88 lines
3.1 KiB
JavaScript
88 lines
3.1 KiB
JavaScript
'use strict';
|
|
|
|
exports = module.exports = {
|
|
getApps: getApps,
|
|
getApp: getApp,
|
|
getAppVersion: getAppVersion,
|
|
|
|
registerCloudron: registerCloudron,
|
|
getSubscription: getSubscription
|
|
};
|
|
|
|
var appstore = require('../appstore.js'),
|
|
assert = require('assert'),
|
|
BoxError = require('../boxerror.js'),
|
|
custom = require('../custom.js'),
|
|
HttpError = require('connect-lastmile').HttpError,
|
|
HttpSuccess = require('connect-lastmile').HttpSuccess;
|
|
|
|
function isAppAllowed(appstoreId) {
|
|
if (custom.spec().appstore.blacklist.includes(appstoreId)) return false;
|
|
|
|
if (!custom.spec().appstore.whitelist) return true;
|
|
if (!custom.spec().appstore.whitelist[appstoreId]) return false;
|
|
|
|
return true;
|
|
}
|
|
|
|
function getApps(req, res, next) {
|
|
appstore.getApps(function (error, apps) {
|
|
if (error) return next(BoxError.toHttpError(error));
|
|
|
|
let filteredApps = apps.filter((app) => !custom.spec().appstore.blacklist.includes(app.id));
|
|
if (custom.spec().appstore.whitelist) filteredApps = filteredApps.filter((app) => app.id in custom.spec().appstore.whitelist);
|
|
|
|
next(new HttpSuccess(200, { apps: filteredApps }));
|
|
});
|
|
}
|
|
|
|
function getApp(req, res, next) {
|
|
assert.strictEqual(typeof req.params.appstoreId, 'string');
|
|
|
|
if (!isAppAllowed(req.params.appstoreId)) return next(new HttpError(405, 'feature disabled by admin'));
|
|
|
|
appstore.getApp(req.params.appstoreId, function (error, app) {
|
|
if (error) return next(BoxError.toHttpError(error));
|
|
|
|
next(new HttpSuccess(200, app));
|
|
});
|
|
}
|
|
|
|
function getAppVersion(req, res, next) {
|
|
assert.strictEqual(typeof req.params.appstoreId, 'string');
|
|
assert.strictEqual(typeof req.params.versionId, 'string');
|
|
|
|
if (!isAppAllowed(req.params.appstoreId)) return next(new HttpError(405, 'feature disabled by admin'));
|
|
|
|
appstore.getAppVersion(req.params.appstoreId, req.params.versionId, function (error, manifest) {
|
|
if (error) return next(BoxError.toHttpError(error));
|
|
|
|
next(new HttpSuccess(200, manifest));
|
|
});
|
|
}
|
|
|
|
function registerCloudron(req, res, next) {
|
|
assert.strictEqual(typeof req.body, 'object');
|
|
|
|
if (typeof req.body.email !== 'string' || !req.body.email) return next(new HttpError(400, 'email must be string'));
|
|
if (typeof req.body.password !== 'string' || !req.body.password) return next(new HttpError(400, 'password must be string'));
|
|
if ('totpToken' in req.body && typeof req.body.totpToken !== 'string') return next(new HttpError(400, 'totpToken must be string'));
|
|
if (typeof req.body.signup !== 'boolean') return next(new HttpError(400, 'signup must be a boolean'));
|
|
|
|
appstore.registerWithLoginCredentials(req.body, function (error) {
|
|
if (error) return next(BoxError.toHttpError(error));
|
|
|
|
next(new HttpSuccess(201, {}));
|
|
});
|
|
}
|
|
|
|
function getSubscription(req, res, next) {
|
|
assert.strictEqual(typeof req.body, 'object');
|
|
|
|
appstore.getSubscription(function (error, result) {
|
|
if (error) return next(BoxError.toHttpError(error));
|
|
|
|
next(new HttpSuccess(200, result)); // { email, cloudronId, plan, cancel_at, status }
|
|
});
|
|
}
|