middlewares.js 4.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172
  1. var debug = require('debug')('crowi:lib:middlewares');
  2. exports.loginChecker = function(crowi, app) {
  3. return function(req, res, next) {
  4. var User = crowi.model('User');
  5. // session に user object が入ってる
  6. if (req.session.user && '_id' in req.session.user) {
  7. User.findById(req.session.user._id, function(err, userData) {
  8. if (err) {
  9. next();
  10. } else {
  11. req.user = req.session.user = userData;
  12. res.locals.user = req.user;
  13. next();
  14. }
  15. });
  16. } else {
  17. req.user = req.session.user = false;
  18. res.locals.user = req.user;
  19. next();
  20. }
  21. };
  22. };
  23. exports.swigFunctions = function(crowi, app) {
  24. return function(req, res, next) {
  25. require('../util/swigFunctions')(crowi, app, res.locals);
  26. next();
  27. };
  28. };
  29. exports.swigFilters = function(app, swig) {
  30. return function(req, res, next) {
  31. swig.setFilter('path2name', function(string) {
  32. var name = string.replace(/(\/)$/, '');
  33. if (name.match(/.+\/([^/]+\/\d{4}\/\d{2}\/\d{2})$/)) { // /.../hoge/YYYY/MM/DD 形式のページ
  34. return name.replace(/.+\/([^/]+\/\d{4}\/\d{2}\/\d{2})$/, '$1');
  35. }
  36. if (name.match(/.+\/([^/]+\/\d{4}\/\d{2})$/)) { // /.../hoge/YYYY/MM 形式のページ
  37. return name.replace(/.+\/([^/]+\/\d{4}\/\d{2})$/, '$1');
  38. }
  39. if (name.match(/.+\/([^/]+\/\d{4})$/)) { // /.../hoge/YYYY 形式のページ
  40. return name.replace(/.+\/([^/]+\/\d{4})$/, '$1');
  41. }
  42. return name.replace(/.+\/(.+)?$/, '$1'); // ページの末尾を拾う
  43. });
  44. swig.setFilter('datetz', function(input, format) {
  45. // timezone
  46. var swigFilters = require('swig/lib/filters');
  47. return swigFilters.date(input, format, app.get('tzoffset'));
  48. });
  49. swig.setFilter('presentation', function(string) {
  50. // 手抜き
  51. return string
  52. .replace(/[\n]+#/g, '\n\n\n#')
  53. .replace(/\s(https?.+(jpe?g|png|gif))\s/, '\n\n\n![]($1)\n\n\n');
  54. });
  55. swig.setFilter('picture', function(user) {
  56. if (!user) {
  57. return '';
  58. }
  59. user.fbId = user.userId; // migration
  60. if (user.image && user.image != '/images/userpicture.png') {
  61. return user.image;
  62. } else if (user.fbId) {
  63. return '//graph.facebook.com/' + user.fbId + '/picture?size=square';
  64. } else {
  65. return '/images/userpicture.png';
  66. }
  67. });
  68. next();
  69. };
  70. };
  71. exports.adminRequired = function() {
  72. return function(req, res, next) {
  73. if (req.user && '_id' in req.user) {
  74. if (req.user.admin) {
  75. next();
  76. return;
  77. }
  78. return res.redirect('/');
  79. }
  80. return res.redirect('/login');
  81. };
  82. };
  83. exports.loginRequired = function(crowi, app) {
  84. return function(req, res, next) {
  85. var User = crowi.model('User')
  86. if (req.user && '_id' in req.user) {
  87. if (req.user.status === User.STATUS_ACTIVE) {
  88. // Active の人だけ先に進める
  89. return next();
  90. } else if (req.user.status === User.STATUS_REGISTERED) {
  91. return res.redirect('/login/error/registered');
  92. } else if (req.user.status === User.STATUS_SUSPENDED) {
  93. return res.redirect('/login/error/suspended');
  94. } else if (req.user.status === User.STATUS_INVITED) {
  95. return res.redirect('/login/invited');
  96. }
  97. }
  98. req.session.jumpTo = req.originalUrl;
  99. return res.redirect('/login');
  100. };
  101. };
  102. exports.accessTokenParser = function(crowi, app) {
  103. return function(req, res, next) {
  104. var accessToken = req.query.access_token;
  105. if (!accessToken) {
  106. return next();
  107. }
  108. var User = crowi.model('User')
  109. User.findUserByApiToken(accessToken)
  110. .then(function(userData) {
  111. req.user = userData;
  112. next();
  113. }).catch(function(err) {
  114. next();
  115. });
  116. };
  117. };
  118. // this is for Installer
  119. exports.applicationNotInstalled = function() {
  120. return function(req, res, next) {
  121. var config = req.config;
  122. if (Object.keys(config.crowi).length !== 1) {
  123. return res.render('500', { error: 'Application already installed.' });
  124. }
  125. return next();
  126. };
  127. };
  128. exports.applicationInstalled = function() {
  129. return function(req, res, next) {
  130. var config = req.config;
  131. if (Object.keys(config.crowi).length === 1) { // app:url is set by process
  132. return res.redirect('/installer');
  133. }
  134. return next();
  135. };
  136. };
  137. exports.awsEnabled = function() {
  138. return function (req, res, next) {
  139. var config = req.config;
  140. if (config.crowi['aws:region'] !== '' && config.crowi['aws:bucket'] !== '' && config.crowi['aws:accessKeyId'] !== '' && config.crowi['aws:secretAccessKey'] !== '') {
  141. req.flash('globalError', 'AWS settings required to use this function. Please ask the administrator.');
  142. return res.redirect('/');
  143. }
  144. return next();
  145. };
  146. };