config.js 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565
  1. module.exports = function(crowi) {
  2. var mongoose = require('mongoose')
  3. , debug = require('debug')('growi:models:config')
  4. , uglifycss = require('uglifycss')
  5. , configSchema
  6. , Config
  7. , SECURITY_RESTRICT_GUEST_MODE_DENY = 'Deny'
  8. , SECURITY_RESTRICT_GUEST_MODE_READONLY = 'Readonly'
  9. , SECURITY_REGISTRATION_MODE_OPEN = 'Open'
  10. , SECURITY_REGISTRATION_MODE_RESTRICTED = 'Resricted'
  11. , SECURITY_REGISTRATION_MODE_CLOSED = 'Closed'
  12. ;
  13. configSchema = new mongoose.Schema({
  14. ns: { type: String, required: true, index: true },
  15. key: { type: String, required: true, index: true },
  16. value: { type: String, required: true }
  17. });
  18. /**
  19. * default values when GROWI is cleanly installed
  20. */
  21. function getArrayForInstalling() {
  22. let config = getDefaultCrowiConfigs();
  23. // overwrite
  24. config['app:fileUpload'] = true;
  25. config['security:isEnabledPassport'] = true;
  26. config['customize:behavior'] = 'growi';
  27. config['customize:layout'] = 'growi';
  28. config['customize:isSavedStatesOfTabChanges'] = false;
  29. return config;
  30. }
  31. /**
  32. * default values when migrated from Official Crowi
  33. */
  34. function getDefaultCrowiConfigs() {
  35. /* eslint-disable key-spacing */
  36. return {
  37. //'app:installed' : "0.0.0",
  38. 'app:confidential' : '',
  39. 'app:fileUpload' : false,
  40. 'security:restrictGuestMode' : 'Deny',
  41. 'security:registrationMode' : 'Open',
  42. 'security:registrationWhiteList' : [],
  43. 'security:isEnabledPassport' : false,
  44. 'security:passport-ldap:isEnabled' : false,
  45. 'security:passport-ldap:serverUrl' : undefined,
  46. 'security:passport-ldap:isUserBind' : undefined,
  47. 'security:passport-ldap:bindDN' : undefined,
  48. 'security:passport-ldap:bindDNPassword' : undefined,
  49. 'security:passport-ldap:searchFilter' : undefined,
  50. 'security:passport-ldap:attrMapUsername' : undefined,
  51. 'security:passport-ldap:attrMapName' : undefined,
  52. 'security:passport-ldap:groupSearchBase' : undefined,
  53. 'security:passport-ldap:groupSearchFilter' : undefined,
  54. 'security:passport-ldap:groupDnProperty' : undefined,
  55. 'security:passport-ldap:isSameUsernameTreatedAsIdenticalUser': false,
  56. 'security:passport-google:isEnabled' : false,
  57. 'security:passport-github:isEnabled' : false,
  58. 'aws:bucket' : 'growi',
  59. 'aws:region' : 'ap-northeast-1',
  60. 'aws:accessKeyId' : '',
  61. 'aws:secretAccessKey' : '',
  62. 'mail:from' : '',
  63. 'mail:smtpHost' : '',
  64. 'mail:smtpPort' : '',
  65. 'mail:smtpUser' : '',
  66. 'mail:smtpPassword' : '',
  67. 'google:clientId' : '',
  68. 'google:clientSecret' : '',
  69. 'plugin:isEnabledPlugins' : true,
  70. 'customize:css' : '',
  71. 'customize:script' : '',
  72. 'customize:header' : '',
  73. 'customize:title' : '',
  74. 'customize:highlightJsStyle' : 'github',
  75. 'customize:highlightJsStyleBorder' : false,
  76. 'customize:theme' : 'default',
  77. 'customize:behavior' : 'crowi',
  78. 'customize:layout' : 'crowi',
  79. 'customize:isEnabledTimeline' : true,
  80. 'customize:isSavedStatesOfTabChanges' : true,
  81. 'customize:isEnabledAttachTitleHeader' : false,
  82. };
  83. /* eslint-enable */
  84. }
  85. function getDefaultMarkdownConfigs() {
  86. return {
  87. 'markdown:XSS:isPrevented': false,
  88. 'markdown:XSS:option': 2,
  89. 'markdown:XSS:tagWhiteList': [],
  90. 'markdown:XSS:attrWhiteList': [],
  91. 'markdown:isEnabledLinebreaks': false,
  92. 'markdown:isEnabledPreventXSS': false,
  93. 'markdown:isEnabledLinebreaksInComments': true,
  94. };
  95. }
  96. function getValueForCrowiNS(config, key) {
  97. // return the default value if undefined
  98. if (undefined === config.crowi || undefined === config.crowi[key]) {
  99. return getDefaultCrowiConfigs()[key];
  100. }
  101. return config.crowi[key];
  102. }
  103. configSchema.statics.getRestrictGuestModeLabels = function() {
  104. var labels = {};
  105. labels[SECURITY_RESTRICT_GUEST_MODE_DENY] = 'security_setting.guest_mode.deny';
  106. labels[SECURITY_RESTRICT_GUEST_MODE_READONLY] = 'security_setting.guest_mode.readonly';
  107. return labels;
  108. };
  109. configSchema.statics.getRegistrationModeLabels = function() {
  110. var labels = {};
  111. labels[SECURITY_REGISTRATION_MODE_OPEN] = 'security_setting.registration_mode.open';
  112. labels[SECURITY_REGISTRATION_MODE_RESTRICTED] = 'security_setting.registration_mode.restricted';
  113. labels[SECURITY_REGISTRATION_MODE_CLOSED] = 'security_setting.registration_mode.closed';
  114. return labels;
  115. };
  116. configSchema.statics.updateConfigCache = function(ns, config) {
  117. var originalConfig = crowi.getConfig();
  118. var newNSConfig = originalConfig[ns] || {};
  119. Object.keys(config).forEach(function(key) {
  120. if (config[key] || config[key] === '' || config[key] === false) {
  121. newNSConfig[key] = config[key];
  122. }
  123. });
  124. originalConfig[ns] = newNSConfig;
  125. crowi.setConfig(originalConfig);
  126. // initialize custom css/script
  127. Config.initCustomCss(originalConfig);
  128. Config.initCustomScript(originalConfig);
  129. };
  130. // Execute only once for installing application
  131. configSchema.statics.applicationInstall = function(callback) {
  132. var Config = this;
  133. Config.count({ ns: 'crowi' }, function(err, count) {
  134. if (count > 0) {
  135. return callback(new Error('Application already installed'), null);
  136. }
  137. Config.updateNamespaceByArray('crowi', getArrayForInstalling(), function(err, configs) {
  138. Config.updateConfigCache('crowi', configs);
  139. return callback(err, configs);
  140. });
  141. });
  142. };
  143. configSchema.statics.setupCofigFormData = function(ns, config) {
  144. var defaultConfig = {};
  145. // set Default Settings
  146. if (ns === 'crowi') {
  147. defaultConfig = getDefaultCrowiConfigs();
  148. }
  149. else if (ns === 'markdown') {
  150. defaultConfig = getDefaultMarkdownConfigs();
  151. }
  152. if (!defaultConfig[ns]) {
  153. defaultConfig[ns] = {};
  154. }
  155. Object.keys(config[ns] || {}).forEach(function(key) {
  156. if (config[ns][key] !== undefined) {
  157. defaultConfig[key] = config[ns][key];
  158. }
  159. });
  160. return defaultConfig;
  161. };
  162. configSchema.statics.updateNamespaceByArray = function(ns, configs, callback) {
  163. var Config = this;
  164. if (configs.length < 0) {
  165. return callback(new Error('Argument #1 is not array.'), null);
  166. }
  167. Object.keys(configs).forEach(function(key) {
  168. var value = configs[key];
  169. Config.findOneAndUpdate(
  170. { ns: ns, key: key },
  171. { ns: ns, key: key, value: JSON.stringify(value) },
  172. { upsert: true, },
  173. function(err, config) {
  174. debug('Config.findAndUpdate', err, config);
  175. });
  176. });
  177. return callback(null, configs);
  178. };
  179. configSchema.statics.findAndUpdate = function(ns, key, value, callback) {
  180. var Config = this;
  181. Config.findOneAndUpdate(
  182. { ns: ns, key: key },
  183. { ns: ns, key: key, value: JSON.stringify(value) },
  184. { upsert: true, },
  185. function(err, config) {
  186. debug('Config.findAndUpdate', err, config);
  187. callback(err, config);
  188. });
  189. };
  190. configSchema.statics.getConfig = function(callback) {
  191. };
  192. configSchema.statics.loadAllConfig = function(callback) {
  193. var Config = this
  194. , config = {};
  195. config.crowi = {}; // crowi namespace
  196. Config.find()
  197. .sort({ns: 1, key: 1})
  198. .exec(function(err, doc) {
  199. doc.forEach(function(el) {
  200. if (!config[el.ns]) {
  201. config[el.ns] = {};
  202. }
  203. config[el.ns][el.key] = JSON.parse(el.value);
  204. });
  205. debug('Config loaded', config);
  206. // initialize custom css/script
  207. Config.initCustomCss(config);
  208. Config.initCustomScript(config);
  209. return callback(null, config);
  210. });
  211. };
  212. configSchema.statics.appTitle = function(config) {
  213. const key = 'app:title';
  214. return getValueForCrowiNS(config, key) || 'GROWI';
  215. };
  216. configSchema.statics.isEnabledPassport = function(config) {
  217. // always true if growi installed cleanly
  218. if (Object.keys(config.crowi).length == 0) {
  219. return true;
  220. }
  221. const key = 'security:isEnabledPassport';
  222. return getValueForCrowiNS(config, key);
  223. };
  224. configSchema.statics.isEnabledPassportLdap = function(config) {
  225. const key = 'security:passport-ldap:isEnabled';
  226. return getValueForCrowiNS(config, key);
  227. };
  228. configSchema.statics.isEnabledPassportGoogle = function(config) {
  229. const key = 'security:passport-google:isEnabled';
  230. return getValueForCrowiNS(config, key);
  231. };
  232. configSchema.statics.isEnabledPassportGitHub = function(config) {
  233. const key = 'security:passport-github:isEnabled';
  234. return getValueForCrowiNS(config, key);
  235. };
  236. configSchema.statics.isSameUsernameTreatedAsIdenticalUser = function(config, providerType) {
  237. const key = `security:passport-${providerType}:isSameUsernameTreatedAsIdenticalUser`;
  238. return getValueForCrowiNS(config, key);
  239. };
  240. configSchema.statics.isUploadable = function(config) {
  241. var method = crowi.env.FILE_UPLOAD || 'aws';
  242. if (method == 'aws' && (
  243. !config.crowi['aws:accessKeyId'] ||
  244. !config.crowi['aws:secretAccessKey'] ||
  245. !config.crowi['aws:region'] ||
  246. !config.crowi['aws:bucket'])) {
  247. return false;
  248. }
  249. return method != 'none';
  250. };
  251. configSchema.statics.isGuesstAllowedToRead = function(config) {
  252. // return false if undefined
  253. if (undefined === config.crowi || undefined === config.crowi['security:restrictGuestMode']) {
  254. return false;
  255. }
  256. return SECURITY_RESTRICT_GUEST_MODE_READONLY === config.crowi['security:restrictGuestMode'];
  257. };
  258. configSchema.statics.isEnabledPlugins = function(config) {
  259. const key = 'plugin:isEnabledPlugins';
  260. return getValueForCrowiNS(config, key);
  261. };
  262. configSchema.statics.isEnabledLinebreaks = function(config) {
  263. const key = 'markdown:isEnabledLinebreaks';
  264. // return default value if undefined
  265. if (undefined === config.markdown || undefined === config.markdown[key]) {
  266. return getDefaultMarkdownConfigs()[key];
  267. }
  268. return config.markdown[key];
  269. };
  270. configSchema.statics.isEnabledLinebreaksInComments = function(config) {
  271. const key = 'markdown:isEnabledLinebreaksInComments';
  272. // return default value if undefined
  273. if (undefined === config.markdown || undefined === config.markdown[key]) {
  274. return getDefaultMarkdownConfigs()[key];
  275. }
  276. return config.markdown[key];
  277. };
  278. configSchema.statics.isXSSPrevented = function(config) {
  279. const key = 'markdown:XSS:isPrevented';
  280. // return default value if undefined
  281. if (undefined === config.markdown || undefined === config.markdown[key]) {
  282. return getDefaultMarkdownConfigs[key];
  283. }
  284. return config.markdown[key];
  285. };
  286. configSchema.statics.XSSOption = function(config) {
  287. const key = 'markdown:XSS:option';
  288. // return default value if undefined
  289. if (undefined === config.markdown || undefined === config.markdown[key]) {
  290. return getDefaultMarkdownConfigs[key];
  291. }
  292. return config.markdown[key];
  293. };
  294. configSchema.statics.tagWhiteList = function(config) {
  295. const key = 'markdown:XSS:tagWhiteList';
  296. // return default value if undefined
  297. if (undefined === config.markdown || undefined === config.markdown[key]) {
  298. return getDefaultMarkdownConfigs[key];
  299. }
  300. return config.markdown[key];
  301. };
  302. configSchema.statics.attrWhiteList = function(config) {
  303. const key = 'markdown:XSS:attrWhiteList';
  304. // return default value if undefined
  305. if (undefined === config.markdown || undefined === config.markdown[key]) {
  306. return getDefaultMarkdownConfigs[key];
  307. }
  308. return config.markdown[key];
  309. };
  310. /**
  311. * initialize custom css strings
  312. */
  313. configSchema.statics.initCustomCss = function(config) {
  314. const key = 'customize:css';
  315. const rawCss = getValueForCrowiNS(config, key);
  316. // uglify and store
  317. this._customCss = uglifycss.processString(rawCss);
  318. };
  319. configSchema.statics.customCss = function(config) {
  320. return this._customCss;
  321. };
  322. configSchema.statics.initCustomScript = function(config) {
  323. const key = 'customize:script';
  324. const rawScript = getValueForCrowiNS(config, key);
  325. // store as is
  326. this._customScript = rawScript;
  327. };
  328. configSchema.statics.customScript = function(config) {
  329. return this._customScript;
  330. };
  331. configSchema.statics.customHeader = function(config) {
  332. const key = 'customize:header';
  333. return getValueForCrowiNS(config, key);
  334. };
  335. configSchema.statics.theme = function(config) {
  336. const key = 'customize:theme';
  337. return getValueForCrowiNS(config, key);
  338. };
  339. configSchema.statics.customTitle = function(config, page) {
  340. const key = 'customize:title';
  341. let customTitle = getValueForCrowiNS(config, key);
  342. if (customTitle == null || customTitle.trim().length == 0) {
  343. customTitle = '{{page}} - {{sitename}}';
  344. }
  345. return customTitle
  346. .replace('{{sitename}}', this.appTitle(config))
  347. .replace('{{page}}', page);
  348. };
  349. configSchema.statics.behaviorType = function(config) {
  350. const key = 'customize:behavior';
  351. return getValueForCrowiNS(config, key);
  352. };
  353. configSchema.statics.layoutType = function(config) {
  354. const key = 'customize:layout';
  355. return getValueForCrowiNS(config, key);
  356. };
  357. configSchema.statics.highlightJsStyle = function(config) {
  358. const key = 'customize:highlightJsStyle';
  359. return getValueForCrowiNS(config, key);
  360. };
  361. configSchema.statics.highlightJsStyleBorder = function(config) {
  362. const key = 'customize:highlightJsStyleBorder';
  363. return getValueForCrowiNS(config, key);
  364. };
  365. configSchema.statics.isEnabledTimeline = function(config) {
  366. const key = 'customize:isEnabledTimeline';
  367. return getValueForCrowiNS(config, key);
  368. };
  369. configSchema.statics.isSavedStatesOfTabChanges = function(config) {
  370. const key = 'customize:isSavedStatesOfTabChanges';
  371. return getValueForCrowiNS(config, key);
  372. };
  373. configSchema.statics.isEnabledAttachTitleHeader = function(config) {
  374. const key = 'customize:isEnabledAttachTitleHeader';
  375. return getValueForCrowiNS(config, key);
  376. };
  377. configSchema.statics.fileUploadEnabled = function(config) {
  378. const Config = this;
  379. if (!Config.isUploadable(config)) {
  380. return false;
  381. }
  382. // convert to boolean
  383. return !!config.crowi['app:fileUpload'];
  384. };
  385. configSchema.statics.hasSlackConfig = function(config) {
  386. return Config.hasSlackToken(config) || Config.hasSlackIwhUrl(config);
  387. };
  388. /**
  389. * for Slack Incoming Webhooks
  390. */
  391. configSchema.statics.hasSlackIwhUrl = function(config) {
  392. if (!config.notification) {
  393. return false;
  394. }
  395. return (config.notification['slack:incomingWebhookUrl'] ? true : false);
  396. };
  397. configSchema.statics.isIncomingWebhookPrioritized = function(config) {
  398. if (!config.notification) {
  399. return false;
  400. }
  401. return (config.notification['slack:isIncomingWebhookPrioritized'] ? true : false);
  402. };
  403. configSchema.statics.hasSlackToken = function(config) {
  404. if (!config.notification) {
  405. return false;
  406. }
  407. return (config.notification['slack:token'] ? true : false);
  408. };
  409. configSchema.statics.getLocalconfig = function(config) {
  410. const Config = this;
  411. const env = crowi.getEnv();
  412. const local_config = {
  413. crowi: {
  414. title: Config.appTitle(crowi),
  415. url: config.crowi['app:url'] || '',
  416. },
  417. upload: {
  418. image: Config.isUploadable(config),
  419. file: Config.fileUploadEnabled(config),
  420. },
  421. behaviorType: Config.behaviorType(config),
  422. layoutType: Config.layoutType(config),
  423. isEnabledLinebreaks: Config.isEnabledLinebreaks(config),
  424. isEnabledLinebreaksInComments: Config.isEnabledLinebreaksInComments(config),
  425. isXSSPrevented: Config.isXSSPrevented(config),
  426. XSSOption: Config.XSSOption(config),
  427. tagWhiteList: Config.tagWhiteList(config),
  428. attrWhiteList: Config.attrWhiteList(config),
  429. highlightJsStyleBorder: Config.highlightJsStyleBorder(config),
  430. isSavedStatesOfTabChanges: Config.isSavedStatesOfTabChanges(config),
  431. env: {
  432. PLANTUML_URI: env.PLANTUML_URI || null,
  433. BLOCKDIAG_URI: env.BLOCKDIAG_URI || null,
  434. MATHJAX: env.MATHJAX || null,
  435. },
  436. };
  437. return local_config;
  438. };
  439. /*
  440. configSchema.statics.isInstalled = function(config)
  441. {
  442. if (!config.crowi) {
  443. return false;
  444. }
  445. if (config.crowi['app:installed']
  446. && config.crowi['app:installed'] !== '0.0.0') {
  447. return true;
  448. }
  449. return false;
  450. }
  451. */
  452. Config = mongoose.model('Config', configSchema);
  453. Config.SECURITY_REGISTRATION_MODE_OPEN = SECURITY_REGISTRATION_MODE_OPEN;
  454. Config.SECURITY_REGISTRATION_MODE_RESTRICTED = SECURITY_REGISTRATION_MODE_RESTRICTED;
  455. Config.SECURITY_REGISTRATION_MODE_CLOSED = SECURITY_REGISTRATION_MODE_CLOSED;
  456. return Config;
  457. };