middlewares.js 5.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171
  1. // don't add any more middlewares to this file.
  2. // all new middlewares should be an independent file under /server/middlewares
  3. // eslint-disable-next-line no-unused-vars
  4. const logger = require('@alias/logger')('growi:lib:middlewares');
  5. const { formatDistanceStrict } = require('date-fns');
  6. const pathUtils = require('growi-commons').pathUtils;
  7. const md5 = require('md5');
  8. const entities = require('entities');
  9. module.exports = (crowi) => {
  10. const { configManager } = crowi;
  11. const middlewares = {};
  12. middlewares.csrfKeyGenerator = function() {
  13. return function(req, res, next) {
  14. const csrfKey = (req.session && req.session.id) || 'anon';
  15. if (req.csrfToken === null) {
  16. req.csrfToken = crowi.getTokens().create(csrfKey);
  17. }
  18. next();
  19. };
  20. };
  21. middlewares.swigFunctions = function() {
  22. return function(req, res, next) {
  23. require('../util/swigFunctions')(crowi, req, res.locals);
  24. next();
  25. };
  26. };
  27. middlewares.swigFilters = function(swig) {
  28. // define a function for Gravatar
  29. const generateGravatarSrc = function(user) {
  30. const email = user.email || '';
  31. const hash = md5(email.trim().toLowerCase());
  32. return `https://gravatar.com/avatar/${hash}`;
  33. };
  34. // define a function for uploaded picture
  35. const getUploadedPictureSrc = function(user) {
  36. if (user.image) {
  37. return user.image;
  38. }
  39. if (user.imageAttachment != null) {
  40. return user.imageAttachment.filePathProxied;
  41. }
  42. return '/images/icons/user.svg';
  43. };
  44. return function(req, res, next) {
  45. swig.setFilter('path2name', (string) => {
  46. const name = string.replace(/(\/)$/, '');
  47. if (name.match(/.+\/([^/]+\/\d{4}\/\d{2}\/\d{2})$/)) { // /.../hoge/YYYY/MM/DD 形式のページ
  48. return name.replace(/.+\/([^/]+\/\d{4}\/\d{2}\/\d{2})$/, '$1');
  49. }
  50. if (name.match(/.+\/([^/]+\/\d{4}\/\d{2})$/)) { // /.../hoge/YYYY/MM 形式のページ
  51. return name.replace(/.+\/([^/]+\/\d{4}\/\d{2})$/, '$1');
  52. }
  53. if (name.match(/.+\/([^/]+\/\d{4})$/)) { // /.../hoge/YYYY 形式のページ
  54. return name.replace(/.+\/([^/]+\/\d{4})$/, '$1');
  55. }
  56. return name.replace(/.+\/(.+)?$/, '$1'); // ページの末尾を拾う
  57. });
  58. swig.setFilter('normalizeDateInPath', (path) => {
  59. const patterns = [
  60. [/20(\d{2})(\d{2})(\d{2})(.+)/g, '20$1/$2/$3/$4'],
  61. [/20(\d{2})(\d{2})(\d{2})/g, '20$1/$2/$3'],
  62. [/20(\d{2})(\d{2})(.+)/g, '20$1/$2/$3'],
  63. [/20(\d{2})(\d{2})/g, '20$1/$2'],
  64. [/20(\d{2})_(\d{1,2})_(\d{1,2})_?(.+)/g, '20$1/$2/$3/$4'],
  65. [/20(\d{2})_(\d{1,2})_(\d{1,2})/g, '20$1/$2/$3'],
  66. [/20(\d{2})_(\d{1,2})_?(.+)/g, '20$1/$2/$3'],
  67. [/20(\d{2})_(\d{1,2})/g, '20$1/$2'],
  68. ];
  69. for (let i = 0; i < patterns.length; i++) {
  70. const mat = patterns[i][0];
  71. const rep = patterns[i][1];
  72. if (path.match(mat)) {
  73. return path.replace(mat, rep);
  74. }
  75. }
  76. return path;
  77. });
  78. swig.setFilter('datetz', (input, format) => {
  79. // timezone
  80. const swigFilters = require('swig-templates/lib/filters');
  81. return swigFilters.date(input, format, crowi.appService.getTzoffset());
  82. });
  83. swig.setFilter('dateDistance', (input) => {
  84. return formatDistanceStrict(input, new Date());
  85. });
  86. swig.setFilter('nl2br', (string) => {
  87. return string
  88. .replace(/\n/g, '<br>');
  89. });
  90. swig.setFilter('removeTrailingSlash', (string) => {
  91. return pathUtils.removeTrailingSlash(string);
  92. });
  93. swig.setFilter('addTrailingSlash', (string) => {
  94. return pathUtils.addTrailingSlash(string);
  95. });
  96. swig.setFilter('presentation', (string) => {
  97. // 手抜き
  98. return string
  99. .replace(/\s(https?.+(jpe?g|png|gif))\s/, '\n\n\n![]($1)\n\n\n');
  100. });
  101. swig.setFilter('gravatar', generateGravatarSrc);
  102. swig.setFilter('uploadedpicture', getUploadedPictureSrc);
  103. swig.setFilter('picture', (user) => {
  104. if (!user) {
  105. return '/images/icons/user.svg';
  106. }
  107. if (user.isGravatarEnabled === true) {
  108. return generateGravatarSrc(user);
  109. }
  110. return getUploadedPictureSrc(user);
  111. });
  112. swig.setFilter('encodeHTML', (string) => {
  113. return entities.encodeHTML(string);
  114. });
  115. swig.setFilter('preventXss', (string) => {
  116. return crowi.xss.process(string);
  117. });
  118. swig.setFilter('slice', (list, start, end) => {
  119. return list.slice(start, end);
  120. });
  121. next();
  122. };
  123. };
  124. middlewares.awsEnabled = function() {
  125. return function(req, res, next) {
  126. if ((configManager.getConfig('crowi', 'aws:s3Region') !== '' || this.configManager.getConfig('crowi', 'aws:s3CustomEndpoint') !== '')
  127. && configManager.getConfig('crowi', 'aws:s3Bucket') !== ''
  128. && configManager.getConfig('crowi', 'aws:s3AccessKeyId') !== ''
  129. && configManager.getConfig('crowi', 'aws:s3SecretAccessKey') !== '') {
  130. req.flash('globalError', req.t('message.aws_sttings_required'));
  131. return res.redirect('/');
  132. }
  133. return next();
  134. };
  135. };
  136. return middlewares;
  137. };