zoff/server/apps/client.js

VERSION = require(pathThumbnails + '/VERSION.js');
var secure = false;
var path = require('path');
try {
    var cert_config = require(path.join(path.join(__dirname, '../config/'), 'cert_config.js'));
    var fs = require('fs');
    var privateKey  = fs.readFileSync(cert_config.privateKey).toString();
    var certificate = fs.readFileSync(cert_config.certificate).toString();
    var ca          = fs.readFileSync(cert_config.ca).toString();
    var credentials = {
        key: privateKey,
        cert: certificate,
        ca: ca
    };
    secure = true;
} catch(err){}

var add = "";
var express = require('express');
var app = express();
var compression = require('compression');
var exphbs = require('express-handlebars');
var cors = require('cors');
var Functions = require(pathThumbnails + '/handlers/functions.js');

var hbs = exphbs.create({
    defaultLayout: publicPath + '/layouts/client/main',
    layoutsDir: publicPath + '/layouts/client',
    partialsDir: publicPath + '/partials',
    helpers: {
        if_equal: function(a, b, opts) {
            if (a == b) {
                return opts.fn(this)
            } else {
                return opts.inverse(this)
            }
        },
        decodeString: function(s) {
            if(s == undefined) return s;
            return Functions.decodeChannelName(s);
        }

    }
});
var uniqid = require('uniqid');
app.use(compression({filter: shouldCompress}))

function shouldCompress (req, res) {
    if (req.headers['x-no-compression']) {
        // don't compress responses with this request header
        return false;
    }

    // fallback to standard filter function
    return compression.filter(req, res);
}

app.engine('handlebars', hbs.engine);
app.set('view engine', 'handlebars');
app.enable('view cache');
app.set('views', publicPath);
app.set('trust proxy', '127.0.0.1');

var bodyParser = require('body-parser');
var cookieParser = require("cookie-parser");
var referrerPolicy = require('referrer-policy');
var helmet = require('helmet');
var featurePolicy = require('feature-policy');
app.use(featurePolicy({
    features: {
        fullscreen: ["*"],
        //vibrate: ["'none'"],
        payment: ["'none'"],
        microphone: ["'none'"],
        camera: ["'none'"],
        speaker: ["*"],
        syncXhr: ["'self'"],
        //notifications: ["'self'"]
    }
}));
app.use(helmet({
    frameguard: false,
}));
app.use(referrerPolicy({ policy: 'origin-when-cross-origin' }));
app.use( bodyParser.json() );       // to support JSON-encoded bodies
app.use(bodyParser.urlencoded({     // to support URL-encoded bodies
    extended: true
}));
app.use(cookieParser());
//app.set('json spaces', 2);

io = require('socket.io')({
    pingTimeout: 25000,
    //path: '/zoff',
    //"origins": ("https://zoff.me:443*,https://zoff.me:8080*,zoff.me:8080*,https://remote.zoff.me:443*,https://remote.zoff.me:8080*,https://fb.zoff.me:443*,https://fb.zoff.me:8080*,https://admin.zoff.me:443*,https://admin.zoff.me:8080*, http://localhost:8080*")});
});

var socketIO = require(pathThumbnails +'/handlers/io.js');
socketIO();

app.socketIO = io;


/* Globally needed "libraries" and files */
var router = require(pathThumbnails + '/routing/client/router.js');
var api_file = require(pathThumbnails + '/routing/client/api.js');
var api = api_file.router;
api_file.sIO = app.socketIO;
var ico_router = require(pathThumbnails + '/routing/client/icons_routing.js');

app.get('/robots.txt', function (req, res) {
    res.type('text/plain');
    res.send("User-agent: *\nAllow: /$\nDisallow: /");
});

app.use(function (req, res, next) {
    var cookie = req.cookies._uI;
    var skipElements = ["/_embed", "/assets/manifest.json", "/apple-touch-icon.png"];
    if(skipElements.indexOf(req.originalUrl) > -1) {
        res.header("Access-Control-Allow-Origin", "*");
        res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
        next();
    } else {
        if(req.originalUrl.split("/").length > 3) {
            res.header("Access-Control-Allow-Origin", "*");
            res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
            next();
        } else {
            if (cookie === undefined) {
                try {
                    //console.error((new Date), "originalUrl", req.originalUrl);
                    //console.error((new Date), "couldn't fetch cookie for some reason, maybe no cookie exists?", req.get('origin'), "couldn't fetch cookie for some reason, maybe no cookie exists?");

                } catch(e) {
                    //console.error((new Date), "couldn't fetch origin");
                }
                var user_name = Functions.hash_pass(Functions.rndName(uniqid.time(), 15));
                res.cookie('_uI', user_name, {
                    maxAge: 365 * 10000 * 3600000,
                    httpOnly: true,
                    secure: secure,
                    //sameSite: true,
                });
            } else {
                //process.stderr.write((new Date), "couldn't fetch cookie for some reason, maybe no cookie exists?", req, "couldn't fetch cookie for some reason, maybe no cookie exists?");
                res.cookie('_uI', cookie, {
                    maxAge: 365 * 10000 * 3600000,
                    httpOnly: true,
                    secure: secure,
                    //sameSite: true,
                });
            }
            res.header("Access-Control-Allow-Origin", "*");
            res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
            next();
        }
    }
});

app.use('/service-worker.js', function(req, res) {
    res.sendFile(publicPath + '/service-worker.js');
});

app.use('/', ico_router);
app.use('/', api);
app.use('/', cors(), router);

app.use('/assets/js', function(req, res, next) {
    res.sendStatus(403);
    return;
});

app.use('/assets/admin', function(req, res, next) {
    res.sendStatus(403);
    return;
});

app.use('/assets', express.static(publicPath + '/assets'));

app.use(function (req, res, next) {
    res.status(404);
    res.redirect("/404");
})

module.exports = app;