let newtoken = randomstring.generate(64)
db.table('users').where('token', token).update({
token: newtoken, token: newtoken,
timestamp: Math.floor(Date.now() / 1000) timestamp: Math.floor(Date.now() / 1000)
}).then(() => { });
res.json({ success: true, token: newtoken })
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
}
module.exports = tokenController res.json({ success: true, token: newtoken });
};
module.exports = tokenController;

378
controllers/uploadController.js
View File

@ -1,22 +1,22 @@
const config = require('../config.js') const config = require('../config.js');
const path = require('path') const path = require('path');
const multer = require('multer') const multer = require('multer');
const randomstring = require('randomstring') const randomstring = require('randomstring');
const db = require('knex')(config.database) const db = require('knex')(config.database);
const crypto = require('crypto') const crypto = require('crypto');
const fs = require('fs') const fs = require('fs');
const utils = require('./utilsController.js') const utils = require('./utilsController.js');
let uploadsController = {} const uploadsController = {};
const storage = multer.diskStorage({ const storage = multer.diskStorage({
destination: function(req, file, cb) { destination: function(req, file, cb) {
cb(null, path.join(__dirname, '..', config.uploads.folder)) cb(null, path.join(__dirname, '..', config.uploads.folder));
}, },
filename: function(req, file, cb) { filename: function(req, file, cb) {
cb(null, randomstring.generate(config.uploads.fileLength) + path.extname(file.originalname)) cb(null, randomstring.generate(config.uploads.fileLength) + path.extname(file.originalname));
} }
}) });
const upload = multer({ const upload = multer({
storage: storage, storage: storage,
@ -30,104 +30,66 @@ const upload = multer({
} }
return cb(null, true); return cb(null, true);
} }
}).array('files[]') }).array('files[]');
uploadsController.upload = function(req, res, next) { uploadsController.upload = async (req, res, next) => {
if (config.private === true) {
// Get the token await utils.authorize(req, res);
let token = req.headers.token
// If we're running in private and there's no token, error
if (config.private === true)
if (token === undefined) return res.status(401).json({ success: false, description: 'No token provided' })
// If there is no token then just leave it blank so the query fails
if (token === undefined) token = ''
db.table('users').where('token', token).then((user) => {
if(user.length === 0)
if(config.private === true)
return res.status(401).json({ success: false, description: 'Invalid token provided' })
let userid
if(user.length > 0)
userid = user[0].id
// Check if user is trying to upload to an album
let album
if (userid !== undefined) {
album = req.headers.albumid
if (album === undefined)
album = req.params.albumid
} }
/* const token = req.headers.token || '';
A rewrite is due so might as well do awful things here and fix them later :bloblul: const user = await db.table('users').where('token', token).first();
*/ const albumid = req.headers.albumid || req.params.albumid;
if (album !== undefined && userid !== undefined) { if (albumid && user) {
// If both values are present, check if the album owner is the user uploading const album = await db.table('albums').where({ id: album, userid: user.id }).first();
db.table('albums').where({ id: album, userid: userid }).then((albums) => { if (!album) {
if (albums.length === 0) {
return res.json({ return res.json({
success: false, success: false,
description: 'Album doesn\'t exist or it doesn\'t belong to the user' description: 'Album doesn\'t exist or it doesn\'t belong to the user'
}) });
} }
uploadsController.actuallyUpload(req, res, userid, album); return uploadsController.actuallyUpload(req, res, user.id, albumid);
})
} else {
uploadsController.actuallyUpload(req, res, userid, album);
} }
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) return uploadsController.actuallyUpload(req, res, user.id, albumid);
} };
uploadsController.actuallyUpload = function(req, res, userid, album) { uploadsController.actuallyUpload = async (req, res, userid, album) => {
upload(req, res, function (err) { upload(req, res, async err => {
if (err) { if (err) {
console.error(err) console.error(err);
return res.json({ return res.json({ success: false, description: err });
success: false,
description: err
})
} }
if (req.files.length === 0) return res.json({ success: false, description: 'no-files' }) if (req.files.length === 0) return res.json({ success: false, description: 'no-files' });
let files = [] const files = [];
let existingFiles = [] const existingFiles = [];
let iteration = 1 let iteration = 1;
req.files.forEach(function(file) {
req.files.forEach(async file => {
// Check if the file exists by checking hash and size // Check if the file exists by checking hash and size
let hash = crypto.createHash('md5') let hash = crypto.createHash('md5');
let stream = fs.createReadStream(path.join(__dirname, '..', config.uploads.folder, file.filename)) let stream = fs.createReadStream(path.join(__dirname, '..', config.uploads.folder, file.filename));
stream.on('data', function (data) { stream.on('data', data => {
hash.update(data, 'utf8') hash.update(data, 'utf8');
}) });
stream.on('end', function () { stream.on('end', async () => {
let fileHash = hash.digest('hex') const fileHash = hash.digest('hex');
const dbFile = await db.table('files')
db.table('files')
.where(function() { .where(function() {
if (userid === undefined) if (userid === undefined) this.whereNull('userid');
this.whereNull('userid') else this.where('userid', userid);
else
this.where('userid', userid)
}) })
.where({ .where({
hash: fileHash, hash: fileHash,
size: file.size size: file.size
}).then((dbfile) => { })
.first();
if (dbfile.length !== 0) { if (!dbFile) {
uploadsController.deleteFile(file.filename).then(() => {}).catch((e) => console.error(e))
existingFiles.push(dbfile[0])
} else {
files.push({ files.push({
name: file.filename, name: file.filename,
original: file.originalname, original: file.originalname,
@ -138,25 +100,23 @@ uploadsController.actuallyUpload = function(req, res, userid, album) {
albumid: album, albumid: album,
userid: userid, userid: userid,
timestamp: Math.floor(Date.now() / 1000) timestamp: Math.floor(Date.now() / 1000)
}) });
} else {
uploadsController.deleteFile(file.filename).then(() => {}).catch(err => console.error(err));
existingFiles.push(dbFile);
} }
if (iteration === req.files.length) if (iteration === req.files.length) {
return uploadsController.processFilesForDisplay(req, res, files, existingFiles) return uploadsController.processFilesForDisplay(req, res, files, existingFiles);
iteration++ }
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) iteration++;
}) });
}) });
}) });
} };
uploadsController.processFilesForDisplay = function(req, res, files, existingFiles) {
let basedomain = req.get('host')
for (let domain of config.domains)
if (domain.host === req.get('host'))
if (domain.hasOwnProperty('resolve'))
basedomain = domain.resolve
uploadsController.processFilesForDisplay = async (req, res, files, existingFiles) => {
let basedomain = config.domain;
if (files.length === 0) { if (files.length === 0) {
return res.json({ return res.json({
success: true, success: true,
@ -164,15 +124,14 @@ uploadsController.processFilesForDisplay = function(req, res, files, existingFil
return { return {
name: file.name, name: file.name,
size: file.size, size: file.size,
url: basedomain + '/' + file.name url: `${basedomain}/${file.name}`
} };
})
}) })
});
} }
db.table('files').insert(files).then(() => { await db.table('files').insert(files);
for (let efile of existingFiles) files.push(efile);
for (let efile of existingFiles) files.push(efile)
res.json({ res.json({
success: true, success: true,
@ -180,158 +139,139 @@ uploadsController.processFilesForDisplay = function(req, res, files, existingFil
return { return {
name: file.name, name: file.name,
size: file.size, size: file.size,
url: basedomain + '/' + file.name url: `${basedomain}/${file.name}`
} };
})
}) })
});
for (let file of files) { for (let file of files) {
let ext = path.extname(file.name).toLowerCase() let ext = path.extname(file.name).toLowerCase();
if (utils.imageExtensions.includes(ext) || utils.videoExtensions.includes(ext)) { if (utils.imageExtensions.includes(ext) || utils.videoExtensions.includes(ext)) {
file.thumb = basedomain + '/thumbs/' + file.name.slice(0, -ext.length) + '.png' file.thumb = `${basedomain}/thumbs/${file.name.slice(0, -ext.length)}.png`;
utils.generateThumbs(file) utils.generateThumbs(file);
} }
} }
};
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) uploadsController.delete = async (req, res) => {
} const user = await utils.authorize(req, res);
const id = req.body.id;
if (id === undefined || id === '') {
return res.json({ success: false, description: 'No file specified' });
}
uploadsController.delete = function(req, res) { const file = await db.table('files')
let token = req.headers.token
if (token === undefined) return res.status(401).json({ success: false, description: 'No token provided' })
let id = req.body.id
if (id === undefined || id === '')
return res.json({ success: false, description: 'No file specified' })
db.table('users').where('token', token).then((user) => {
if (user.length === 0) return res.status(401).json({ success: false, description: 'Invalid token' })
db.table('files')
.where('id', id) .where('id', id)
.where(function() { .where(function() {
if (user[0].username !== 'root') if (user.username !== 'root') {
this.where('userid', user[0].id) this.where('userid', user.id);
}
}) })
.then((file) => { .first();
uploadsController.deleteFile(file[0].name).then(() => { try {
db.table('files').where('id', id).del().then(() => { await uploadsController.deleteFile(file.name);
return res.json({ success: true }) await db.table('files').where('id', id).del();
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) } catch (err) {
}).catch((e) => { console.log(err);
console.log(e.toString()) }
db.table('files').where('id', id).del().then(() => {
return res.json({ success: true })
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
})
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) return res.json({ success: true });
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) };
}
uploadsController.deleteFile = function(file) { uploadsController.deleteFile = function(file) {
const ext = path.extname(file).toLowerCase() const ext = path.extname(file).toLowerCase();
return new Promise(function(resolve, reject) { return new Promise((resolve, reject) => {
fs.stat(path.join(__dirname, '..', config.uploads.folder, file), function(err, stats) { fs.stat(path.join(__dirname, '..', config.uploads.folder, file), (err, stats) => {
if (err) { return reject(err) } if (err) { return reject(err); }
fs.unlink(path.join(__dirname, '..', config.uploads.folder, file), function(err) { fs.unlink(path.join(__dirname, '..', config.uploads.folder, file), err => {
if (err) { return reject(err) } if (err) { return reject(err); }
if(!utils.imageExtensions.includes(ext) && !utils.videoExtensions.includes(ext)) { if (!utils.imageExtensions.includes(ext) && !utils.videoExtensions.includes(ext)) {
return resolve() return resolve();
} }
file = file.substr(0, file.lastIndexOf(".")) + ".png" file = file.substr(0, file.lastIndexOf('.')) + '.png';
fs.stat(path.join(__dirname, '..', config.uploads.folder, "thumbs/", file), function(err, stats) { fs.stat(path.join(__dirname, '..', config.uploads.folder, 'thumbs/', file), (err, stats) => {
if (err) { return reject(err) } if (err) {
fs.unlink(path.join(__dirname, '..', config.uploads.folder, "thumbs/", file), function(err) { console.log(err);
if (err) { return reject(err) } return resolve();
return resolve() }
}) fs.unlink(path.join(__dirname, '..', config.uploads.folder, 'thumbs/', file), err => {
}) if (err) { return reject(err); }
}) return resolve();
}) });
}) });
} });
});
});
};
uploadsController.list = function(req, res) { uploadsController.list = async (req, res) => {
const user = await utils.authorize(req, res);
let token = req.headers.token let offset = req.params.page;
if (token === undefined) return res.status(401).json({ success: false, description: 'No token provided' }) if (offset === undefined) offset = 0;
db.table('users').where('token', token).then((user) => { const files = await db.table('files')
if (user.length === 0) return res.status(401).json({ success: false, description: 'Invalid token'})
let offset = req.params.page
if (offset === undefined) offset = 0
db.table('files')
.where(function() { .where(function() {
if (req.params.id === undefined) if (req.params.id === undefined) this.where('id', '<>', '');
this.where('id', '<>', '') else this.where('albumid', req.params.id);
else
this.where('albumid', req.params.id)
}) })
.where(function() { .where(function() {
if (user[0].username !== 'root') if (user.username !== 'root') this.where('userid', user.id);
this.where('userid', user[0].id)
}) })
.orderBy('id', 'DESC') .orderBy('id', 'DESC')
.limit(25) .limit(25)
.offset(25 * offset) .offset(25 * offset)
.select('id', 'albumid', 'timestamp', 'name', 'userid') .select('id', 'albumid', 'timestamp', 'name', 'userid');
.then((files) => {
db.table('albums').then((albums) => {
let basedomain = req.get('host') const albums = await db.table('albums');
for (let domain of config.domains) let basedomain = config.domain;
if (domain.host === req.get('host')) let userids = [];
if (domain.hasOwnProperty('resolve'))
basedomain = domain.resolve
let userids = []
for (let file of files) { for (let file of files) {
file.file = basedomain + '/' + file.name file.file = `${basedomain}/${file.name}`;
file.date = new Date(file.timestamp * 1000) file.date = new Date(file.timestamp * 1000);
file.date = utils.getPrettyDate(file.date) // file.date.getFullYear() + '-' + (file.date.getMonth() + 1) + '-' + file.date.getDate() + ' ' + (file.date.getHours() < 10 ? '0' : '') + file.date.getHours() + ':' + (file.date.getMinutes() < 10 ? '0' : '') + file.date.getMinutes() + ':' + (file.date.getSeconds() < 10 ? '0' : '') + file.date.getSeconds() file.date = utils.getPrettyDate(file.date);
file.album = '' file.album = '';
if (file.albumid !== undefined) if (file.albumid !== undefined) {
for (let album of albums) for (let album of albums) {
if (file.albumid === album.id) if (file.albumid === album.id) {
file.album = album.name file.album = album.name;
}
}
}
// Only push usernames if we are root // Only push usernames if we are root
if (user[0].username === 'root') if (user.username === 'root') {
if (file.userid !== undefined && file.userid !== null && file.userid !== '') if (file.userid !== undefined && file.userid !== null && file.userid !== '') {
userids.push(file.userid) userids.push(file.userid);
}
}
let ext = path.extname(file.name).toLowerCase() let ext = path.extname(file.name).toLowerCase();
if (utils.imageExtensions.includes(ext) || utils.videoExtensions.includes(ext)) { if (utils.imageExtensions.includes(ext) || utils.videoExtensions.includes(ext)) {
file.thumb = basedomain + '/thumbs/' + file.name.slice(0, -ext.length) + '.png' file.thumb = `${basedomain}/thumbs/${file.name.slice(0, -ext.length)}.png`;
utils.generateThumbs(file)
} }
} }
// If we are a normal user, send response // If we are a normal user, send response
if (user[0].username !== 'root') return res.json({ success: true, files }) if (user.username !== 'root') return res.json({ success: true, files });
// If we are root but there are no uploads attached to a user, send response // If we are root but there are no uploads attached to a user, send response
if (userids.length === 0) return res.json({ success: true, files }) if (userids.length === 0) return res.json({ success: true, files });
db.table('users').whereIn('id', userids).then((users) => { const users = await db.table('users').whereIn('id', userids);
for (let user of users) for (let dbUser of users) {
for (let file of files) for (let file of files) {
if (file.userid === user.id) if (file.userid === dbUser.id) {
file.username = user.username file.username = dbUser.username;
}
}
}
return res.json({ success: true, files }) return res.json({ success: true, files });
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) };
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
})
}
module.exports = uploadsController module.exports = uploadsController;

56
controllers/utilsController.js
View File

@ -1,12 +1,13 @@
const path = require('path') const path = require('path');
const config = require('../config.js') const config = require('../config.js');
const fs = require('fs') const fs = require('fs');
const gm = require('gm') const gm = require('gm');
const ffmpeg = require('fluent-ffmpeg') const ffmpeg = require('fluent-ffmpeg');
const db = require('knex')(config.database);
const utilsController = {} const utilsController = {};
utilsController.imageExtensions = ['.jpg', '.jpeg', '.bmp', '.gif', '.png'] utilsController.imageExtensions = ['.jpg', '.jpeg', '.bmp', '.gif', '.png'];
utilsController.videoExtensions = ['.webm', '.mp4', '.wmv', '.avi', '.mov'] utilsController.videoExtensions = ['.webm', '.mp4', '.wmv', '.avi', '.mov'];
utilsController.getPrettyDate = function(date) { utilsController.getPrettyDate = function(date) {
return date.getFullYear() + '-' return date.getFullYear() + '-'
@ -17,15 +18,24 @@ utilsController.getPrettyDate = function(date) {
+ (date.getMinutes() < 10 ? '0' : '') + (date.getMinutes() < 10 ? '0' : '')
+ date.getMinutes() + ':' + date.getMinutes() + ':'
+ (date.getSeconds() < 10 ? '0' : '') + (date.getSeconds() < 10 ? '0' : '')
+ date.getSeconds() + date.getSeconds();
} }
utilsController.generateThumbs = function(file, basedomain) { utilsController.authorize = async (req, res) => {
if (config.uploads.generateThumbnails !== true) return const token = req.headers.token;
const ext = path.extname(file.name).toLowerCase() if (token === undefined) return res.status(401).json({ success: false, description: 'No token provided' });
let thumbname = path.join(__dirname, '..', config.uploads.folder, 'thumbs', file.name.slice(0, -ext.length) + '.png') const user = await db.table('users').where('token', token).first();
fs.access(thumbname, (err) => { if (!user) return res.status(401).json({ success: false, description: 'Invalid token' });
return user;
};
utilsController.generateThumbs = function(file, basedomain) {
if (config.uploads.generateThumbnails !== true) return;
const ext = path.extname(file.name).toLowerCase();
let thumbname = path.join(__dirname, '..', config.uploads.folder, 'thumbs', file.name.slice(0, -ext.length) + '.png');
fs.access(thumbname, err => {
if (err && err.code === 'ENOENT') { if (err && err.code === 'ENOENT') {
if (utilsController.videoExtensions.includes(ext)) { if (utilsController.videoExtensions.includes(ext)) {
ffmpeg(path.join(__dirname, '..', config.uploads.folder, file.name)) ffmpeg(path.join(__dirname, '..', config.uploads.folder, file.name))
@ -35,25 +45,23 @@ utilsController.generateThumbs = function(file, basedomain) {
folder: path.join(__dirname, '..', config.uploads.folder, 'thumbs'), folder: path.join(__dirname, '..', config.uploads.folder, 'thumbs'),
size: '200x?' size: '200x?'
}) })
.on('error', (error) => { .on('error', error => console.log('Error - ', error.message));
console.log('Error - ', error.message)
})
} else { } else {
let size = { let size = {
width: 200, width: 200,
height: 200 height: 200
} };
gm(path.join(__dirname, '..', config.uploads.folder, file.name)) gm(path.join(__dirname, '..', config.uploads.folder, file.name))
.resize(size.width, size.height + '>') .resize(size.width, size.height + '>')
.gravity('Center') .gravity('Center')
.extent(size.width, size.height) .extent(size.width, size.height)
.background('transparent') .background('transparent')
.write(thumbname, (error) => { .write(thumbname, error => {
if (error) console.log('Error - ', error) if (error) console.log('Error - ', error);
}) });
} }
} }
}) });
} };
module.exports = utilsController module.exports = utilsController;

57
routes/album.js
View File

@ -1,35 +1,26 @@
const config = require('../config.js') const config = require('../config.js');
const routes = require('express').Router() const routes = require('express').Router();
const db = require('knex')(config.database) const db = require('knex')(config.database);
const path = require('path') const path = require('path');
const utils = require('../controllers/utilsController.js') const utils = require('../controllers/utilsController.js');
routes.get('/a/:identifier', (req, res, next) => { routes.get('/a/:identifier', async (req, res, next) => {
let identifier = req.params.identifier;
if (identifier === undefined) return res.status(401).json({ success: false, description: 'No identifier provided' });
let identifier = req.params.identifier const album = await db.table('albums').where('identifier', identifier).first();
if (identifier === undefined) return res.status(401).json({ success: false, description: 'No identifier provided' }) if (!album) return res.json({ success: false, description: 'Album not found' });
db.table('albums') const files = await db.table('files').select('name').where('albumid', album.id).orderBy('id', 'DESC');
.where('identifier', identifier) let thumb = '';
.then((albums) => { const basedomain = config.domain;
if (albums.length === 0) return res.json({ success: false, description: 'Album not found' })
let title = albums[0].name
db.table('files').select('name').where('albumid', albums[0].id).orderBy('id', 'DESC').then((files) => {
let thumb = ''
let basedomain = req.get('host')
for (let domain of config.domains)
if (domain.host === req.get('host'))
if (domain.hasOwnProperty('resolve'))
basedomain = domain.resolve
for (let file of files) { for (let file of files) {
file.file = basedomain + '/' + file.name file.file = `${basedomain}/${file.name}`;
let ext = path.extname(file.name).toLowerCase() let ext = path.extname(file.name).toLowerCase();
if (utils.imageExtensions.includes(ext) || utils.videoExtensions.includes(ext)) { if (utils.imageExtensions.includes(ext) || utils.videoExtensions.includes(ext)) {
file.thumb = basedomain + '/thumbs/' + file.name.slice(0, -ext.length) + '.png' file.thumb = `${basedomain}/thumbs/${file.name.slice(0, -ext.length)}.png`;
/* /*
If thumbnail for album is still not set, do it. If thumbnail for album is still not set, do it.
@ -38,24 +29,22 @@ routes.get('/a/:identifier', (req, res, next) => {
*/ */
if (thumb === '') { if (thumb === '') {
thumb = file.thumb thumb = file.thumb;
} }
file.thumb = `<img src="${file.thumb}"/>` file.thumb = `<img src="${file.thumb}"/>`;
} else { } else {
file.thumb = `<h1 class="title">.${ext}</h1>` file.thumb = `<h1 class="title">.${ext}</h1>`;
} }
} }
return res.render('album', { return res.render('album', {
layout: false, layout: false,
title: title, title: album.name,
count: files.length, count: files.length,
thumb, thumb,
files files
}) });
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) }) });
}).catch(function(error) { console.log(error); res.json({ success: false, description: 'error' }) })
})
module.exports = routes module.exports = routes;

64
routes/api.js
View File

@ -1,40 +1,36 @@
const config = require('../config.js') const config = require('../config.js');
const routes = require('express').Router() const routes = require('express').Router();
const uploadController = require('../controllers/uploadController') const uploadController = require('../controllers/uploadController');
const albumsController = require('../controllers/albumsController') const albumsController = require('../controllers/albumsController');
const tokenController = require('../controllers/tokenController') const tokenController = require('../controllers/tokenController');
const authController = require('../controllers/authController') const authController = require('../controllers/authController');
routes.get ('/check', (req, res, next) => { routes.get('/check', (req, res, next) => {
return res.json({ return res.json({
private: config.private, private: config.private,
maxFileSize: config.uploads.maxSize maxFileSize: config.uploads.maxSize
}) });
}) });
routes.post ('/login', (req, res, next) => authController.verify(req, res, next)) routes.post('/login', (req, res, next) => authController.verify(req, res, next));
routes.post ('/register', (req, res, next) => authController.register(req, res, next)) routes.post('/register', (req, res, next) => authController.register(req, res, next));
routes.post ('/password/change', (req, res, next) => authController.changePassword(req, res, next)) routes.post('/password/change', (req, res, next) => authController.changePassword(req, res, next));
routes.get('/uploads', (req, res, next) => uploadController.list(req, res, next));
routes.get('/uploads/:page', (req, res, next) => uploadController.list(req, res, next));
routes.post('/upload', (req, res, next) => uploadController.upload(req, res, next));
routes.post('/upload/delete', (req, res, next) => uploadController.delete(req, res, next));
routes.post('/upload/:albumid', (req, res, next) => uploadController.upload(req, res, next));
routes.get('/album/get/:identifier', (req, res, next) => albumsController.get(req, res, next));
routes.get('/album/:id', (req, res, next) => uploadController.list(req, res, next));
routes.get('/album/:id/:page', (req, res, next) => uploadController.list(req, res, next));
routes.get('/albums', (req, res, next) => albumsController.list(req, res, next));
routes.get('/albums/:sidebar', (req, res, next) => albumsController.list(req, res, next));
routes.post('/albums', (req, res, next) => albumsController.create(req, res, next));
routes.post('/albums/delete', (req, res, next) => albumsController.delete(req, res, next));
routes.post('/albums/rename', (req, res, next) => albumsController.rename(req, res, next));
routes.get('/albums/test', (req, res, next) => albumsController.test(req, res, next));
routes.get('/tokens', (req, res, next) => tokenController.list(req, res, next));
routes.post('/tokens/verify', (req, res, next) => tokenController.verify(req, res, next));
routes.post('/tokens/change', (req, res, next) => tokenController.change(req, res, next));
routes.get ('/uploads', (req, res, next) => uploadController.list(req, res)) module.exports = routes;
routes.get ('/uploads/:page', (req, res, next) => uploadController.list(req, res))
routes.post ('/upload', (req, res, next) => uploadController.upload(req, res, next))
routes.post ('/upload/delete', (req, res, next) => uploadController.delete(req, res, next))
routes.post ('/upload/:albumid', (req, res, next) => uploadController.upload(req, res, next))
routes.get ('/album/get/:identifier', (req, res, next) => albumsController.get(req, res, next))
routes.get ('/album/:id', (req, res, next) => uploadController.list(req, res, next))
routes.get ('/album/:id/:page', (req, res, next) => uploadController.list(req, res, next))
routes.get ('/albums', (req, res, next) => albumsController.list(req, res, next))
routes.get ('/albums/:sidebar', (req, res, next) => albumsController.list(req, res, next))
routes.post ('/albums', (req, res, next) => albumsController.create(req, res, next))
routes.post ('/albums/delete', (req, res, next) => albumsController.delete(req, res, next))
routes.post ('/albums/rename', (req, res, next) => albumsController.rename(req, res, next))
routes.get ('/albums/test', (req, res, next) => albumsController.test(req, res, next))
routes.get ('/tokens', (req, res, next) => tokenController.list(req, res))
routes.post ('/tokens/verify', (req, res, next) => tokenController.verify(req, res))
routes.post ('/tokens/change', (req, res, next) => tokenController.change(req, res))
module.exports = routes