admin.js 18 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612
  1. module.exports = function(crowi, app) {
  2. 'use strict';
  3. var debug = require('debug')('crowi:routes:admin')
  4. , models = crowi.models
  5. , Page = models.Page
  6. , User = models.User
  7. , Config = models.Config
  8. , PluginUtils = require('../plugins/plugin-utils')
  9. , pluginUtils = new PluginUtils()
  10. , ApiResponse = require('../util/apiResponse')
  11. , MAX_PAGE_LIST = 5
  12. , actions = {};
  13. function createPager(total, limit, page, pagesCount, maxPageList) {
  14. const pager = {
  15. page: page,
  16. pagesCount: pagesCount,
  17. pages: [],
  18. total: total,
  19. previous: null,
  20. previousDots: false,
  21. next: null,
  22. nextDots: false,
  23. };
  24. if (page > 1) {
  25. pager.previous = page - 1;
  26. }
  27. if (page < pagesCount) {
  28. pager.next = page + 1;
  29. }
  30. let pagerMin = Math.max(1, Math.ceil(page - maxPageList/2));
  31. let pagerMax = Math.min(pagesCount, Math.floor(page + maxPageList/2));
  32. if (pagerMin === 1) {
  33. if (MAX_PAGE_LIST < pagesCount) {
  34. pagerMax = MAX_PAGE_LIST;
  35. } else {
  36. pagerMax = pagesCount;
  37. }
  38. }
  39. if (pagerMax === pagesCount) {
  40. if ((pagerMax - MAX_PAGE_LIST) < 1) {
  41. pagerMin = 1;
  42. } else {
  43. pagerMin = pagerMax - MAX_PAGE_LIST;
  44. }
  45. }
  46. pager.previousDots = null;
  47. if (pagerMin > 1) {
  48. pager.previousDots = true;
  49. }
  50. pager.nextDots = null;
  51. if (pagerMax < pagesCount) {
  52. pager.nextDots = true;
  53. }
  54. for (let i = pagerMin; i <= pagerMax; i++) {
  55. pager.pages.push(i);
  56. }
  57. return pager;
  58. }
  59. actions.index = function(req, res) {
  60. return res.render('admin/index', {
  61. plugins: pluginUtils.listPlugins(crowi.rootDir),
  62. });
  63. };
  64. // app.get('/admin/app' , admin.app.index);
  65. actions.app = {};
  66. actions.app.index = function(req, res) {
  67. var settingForm;
  68. settingForm = Config.setupCofigFormData('crowi', req.config);
  69. return res.render('admin/app', {
  70. settingForm: settingForm,
  71. });
  72. };
  73. actions.app.settingUpdate = function(req, res) {
  74. };
  75. // app.get('/admin/security' , admin.security.index);
  76. actions.security = {};
  77. actions.security.index = function(req, res) {
  78. var settingForm;
  79. settingForm = Config.setupCofigFormData('crowi', req.config);
  80. return res.render('admin/security', { settingForm });
  81. };
  82. // app.get('/admin/markdown' , admin.markdown.index);
  83. actions.markdown = {};
  84. actions.markdown.index = function(req, res) {
  85. var config = crowi.getConfig();
  86. var markdownSetting = Config.setupCofigFormData('markdown', config);
  87. return res.render('admin/markdown', {
  88. markdownSetting: markdownSetting,
  89. });
  90. };
  91. // app.post('/admin/markdown/lineBreaksSetting' , admin.markdown.lineBreaksSetting);
  92. actions.markdown.lineBreaksSetting = function(req, res) {
  93. var markdownSetting = req.form.markdownSetting;
  94. req.session.markdownSetting = markdownSetting;
  95. if (req.form.isValid) {
  96. Config.updateNamespaceByArray('markdown', markdownSetting, function(err, config) {
  97. Config.updateConfigCache('markdown', config);
  98. req.session.markdownSetting = null;
  99. req.flash('successMessage', ['Successfully updated!']);
  100. return res.redirect('/admin/markdown');
  101. });
  102. } else {
  103. req.flash('errorMessage', req.form.errors);
  104. return res.redirect('/admin/markdown');
  105. }
  106. };
  107. // app.get('/admin/customize' , admin.customize.index);
  108. actions.customize = {};
  109. actions.customize.index = function(req, res) {
  110. var settingForm;
  111. settingForm = Config.setupCofigFormData('crowi', req.config);
  112. return res.render('admin/customize', {
  113. settingForm: settingForm,
  114. });
  115. };
  116. // app.get('/admin/notification' , admin.notification.index);
  117. actions.notification = {};
  118. actions.notification.index = function(req, res) {
  119. var config = crowi.getConfig();
  120. var UpdatePost = crowi.model('UpdatePost');
  121. var slackSetting = Config.setupCofigFormData('notification', config);
  122. var hasSlackWebClientConfig = Config.hasSlackWebClientConfig(config);
  123. var hasSlackIwhUrl = Config.hasSlackIwhUrl(config);
  124. var hasSlackToken = Config.hasSlackToken(config);
  125. var slack = crowi.slack;
  126. var slackAuthUrl = '';
  127. if (!Config.hasSlackWebClientConfig(req.config)) {
  128. slackSetting['slack:clientId'] = '';
  129. slackSetting['slack:clientSecret'] = '';
  130. }
  131. else {
  132. slackAuthUrl = slack.getAuthorizeURL();
  133. }
  134. if (!Config.hasSlackIwhUrl(req.config)) {
  135. slackSetting['slack:incomingWebhookUrl'] = '';
  136. }
  137. if (req.session.slackSetting) {
  138. slackSetting = req.session.slackSetting;
  139. req.session.slackSetting = null;
  140. }
  141. UpdatePost.findAll()
  142. .then(function(settings) {
  143. return res.render('admin/notification', {
  144. settings,
  145. slackSetting,
  146. hasSlackWebClientConfig,
  147. hasSlackIwhUrl,
  148. hasSlackToken,
  149. slackAuthUrl
  150. });
  151. });
  152. };
  153. // app.post('/admin/notification/slackSetting' , admin.notification.slackauth);
  154. actions.notification.slackSetting = function(req, res) {
  155. var slackSetting = req.form.slackSetting;
  156. req.session.slackSetting = slackSetting;
  157. if (req.form.isValid) {
  158. Config.updateNamespaceByArray('notification', slackSetting, function(err, config) {
  159. Config.updateConfigCache('notification', config);
  160. req.flash('successMessage', ['Successfully Updated!']);
  161. req.session.slackSetting = null;
  162. // Re-setup
  163. crowi.setupSlack().then(function() {
  164. return res.redirect('/admin/notification');
  165. });
  166. });
  167. } else {
  168. req.flash('errorMessage', req.form.errors);
  169. return res.redirect('/admin/notification');
  170. }
  171. };
  172. // app.get('/admin/notification/slackAuth' , admin.notification.slackauth);
  173. actions.notification.slackAuth = function(req, res) {
  174. const code = req.query.code;
  175. const config = crowi.getConfig();
  176. if (!code || !Config.hasSlackConfig(req.config)) {
  177. return res.redirect('/admin/notification');
  178. }
  179. const slack = crowi.slack;
  180. slack.getOauthAccessToken(code)
  181. .then(data => {
  182. debug('oauth response', data);
  183. Config.updateNamespaceByArray('notification', {'slack:token': data.access_token}, function(err, config) {
  184. if (err) {
  185. req.flash('errorMessage', ['Failed to save access_token. Please try again.']);
  186. } else {
  187. Config.updateConfigCache('notification', config);
  188. req.flash('successMessage', ['Successfully Connected!']);
  189. }
  190. return res.redirect('/admin/notification');
  191. });
  192. }).catch(err => {
  193. debug('oauth response ERROR', err);
  194. req.flash('errorMessage', ['Failed to fetch access_token. Please do connect again.']);
  195. return res.redirect('/admin/notification');
  196. });
  197. };
  198. actions.search = {};
  199. actions.search.index = function(req, res) {
  200. var search = crowi.getSearcher();
  201. if (!search) {
  202. return res.redirect('/admin');
  203. }
  204. return res.render('admin/search', {
  205. });
  206. };
  207. // app.post('/admin/notification/slackIwhSetting' , admin.notification.slackIwhSetting);
  208. actions.notification.slackIwhSetting = function(req, res) {
  209. var slackIwhSetting = req.form.slackIwhSetting;
  210. if (req.form.isValid) {
  211. Config.updateNamespaceByArray('notification', slackIwhSetting, function(err, config) {
  212. Config.updateConfigCache('notification', config);
  213. req.flash('successMessage', ['Successfully Updated!']);
  214. // Re-setup
  215. crowi.setupSlack().then(function() {
  216. return res.redirect('/admin/notification#slack-incoming-webhooks');
  217. });
  218. });
  219. } else {
  220. req.flash('errorMessage', req.form.errors);
  221. return res.redirect('/admin/notification#slack-incoming-webhooks');
  222. }
  223. };
  224. // app.post('/admin/notification/slackSetting/disconnect' , admin.notification.disconnectFromSlack);
  225. actions.notification.disconnectFromSlack = function(req, res) {
  226. const config = crowi.getConfig();
  227. const slack = crowi.slack;
  228. Config.updateNamespaceByArray('notification', {'slack:token': ''}, function(err, config) {
  229. Config.updateConfigCache('notification', config);
  230. req.flash('successMessage', ['Successfully Disconnected!']);
  231. return res.redirect('/admin/notification');
  232. });
  233. };
  234. actions.search.buildIndex = function(req, res) {
  235. var search = crowi.getSearcher();
  236. if (!search) {
  237. return res.redirect('/admin');
  238. }
  239. return new Promise(function(resolve, reject) {
  240. search.deleteIndex()
  241. .then(function(data) {
  242. debug('Index deleted.');
  243. resolve();
  244. }).catch(function(err) {
  245. debug('Delete index Error, but if it is initialize, its ok.', err);
  246. resolve();
  247. });
  248. })
  249. .then(function() {
  250. return search.buildIndex()
  251. })
  252. .then(function(data) {
  253. if (!data.errors) {
  254. debug('Index created.');
  255. }
  256. return search.addAllPages();
  257. })
  258. .then(function(data) {
  259. if (!data.errors) {
  260. debug('Data is successfully indexed.');
  261. req.flash('successMessage', 'Data is successfully indexed.');
  262. } else {
  263. debug('Data index error.', data.errors);
  264. req.flash('errorMessage', `Data index error: ${data.errors}`);
  265. }
  266. return res.redirect('/admin/search');
  267. })
  268. .catch(function(err) {
  269. debug('Error', err);
  270. req.flash('errorMessage', `Error: ${err}`);
  271. return res.redirect('/admin/search');
  272. });
  273. };
  274. actions.user = {};
  275. actions.user.index = function(req, res) {
  276. var page = parseInt(req.query.page) || 1;
  277. User.findUsersWithPagination({page: page}, function(err, result) {
  278. const pager = createPager(result.total, result.limit, result.page, result.pages, MAX_PAGE_LIST);
  279. return res.render('admin/users', {
  280. users: result.docs,
  281. pager: pager
  282. });
  283. });
  284. };
  285. actions.user.invite = function(req, res) {
  286. var form = req.form.inviteForm;
  287. var toSendEmail = form.sendEmail || false;
  288. if (req.form.isValid) {
  289. User.createUsersByInvitation(form.emailList.split('\n'), toSendEmail, function(err, userList) {
  290. if (err) {
  291. req.flash('errorMessage', req.form.errors.join('\n'));
  292. } else {
  293. req.flash('createdUser', userList);
  294. }
  295. return res.redirect('/admin/users');
  296. });
  297. } else {
  298. req.flash('errorMessage', req.form.errors.join('\n'));
  299. return res.redirect('/admin/users');
  300. }
  301. };
  302. actions.user.makeAdmin = function(req, res) {
  303. var id = req.params.id;
  304. User.findById(id, function(err, userData) {
  305. userData.makeAdmin(function(err, userData) {
  306. if (err === null) {
  307. req.flash('successMessage', userData.name + 'さんのアカウントを管理者に設定しました。');
  308. } else {
  309. req.flash('errorMessage', '更新に失敗しました。');
  310. debug(err, userData);
  311. }
  312. return res.redirect('/admin/users');
  313. });
  314. });
  315. };
  316. actions.user.removeFromAdmin = function(req, res) {
  317. var id = req.params.id;
  318. User.findById(id, function(err, userData) {
  319. userData.removeFromAdmin(function(err, userData) {
  320. if (err === null) {
  321. req.flash('successMessage', userData.name + 'さんのアカウントを管理者から外しました。');
  322. } else {
  323. req.flash('errorMessage', '更新に失敗しました。');
  324. debug(err, userData);
  325. }
  326. return res.redirect('/admin/users');
  327. });
  328. });
  329. };
  330. actions.user.activate = function(req, res) {
  331. var id = req.params.id;
  332. User.findById(id, function(err, userData) {
  333. userData.statusActivate(function(err, userData) {
  334. if (err === null) {
  335. req.flash('successMessage', userData.name + 'さんのアカウントを承認しました');
  336. } else {
  337. req.flash('errorMessage', '更新に失敗しました。');
  338. debug(err, userData);
  339. }
  340. return res.redirect('/admin/users');
  341. });
  342. });
  343. };
  344. actions.user.suspend = function(req, res) {
  345. var id = req.params.id;
  346. User.findById(id, function(err, userData) {
  347. userData.statusSuspend(function(err, userData) {
  348. if (err === null) {
  349. req.flash('successMessage', userData.name + 'さんのアカウントを利用停止にしました');
  350. } else {
  351. req.flash('errorMessage', '更新に失敗しました。');
  352. debug(err, userData);
  353. }
  354. return res.redirect('/admin/users');
  355. });
  356. });
  357. };
  358. actions.user.remove = function(req, res) {
  359. var id = req.params.id;
  360. let username = '';
  361. return new Promise((resolve, reject) => {
  362. User.findById(id, (err, userData) => {
  363. username = userData.username;
  364. return resolve(userData);
  365. });
  366. })
  367. .then((userData) => {
  368. return new Promise((resolve, reject) => {
  369. userData.statusDelete((err, userData) => {
  370. if (err) {
  371. reject(err);
  372. }
  373. resolve(userData);
  374. });
  375. });
  376. })
  377. .then((userData) => {
  378. return Page.removePageByPath(`/user/${username}`)
  379. .then(() => userData);
  380. })
  381. .then((userData) => {
  382. req.flash('successMessage', `${username} さんのアカウントを削除しました`);
  383. return res.redirect('/admin/users');
  384. })
  385. .catch((err) => {
  386. req.flash('errorMessage', '削除に失敗しました。');
  387. return res.redirect('/admin/users');
  388. });
  389. };
  390. // これやったときの relation の挙動未確認
  391. actions.user.removeCompletely = function(req, res) {
  392. // ユーザーの物理削除
  393. var id = req.params.id;
  394. User.removeCompletelyById(id, function(err, removed) {
  395. if (err) {
  396. debug('Error while removing user.', err, id);
  397. req.flash('errorMessage', '完全な削除に失敗しました。');
  398. } else {
  399. req.flash('successMessage', '削除しました');
  400. }
  401. return res.redirect('/admin/users');
  402. });
  403. };
  404. // app.post('/_api/admin/users.resetPassword' , admin.api.usersResetPassword);
  405. actions.user.resetPassword = function(req, res) {
  406. const id = req.body.user_id;
  407. const User = crowi.model('User');
  408. User.resetPasswordByRandomString(id)
  409. .then(function(data) {
  410. data.user = User.filterToPublicFields(data.user);
  411. return res.json(ApiResponse.success(data));
  412. }).catch(function(err) {
  413. debug('Error on reseting password', err);
  414. return res.json(ApiResponse.error('Error'));
  415. });
  416. }
  417. actions.api = {};
  418. actions.api.appSetting = function(req, res) {
  419. var form = req.form.settingForm;
  420. if (req.form.isValid) {
  421. debug('form content', form);
  422. // mail setting ならここで validation
  423. if (form['mail:from']) {
  424. validateMailSetting(req, form, function(err, data) {
  425. debug('Error validate mail setting: ', err, data);
  426. if (err) {
  427. req.form.errors.push('SMTPを利用したテストメール送信に失敗しました。設定をみなおしてください。');
  428. return res.json({status: false, message: req.form.errors.join('\n')});
  429. }
  430. return saveSetting(req, res, form);
  431. });
  432. } else {
  433. return saveSetting(req, res, form);
  434. }
  435. } else {
  436. return res.json({status: false, message: req.form.errors.join('\n')});
  437. }
  438. };
  439. actions.api.securitySetting = function(req, res) {
  440. var form = req.form.settingForm;
  441. if (req.form.isValid) {
  442. debug('form content', form);
  443. return saveSetting(req, res, form);
  444. } else {
  445. return res.json({status: false, message: req.form.errors.join('\n')});
  446. }
  447. };
  448. actions.api.customizeSetting = function(req, res) {
  449. var form = req.form.settingForm;
  450. if (req.form.isValid) {
  451. debug('form content', form);
  452. return saveSetting(req, res, form);
  453. } else {
  454. return res.json({status: false, message: req.form.errors.join('\n')});
  455. }
  456. }
  457. // app.post('/_api/admin/notifications.add' , admin.api.notificationAdd);
  458. actions.api.notificationAdd = function(req, res) {
  459. var UpdatePost = crowi.model('UpdatePost');
  460. var pathPattern = req.body.pathPattern;
  461. var channel = req.body.channel;
  462. debug('notification.add', pathPattern, channel);
  463. UpdatePost.create(pathPattern, channel, req.user)
  464. .then(function(doc) {
  465. debug('Successfully save updatePost', doc);
  466. // fixme: うーん
  467. doc.creator = doc.creator._id.toString();
  468. return res.json(ApiResponse.success({updatePost: doc}));
  469. }).catch(function(err) {
  470. debug('Failed to save updatePost', err);
  471. return res.json(ApiResponse.error());
  472. });
  473. };
  474. // app.post('/_api/admin/notifications.remove' , admin.api.notificationRemove);
  475. actions.api.notificationRemove = function(req, res) {
  476. var UpdatePost = crowi.model('UpdatePost');
  477. var id = req.body.id;
  478. UpdatePost.remove(id)
  479. .then(function() {
  480. debug('Successfully remove updatePost');
  481. return res.json(ApiResponse.success({}));
  482. }).catch(function(err) {
  483. debug('Failed to remove updatePost', err);
  484. return res.json(ApiResponse.error());
  485. });
  486. };
  487. // app.get('/_api/admin/users.search' , admin.api.userSearch);
  488. actions.api.usersSearch = function(req, res) {
  489. const User = crowi.model('User');
  490. const email =req.query.email;
  491. User.findUsersByPartOfEmail(email, {})
  492. .then(users => {
  493. const result = {
  494. data: users
  495. };
  496. return res.json(ApiResponse.success(result));
  497. }).catch(err => {
  498. return res.json(ApiResponse.error());
  499. });
  500. };
  501. function saveSetting(req, res, form)
  502. {
  503. Config.updateNamespaceByArray('crowi', form, function(err, config) {
  504. Config.updateConfigCache('crowi', config);
  505. return res.json({status: true});
  506. });
  507. }
  508. function validateMailSetting(req, form, callback)
  509. {
  510. var mailer = crowi.mailer;
  511. var option = {
  512. host: form['mail:smtpHost'],
  513. port: form['mail:smtpPort'],
  514. };
  515. if (form['mail:smtpUser'] && form['mail:smtpPassword']) {
  516. option.auth = {
  517. user: form['mail:smtpUser'],
  518. pass: form['mail:smtpPassword'],
  519. };
  520. }
  521. if (option.port === 465) {
  522. option.secure = true;
  523. }
  524. var smtpClient = mailer.createSMTPClient(option);
  525. debug('mailer setup for validate SMTP setting', smtpClient);
  526. smtpClient.sendMail({
  527. to: req.user.email,
  528. subject: 'Wiki管理設定のアップデートによるメール通知',
  529. text: 'このメールは、WikiのSMTP設定のアップデートにより送信されています。'
  530. }, callback);
  531. }
  532. return actions;
  533. };