43 lines
1.6 KiB
JavaScript
43 lines
1.6 KiB
JavaScript
// Shared web middleware for auth, media, and upload handling.
|
|
|
|
const express = require('express');
|
|
const fs = require('fs');
|
|
|
|
module.exports = function registerMiddleware(app, deps) {
|
|
const pool = deps.pool;
|
|
const loadCurrentUser = deps.loadCurrentUser;
|
|
const requireAuth = deps.requireAuth;
|
|
const mediaDir = deps.MEDIA_DIR;
|
|
const uploadsDir = deps.UPLOADS_DIR;
|
|
const thumbnailsDir = deps.THUMBNAILS_DIR;
|
|
const assetDir = deps.ASSET_DIR;
|
|
|
|
app.use(express.urlencoded({ extended: true }));
|
|
app.use(express.json());
|
|
app.use('/assets', express.static(assetDir));
|
|
app.use('/media', express.static(mediaDir));
|
|
fs.mkdirSync(uploadsDir, { recursive: true });
|
|
fs.mkdirSync(thumbnailsDir, { recursive: true });
|
|
|
|
app.use(async function (req, _res, next) {
|
|
try {
|
|
req.currentUser = await loadCurrentUser(pool, req);
|
|
next();
|
|
} catch (error) {
|
|
next(error);
|
|
}
|
|
});
|
|
|
|
app.use(function (req, res, next) {
|
|
if (req.path === '/' || req.path === '/login' || req.path === '/logout' || req.path === '/slides/popup-preview' || req.path.indexOf('/api/internal/slide-thumbnails/') === 0 || req.path === '/api/internal/sync/player-media' || req.path === '/api/internal/sync/player-font') {
|
|
return next();
|
|
}
|
|
|
|
return requireAuth(req, res, function () {
|
|
if (req.currentUser && req.currentUser.mustChangePassword && req.path !== '/account' && req.path !== '/account/password' && req.path !== '/account/sessions/revoke' && req.path !== '/logout') {
|
|
return res.redirect('/account?message=' + encodeURIComponent('Please change your password before continuing.'));
|
|
}
|
|
next();
|
|
});
|
|
});
|
|
}; |