Skip to content
Permalink
master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Go to file
 
 
Cannot retrieve contributors at this time
/* index.js */
import { Application, send, Status } from "https://deno.land/x/oak@v6.5.1/mod.ts";
// status codes https://deno.land/std@0.82.0/http/http_status.ts
// import { Md5 } from 'https://deno.land/std@0.89.0/hash/md5.ts'
import { extractCredentials, getEtag, setHeaders } from "./api/modules/util.js";
import { login } from "./api/modules/accounts.js";
import router from "./api/routes.js";
const port = 8080;
const app = new Application();
/*
* this middleware performs a series of checks on all API calls and sends the correct response
* if a problem has been detected
*/
app.use(async (context, next) => {
console.log('middleware running')
// if the call is to the API it must include the correct Content-Type
if(context.request.url.pathname.includes("/api/") && !(context.request.url.pathname.includes("/api/accounts") && context.request.method === 'POST')) {
console.log('API CALL')
console.log(context.request.headers.get('Content-Type'))
context.response.headers.set('Content-Type', 'application/vnd.api+json')
if(context.request.headers.get('Content-Type') !== 'application/vnd.api+json') {
console.log('wrong Content-Type')
context.response.status = 415
context.response.body = JSON.stringify(
{
errors: [
{
title: '415 Unsupported Media Type',
detail: 'This API supports the JSON:API specification, Content-Type must be application/vnd.api+json'
}
]
}
, null, 2)
return
}
// if the authorization header is missing
if(context.request.headers.get('Authorization') === null) {
console.log('missing Authorization header')
context.response.status = 401
context.response.body = JSON.stringify(
{
errors: [
{
title: '201 Unauthorized',
detail: 'the API uses HTTP Basic Auth and requires a correctly-formatted Authorization header'
}
]
}
, null, 2)
return
}
// unless the API call is to register an account, the auth data must match an account
if(!context.request.url.pathname.includes('/register')) {
console.log('not a call to /register')
const token = context.request.headers.get('Authorization')
console.log(`auth: ${token}`)
try {
const credentials = extractCredentials(token)
console.log(credentials)
await login(credentials)
} catch(err) {
console.log('ERROR')
console.log(err)
console.log(`msg: ${err.message}`)
context.response.status = 401
context.response.body = JSON.stringify(
{
errors: [
{
title: '401 Unauthorized!',
detail: err.message
}
]
}
, null, 2)
return
}
}
}
console.log('MIDDLEWARE ENDS')
await next();
});
// checks if file exists
async function fileExists(path) {
try {
const stats = await Deno.lstat(path);
return stats && stats.isFile;
} catch (e) {
if (e && e instanceof Deno.errors.NotFound) {
return false;
} else {
throw e;
}
}
}
async function staticFiles(context, next) {
const path = `${Deno.cwd()}/spa/${context.request.url.pathname}`
const isFile = await fileExists(path)
if (isFile) {
// file exists therefore we can serve it
console.log(path)
const etag = await getEtag(path)
console.log(`etag: ${etag}`)
context.response.headers.set('ETag', etag)
await send(context, context.request.url.pathname, {
root: `${Deno.cwd()}/spa`,
})
} else {
await next()
}
}
async function errorHandler(context, next) {
try {
const method = context.request.method;
const path = context.request.url.pathname;
console.log(`${method} ${path}`);
await next();
} catch (err) {
console.log(err);
context.response.status = Status.InternalServerError;
const msg = { err: err.message };
context.response.body = JSON.stringify(msg, null, 2);
}
}
app.use(staticFiles);
app.use(router.routes());
app.use(router.allowedMethods());
app.use(setHeaders);
app.use(errorHandler);
app.addEventListener(
"listen",
({ port }) => console.log(`listening on port: ${port}`),
);
console.log(Deno.cwd())
await app.listen({ port });