Rename server => modules

modules/actions/addToBlacklist.js

@@ -0,0 +1,48 @@
+const validateNpmPackageName = require("validate-npm-package-name");
+const BlacklistAPI = require("../BlacklistAPI");
+
+function addToBlacklist(req, res) {
+  const packageName = req.body.packageName;
+
+  if (!packageName) {
+    return res
+      .status(403)
+      .send({ error: 'Missing "packageName" body parameter' });
+  }
+
+  const nameErrors = validateNpmPackageName(packageName).errors;
+
+  // Disallow invalid package names.
+  if (nameErrors) {
+    const reason = nameErrors.join(", ");
+    return res.status(403).send({
+      error: `Invalid package name "${packageName}" (${reason})`
+    });
+  }
+
+  BlacklistAPI.addPackage(packageName).then(
+    added => {
+      if (added) {
+        const userId = req.user.jti;
+        console.log(
+          `Package "${packageName}" was added to the blacklist by ${userId}`
+        );
+      }
+
+      res.set({ "Content-Location": `/_blacklist/${packageName}` }).send({
+        ok: true,
+        message: `Package "${packageName}" was ${
+          added ? "added to" : "already in"
+        } the blacklist`
+      });
+    },
+    error => {
+      console.error(error);
+      res.status(500).send({
+        error: `Unable to add "${packageName}" to the blacklist`
+      });
+    }
+  );
+}
+
+module.exports = addToBlacklist;

modules/actions/createAuth.js

@@ -0,0 +1,24 @@
+const AuthAPI = require("../AuthAPI");
+
+const defaultScopes = {
+  blacklist: {
+    read: true
+  }
+};
+
+function createAuth(req, res) {
+  AuthAPI.createToken(defaultScopes).then(
+    token => {
+      res.send({ token });
+    },
+    error => {
+      console.error(error);
+
+      res.status(500).send({
+        error: "Unable to generate auth token"
+      });
+    }
+  );
+}
+
+module.exports = createAuth;

modules/actions/removeFromBlacklist.js

@@ -0,0 +1,32 @@
+const BlacklistAPI = require("../BlacklistAPI");
+
+function removeFromBlacklist(req, res) {
+  const packageName = req.packageName;
+
+  BlacklistAPI.removePackage(packageName).then(
+    removed => {
+      if (removed) {
+        const userId = req.user.jti;
+        console.log(
+          `Package "${packageName}" was removed from the blacklist by ${userId}`
+        );
+      }
+
+      res.send({
+        ok: true,
+        message: `Package "${packageName}" was ${
+          removed ? "removed from" : "not in"
+        } the blacklist`
+      });
+    },
+    error => {
+      console.error(error);
+
+      res.status(500).send({
+        error: `Unable to remove "${packageName}" from the blacklist`
+      });
+    }
+  );
+}
+
+module.exports = removeFromBlacklist;

modules/actions/serveAutoIndexPage.js

@@ -0,0 +1,57 @@
+const React = require("react");
+const ReactDOMServer = require("react-dom/server");
+const semver = require("semver");
+
+const MainPage = require("../client/MainPage");
+const AutoIndexApp = require("../client/autoIndex/App");
+const renderPage = require("../utils/renderPage");
+
+const globalScripts =
+  process.env.NODE_ENV === "production"
+    ? [
+        "/react@16.4.1/umd/react.production.min.js",
+        "/react-dom@16.4.1/umd/react-dom.production.min.js",
+        "/react-router-dom@4.3.1/umd/react-router-dom.min.js"
+      ]
+    : [
+        "/react@16.4.1/umd/react.development.js",
+        "/react-dom@16.4.1/umd/react-dom.development.js",
+        "/react-router-dom@4.3.1/umd/react-router-dom.js"
+      ];
+
+function byVersion(a, b) {
+  return semver.lt(a, b) ? -1 : semver.gt(a, b) ? 1 : 0;
+}
+
+function serveAutoIndexPage(req, res) {
+  const scripts = globalScripts.concat(req.assets.getScripts("autoIndex"));
+  const styles = req.assets.getStyles("autoIndex");
+
+  const props = {
+    packageName: req.packageName,
+    packageVersion: req.packageVersion,
+    availableVersions: Object.keys(req.packageInfo.versions).sort(byVersion),
+    filename: req.filename,
+    entry: req.entry,
+    entries: req.entries
+  };
+  const content = ReactDOMServer.renderToString(
+    React.createElement(AutoIndexApp, props)
+  );
+
+  const html = renderPage(MainPage, {
+    scripts: scripts,
+    styles: styles,
+    data: props,
+    content: content
+  });
+
+  res
+    .set({
+      "Cache-Control": "public,max-age=60", // 1 minute
+      "Cache-Tag": "auto-index"
+    })
+    .send(html);
+}
+
+module.exports = serveAutoIndexPage;

modules/actions/serveFile.js

@@ -0,0 +1,25 @@
+const serveAutoIndexPage = require("./serveAutoIndexPage");
+const serveJavaScriptModule = require("./serveJavaScriptModule");
+const serveStaticFile = require("./serveStaticFile");
+const serveMetadata = require("./serveMetadata");
+
+/**
+ * Send the file, JSON metadata, or HTML directory listing.
+ */
+function serveFile(req, res) {
+  if (req.query.meta != null) {
+    return serveMetadata(req, res);
+  }
+
+  if (req.entry.type === "directory") {
+    return serveAutoIndexPage(req, res);
+  }
+
+  if (req.query.module != null) {
+    return serveJavaScriptModule(req, res);
+  }
+
+  serveStaticFile(req, res);
+}
+
+module.exports = serveFile;

modules/actions/serveJavaScriptModule.js

@@ -0,0 +1,70 @@
+const etag = require("etag");
+const babel = require("babel-core");
+
+const getContentTypeHeader = require("../utils/getContentTypeHeader");
+const unpkgRewrite = require("../plugins/unpkgRewrite");
+
+function rewriteBareModuleIdentifiers(code, packageConfig) {
+  const dependencies = Object.assign(
+    {},
+    packageConfig.peerDependencies,
+    packageConfig.dependencies
+  );
+
+  const options = {
+    // Ignore .babelrc and package.json babel config
+    // because we haven't installed dependencies so
+    // we can't load plugins; see #84
+    babelrc: false,
+    plugins: [unpkgRewrite(dependencies)]
+  };
+
+  return babel.transform(code, options).code;
+}
+
+function serveJavaScriptModule(req, res) {
+  if (req.entry.contentType !== "application/javascript") {
+    return res
+      .status(403)
+      .type("text")
+      .send("?module mode is available only for JavaScript files");
+  }
+
+  try {
+    const code = rewriteBareModuleIdentifiers(
+      req.entry.content.toString("utf8"),
+      req.packageConfig
+    );
+
+    res
+      .set({
+        "Content-Length": Buffer.byteLength(code),
+        "Content-Type": getContentTypeHeader(req.entry.contentType),
+        "Cache-Control": "public,max-age=31536000", // 1 year
+        ETag: etag(code),
+        "Cache-Tag": "file,js-file,js-module"
+      })
+      .send(code);
+  } catch (error) {
+    console.error(error);
+
+    const errorName = error.constructor.name;
+    const errorMessage = error.message.replace(
+      /^.*?\/unpkg-.+?\//,
+      `/${req.packageSpec}/`
+    );
+    const codeFrame = error.codeFrame;
+    const debugInfo = `${errorName}: ${errorMessage}\n\n${codeFrame}`;
+
+    res
+      .status(500)
+      .type("text")
+      .send(
+        `Cannot generate module for ${req.packageSpec}${
+          req.filename
+        }\n\n${debugInfo}`
+      );
+  }
+}
+
+module.exports = serveJavaScriptModule;

modules/actions/serveMainPage.js

@@ -0,0 +1,29 @@
+const MainPage = require("../client/MainPage");
+const renderPage = require("../utils/renderPage");
+
+const globalScripts =
+  process.env.NODE_ENV === "production"
+    ? [
+        "/react@16.4.1/umd/react.production.min.js",
+        "/react-dom@16.4.1/umd/react-dom.production.min.js",
+        "/react-router-dom@4.3.1/umd/react-router-dom.min.js"
+      ]
+    : [
+        "/react@16.4.1/umd/react.development.js",
+        "/react-dom@16.4.1/umd/react-dom.development.js",
+        "/react-router-dom@4.3.1/umd/react-router-dom.js"
+      ];
+
+function serveMainPage(req, res) {
+  const scripts = globalScripts.concat(req.assets.getScripts("main"));
+  const styles = req.assets.getStyles("main");
+
+  const html = renderPage(MainPage, {
+    scripts: scripts,
+    styles: styles
+  });
+
+  res.send(html);
+}
+
+module.exports = serveMainPage;

modules/actions/serveMetadata.js

@@ -0,0 +1,44 @@
+const path = require("path");
+
+const addLeadingSlash = require("../utils/addLeadingSlash");
+
+function getMatchingEntries(entry, entries) {
+  const dirname = entry.name || ".";
+
+  return Object.keys(entries)
+    .filter(name => entry.name !== name && path.dirname(name) === dirname)
+    .map(name => entries[name]);
+}
+
+function getMetadata(entry, entries) {
+  const metadata = {
+    path: addLeadingSlash(entry.name),
+    type: entry.type
+  };
+
+  if (entry.type === "file") {
+    metadata.contentType = entry.contentType;
+    metadata.integrity = entry.integrity;
+    metadata.lastModified = entry.lastModified;
+    metadata.size = entry.size;
+  } else if (entry.type === "directory") {
+    metadata.files = getMatchingEntries(entry, entries).map(e =>
+      getMetadata(e, entries)
+    );
+  }
+
+  return metadata;
+}
+
+function serveMetadata(req, res) {
+  const metadata = getMetadata(req.entry, req.entries);
+
+  res
+    .set({
+      "Cache-Control": "public,max-age=31536000", // 1 year
+      "Cache-Tag": "meta"
+    })
+    .send(metadata);
+}
+
+module.exports = serveMetadata;

modules/actions/serveStaticFile.js

@@ -0,0 +1,26 @@
+const path = require("path");
+const etag = require("etag");
+
+const getContentTypeHeader = require("../utils/getContentTypeHeader");
+
+function serveStaticFile(req, res) {
+  const tags = ["file"];
+
+  const ext = path.extname(req.entry.name).substr(1);
+  if (ext) {
+    tags.push(`${ext}-file`);
+  }
+
+  res
+    .set({
+      "Content-Length": req.entry.size,
+      "Content-Type": getContentTypeHeader(req.entry.contentType),
+      "Cache-Control": "public,max-age=31536000", // 1 year
+      "Last-Modified": req.entry.lastModified,
+      ETag: etag(req.entry.content),
+      "Cache-Tag": tags.join(",")
+    })
+    .send(req.entry.content);
+}
+
+module.exports = serveStaticFile;

modules/actions/showAuth.js

@@ -0,0 +1,5 @@
+function showAuth(req, res) {
+  res.send({ auth: req.user });
+}
+
+module.exports = showAuth;

modules/actions/showBlacklist.js

@@ -0,0 +1,17 @@
+const BlacklistAPI = require("../BlacklistAPI");
+
+function showBlacklist(req, res) {
+  BlacklistAPI.getPackages().then(
+    blacklist => {
+      res.send({ blacklist });
+    },
+    error => {
+      console.error(error);
+      res.status(500).send({
+        error: "Unable to fetch blacklist"
+      });
+    }
+  );
+}
+
+module.exports = showBlacklist;

modules/actions/showPublicKey.js

@@ -0,0 +1,7 @@
+const secretKey = require("../secretKey");
+
+function showPublicKey(req, res) {
+  res.send({ publicKey: secretKey.public });
+}
+
+module.exports = showPublicKey;

modules/actions/showStats.js

@@ -0,0 +1,63 @@
+const subDays = require("date-fns/sub_days");
+const startOfDay = require("date-fns/start_of_day");
+const startOfSecond = require("date-fns/start_of_second");
+
+const StatsAPI = require("../StatsAPI");
+
+function showStats(req, res) {
+  let since, until;
+  switch (req.query.period) {
+    case "last-day":
+      until = startOfDay(new Date());
+      since = subDays(until, 1);
+      break;
+    case "last-week":
+      until = startOfDay(new Date());
+      since = subDays(until, 7);
+      break;
+    case "last-month":
+      until = startOfDay(new Date());
+      since = subDays(until, 30);
+      break;
+    default:
+      until = req.query.until
+        ? new Date(req.query.until)
+        : startOfSecond(new Date());
+      since = new Date(req.query.since);
+  }
+
+  if (isNaN(since.getTime())) {
+    return res.status(403).send({ error: "?since is not a valid date" });
+  }
+
+  if (isNaN(until.getTime())) {
+    return res.status(403).send({ error: "?until is not a valid date" });
+  }
+
+  if (until <= since) {
+    return res
+      .status(403)
+      .send({ error: "?until date must come after ?since date" });
+  }
+
+  if (until >= new Date()) {
+    return res.status(403).send({ error: "?until must be a date in the past" });
+  }
+
+  StatsAPI.getStats(since, until).then(
+    stats => {
+      res
+        .set({
+          "Cache-Control": "public, max-age=60",
+          "Cache-Tag": "stats"
+        })
+        .send(stats);
+    },
+    error => {
+      console.error(error);
+      res.status(500).send({ error: "Unable to fetch stats" });
+    }
+  );
+}
+
+module.exports = showStats;