mirror of https://github.com/calzoneman/sync.git
131 lines
3.4 KiB
JavaScript
131 lines
3.4 KiB
JavaScript
var path = require("path");
|
|
var fs = require("fs");
|
|
var webserver = require("./webserver");
|
|
var sendJade = require("./jade").sendJade;
|
|
var Logger = require("../logger");
|
|
var db = require("../database");
|
|
var Config = require("../config");
|
|
|
|
function checkAdmin(cb) {
|
|
return function (req, res) {
|
|
webserver.logRequest(req);
|
|
var auth = req.cookies.auth;
|
|
if (!auth) {
|
|
res.send(403);
|
|
return;
|
|
}
|
|
db.users.verifyAuth(auth, function (err, user) {
|
|
if (err) {
|
|
if (err === "Invalid auth string" ||
|
|
err === "Auth string does not match an existing user") {
|
|
res.send(403);
|
|
} else {
|
|
res.send(500);
|
|
}
|
|
return;
|
|
}
|
|
|
|
if (user.global_rank < 255) {
|
|
res.send(403);
|
|
Logger.eventlog.log("[acp] Attempted GET "+req.path+" from non-admin " +
|
|
user.name + "@" + webserver.ipForRequest(req));
|
|
return;
|
|
}
|
|
|
|
cb(req, res, user);
|
|
});
|
|
};
|
|
}
|
|
|
|
/**
|
|
* Handles a request for the ACP
|
|
*/
|
|
function handleAcp(req, res, user) {
|
|
var sio;
|
|
if (req.secure) {
|
|
sio = Config.get("https.domain") + ":" + Config.get("https.default-port");
|
|
} else {
|
|
sio = Config.get("io.domain") + ":" + Config.get("io.default-port");
|
|
}
|
|
sio += "/socket.io/socket.io.js";
|
|
|
|
sendJade(res, "acp", {
|
|
loginName: user.name,
|
|
loggedIn: true,
|
|
sioSource: sio
|
|
});
|
|
}
|
|
|
|
/**
|
|
* Streams the last length bytes of file to the given HTTP response
|
|
*/
|
|
function readLog(res, file, length) {
|
|
fs.stat(file, function (err, data) {
|
|
if (err) {
|
|
res.send(500);
|
|
return;
|
|
}
|
|
|
|
var start = Math.max(0, data.size - length);
|
|
if (isNaN(start)) {
|
|
res.send(500);
|
|
}
|
|
var end = Math.max(0, data.size - 1);
|
|
if (isNaN(end)) {
|
|
res.send(500);
|
|
}
|
|
fs.createReadStream(file, { start: start, end: end })
|
|
.pipe(res);
|
|
});
|
|
}
|
|
|
|
/**
|
|
* Handles a request to read the syslog
|
|
*/
|
|
function handleReadSyslog(req, res) {
|
|
readLog(res, path.join(__dirname, "..", "..", "sys.log"), 1048576);
|
|
}
|
|
|
|
/**
|
|
* Handles a request to read the error log
|
|
*/
|
|
function handleReadErrlog(req, res) {
|
|
readLog(res, path.join(__dirname, "..", "..", "error.log"), 1048576);
|
|
}
|
|
|
|
/**
|
|
* Handles a request to read the http log
|
|
*/
|
|
function handleReadHttplog(req, res) {
|
|
readLog(res, path.join(__dirname, "..", "..", "http.log"), 1048576);
|
|
}
|
|
|
|
/**
|
|
* Handles a request to read the event log
|
|
*/
|
|
function handleReadEventlog(req, res) {
|
|
readLog(res, path.join(__dirname, "..", "..", "events.log"), 1048576);
|
|
}
|
|
|
|
/**
|
|
* Handles a request to read a channel log
|
|
*/
|
|
function handleReadChanlog(req, res) {
|
|
if (!req.params.name.match(/^[\w-]{1,30}$/)) {
|
|
res.send(400);
|
|
return;
|
|
}
|
|
readLog(res, path.join(__dirname, "..", "..", "chanlogs", req.params.name + ".log"), 1048576);
|
|
}
|
|
|
|
module.exports = {
|
|
init: function (app) {
|
|
app.get("/acp", checkAdmin(handleAcp));
|
|
app.get("/acp/syslog", checkAdmin(handleReadSyslog));
|
|
app.get("/acp/errlog", checkAdmin(handleReadErrlog));
|
|
app.get("/acp/httplog", checkAdmin(handleReadHttplog));
|
|
app.get("/acp/eventlog", checkAdmin(handleReadEventlog));
|
|
app.get("/acp/chanlog/:name", checkAdmin(handleReadChanlog));
|
|
}
|
|
};
|