admin.js 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471
  1. module.exports = function(crowi, app) {
  2. 'use strict';
  3. var debug = require('debug')('crowi:routes:admin')
  4. , models = crowi.models
  5. , Page = models.Page
  6. , User = models.User
  7. , Config = models.Config
  8. , ApiResponse = require('../util/apiResponse')
  9. , MAX_PAGE_LIST = 5
  10. , actions = {};
  11. function createPager(currentPage, pageCount, itemCount, maxPageList) {
  12. var pager = {};
  13. pager.currentPage = currentPage;
  14. pager.pageCount = pageCount;
  15. pager.itemCount = itemCount;
  16. pager.previous = null;
  17. if (currentPage > 1) {
  18. pager.previous = currentPage - 1;
  19. }
  20. pager.next = null;
  21. if (currentPage < pageCount) {
  22. pager.next = currentPage + 1;
  23. }
  24. pager.pages = [];
  25. var pagerMin = Math.max(1, Math.ceil(currentPage - maxPageList/2));
  26. var pagerMax = Math.min(pageCount, Math.floor(currentPage + maxPageList/2));
  27. if (pagerMin == 1) {
  28. if (MAX_PAGE_LIST < pageCount) {
  29. pagerMax = MAX_PAGE_LIST;
  30. } else {
  31. pagerMax = pageCount;
  32. }
  33. }
  34. if (pagerMax == pageCount) {
  35. if ((pagerMax - MAX_PAGE_LIST) < 1) {
  36. pagerMin = 1;
  37. } else {
  38. pagerMin = pagerMax - MAX_PAGE_LIST;
  39. }
  40. }
  41. pager.previousDots = null;
  42. if (pagerMin > 1) {
  43. pager.previousDots = true;
  44. }
  45. pager.nextDots = null;
  46. if (pagerMax < pageCount) {
  47. pager.nextDots = true;
  48. }
  49. for (var i = pagerMin;
  50. i <= pagerMax;
  51. i++) {
  52. pager.pages.push(i);
  53. }
  54. return pager;
  55. }
  56. actions.index = function(req, res) {
  57. return res.render('admin/index');
  58. };
  59. actions.app = {};
  60. actions.app.index = function(req, res) {
  61. var settingForm;
  62. settingForm = Config.setupCofigFormData('crowi', req.config);
  63. return res.render('admin/app', {
  64. settingForm: settingForm,
  65. });
  66. };
  67. actions.app.settingUpdate = function(req, res) {
  68. };
  69. // app.get('/admin/notification' , admin.notification.index);
  70. actions.notification = {};
  71. actions.notification.index = function(req, res) {
  72. var config = crowi.getConfig();
  73. var UpdatePost = crowi.model('UpdatePost');
  74. var slackSetting = Config.setupCofigFormData('notification', config);
  75. var hasSlackConfig = Config.hasSlackConfig(config);
  76. var hasSlackToken = Config.hasSlackToken(config);
  77. var slack = crowi.slack;
  78. var slackAuthUrl = '';
  79. if (!Config.hasSlackConfig(req.config)) {
  80. slackSetting['slack:clientId'] = '';
  81. slackSetting['slack:clientSecret'] = '';
  82. } else {
  83. slackAuthUrl = slack.getAuthorizeURL();
  84. }
  85. if (req.session.slackSetting) {
  86. slackSetting = req.session.slackSetting;
  87. req.session.slackSetting = null;
  88. }
  89. UpdatePost.findAll()
  90. .then(function(settings) {
  91. return res.render('admin/notification', {
  92. settings,
  93. slackSetting,
  94. hasSlackConfig,
  95. hasSlackToken,
  96. slackAuthUrl
  97. });
  98. });
  99. };
  100. // app.post('/admin/notification/slackSetting' , admin.notification.slackauth);
  101. actions.notification.slackSetting = function(req, res) {
  102. var slackSetting = req.form.slackSetting;
  103. req.session.slackSetting = slackSetting;
  104. if (req.form.isValid) {
  105. Config.updateNamespaceByArray('notification', slackSetting, function(err, config) {
  106. Config.updateConfigCache('notification', config);
  107. req.session.slackSetting = null;
  108. crowi.setupSlack().then(function() {
  109. return res.redirect('/admin/notification');
  110. });
  111. });
  112. } else {
  113. req.flash('errorMessage', req.form.errors);
  114. return res.redirect('/admin/notification');
  115. }
  116. };
  117. // app.get('/admin/notification/slackAuth' , admin.notification.slackauth);
  118. actions.notification.slackAuth = function(req, res) {
  119. var code = req.query.code;
  120. var config = crowi.getConfig();
  121. if (!code || !Config.hasSlackConfig(req.config)) {
  122. return res.redirect('/admin/notification');
  123. }
  124. var slack = crowi.slack;
  125. var bot = slack.createBot();
  126. bot.api.oauth.access({code}, function(err, data) {
  127. debug('oauth response', err, data);
  128. if (!data.ok || !data.access_token) {
  129. req.flash('errorMessage', ['Failed to fetch access_token. Please do connect again.']);
  130. return res.redirect('/admin/notification');
  131. } else {
  132. Config.updateNamespaceByArray('notification', {'slack:token': data.access_token}, function(err, config) {
  133. if (err) {
  134. req.flash('errorMessage', ['Failed to save access_token. Please try again.']);
  135. } else {
  136. Config.updateConfigCache('notification', config);
  137. req.flash('successMessage', ['Successfully Connected!']);
  138. }
  139. slack.createBot();
  140. return res.redirect('/admin/notification');
  141. });
  142. }
  143. });
  144. };
  145. actions.search = {};
  146. actions.search.index = function(req, res) {
  147. var search = crowi.getSearcher();
  148. if (!search) {
  149. return res.redirect('/admin');
  150. }
  151. return res.render('admin/search', {
  152. });
  153. };
  154. actions.search.buildIndex = function(req, res) {
  155. var search = crowi.getSearcher();
  156. if (!search) {
  157. return res.redirect('/admin');
  158. }
  159. Promise.resolve().then(function() {
  160. return new Promise(function(resolve, reject) {
  161. search.deleteIndex()
  162. .then(function(data) {
  163. debug('Index deleted.');
  164. resolve();
  165. }).catch(function(err) {
  166. debug('Delete index Error, but if it is initialize, its ok.', err);
  167. resolve();
  168. });
  169. });
  170. }).then(function() {
  171. search.buildIndex()
  172. .then(function(data) {
  173. if (!data.errors) {
  174. debug('Index created.');
  175. }
  176. return search.addAllPages();
  177. })
  178. .then(function(data) {
  179. if (!data.errors) {
  180. debug('Data is successfully indexed.');
  181. } else {
  182. debug('Data index error.', data);
  183. }
  184. //return res.json(ApiResponse.success({}));
  185. req.flash('successMessage', 'Successfully re-build index.');
  186. return res.redirect('/admin/search');
  187. })
  188. .catch(function(err) {
  189. debug('Error', err);
  190. req.flash('errorMessage', 'Error');
  191. return res.redirect('/admin/search');
  192. //return res.json(ApiResponse.error(err));
  193. });
  194. });
  195. };
  196. actions.user = {};
  197. actions.user.index = function(req, res) {
  198. var page = parseInt(req.query.page) || 1;
  199. User.findUsersWithPagination({page: page}, function(err, users, pageCount, itemCount) {
  200. var pager = createPager(page, pageCount, itemCount, MAX_PAGE_LIST);
  201. return res.render('admin/users', {
  202. users: users,
  203. pager: pager
  204. });
  205. });
  206. };
  207. actions.user.invite = function(req, res) {
  208. var form = req.form.inviteForm;
  209. var toSendEmail = form.sendEmail || false;
  210. if (req.form.isValid) {
  211. User.createUsersByInvitation(form.emailList.split('\n'), toSendEmail, function(err, userList) {
  212. if (err) {
  213. req.flash('errorMessage', req.form.errors.join('\n'));
  214. } else {
  215. req.flash('createdUser', userList);
  216. }
  217. return res.redirect('/admin/users');
  218. });
  219. } else {
  220. req.flash('errorMessage', req.form.errors.join('\n'));
  221. return res.redirect('/admin/users');
  222. }
  223. };
  224. actions.user.makeAdmin = function(req, res) {
  225. var id = req.params.id;
  226. User.findById(id, function(err, userData) {
  227. userData.makeAdmin(function(err, userData) {
  228. if (err === null) {
  229. req.flash('successMessage', userData.name + 'さんのアカウントを管理者に設定しました。');
  230. } else {
  231. req.flash('errorMessage', '更新に失敗しました。');
  232. debug(err, userData);
  233. }
  234. return res.redirect('/admin/users');
  235. });
  236. });
  237. };
  238. actions.user.removeFromAdmin = function(req, res) {
  239. var id = req.params.id;
  240. User.findById(id, function(err, userData) {
  241. userData.removeFromAdmin(function(err, userData) {
  242. if (err === null) {
  243. req.flash('successMessage', userData.name + 'さんのアカウントを管理者から外しました。');
  244. } else {
  245. req.flash('errorMessage', '更新に失敗しました。');
  246. debug(err, userData);
  247. }
  248. return res.redirect('/admin/users');
  249. });
  250. });
  251. };
  252. actions.user.activate = function(req, res) {
  253. var id = req.params.id;
  254. User.findById(id, function(err, userData) {
  255. userData.statusActivate(function(err, userData) {
  256. if (err === null) {
  257. req.flash('successMessage', userData.name + 'さんのアカウントを承認しました');
  258. } else {
  259. req.flash('errorMessage', '更新に失敗しました。');
  260. debug(err, userData);
  261. }
  262. return res.redirect('/admin/users');
  263. });
  264. });
  265. };
  266. actions.user.suspend = function(req, res) {
  267. var id = req.params.id;
  268. User.findById(id, function(err, userData) {
  269. userData.statusSuspend(function(err, userData) {
  270. if (err === null) {
  271. req.flash('successMessage', userData.name + 'さんのアカウントを利用停止にしました');
  272. } else {
  273. req.flash('errorMessage', '更新に失敗しました。');
  274. debug(err, userData);
  275. }
  276. return res.redirect('/admin/users');
  277. });
  278. });
  279. };
  280. actions.user.remove = function(req, res) {
  281. // 未実装
  282. return res.redirect('/admin/users');
  283. };
  284. // これやったときの relation の挙動未確認
  285. actions.user.removeCompletely = function(req, res) {
  286. // ユーザーの物理削除
  287. var id = req.params.id;
  288. User.removeCompletelyById(id, function(err, removed) {
  289. if (err) {
  290. debug('Error while removing user.', err, id);
  291. req.flash('errorMessage', '完全な削除に失敗しました。');
  292. } else {
  293. req.flash('successMessage', '削除しました');
  294. }
  295. return res.redirect('/admin/users');
  296. });
  297. };
  298. // app.post('/_api/admin/users.resetPassword' , admin.api.usersResetPassword);
  299. actions.user.resetPassword = function(req, res) {
  300. const id = req.body.user_id;
  301. const User = crowi.model('User');
  302. User.resetPasswordByRandomString(id)
  303. .then(function(data) {
  304. data.user = User.filterToPublicFields(data.user);
  305. return res.json(ApiResponse.success(data));
  306. }).catch(function(err) {
  307. debug('Error on reseting password', err);
  308. return res.json(ApiResponse.error('Error'));
  309. });
  310. }
  311. actions.api = {};
  312. actions.api.appSetting = function(req, res) {
  313. var form = req.form.settingForm;
  314. if (req.form.isValid) {
  315. debug('form content', form);
  316. // mail setting ならここで validation
  317. if (form['mail:from']) {
  318. validateMailSetting(req, form, function(err, data) {
  319. debug('Error validate mail setting: ', err, data);
  320. if (err) {
  321. req.form.errors.push('SMTPを利用したテストメール送信に失敗しました。設定をみなおしてください。');
  322. return res.json({status: false, message: req.form.errors.join('\n')});
  323. }
  324. return saveSetting(req, res, form);
  325. });
  326. } else {
  327. return saveSetting(req, res, form);
  328. }
  329. } else {
  330. return res.json({status: false, message: req.form.errors.join('\n')});
  331. }
  332. };
  333. // app.post('/_api/admin/notifications.add' , admin.api.notificationAdd);
  334. actions.api.notificationAdd = function(req, res) {
  335. var UpdatePost = crowi.model('UpdatePost');
  336. var pathPattern = req.body.pathPattern;
  337. var channel = req.body.channel;
  338. debug('notification.add', pathPattern, channel);
  339. UpdatePost.create(pathPattern, channel, req.user)
  340. .then(function(doc) {
  341. debug('Successfully save updatePost', doc);
  342. // fixme: うーん
  343. doc.creator = doc.creator._id.toString();
  344. return res.json(ApiResponse.success({updatePost: doc}));
  345. }).catch(function(err) {
  346. debug('Failed to save updatePost', err);
  347. return res.json(ApiResponse.error());
  348. });
  349. };
  350. // app.post('/_api/admin/notifications.remove' , admin.api.notificationRemove);
  351. actions.api.notificationRemove = function(req, res) {
  352. var UpdatePost = crowi.model('UpdatePost');
  353. var id = req.body.id;
  354. UpdatePost.remove(id)
  355. .then(function() {
  356. debug('Successfully remove updatePost');
  357. return res.json(ApiResponse.success({}));
  358. }).catch(function(err) {
  359. debug('Failed to remove updatePost', err);
  360. return res.json(ApiResponse.error());
  361. });
  362. };
  363. // app.get('/_api/admin/users.search' , admin.api.userSearch);
  364. actions.api.usersSearch = function(req, res) {
  365. const User = crowi.model('User');
  366. const email =req.query.email;
  367. User.findUsersByPartOfEmail(email, {})
  368. .then(users => {
  369. const result = {
  370. data: users
  371. };
  372. return res.json(ApiResponse.success(result));
  373. }).catch(err => {
  374. return res.json(ApiResponse.error());
  375. });
  376. };
  377. function saveSetting(req, res, form)
  378. {
  379. Config.updateNamespaceByArray('crowi', form, function(err, config) {
  380. Config.updateConfigCache('crowi', config);
  381. return res.json({status: true});
  382. });
  383. }
  384. function validateMailSetting(req, form, callback)
  385. {
  386. var mailer = crowi.mailer;
  387. var option = {
  388. host: form['mail:smtpHost'],
  389. port: form['mail:smtpPort'],
  390. };
  391. if (form['mail:smtpUser'] && form['mail:smtpPassword']) {
  392. option.auth = {
  393. user: form['mail:smtpUser'],
  394. pass: form['mail:smtpPassword'],
  395. };
  396. }
  397. if (option.port === 465) {
  398. option.secure = true;
  399. }
  400. var smtpClient = mailer.createSMTPClient(option);
  401. debug('mailer setup for validate SMTP setting', smtpClient);
  402. smtpClient.sendMail({
  403. to: req.user.email,
  404. subject: 'Wiki管理設定のアップデートによるメール通知',
  405. text: 'このメールは、WikiのSMTP設定のアップデートにより送信されています。'
  406. }, callback);
  407. }
  408. return actions;
  409. };