initial commit

pendo324 · pendo324 · commit 3a9eb39d67e4 · 2016-12-17T06:16:49.000Z
diff --git a/api/activate.js b/api/activate.js
@@ -0,0 +1,13 @@
+const db = require('./../db.js');
+const express = require('express');
+
+const app = express.Router();
+
+app.get('/activate/:code([a-zA-Z0-9]{64})', (req, res) => {
+  db.query('update tracker.user set activated=$1, activation_code=$2, where activation_code=$3',
+    [true, null, req.params.code]).then(result => {
+      res.send(200);
+    });
+});
+
+module.exports = app;
diff --git a/api/blogPosts.js b/api/blogPosts.js
@@ -0,0 +1,14 @@
+const express = require('express');
+const db = require('./../db.js');
+
+const app = express.Router();
+
+app.get('/blogPosts/:amount', (req, res) => {
+	db.query('select * from tracker.blogposts limit $1', [req.params.amount]).then(result => {
+		res.json(result.rows.map((post, index) => {
+			return { title: post.title, content: post.content, timestamp: post.time };
+		}));
+	});
+});
+
+module.exports = app;
diff --git a/api/createAccount.js b/api/createAccount.js
@@ -0,0 +1,47 @@
+const express = require('express');
+const db = require('./../db.js');
+const bcrypt = require('bcrypt');
+const emailer = require('./emailer');
+const crypto = require('crypto');
+
+const app = express.Router();
+
+const checkAccountExists = (username, email) => {
+  return db.query('select username from tracker.user where username=$1 or email=$2', [username, email]).then(result => {
+    if (result.rows.length > 0) {
+      return Promise.reject(new Error('Invalid username/email.'));
+    }
+    return Promise.resolve();
+  });
+};
+
+const hashPassword = password => {
+  return bcrypt.hashSync(password, 10);
+};
+
+const makeActivationCode = username => {
+  const hash = crypto.createHash('sha256');
+  const code = process.env.COOKIE_SECRET + username + Math.floor((new Date).getTime()/1000).toString();
+  hash.update(code);
+  return hash.digest('hex');
+};
+
+app.post('/create', (req, res) => {
+  checkAccountExists(req.body.username, req.body.email).then(() => {
+    const activationCode = makeActivationCode(req.body.username);
+    db.query('insert into tracker.user (username, password_hash, email, activation_code) values ($1, $2, $3, $4)', 
+              [req.body.username, hashPassword(req.body.password), req.body.email, activationCode]).then(result => { 
+                res.sendStatus(200);
+                emailer.sendActivationEmail(req.body.email, activationCode);
+              }).catch(err => {
+                console.log(err);
+                res.sendStatus(503);
+              });
+  }).catch(err => {
+    console.log(err);
+    res.status(409);
+    res.send('Invalid username/email.');
+  });
+});
+
+module.exports = app;
diff --git a/api/emailer.js b/api/emailer.js
@@ -0,0 +1,32 @@
+const nodemailer = require('nodemailer');
+//const sendmailTransport = require('nodemailer-sendmail-transport');
+
+const transporter = nodemailer.createTransport({
+  host: 'topkek.us',
+  port: 25,
+  secure: false,
+  auth: {
+    user: process.env.MAIL_USER,
+    pass: process.env.MAIL_PASS
+  }
+});
+
+const makeActivationURL = (activationCode) => {
+  return `http://${process.env.DOMAIN}:${process.env.WEB_PORT}/activate/${activationCode}`;
+};
+
+module.exports.sendActivationEmail = (to, activationCode) => {
+  const mailOptions = {
+    from: 'Topkek <noreply@topkek.us>',
+    to: to,
+    subject: 'Email verification',
+    text: `Please click on the link below to activate your account:\n\n ${makeActivationURL(activationCode)}`
+  };
+
+  transporter.sendMail(mailOptions, (err, info) => {
+    if (err) {
+      console.log(err);
+    }
+    console.log(`Message sent: ${info.response}`);
+  });
+};
diff --git a/api/index.js b/api/index.js
@@ -0,0 +1,24 @@
+const express = require('express');
+
+const app = express.Router();
+
+// routes
+const createAccount = require('./createAccount.js');
+const login = require('./login.js');
+const unauthorized = require('./unauthorized.js');
+const logout = require('./logout.js');
+const logged = require('./isLoggedIn.js');
+const activate = require('./activate.js');
+const blogPosts = require('./blogPosts.js');
+const upload = require('./upload.js');
+
+app.use(login);
+app.use(createAccount);
+app.use(activate);
+app.use(blogPosts);
+//app.use(unauthorized);
+app.use(logout);
+app.use(logged);
+app.use(upload);
+
+module.exports = app;
diff --git a/api/isLoggedIn.js b/api/isLoggedIn.js
@@ -0,0 +1,10 @@
+const express = require('express');
+
+const app = express.Router();
+
+app.all('/logged', (req, res) => {
+	const user = req.session.currentUser;
+	res.send(user);
+});
+
+module.exports = app;
diff --git a/api/login.js b/api/login.js
@@ -0,0 +1,25 @@
+const express = require('express');
+const db = require('./../db.js');
+const bcrypt = require('bcrypt');
+
+const app = express.Router();
+
+app.post('/login', (req, res) => {
+  db.query('select username, account_id, password_hash from tracker.user where username=$1', [req.body.username]).then(result => {
+  	if (bcrypt.compareSync(req.body.password, result.rows[0].password_hash)) {
+      req.session.currentUser = {
+        username: req.body.username,
+        id: result.rows[0].account_id
+      };
+
+      req.session.save(function(err) {
+        res.send();
+      });
+  	}
+  }).catch(err => {
+  	console.log(err);
+		res.sendStatus(404);
+  });
+});
+
+module.exports = app;
diff --git a/api/logout.js b/api/logout.js
@@ -0,0 +1,12 @@
+const express = require('express');
+
+const app = express.Router();
+
+app.get('/logout', (req, res) => {
+	req.session.destroy(err => {
+		if (err) throw err;
+		res.send(200);
+	});
+});
+
+module.exports = app;
diff --git a/api/unauthorized.js b/api/unauthorized.js
@@ -0,0 +1,13 @@
+const express = require('express');
+
+const app = express.Router();
+
+app.all('*', (req, res, next) => {
+  if (!req.session.currentUser) {
+    res.sendStatus(401);
+  }
+
+  next();
+});
+
+module.exports = app;
diff --git a/api/upload.js b/api/upload.js
@@ -0,0 +1,20 @@
+const express = require('express');
+const multer = require('multer');
+const cyrpto = require('crypto');
+const db = require('./../db.js');
+const _ = require('lodash');
+
+const app = express.Router();
+
+const storage = multer.diskStorage({
+  destination: (req, file, cb) => {
+    cb(null, `/home/justin/torrents/${(new Date).getMonth()}`);
+  },
+  filename: (req, file, cb) => {
+    cb(null, file.hash);
+  }
+});
+
+const hashTorrent = (torrentBuffer) => {
+
+};
diff --git a/app.js b/app.js
@@ -0,0 +1,65 @@
+const express = require('express');
+const fs = require('fs');
+const https = require('https');
+const subdomain = require('express-subdomain');
+const bodyParser = require('body-parser');
+const cookieParser = require('cookie-parser');
+const session = require('express-session');
+const pgSession = require('connect-pg-simple')(session);
+
+require('dotenv').config(); // load local .env file into process.ENV
+
+const db = require('./db.js');
+const secret = process.env.COOKIE_SECRET;
+const ports = [80, 443];
+
+const app = express();
+
+// SSL
+const server = https.createServer({
+    key: fs.readFileSync('./keys/privkey.pem'),
+    cert: fs.readFileSync('./keys/cert.pem')
+  },
+  app
+);
+
+// allows post data to be accessed in routes
+app.use(bodyParser.json());
+app.use(bodyParser.urlencoded({
+  extended: true
+}));
+app.use(bodyParser.text());
+
+// cookieParser and session should use the same secret
+app.use(cookieParser(secret));
+
+app.use(session({
+  store: new pgSession({
+    pg : db.pg,
+    conString : process.env.DATABASE_URL, 
+    schemaName : 'tracker'
+  }),
+  rolling: false,
+  resave: true,
+  secret: secret,
+  saveUninitialized: false,
+  cookie: { secure: false, maxAge: 30 * 24 * 60 * 60 * 1000 } // 30 days
+}));
+
+server.listen(ports[1]);
+app.listen(ports[0]);
+
+// set headers for all routes
+app.all('/*', function(req, res, next) {
+  res.header('Access-Control-Allow-Origin', 'http://topkek.us:3000');
+  res.header('Access-Control-Allow-Credentials', 'true');
+  res.header('Access-Control-Allow-Methods', 'GET,HEAD,OPTIONS,POST,PUT');
+  res.header('Access-Control-Allow-Headers', 'Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers');
+
+  next();
+});
+
+// login API route
+app.use(subdomain('api', require('./api')));
+
+app.use(subdomain('tracker', require('./tracker')));
diff --git a/db.js b/db.js
@@ -0,0 +1,32 @@
+const Pool = require('pg-pool');
+const url = require('url');
+
+const params = url.parse(process.env.DATABASE_URL);
+const auth = params.auth.split(':');
+
+const config = {
+  user: auth[0],
+  password: auth[1],
+  host: params.hostname,
+  port: params.port,
+  database: params.pathname.split('/')[1],
+  ssl: false
+};
+
+const pool = new Pool(config);
+
+pool.query('truncate tracker.user');
+
+module.exports.query = (text, values) => {
+  return pool.query(text, values);
+};
+
+module.exports.checkSecret = (secret) => {
+  return pool.query('select * from tracker.user where secret = $1', [secret]);
+};
+
+module.exports.checkTorrent = (hash) => {
+  return pool.query('select * from tracker.torrents where hash = $1', [hash]);
+};
+
+module.exports.pg = pool.client;
diff --git a/package.json b/package.json
@@ -0,0 +1,34 @@
+{
+  "name": "tracker",
+  "version": "1.0.0",
+  "main": "app.js",
+  "author": "pendo324",
+  "license": "MIT",
+  "dependencies": {
+    "bcrypt": "^0.8.7",
+    "bencode": "^0.11.0",
+    "bittorrent-tracker": "^8.0.12",
+    "body-parser": "^1.15.2",
+    "connect-pg-simple": "^3.1.2",
+    "cookie": "^0.3.1",
+    "cookie-parser": "^1.4.3",
+    "dotenv": "^2.0.0",
+    "express": "^4.14.0",
+    "express-session": "^1.14.2",
+    "express-subdomain": "^1.0.5",
+    "lodash": "^4.17.2",
+    "multer": "^1.2.1",
+    "nodemailer": "^2.6.4",
+    "nodemailer-sendmail-transport": "^1.0.0",
+    "pg": "^6.1.0",
+    "pg-pool": "^1.5.0"
+  },
+  "scripts": {
+    "start": "NODE_ENV=production node app.js",
+    "dev": "nodemon app.js"
+  },
+  "devDependencies": {
+    "chokidar-cli": "^1.2.0",
+    "nodemon": "^1.11.0"
+  }
+}
diff --git a/tracker/index.js b/tracker/index.js
@@ -0,0 +1,35 @@
+const Server = require('bittorrent-tracker').Server;
+const db = require('../db.js');
+const express = require('express');
+
+const app = express.Router();
+
+const server = new Server({
+  udp: false,
+  http: false,
+  ws: false,
+  stats: true,
+  filter: (infoHash, params, cb) => {
+    console.log(params);
+    cb(true);
+  }
+});
+
+server.on('error', err => {
+  console.log(err);
+}).on('listening', () => {
+  console.log('listening on http port:' + server.http.address().port);
+  console.log('listening on udp port:' + server.udp.address().port);
+});
+
+const onHttpRequest = server.onHttpRequest.bind(server);
+
+app.get('/:secret/announce', (req, res) => {
+  db.checkSecret(req.params.secret).then(result => {
+    onHttpRequest(req, res, { action: 'announce' });
+  }).catch(err => {
+    res.send(200);
+  })
+});
+
+module.exports = app;
diff --git a/yarn.lock b/yarn.lock
