Girish Ramakrishnan
120 lines
3.7 KiB
JavaScript
Executable File
120 lines
3.7 KiB
JavaScript
Executable File
#!/usr/bin/env node
|
|
|
|
'use strict';
|
|
|
|
require('supererror')({ splatchError: true });
|
|
|
|
var express = require('express'),
|
|
url = require('url'),
|
|
async = require('async'),
|
|
assert = require('assert'),
|
|
debug = require('debug')('box:proxy'),
|
|
proxy = require('proxy-middleware'),
|
|
session = require('cookie-session'),
|
|
database = require('./src/database.js'),
|
|
appdb = require('./src/appdb.js'),
|
|
clientdb = require('./src/clientdb.js'),
|
|
config = require('./config.js'),
|
|
http = require('http');
|
|
|
|
var gSessions = {};
|
|
var gProxyMiddlewareCache = {};
|
|
var gApp = express();
|
|
var gHttpServer = http.createServer(gApp);
|
|
|
|
var CALLBACK_URI = '/callback';
|
|
var PORT = 4000;
|
|
|
|
function startServer(callback) {
|
|
assert(typeof callback === 'function');
|
|
|
|
gHttpServer.on('error', console.error);
|
|
|
|
gApp.use(session({
|
|
keys: ['blue', 'cheese', 'is', 'something']
|
|
}));
|
|
|
|
gApp.use(function (req, res, next) {
|
|
if (req.session && gSessions[req.session.sessid]) return next();
|
|
|
|
if (req.path === CALLBACK_URI) {
|
|
// FIXME we need to exchange the authCode and verify it
|
|
req.session.sessid = req.query.authCode;
|
|
|
|
// this is a simple in memory auth store
|
|
gSessions[req.session.sessid] = 'ok';
|
|
|
|
debug('user verified.');
|
|
|
|
// now redirect to the actual initially requested URL
|
|
res.redirect(req.session.returnTo);
|
|
} else {
|
|
var port = parseInt(req.headers['x-cloudron-proxy-port'], 10);
|
|
|
|
if (!Number.isFinite(port)) {
|
|
console.error('Failed to parse nginx proxy header to get app port.');
|
|
return res.send(500, 'Routing error. No forwarded port.');
|
|
}
|
|
|
|
debug('begin verifying user for app on port %s.', port);
|
|
|
|
appdb.getByHttpPort(port, function (error, result) {
|
|
if (error) {
|
|
console.error('Unknown app.', error);
|
|
return res.send(500, 'Unknown app.');
|
|
}
|
|
|
|
clientdb.getByAppId('proxy-' + result.id, function (error, result) {
|
|
if (error) {
|
|
console.error('Unkonwn OAuth client.', error);
|
|
return res.send(500, 'Unknown OAuth client.');
|
|
}
|
|
|
|
req.session.port = port;
|
|
req.session.returnTo = result.redirectURI + req.path;
|
|
|
|
var callbackURL = result.redirectURI + CALLBACK_URI;
|
|
var scope = 'profile,roleUser';
|
|
var clientId = result.clientId;
|
|
var oauthLogin = config.adminOrigin() + '/api/v1/oauth/dialog/authorize?response_type=code&client_id=' + clientId + '&redirect_uri=' + callbackURL + '&scope=' + scope;
|
|
|
|
debug('begin OAuth flow for client %s.', result.name);
|
|
|
|
// begin the OAuth flow
|
|
res.redirect(oauthLogin);
|
|
});
|
|
});
|
|
}
|
|
});
|
|
|
|
gApp.use(function (req, res, next) {
|
|
var port = req.session.port;
|
|
|
|
debug('proxy request for port %s with path %s.', port, req.path);
|
|
|
|
var proxyMiddleware = gProxyMiddlewareCache[port];
|
|
if (!proxyMiddleware) {
|
|
console.log('Adding proxy middleware for port %d', port);
|
|
|
|
proxyMiddleware = proxy(url.parse('http://127.0.0.1:' + port));
|
|
gProxyMiddlewareCache[port] = proxyMiddleware;
|
|
}
|
|
|
|
proxyMiddleware(req, res, next);
|
|
});
|
|
|
|
gHttpServer.listen(PORT, callback);
|
|
}
|
|
|
|
async.series([
|
|
database.initialize,
|
|
startServer
|
|
], function (error) {
|
|
if (error) {
|
|
console.error('Failed to start proxy server.', error);
|
|
process.exit(1);
|
|
}
|
|
|
|
console.log('Proxy server listening...');
|
|
});
|