forked from FoundKeyGang/FoundKey
eccc90c843
* wip * store ip and headers * Update admin-file.vue * require admin for view ip/headers * IP (recent) 消した * admin必須 * opt in * clean ips periodically * respect logging setting in drive/files/create
93 lines
2.4 KiB
TypeScript
93 lines
2.4 KiB
TypeScript
import Koa from 'koa';
|
|
|
|
import { User } from '@/models/entities/user.js';
|
|
import { UserIps } from '@/models/index.js';
|
|
import { fetchMeta } from '@/misc/fetch-meta.js';
|
|
import { IEndpoint } from './endpoints.js';
|
|
import authenticate, { AuthenticationError } from './authenticate.js';
|
|
import call from './call.js';
|
|
import { ApiError } from './error.js';
|
|
|
|
const userIpHistories = new Map<User['id'], Set<string>>();
|
|
|
|
setInterval(() => {
|
|
userIpHistories.clear();
|
|
}, 1000 * 60 * 60);
|
|
|
|
export default (endpoint: IEndpoint, ctx: Koa.Context) => new Promise<void>((res) => {
|
|
const body = ctx.is('multipart/form-data')
|
|
? (ctx.request as any).body
|
|
: ctx.method === 'GET'
|
|
? ctx.query
|
|
: ctx.request.body;
|
|
|
|
const reply = (x?: any, y?: ApiError) => {
|
|
if (x == null) {
|
|
ctx.status = 204;
|
|
} else if (typeof x === 'number' && y) {
|
|
ctx.status = x;
|
|
ctx.body = {
|
|
error: {
|
|
message: y!.message,
|
|
code: y!.code,
|
|
id: y!.id,
|
|
kind: y!.kind,
|
|
...(y!.info ? { info: y!.info } : {}),
|
|
},
|
|
};
|
|
} else {
|
|
// 文字列を返す場合は、JSON.stringify通さないとJSONと認識されない
|
|
ctx.body = typeof x === 'string' ? JSON.stringify(x) : x;
|
|
}
|
|
res();
|
|
};
|
|
|
|
// Authentication
|
|
authenticate(body['i']).then(([user, app]) => {
|
|
// API invoking
|
|
call(endpoint.name, user, app, body, ctx).then((res: any) => {
|
|
if (ctx.method === 'GET' && endpoint.meta.cacheSec && !body['i'] && !user) {
|
|
ctx.set('Cache-Control', `public, max-age=${endpoint.meta.cacheSec}`);
|
|
}
|
|
reply(res);
|
|
}).catch((e: ApiError) => {
|
|
reply(e.httpStatusCode ? e.httpStatusCode : e.kind === 'client' ? 400 : 500, e);
|
|
});
|
|
|
|
// Log IP
|
|
if (user) {
|
|
fetchMeta().then(meta => {
|
|
if (!meta.enableIpLogging) return;
|
|
const ip = ctx.ip;
|
|
const ips = userIpHistories.get(user.id);
|
|
if (ips == null || !ips.has(ip)) {
|
|
if (ips == null) {
|
|
userIpHistories.set(user.id, new Set([ip]));
|
|
} else {
|
|
ips.add(ip);
|
|
}
|
|
|
|
try {
|
|
UserIps.insert({
|
|
createdAt: new Date(),
|
|
userId: user.id,
|
|
ip: ip,
|
|
});
|
|
} catch {
|
|
}
|
|
}
|
|
});
|
|
}
|
|
}).catch(e => {
|
|
if (e instanceof AuthenticationError) {
|
|
reply(403, new ApiError({
|
|
message: 'Authentication failed. Please ensure your token is correct.',
|
|
code: 'AUTHENTICATION_FAILED',
|
|
id: 'b0a7f5f8-dc2f-4171-b91f-de88ad238e14',
|
|
}));
|
|
} else {
|
|
reply(500, new ApiError());
|
|
}
|
|
});
|
|
});
|