CyTube/lib/web/acp.js

var path = require("path");
var fs = require("fs");
var webserver = require("./webserver");
var sendJade = require("./jade").sendJade;
var Logger = require("../logger");
var db = require("../database");
var Config = require("../config");

function checkAdmin(cb) {
    return function (req, res) {
        webserver.logRequest(req);
        var auth = req.cookies.auth;
        if (!auth) {
            res.send(403);
            return;
        }
        db.users.verifyAuth(auth, function (err, user) {
            if (err) {
                if (err === "Invalid auth string" ||
                    err === "Auth string does not match an existing user") {
                    res.send(403);
                } else {
                    res.send(500);
                }
                return;
            }

            if (user.global_rank < 255) {
                res.send(403);
                Logger.eventlog.log("[acp] Attempted GET "+req.path+" from non-admin " +
                                    user.name + "@" + webserver.ipForRequest(req));
                return;
            }

            cb(req, res, user);
        });
    };
}

/**
 * Handles a request for the ACP
 */
function handleAcp(req, res, user) {
    var sio;
    if (req.secure) {
        sio = Config.get("https.domain") + ":" + Config.get("https.port");
    } else {
        sio = Config.get("io.domain") + ":" + Config.get("io.port");
    }
    sio += "/socket.io/socket.io.js";

    sendJade(res, "acp", {
        loginName: user.name,
        loggedIn: true,
        sioSource: sio
    });
}

/**
 * Streams the last length bytes of file to the given HTTP response
 */
function readLog(res, file, length) {
    fs.stat(file, function (err, data) {
        if (err) {
            res.send(500);
            return;
        }

        var start = Math.max(0, data.size - length);
        if (isNaN(start)) {
            res.send(500);
        }
        var end = Math.max(0, data.size - 1);
        if (isNaN(end)) {
            res.send(500);
        }
        fs.createReadStream(file, { start: start, end: end })
            .pipe(res);
    });
}

/**
 * Handles a request to read the syslog
 */
function handleReadSyslog(req, res) {
    readLog(res, path.join(__dirname, "..", "..", "sys.log"), 1048576);
}

/**
 * Handles a request to read the error log
 */
function handleReadErrlog(req, res) {
    readLog(res, path.join(__dirname, "..", "..", "error.log"), 1048576);
}

/**
 * Handles a request to read the http log
 */
function handleReadHttplog(req, res) {
    readLog(res, path.join(__dirname, "..", "..", "http.log"), 1048576);
}

/**
 * Handles a request to read the event log
 */
function handleReadEventlog(req, res) {
    readLog(res, path.join(__dirname, "..", "..", "events.log"), 1048576);
}

/**
 * Handles a request to read a channel log
 */
function handleReadChanlog(req, res) {
    if (!req.params.name.match(/^[\w-]{1,30}$/)) {
        res.send(400);
        return;
    }
    readLog(res, path.join(__dirname, "..", "..", "chanlogs", req.params.name + ".log"), 1048576);
}

module.exports = {
    init: function (app) {
        app.get("/acp", checkAdmin(handleAcp));
        app.get("/acp/syslog", checkAdmin(handleReadSyslog));
        app.get("/acp/errlog", checkAdmin(handleReadErrlog));
        app.get("/acp/httplog", checkAdmin(handleReadHttplog));
        app.get("/acp/eventlog", checkAdmin(handleReadEventlog));
        app.get("/acp/chanlog/:name", checkAdmin(handleReadChanlog));
    }
};