55 lines
1.8 KiB
TypeScript
55 lines
1.8 KiB
TypeScript
import express from 'express'
|
|
import { isTestOrDevInstance } from '@server/helpers/core-utils'
|
|
import { OAuthClientModel } from '@server/models/oauth/oauth-client'
|
|
import { HttpStatusCode, OAuthClientLocal } from '@shared/models'
|
|
import { logger } from '../../helpers/logger'
|
|
import { CONFIG } from '../../initializers/config'
|
|
import { apiRateLimiter, asyncMiddleware, openapiOperationDoc } from '../../middlewares'
|
|
|
|
const oauthClientsRouter = express.Router()
|
|
|
|
oauthClientsRouter.use(apiRateLimiter)
|
|
|
|
oauthClientsRouter.get('/local',
|
|
openapiOperationDoc({ operationId: 'getOAuthClient' }),
|
|
asyncMiddleware(getLocalClient)
|
|
)
|
|
|
|
// Get the client credentials for the PeerTube front end
|
|
async function getLocalClient (req: express.Request, res: express.Response, next: express.NextFunction) {
|
|
const serverHostname = CONFIG.WEBSERVER.HOSTNAME
|
|
const serverPort = CONFIG.WEBSERVER.PORT
|
|
let headerHostShouldBe = serverHostname
|
|
if (serverPort !== 80 && serverPort !== 443) {
|
|
headerHostShouldBe += ':' + serverPort
|
|
}
|
|
|
|
// Don't make this check if this is a test instance
|
|
if (!isTestOrDevInstance() && req.get('host') !== headerHostShouldBe) {
|
|
logger.info(
|
|
'Getting client tokens for host %s is forbidden (expected %s).', req.get('host'), headerHostShouldBe,
|
|
{ webserverConfig: CONFIG.WEBSERVER }
|
|
)
|
|
|
|
return res.fail({
|
|
status: HttpStatusCode.FORBIDDEN_403,
|
|
message: `Getting client tokens for host ${req.get('host')} is forbidden`
|
|
})
|
|
}
|
|
|
|
const client = await OAuthClientModel.loadFirstClient()
|
|
if (!client) throw new Error('No client available.')
|
|
|
|
const json: OAuthClientLocal = {
|
|
client_id: client.clientId,
|
|
client_secret: client.clientSecret
|
|
}
|
|
return res.json(json)
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
|
|
export {
|
|
oauthClientsRouter
|
|
}
|