app.portBindings and newManifest.tcpPorts may be null

src/middleware/contentType.js

@@ -0,0 +1,8 @@
+'use strict';
+
+module.exports = function contentType(type) {
+    return function (req, res, next) {
+        res.setHeader('Content-Type', type);
+        next();
+    };
+};

src/middleware/cors.js

@@ -0,0 +1,55 @@
+/* jshint node:true */
+
+'use strict';
+
+var url = require('url');
+
+/*
+ * CORS middleware
+ *
+ * options can contains a list of origins
+ */
+module.exports = function cors(options) {
+    options = options || { };
+    var maxAge = options.maxAge || 60 * 60 * 25 * 5; // 5 days
+    var origins = options.origins || [ '*' ];
+    var allowCredentials = options.allowCredentials || false; // cookies
+
+    return function (req, res, next) {
+        var requestOrigin = req.headers.origin;
+        if (!requestOrigin) return next();
+
+        requestOrigin = url.parse(requestOrigin);
+
+        var hostname = requestOrigin.host.split(':')[0]; // remove any port
+        var originAllowed = origins.some(function (o) { return o === '*' || o === hostname; });
+        if (!originAllowed) {
+            return res.status(405).send('CORS not allowed from this domain');
+        }
+
+        // respond back with req.headers.origin which might contain the scheme
+        res.header('Access-Control-Allow-Origin', req.headers.origin);
+        res.header('Access-Control-Allow-Credentials', allowCredentials);
+
+        // handle preflighted requests
+        if (req.method === 'OPTIONS') {
+            if (req.headers['access-control-request-method']) {
+                res.header('Access-Control-Allow-Methods', 'GET, PUT, DELETE, POST, OPTIONS');
+            }
+
+            if (req.headers['access-control-request-headers']) {
+                res.header('Access-Control-Allow-Headers', req.headers['access-control-request-headers']);
+            }
+
+            res.header('Access-Control-Max-Age', maxAge);
+
+            return res.status(200).send();
+        }
+
+        if (req.headers['access-control-request-headers']) {
+            res.header('Access-Control-Allow-Headers', req.headers['access-control-request-headers']);
+        }
+
+        next();
+    };
+};

src/middleware/index.js

@@ -0,0 +1,17 @@
+'use strict';
+
+exports = module.exports = {
+    contentType: require('./contentType'),
+    cookieParser: require('cookie-parser'),
+    cors: require('./cors'),
+    csrf: require('csurf'),
+    favicon: require('serve-favicon'),
+    json: require('body-parser').json,
+    morgan: require('morgan'),
+    proxy: require('proxy-middleware'),
+    lastMile: require('connect-lastmile'),
+    multipart: require('./multipart.js'),
+    session: require('express-session'),
+    timeout: require('connect-timeout'),
+    urlencoded: require('body-parser').urlencoded
+};

src/middleware/multipart.js

@@ -0,0 +1,47 @@
+/* jshint node:true */
+
+'use strict';
+
+var multiparty = require('multiparty'),
+    timeout = require('connect-timeout');
+
+function _mime(req) {
+  var str = req.headers['content-type'] || '';
+  return str.split(';')[0];
+}
+
+module.exports = function multipart(options) {
+    return function (req, res, next) {
+        if (_mime(req) !== 'multipart/form-data') return res.status(400).send('Invalid content-type. Expecting multipart');
+
+        var form = new multiparty.Form({
+            uploadDir: '/tmp',
+            keepExtensions: true,
+            maxFieldsSize: options.maxFieldsSize || (2 * 1024), // only field size, not files
+            limit: options.limit || '8mb', // file sizes
+            autoFiles: true
+        });
+
+        // increase timeout of file uploads by default to 3 mins
+        if (req.clearTimeout) req.clearTimeout(); // clear any previous installed timeout middleware
+
+        timeout(options.timeout || (3 * 60 * 1000))(req, res, function () {
+            req.fields = { };
+            req.files = { };
+
+            form.parse(req, function (err, fields, files) {
+                if (err) return res.status(400).send('Error parsing request');
+                next(null);
+            });
+
+            form.on('file', function (name, file) {
+                req.files[name] = file;
+            });
+
+            form.on('field', function (name, value) {
+                req.fields[name] = value; // otherwise fields.name is an array
+            });
+        });
+    };
+};
+