mirror of
https://github.com/KevinMidboe/zoff.git
synced 2025-10-29 18:00:23 +00:00
Adding option to name api-keys and removing them
This commit is contained in:
Kasper Rynning-Tønnesen
@@ -4,15 +4,43 @@ var connection_options = {
|
||||
'force new connection': true
|
||||
};
|
||||
var socket = io.connect(window.location.protocol + '//' + window.location.hostname + ':8080', connection_options);
|
||||
var api_token_list;
|
||||
|
||||
$(document).ready(function(){
|
||||
$('ul.tabs').tabs();
|
||||
api_token_list = $("#api_token_list").clone();
|
||||
$("#api_token_list").remove();
|
||||
loaded();
|
||||
});
|
||||
|
||||
$(document).on("click", "#refresh_all", function(e){
|
||||
e.preventDefault();
|
||||
$("#descriptions_cont").empty();
|
||||
$("#thumbnails_cont").empty();
|
||||
$("#api_token_name").remove();
|
||||
$.ajax({
|
||||
type: "GET",
|
||||
url: "/api/api_token",
|
||||
success: function(response) {
|
||||
if(response.length == 0) {
|
||||
if(!$(".header-api-fields").hasClass("hide")) {
|
||||
$(".header-api-fields").addClass("hide");
|
||||
}
|
||||
return;
|
||||
}
|
||||
$(".header-api-fields").removeClass("hide");
|
||||
for(var i = 0; i < response.length; i++) {
|
||||
var to_add = api_token_list;
|
||||
to_add.attr("id", response[i]._id);
|
||||
to_add.find(".api_token_name").text(response[i].name);
|
||||
to_add.find(".api_token_usage").text(response[i].usage);
|
||||
to_add.find("#delete_api_token").attr("data-id", response[i]._id);
|
||||
$(".channel_things").append(to_add);
|
||||
}
|
||||
},
|
||||
error: function(err) {
|
||||
}
|
||||
});
|
||||
if(!$(".channel_things").hasClass("hide")) {
|
||||
$(".channel_things").addClass("hide")
|
||||
}
|
||||
@@ -88,6 +116,54 @@ if(!$(".channel_things").hasClass("hide")) {
|
||||
}
|
||||
$(".preloader-wrapper").removeClass("hide");
|
||||
|
||||
$(document).on("click", "#delete_api_token", function(e) {
|
||||
e.preventDefault();
|
||||
var id = $(this).attr("data-id");
|
||||
var that = this;
|
||||
$(that).toggleClass("disabled");
|
||||
$.ajax({
|
||||
type: "DELETE",
|
||||
url: "api/api_token",
|
||||
data: {
|
||||
id: id
|
||||
},
|
||||
success: function(response) {
|
||||
if(response == "success") {
|
||||
Materialize.toast("Removed token!", 2000, "green lighten");
|
||||
$("#" + id).remove();
|
||||
} else {
|
||||
Materialize.toast("Something went wrong...", 2000, "red lighten");
|
||||
$(that).toggleClass("disabled");
|
||||
}
|
||||
},
|
||||
})
|
||||
});
|
||||
|
||||
function loaded() {
|
||||
$.ajax({
|
||||
type: "GET",
|
||||
url: "/api/api_token",
|
||||
success: function(response) {
|
||||
if(response.length == 0) {
|
||||
if(!$(".header-api-fields").hasClass("hide")) {
|
||||
$(".header-api-fields").addClass("hide");
|
||||
}
|
||||
return;
|
||||
}
|
||||
$(".header-api-fields").removeClass("hide");
|
||||
for(var i = 0; i < response.length; i++) {
|
||||
var to_add = api_token_list.clone();
|
||||
to_add.attr("id", response[i]._id);
|
||||
to_add.find(".api_token_name").text(response[i].name);
|
||||
to_add.find(".api_token_usage").text(response[i].usage);
|
||||
to_add.find("#delete_api_token").attr("data-id", response[i]._id);
|
||||
$(".channel_things").append(to_add);
|
||||
}
|
||||
},
|
||||
error: function(err) {
|
||||
}
|
||||
});
|
||||
|
||||
$.ajax({
|
||||
type: "GET",
|
||||
url: "/api/lists",
|
||||
@@ -142,6 +218,19 @@ $.ajax({
|
||||
}
|
||||
});
|
||||
|
||||
$.ajax({
|
||||
type: "GET",
|
||||
url: "/api/descriptions",
|
||||
success: function(response){
|
||||
if(response.length > 0){
|
||||
$(".descriptions-badge").removeClass("hide");
|
||||
$(".descriptions-badge").text(response.length);
|
||||
}
|
||||
add_to_tab("descriptions", response);
|
||||
}
|
||||
});
|
||||
}
|
||||
|
||||
$(document).on("click", ".approve_name", function(e) {
|
||||
var that = this;
|
||||
var name = $(that).attr("data-name");
|
||||
@@ -168,18 +257,6 @@ $(document).on("click", ".thumbnail_link", function(e) {
|
||||
window.open("https:" + this.value,'_blank');
|
||||
});
|
||||
|
||||
$.ajax({
|
||||
type: "GET",
|
||||
url: "/api/descriptions",
|
||||
success: function(response){
|
||||
if(response.length > 0){
|
||||
$(".descriptions-badge").removeClass("hide");
|
||||
$(".descriptions-badge").text(response.length);
|
||||
}
|
||||
add_to_tab("descriptions", response);
|
||||
}
|
||||
});
|
||||
|
||||
function add_to_tab(dest, resp){
|
||||
for(var x = 0; x < resp.length; x++){
|
||||
if(dest == "thumbnails"){
|
||||
@@ -207,12 +284,30 @@ $(document).on("click", "#get_token", function(e){
|
||||
|
||||
$(document).on("click", "#get_api_token", function(e){
|
||||
e.preventDefault();
|
||||
var name = $("#new_api_token_name").val();
|
||||
if(name == "") {
|
||||
Materialize.toast("Empty name..!", 2000, "red lighten");
|
||||
return;
|
||||
}
|
||||
$("#new_api_token_name").val("");
|
||||
$("#get_api_token").toggleClass("disabled");
|
||||
$.ajax({
|
||||
type: "GET",
|
||||
type: "POST",
|
||||
url: "/api/api_token",
|
||||
data: {
|
||||
name: name,
|
||||
},
|
||||
success: function(response){
|
||||
if(response != false){
|
||||
Materialize.toast("Gotten token", 2000, "green lighten");
|
||||
$("#new_api_token").val(response.token);
|
||||
$("#get_api_token").toggleClass("disabled");
|
||||
var to_add = api_token_list;
|
||||
to_add.attr("id", response._id);
|
||||
to_add.find(".api_token_name").text(name);
|
||||
to_add.find(".api_token_usage").text(0);
|
||||
to_add.find("#delete_api_token").attr("data-id", response._id);
|
||||
$(".channel_things").append(to_add);
|
||||
}
|
||||
}
|
||||
})
|
||||
|
||||
@@ -100,13 +100,33 @@
|
||||
</div>
|
||||
|
||||
<div class="row">
|
||||
<div class="input-field col s8 m10">
|
||||
<div class="input-field col s4 m5">
|
||||
<input type="text" id="new_api_token_name" />
|
||||
</div>
|
||||
<div class="input-field col s4 m5">
|
||||
<input type="text" readonly id="new_api_token" />
|
||||
</div>
|
||||
<div class="col s2">
|
||||
<a href="#" id="get_api_token" class="btn waves-effect purple">GET API</a>
|
||||
</div>
|
||||
</div>
|
||||
<div class="row header-api-fields">
|
||||
<div class="col s4">
|
||||
Name
|
||||
</div>
|
||||
<div class="col s4">
|
||||
Usage
|
||||
</div>
|
||||
</div>
|
||||
<div class="row" id="api_token_list">
|
||||
<div class="col s4 api_token_name">
|
||||
</div>
|
||||
<div class="col s4 api_token_usage">
|
||||
</div>
|
||||
<div class="col s2">
|
||||
<a href="#" id="delete_api_token" class="btn waves-effect red">REMOVE</a>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="thumbnails" class="col s12">
|
||||
|
||||
@@ -7,6 +7,7 @@ var db = mongojs(mongo_db_cred.config);
|
||||
var token_db = mongojs("tokens");
|
||||
var uniqid = require('uniqid');
|
||||
var crypto = require('crypto');
|
||||
var ObjectId = mongojs.ObjectId;
|
||||
|
||||
router.use(function(req, res, next) {
|
||||
next(); // make sure we go to the next routes and don't stop here
|
||||
@@ -168,9 +169,35 @@ router.route('/api/token').get(function(req, res){
|
||||
|
||||
router.route('/api/api_token').get(function(req, res) {
|
||||
if(req.isAuthenticated()) {
|
||||
token_db.collection("api_token").find({token: {$exists: true}}, function(err, all) {
|
||||
res.json(all);
|
||||
})
|
||||
} else {
|
||||
res.sendStatus(403);
|
||||
}
|
||||
});
|
||||
|
||||
router.route('/api/api_token').delete(function(req, res){
|
||||
if(req.isAuthenticated()){
|
||||
var id = req.body.id;
|
||||
token_db.collection("api_token").remove({_id: ObjectId(id)}, function(err, success) {
|
||||
if(err) {
|
||||
res.send("failed");
|
||||
return;
|
||||
}
|
||||
res.send("success");
|
||||
})
|
||||
}
|
||||
});
|
||||
|
||||
router.route('/api/api_token').post(function(req, res){
|
||||
if(req.isAuthenticated()){
|
||||
var name = req.body.name;
|
||||
var id = crypto.createHash('sha256').update(uniqid()).digest('base64');
|
||||
token_db.collection("api_token").insert({token: id}, function(err, docs){
|
||||
res.json({token: id});
|
||||
token_db.collection("api_token").insert({name: name, token: id, usage: 0}, function(err, docs){
|
||||
token_db.collection("api_token").find({token: id}, function(err, d) {
|
||||
res.json({token: id, _id: d[0]._id});
|
||||
});
|
||||
});
|
||||
} else {
|
||||
res.send(false);
|
||||
|
||||
@@ -170,6 +170,9 @@ router.route('/api/list/:channel_name/:video_id').delete(function(req, res) {
|
||||
dont_increment = true;
|
||||
}
|
||||
db.collection(channel_name).remove({id:video_id}, function(err, docs){
|
||||
if(authorized) {
|
||||
incrementToken(token);
|
||||
}
|
||||
io.to(channel_name).emit("channel", {type:"deleted", value: video_id});
|
||||
if(!dont_increment) {
|
||||
db.collection("frontpage_lists").update({_id: channel_name, count: {$gt: 0}}, {$inc: {count: -1}, $set:{accessed: Functions.get_time()}}, {upsert: true}, function(err, docs){
|
||||
@@ -294,6 +297,9 @@ router.route('/api/conf/:channel_name').put(function(req, res) {
|
||||
frontpage:frontpage, accessed: Functions.get_time()}
|
||||
},
|
||||
{upsert:true}, function(err, docs){
|
||||
if(authorized) {
|
||||
incrementToken(token);
|
||||
}
|
||||
updateTimeout(guid, res, authorized, "CONFIG", function(err, docs) {
|
||||
var to_return = error.no_error;
|
||||
to_return.results = [obj];
|
||||
@@ -365,6 +371,9 @@ router.route('/api/list/:channel_name/:video_id').put(function(req,res) {
|
||||
song[0].votes += 1;
|
||||
song[0].guids.push(guid);
|
||||
db.collection(channel_name).update({id: video_id}, {$inc:{votes:1}, $set:{added:Functions.get_time(), type: "video"}, $push :{guids: guid}}, function(err, success) {
|
||||
if(authorized) {
|
||||
incrementToken(token);
|
||||
}
|
||||
io.to(channel_name).emit("channel", {type: "vote", value: video_id, time: Functions.get_time()});
|
||||
List.getNextSong(channel_name, function() {
|
||||
updateTimeout(guid, res, authorized, "PUT", function(err, docs) {
|
||||
@@ -421,6 +430,9 @@ router.route('/api/list/:channel_name/__np__').post(function(req, res) {
|
||||
db.collection(channel_name).find({now_playing: true}, toShowChannel, function(err, list) {
|
||||
if(list.length > 0) {
|
||||
db.collection(channel_name + "_settings").find({ id: "config" }, function(err, conf) {
|
||||
if(authorized) {
|
||||
incrementToken(token);
|
||||
}
|
||||
if(conf.length == 0) {
|
||||
res.status(404).send(JSON.stringify(error.not_found.list));
|
||||
return;
|
||||
@@ -530,6 +542,9 @@ router.route('/api/list/:channel_name/:video_id').post(function(req,res) {
|
||||
});
|
||||
}
|
||||
db.collection(channel_name).update({"id": new_song.id}, new_song, {upsert: true}, function(err, success) {
|
||||
if(authorized) {
|
||||
incrementToken(token);
|
||||
}
|
||||
if(create_frontpage_lists) {
|
||||
db.collection("frontpage_lists").update({"_id": channel_name, "count" : (authenticated ? 1 : 0), "frontpage": true, "accessed": Functions.get_time(), "viewers": 1}, {upsert: true}, function(err, docs) {
|
||||
if(authenticated) {
|
||||
@@ -712,6 +727,9 @@ router.route('/api/conf/:channel_name').post(function(req, res) {
|
||||
} else {
|
||||
conf.userpass = false;
|
||||
}
|
||||
if(authorized) {
|
||||
incrementToken(token);
|
||||
}
|
||||
updateTimeout(guid, res, authorized, "POST", function(err, docs) {
|
||||
var to_return = error.no_error;
|
||||
to_return.results = conf;
|
||||
@@ -776,6 +794,9 @@ router.route('/api/list/:channel_name').post(function(req, res) {
|
||||
res.status(403).send(JSON.stringify(error.not_authenticated));
|
||||
return;
|
||||
}
|
||||
if(authorized) {
|
||||
incrementToken(token);
|
||||
}
|
||||
updateTimeout(guid, res, authorized, "POST", function(err, docs) {
|
||||
var to_return = error.no_error;
|
||||
to_return.results = list;
|
||||
@@ -792,6 +813,12 @@ router.route('/api/list/:channel_name').post(function(req, res) {
|
||||
});
|
||||
});
|
||||
|
||||
function incrementToken(token) {
|
||||
token_db.collection("api_token").update({token: token}, {$inc: {usage: 1}}, function(err, doc) {
|
||||
|
||||
});
|
||||
}
|
||||
|
||||
router.route('/api/imageblob').post(function(req, res) {
|
||||
var Jimp = require("jimp");
|
||||
Jimp.read('https://img.youtube.com/vi/' + req.body.id + '/mqdefault.jpg', function (err, image) {
|
||||
@@ -915,7 +942,7 @@ function validateLogin(adminpass, userpass, channel_name, type, res, callback) {
|
||||
var exists = false;
|
||||
if(conf.length > 0 && ((conf[0].userpass == undefined || conf[0].userpass == "" || conf[0].userpass == userpass))) {
|
||||
exists = true;
|
||||
} else if(conf.length > 0 && type != "config") {
|
||||
} else if(conf.length > 0 && type == "config") {
|
||||
res.status(404).send(JSON.stringify(error.not_found.list));
|
||||
return;
|
||||
} else if(conf.length == 0) {
|
||||
|
||||
Reference in New Issue
Block a user