Permalink
Show file tree
Hide file tree
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Showing
2 changed files
with
149 additions
and
148 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -3,3 +3,4 @@ | ||
| node_modules/ | ||
| *.db | ||
| screenshots/* | ||
| docs/ | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,148 +1,148 @@ | ||
| #!/usr/bin/env node | ||
|
|
||
| /** | ||
| * Routes File | ||
| */ | ||
|
|
||
| 'use strict' | ||
|
|
||
| /* MODULE IMPORTS */ | ||
| const Koa = require('koa') | ||
| const Router = require('koa-router') | ||
| const views = require('koa-views') | ||
| const staticDir = require('koa-static') | ||
| const bodyParser = require('koa-bodyparser') | ||
| const koaBody = require('koa-body')({multipart: true, uploadDir: '.'}) | ||
| const session = require('koa-session') | ||
| //const sqlite = require('sqlite-async') | ||
| const bcrypt = require('bcrypt-promise') | ||
| const fs = require('fs-extra') | ||
| const mime = require('mime-types') | ||
| //const jimp = require('jimp') | ||
|
|
||
| /* IMPORT CUSTOM MODULES */ | ||
| const accounts = require('./modules/accounts') | ||
|
|
||
| const app = new Koa() | ||
| const router = new Router() | ||
|
|
||
| /* CONFIGURING THE MIDDLEWARE */ | ||
| app.keys = ['darkSecret'] | ||
| app.use(staticDir('public')) | ||
| app.use(bodyParser()) | ||
| app.use(session(app)) | ||
| app.use(views(`${__dirname}/views`, { extension: 'handlebars' }, {map: { handlebars: 'handlebars' }})) | ||
|
|
||
| const defaultPort = 8080 | ||
| const port = process.env.PORT || defaultPort | ||
| const saltRounds = 10 | ||
|
|
||
| /** | ||
| * The secure home page. | ||
| * | ||
| * @name Home Page | ||
| * @route {GET} / | ||
| * @authentication This route requires cookie-based authentication. | ||
| */ | ||
| router.get('/', async ctx => { | ||
| try { | ||
| if(ctx.session.authorised !== true) return ctx.redirect('/login?msg=you need to log in') | ||
| const data = {} | ||
| if(ctx.query.msg) data.msg = ctx.query.msg | ||
| await ctx.render('index') | ||
| } catch(err) { | ||
| await ctx.render('error', {message: err.message}) | ||
| } | ||
| }) | ||
|
|
||
| /** | ||
| * The user registration page. | ||
| * | ||
| * @name Register Page | ||
| * @route {GET} /register | ||
| */ | ||
| router.get('/register', async ctx => await ctx.render('register')) | ||
|
|
||
| /** | ||
| * The script to process new user registrations. | ||
| * | ||
| * @name Register Script | ||
| * @route {POST} /register | ||
| */ | ||
| router.post('/register', koaBody, async ctx => { | ||
| try { | ||
| const body = ctx.request.body | ||
| console.log(body) | ||
| // PROCESSING FILE | ||
| const {path, type} = ctx.request.files.avatar | ||
| const fileExtension = mime.extension(type) | ||
| console.log(`path: ${path}`) | ||
| console.log(`type: ${type}`) | ||
| console.log(`fileExtension: ${fileExtension}`) | ||
| await fs.copy(path, 'public/avatars/avatar.png') | ||
| // ENCRYPTING PASSWORD AND BUILDING SQL | ||
| body.pass = await bcrypt.hash(body.pass, saltRounds) | ||
| const sql = `INSERT INTO users(user, pass) VALUES("${body.user}", "${body.pass}")` | ||
| console.log(sql) | ||
| // DATABASE COMMANDS | ||
| const db = await sqlite.open('./website.db') | ||
| await db.run(sql) | ||
| await db.close() | ||
| // REDIRECTING USER TO HOME PAGE | ||
| ctx.redirect(`/?msg=new user "${body.name}" added`) | ||
| } catch(err) { | ||
| await ctx.render('error', {message: err.message}) | ||
| } | ||
| }) | ||
|
|
||
| router.get('/login', async ctx => { | ||
| const data = {} | ||
| if(ctx.query.msg) data.msg = ctx.query.msg | ||
| if(ctx.query.user) data.user = ctx.query.user | ||
| await ctx.render('login', data) | ||
| }) | ||
|
|
||
| router.post('/login', async ctx => { | ||
| try { | ||
| const body = ctx.request.body | ||
| const db = await sqlite.open('./website.db') | ||
| // DOES THE USERNAME EXIST? | ||
| const records = await db.get(`SELECT count(id) AS count FROM users WHERE user="${body.user}";`) | ||
| if(!records.count) return ctx.redirect('/login?msg=invalid%20username') | ||
| const record = await db.get(`SELECT pass FROM users WHERE user = "${body.user}";`) | ||
| await db.close() | ||
| // DOES THE PASSWORD MATCH? | ||
| const valid = await bcrypt.compare(body.pass, record.pass) | ||
| if(valid == false) return ctx.redirect(`/login?user=${body.user}&msg=invalid%20password`) | ||
| // WE HAVE A VALID USERNAME AND PASSWORD | ||
| ctx.session.authorised = true | ||
| return ctx.redirect('/?msg=you are now logged in...') | ||
| } catch(err) { | ||
| await ctx.render('error', {message: err.message}) | ||
| } | ||
| }) | ||
|
|
||
| // router.post('/login', async ctx => { // 19 lines reduced to 10! | ||
| // const body = ctx.request.body | ||
| // try { | ||
| // await accounts.checkCredentials(body.user, body.pass) | ||
| // ctx.session.authorised = true | ||
| // return ctx.redirect('/?msg=you are now logged in...') | ||
| // } catch(err) { | ||
| // return ctx.redirect(`/login?user=${body.user}&msg=${err.message}`) | ||
| // } | ||
| // }) | ||
|
|
||
| router.get('/logout', async ctx => { | ||
| ctx.session.authorised = null; | ||
| ctx.redirect('/') | ||
| }) | ||
|
|
||
| app.use(router.routes()) | ||
| module.exports = app.listen(port, async() => { | ||
| // MAKE SURE WE HAVE A DATABASE WITH THE CORRECT SCHEMA | ||
| //const db = await sqlite.open('./website.db') | ||
| //await db.run('CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, user TEXT, pass TEXT);') | ||
| //await db.close() | ||
| console.log(`listening on port ${port}`) | ||
| }) | ||
| #!/usr/bin/env node | ||
|
|
||
| /** | ||
| * Routes File | ||
| */ | ||
|
|
||
| 'use strict' | ||
|
|
||
| /* MODULE IMPORTS */ | ||
| const Koa = require('koa') | ||
| const Router = require('koa-router') | ||
| const views = require('koa-views') | ||
| const staticDir = require('koa-static') | ||
| const bodyParser = require('koa-bodyparser') | ||
| const koaBody = require('koa-body')({multipart: true, uploadDir: '.'}) | ||
| const session = require('koa-session') | ||
| const sqlite = require('sqlite-async') | ||
| const bcrypt = require('bcrypt-promise') | ||
| const fs = require('fs-extra') | ||
| const mime = require('mime-types') | ||
| //const jimp = require('jimp') | ||
|
|
||
| /* IMPORT CUSTOM MODULES */ | ||
| const accounts = require('./modules/accounts') | ||
|
|
||
| const app = new Koa() | ||
| const router = new Router() | ||
|
|
||
| /* CONFIGURING THE MIDDLEWARE */ | ||
| app.keys = ['darkSecret'] | ||
| app.use(staticDir('public')) | ||
| app.use(bodyParser()) | ||
| app.use(session(app)) | ||
| app.use(views(`${__dirname}/views`, { extension: 'handlebars' }, {map: { handlebars: 'handlebars' }})) | ||
|
|
||
| const defaultPort = 8080 | ||
| const port = process.env.PORT || defaultPort | ||
| const saltRounds = 10 | ||
|
|
||
| /** | ||
| * The secure home page. | ||
| * | ||
| * @name Home Page | ||
| * @route {GET} / | ||
| * @authentication This route requires cookie-based authentication. | ||
| */ | ||
| router.get('/', async ctx => { | ||
| try { | ||
| if(ctx.session.authorised !== true) return ctx.redirect('/login?msg=you need to log in') | ||
| const data = {} | ||
| if(ctx.query.msg) data.msg = ctx.query.msg | ||
| await ctx.render('index') | ||
| } catch(err) { | ||
| await ctx.render('error', {message: err.message}) | ||
| } | ||
| }) | ||
|
|
||
| /** | ||
| * The user registration page. | ||
| * | ||
| * @name Register Page | ||
| * @route {GET} /register | ||
| */ | ||
| router.get('/register', async ctx => await ctx.render('register')) | ||
|
|
||
| /** | ||
| * The script to process new user registrations. | ||
| * | ||
| * @name Register Script | ||
| * @route {POST} /register | ||
| */ | ||
| router.post('/register', koaBody, async ctx => { | ||
| try { | ||
| const body = ctx.request.body | ||
| console.log(body) | ||
| // PROCESSING FILE | ||
| const {path, type} = ctx.request.files.avatar | ||
| const fileExtension = mime.extension(type) | ||
| console.log(`path: ${path}`) | ||
| console.log(`type: ${type}`) | ||
| console.log(`fileExtension: ${fileExtension}`) | ||
| await fs.copy(path, 'public/avatars/avatar.png') | ||
| // ENCRYPTING PASSWORD AND BUILDING SQL | ||
| body.pass = await bcrypt.hash(body.pass, saltRounds) | ||
| const sql = `INSERT INTO users(user, pass) VALUES("${body.user}", "${body.pass}")` | ||
| console.log(sql) | ||
| // DATABASE COMMANDS | ||
| const db = await sqlite.open('./website.db') | ||
| await db.run(sql) | ||
| await db.close() | ||
| // REDIRECTING USER TO HOME PAGE | ||
| ctx.redirect(`/?msg=new user "${body.name}" added`) | ||
| } catch(err) { | ||
| await ctx.render('error', {message: err.message}) | ||
| } | ||
| }) | ||
|
|
||
| router.get('/login', async ctx => { | ||
| const data = {} | ||
| if(ctx.query.msg) data.msg = ctx.query.msg | ||
| if(ctx.query.user) data.user = ctx.query.user | ||
| await ctx.render('login', data) | ||
| }) | ||
|
|
||
| router.post('/login', async ctx => { | ||
| try { | ||
| const body = ctx.request.body | ||
| const db = await sqlite.open('./website.db') | ||
| // DOES THE USERNAME EXIST? | ||
| const records = await db.get(`SELECT count(id) AS count FROM users WHERE user="${body.user}";`) | ||
| if(!records.count) return ctx.redirect('/login?msg=invalid%20username') | ||
| const record = await db.get(`SELECT pass FROM users WHERE user = "${body.user}";`) | ||
| await db.close() | ||
| // DOES THE PASSWORD MATCH? | ||
| const valid = await bcrypt.compare(body.pass, record.pass) | ||
| if(valid == false) return ctx.redirect(`/login?user=${body.user}&msg=invalid%20password`) | ||
| // WE HAVE A VALID USERNAME AND PASSWORD | ||
| ctx.session.authorised = true | ||
| return ctx.redirect('/?msg=you are now logged in...') | ||
| } catch(err) { | ||
| await ctx.render('error', {message: err.message}) | ||
| } | ||
| }) | ||
|
|
||
| // router.post('/login', async ctx => { // 19 lines reduced to 10! | ||
| // const body = ctx.request.body | ||
| // try { | ||
| // await accounts.checkCredentials(body.user, body.pass) | ||
| // ctx.session.authorised = true | ||
| // return ctx.redirect('/?msg=you are now logged in...') | ||
| // } catch(err) { | ||
| // return ctx.redirect(`/login?user=${body.user}&msg=${err.message}`) | ||
| // } | ||
| // }) | ||
|
|
||
| router.get('/logout', async ctx => { | ||
| ctx.session.authorised = null; | ||
| ctx.redirect('/') | ||
| }) | ||
|
|
||
| app.use(router.routes()) | ||
| module.exports = app.listen(port, async() => { | ||
| // MAKE SURE WE HAVE A DATABASE WITH THE CORRECT SCHEMA | ||
| const db = await sqlite.open('./website.db') | ||
| await db.run('CREATE TABLE IF NOT EXISTS users (id INTEGER PRIMARY KEY AUTOINCREMENT, user TEXT, pass TEXT);') | ||
| await db.close() | ||
| console.log(`listening on port ${port}`) | ||
| }) |