admin.js 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523
  1. module.exports = function(crowi, app) {
  2. 'use strict';
  3. var debug = require('debug')('crowi:routes:admin')
  4. , models = crowi.models
  5. , Page = models.Page
  6. , User = models.User
  7. , Config = models.Config
  8. , PluginUtils = require('../plugins/plugin-utils')
  9. , pluginUtils = new PluginUtils()
  10. , ApiResponse = require('../util/apiResponse')
  11. , MAX_PAGE_LIST = 5
  12. , actions = {};
  13. function createPager(total, limit, page, pagesCount, maxPageList) {
  14. const pager = {
  15. page: page,
  16. pagesCount: pagesCount,
  17. pages: [],
  18. total: total,
  19. previous: null,
  20. previousDots: false,
  21. next: null,
  22. nextDots: false,
  23. };
  24. if (page > 1) {
  25. pager.previous = page - 1;
  26. }
  27. if (page < pagesCount) {
  28. pager.next = page + 1;
  29. }
  30. let pagerMin = Math.max(1, Math.ceil(page - maxPageList/2));
  31. let pagerMax = Math.min(pagesCount, Math.floor(page + maxPageList/2));
  32. if (pagerMin === 1) {
  33. if (MAX_PAGE_LIST < pagesCount) {
  34. pagerMax = MAX_PAGE_LIST;
  35. } else {
  36. pagerMax = pagesCount;
  37. }
  38. }
  39. if (pagerMax === pagesCount) {
  40. if ((pagerMax - MAX_PAGE_LIST) < 1) {
  41. pagerMin = 1;
  42. } else {
  43. pagerMin = pagerMax - MAX_PAGE_LIST;
  44. }
  45. }
  46. pager.previousDots = null;
  47. if (pagerMin > 1) {
  48. pager.previousDots = true;
  49. }
  50. pager.nextDots = null;
  51. if (pagerMax < pagesCount) {
  52. pager.nextDots = true;
  53. }
  54. for (let i = pagerMin; i <= pagerMax; i++) {
  55. pager.pages.push(i);
  56. }
  57. return pager;
  58. }
  59. actions.index = function(req, res) {
  60. return res.render('admin/index');
  61. };
  62. // app.get('/admin/app' , admin.app.index);
  63. actions.app = {};
  64. actions.app.index = function(req, res) {
  65. var settingForm;
  66. settingForm = Config.setupCofigFormData('crowi', req.config);
  67. return res.render('admin/app', {
  68. settingForm: settingForm,
  69. plugins: pluginUtils.listPlugins(crowi.rootDir),
  70. });
  71. };
  72. actions.app.settingUpdate = function(req, res) {
  73. };
  74. // app.get('/admin/markdonw' , admin.markdonw.index);
  75. actions.markdown = {};
  76. actions.markdown.index = function(req, res) {
  77. var config = crowi.getConfig();
  78. var markdownSetting = Config.setupCofigFormData('markdown', config);
  79. return res.render('admin/markdown', {
  80. markdownSetting: markdownSetting,
  81. });
  82. };
  83. // app.post('/admin/markdown/lineBreaksSetting' , admin.markdown.lineBreaksSetting);
  84. actions.markdown.lineBreaksSetting = function(req, res) {
  85. var markdownSetting = req.form.markdownSetting;
  86. req.session.markdownSetting = markdownSetting;
  87. if (req.form.isValid) {
  88. Config.updateNamespaceByArray('markdown', markdownSetting, function(err, config) {
  89. Config.updateConfigCache('markdown', config);
  90. req.session.markdownSetting = null;
  91. req.flash('successMessage', ['Successfully updated!']);
  92. return res.redirect('/admin/markdown');
  93. });
  94. } else {
  95. req.flash('errorMessage', req.form.errors);
  96. return res.redirect('/admin/markdown');
  97. }
  98. };
  99. // app.get('/admin/customize' , admin.customize.index);
  100. actions.customize = {};
  101. actions.customize.index = function(req, res) {
  102. var settingForm;
  103. settingForm = Config.setupCofigFormData('crowi', req.config);
  104. return res.render('admin/customize', {
  105. settingForm: settingForm,
  106. });
  107. };
  108. // app.get('/admin/notification' , admin.notification.index);
  109. actions.notification = {};
  110. actions.notification.index = function(req, res) {
  111. var config = crowi.getConfig();
  112. var UpdatePost = crowi.model('UpdatePost');
  113. var slackSetting = Config.setupCofigFormData('notification', config);
  114. var hasSlackConfig = Config.hasSlackConfig(config);
  115. var hasSlackToken = Config.hasSlackToken(config);
  116. var slack = crowi.slack;
  117. var slackAuthUrl = '';
  118. if (!Config.hasSlackConfig(req.config)) {
  119. slackSetting['slack:clientId'] = '';
  120. slackSetting['slack:clientSecret'] = '';
  121. } else {
  122. slackAuthUrl = slack.getAuthorizeURL();
  123. }
  124. if (req.session.slackSetting) {
  125. slackSetting = req.session.slackSetting;
  126. req.session.slackSetting = null;
  127. }
  128. UpdatePost.findAll()
  129. .then(function(settings) {
  130. return res.render('admin/notification', {
  131. settings,
  132. slackSetting,
  133. hasSlackConfig,
  134. hasSlackToken,
  135. slackAuthUrl
  136. });
  137. });
  138. };
  139. // app.post('/admin/notification/slackSetting' , admin.notification.slackSetting);
  140. actions.notification.slackSetting = function(req, res) {
  141. var slackSetting = req.form.slackSetting;
  142. req.session.slackSetting = slackSetting;
  143. if (req.form.isValid) {
  144. Config.updateNamespaceByArray('notification', slackSetting, function(err, config) {
  145. Config.updateConfigCache('notification', config);
  146. req.session.slackSetting = null;
  147. crowi.setupSlack().then(function() {
  148. return res.redirect('/admin/notification');
  149. });
  150. });
  151. } else {
  152. req.flash('errorMessage', req.form.errors);
  153. return res.redirect('/admin/notification');
  154. }
  155. };
  156. // app.get('/admin/notification/slackAuth' , admin.notification.slackauth);
  157. actions.notification.slackAuth = function(req, res) {
  158. var code = req.query.code;
  159. var config = crowi.getConfig();
  160. if (!code || !Config.hasSlackConfig(req.config)) {
  161. return res.redirect('/admin/notification');
  162. }
  163. var slack = crowi.slack;
  164. var bot = slack.createBot();
  165. bot.api.oauth.access({code}, function(err, data) {
  166. debug('oauth response', err, data);
  167. if (!data.ok || !data.access_token) {
  168. req.flash('errorMessage', ['Failed to fetch access_token. Please do connect again.']);
  169. return res.redirect('/admin/notification');
  170. } else {
  171. Config.updateNamespaceByArray('notification', {'slack:token': data.access_token}, function(err, config) {
  172. if (err) {
  173. req.flash('errorMessage', ['Failed to save access_token. Please try again.']);
  174. } else {
  175. Config.updateConfigCache('notification', config);
  176. req.flash('successMessage', ['Successfully Connected!']);
  177. }
  178. slack.createBot();
  179. return res.redirect('/admin/notification');
  180. });
  181. }
  182. });
  183. };
  184. actions.search = {};
  185. actions.search.index = function(req, res) {
  186. var search = crowi.getSearcher();
  187. if (!search) {
  188. return res.redirect('/admin');
  189. }
  190. return res.render('admin/search', {
  191. });
  192. };
  193. actions.search.buildIndex = function(req, res) {
  194. var search = crowi.getSearcher();
  195. if (!search) {
  196. return res.redirect('/admin');
  197. }
  198. Promise.resolve().then(function() {
  199. return new Promise(function(resolve, reject) {
  200. search.deleteIndex()
  201. .then(function(data) {
  202. debug('Index deleted.');
  203. resolve();
  204. }).catch(function(err) {
  205. debug('Delete index Error, but if it is initialize, its ok.', err);
  206. resolve();
  207. });
  208. });
  209. }).then(function() {
  210. search.buildIndex()
  211. .then(function(data) {
  212. if (!data.errors) {
  213. debug('Index created.');
  214. }
  215. return search.addAllPages();
  216. })
  217. .then(function(data) {
  218. if (!data.errors) {
  219. debug('Data is successfully indexed.');
  220. } else {
  221. debug('Data index error.', data.errors);
  222. }
  223. })
  224. .catch(function(err) {
  225. debug('Error', err);
  226. });
  227. req.flash('successMessage', 'Now re-building index ... this takes a while.');
  228. return res.redirect('/admin/search');
  229. });
  230. };
  231. actions.user = {};
  232. actions.user.index = function(req, res) {
  233. var page = parseInt(req.query.page) || 1;
  234. User.findUsersWithPagination({page: page}, function(err, result) {
  235. const pager = createPager(result.total, result.limit, result.page, result.pages, MAX_PAGE_LIST);
  236. return res.render('admin/users', {
  237. users: result.docs,
  238. pager: pager
  239. });
  240. });
  241. };
  242. actions.user.invite = function(req, res) {
  243. var form = req.form.inviteForm;
  244. var toSendEmail = form.sendEmail || false;
  245. if (req.form.isValid) {
  246. User.createUsersByInvitation(form.emailList.split('\n'), toSendEmail, function(err, userList) {
  247. if (err) {
  248. req.flash('errorMessage', req.form.errors.join('\n'));
  249. } else {
  250. req.flash('createdUser', userList);
  251. }
  252. return res.redirect('/admin/users');
  253. });
  254. } else {
  255. req.flash('errorMessage', req.form.errors.join('\n'));
  256. return res.redirect('/admin/users');
  257. }
  258. };
  259. actions.user.makeAdmin = function(req, res) {
  260. var id = req.params.id;
  261. User.findById(id, function(err, userData) {
  262. userData.makeAdmin(function(err, userData) {
  263. if (err === null) {
  264. req.flash('successMessage', userData.name + 'さんのアカウントを管理者に設定しました。');
  265. } else {
  266. req.flash('errorMessage', '更新に失敗しました。');
  267. debug(err, userData);
  268. }
  269. return res.redirect('/admin/users');
  270. });
  271. });
  272. };
  273. actions.user.removeFromAdmin = function(req, res) {
  274. var id = req.params.id;
  275. User.findById(id, function(err, userData) {
  276. userData.removeFromAdmin(function(err, userData) {
  277. if (err === null) {
  278. req.flash('successMessage', userData.name + 'さんのアカウントを管理者から外しました。');
  279. } else {
  280. req.flash('errorMessage', '更新に失敗しました。');
  281. debug(err, userData);
  282. }
  283. return res.redirect('/admin/users');
  284. });
  285. });
  286. };
  287. actions.user.activate = function(req, res) {
  288. var id = req.params.id;
  289. User.findById(id, function(err, userData) {
  290. userData.statusActivate(function(err, userData) {
  291. if (err === null) {
  292. req.flash('successMessage', userData.name + 'さんのアカウントを承認しました');
  293. } else {
  294. req.flash('errorMessage', '更新に失敗しました。');
  295. debug(err, userData);
  296. }
  297. return res.redirect('/admin/users');
  298. });
  299. });
  300. };
  301. actions.user.suspend = function(req, res) {
  302. var id = req.params.id;
  303. User.findById(id, function(err, userData) {
  304. userData.statusSuspend(function(err, userData) {
  305. if (err === null) {
  306. req.flash('successMessage', userData.name + 'さんのアカウントを利用停止にしました');
  307. } else {
  308. req.flash('errorMessage', '更新に失敗しました。');
  309. debug(err, userData);
  310. }
  311. return res.redirect('/admin/users');
  312. });
  313. });
  314. };
  315. actions.user.remove = function(req, res) {
  316. // 未実装
  317. return res.redirect('/admin/users');
  318. };
  319. // これやったときの relation の挙動未確認
  320. actions.user.removeCompletely = function(req, res) {
  321. // ユーザーの物理削除
  322. var id = req.params.id;
  323. User.removeCompletelyById(id, function(err, removed) {
  324. if (err) {
  325. debug('Error while removing user.', err, id);
  326. req.flash('errorMessage', '完全な削除に失敗しました。');
  327. } else {
  328. req.flash('successMessage', '削除しました');
  329. }
  330. return res.redirect('/admin/users');
  331. });
  332. };
  333. // app.post('/_api/admin/users.resetPassword' , admin.api.usersResetPassword);
  334. actions.user.resetPassword = function(req, res) {
  335. const id = req.body.user_id;
  336. const User = crowi.model('User');
  337. User.resetPasswordByRandomString(id)
  338. .then(function(data) {
  339. data.user = User.filterToPublicFields(data.user);
  340. return res.json(ApiResponse.success(data));
  341. }).catch(function(err) {
  342. debug('Error on reseting password', err);
  343. return res.json(ApiResponse.error('Error'));
  344. });
  345. }
  346. actions.api = {};
  347. actions.api.appSetting = function(req, res) {
  348. var form = req.form.settingForm;
  349. if (req.form.isValid) {
  350. debug('form content', form);
  351. // mail setting ならここで validation
  352. if (form['mail:from']) {
  353. validateMailSetting(req, form, function(err, data) {
  354. debug('Error validate mail setting: ', err, data);
  355. if (err) {
  356. req.form.errors.push('SMTPを利用したテストメール送信に失敗しました。設定をみなおしてください。');
  357. return res.json({status: false, message: req.form.errors.join('\n')});
  358. }
  359. return saveSetting(req, res, form);
  360. });
  361. } else {
  362. return saveSetting(req, res, form);
  363. }
  364. } else {
  365. return res.json({status: false, message: req.form.errors.join('\n')});
  366. }
  367. };
  368. actions.api.customizeSetting = function(req, res) {
  369. var form = req.form.settingForm;
  370. if (req.form.isValid) {
  371. debug('form content', form);
  372. return saveSetting(req, res, form);
  373. } else {
  374. return res.json({status: false, message: req.form.errors.join('\n')});
  375. }
  376. }
  377. // app.post('/_api/admin/notifications.add' , admin.api.notificationAdd);
  378. actions.api.notificationAdd = function(req, res) {
  379. var UpdatePost = crowi.model('UpdatePost');
  380. var pathPattern = req.body.pathPattern;
  381. var channel = req.body.channel;
  382. debug('notification.add', pathPattern, channel);
  383. UpdatePost.create(pathPattern, channel, req.user)
  384. .then(function(doc) {
  385. debug('Successfully save updatePost', doc);
  386. // fixme: うーん
  387. doc.creator = doc.creator._id.toString();
  388. return res.json(ApiResponse.success({updatePost: doc}));
  389. }).catch(function(err) {
  390. debug('Failed to save updatePost', err);
  391. return res.json(ApiResponse.error());
  392. });
  393. };
  394. // app.post('/_api/admin/notifications.remove' , admin.api.notificationRemove);
  395. actions.api.notificationRemove = function(req, res) {
  396. var UpdatePost = crowi.model('UpdatePost');
  397. var id = req.body.id;
  398. UpdatePost.remove(id)
  399. .then(function() {
  400. debug('Successfully remove updatePost');
  401. return res.json(ApiResponse.success({}));
  402. }).catch(function(err) {
  403. debug('Failed to remove updatePost', err);
  404. return res.json(ApiResponse.error());
  405. });
  406. };
  407. // app.get('/_api/admin/users.search' , admin.api.userSearch);
  408. actions.api.usersSearch = function(req, res) {
  409. const User = crowi.model('User');
  410. const email =req.query.email;
  411. User.findUsersByPartOfEmail(email, {})
  412. .then(users => {
  413. const result = {
  414. data: users
  415. };
  416. return res.json(ApiResponse.success(result));
  417. }).catch(err => {
  418. return res.json(ApiResponse.error());
  419. });
  420. };
  421. function saveSetting(req, res, form)
  422. {
  423. Config.updateNamespaceByArray('crowi', form, function(err, config) {
  424. Config.updateConfigCache('crowi', config);
  425. return res.json({status: true});
  426. });
  427. }
  428. function validateMailSetting(req, form, callback)
  429. {
  430. var mailer = crowi.mailer;
  431. var option = {
  432. host: form['mail:smtpHost'],
  433. port: form['mail:smtpPort'],
  434. };
  435. if (form['mail:smtpUser'] && form['mail:smtpPassword']) {
  436. option.auth = {
  437. user: form['mail:smtpUser'],
  438. pass: form['mail:smtpPassword'],
  439. };
  440. }
  441. if (option.port === 465) {
  442. option.secure = true;
  443. }
  444. var smtpClient = mailer.createSMTPClient(option);
  445. debug('mailer setup for validate SMTP setting', smtpClient);
  446. smtpClient.sendMail({
  447. to: req.user.email,
  448. subject: 'Wiki管理設定のアップデートによるメール通知',
  449. text: 'このメールは、WikiのSMTP設定のアップデートにより送信されています。'
  450. }, callback);
  451. }
  452. return actions;
  453. };