486 lines
19 KiB
JavaScript
486 lines
19 KiB
JavaScript
/*
|
|
* (c) Copyright Ascensio System SIA 2010-2024
|
|
*
|
|
* This program is a free software product. You can redistribute it and/or
|
|
* modify it under the terms of the GNU Affero General Public License (AGPL)
|
|
* version 3 as published by the Free Software Foundation. In accordance with
|
|
* Section 7(a) of the GNU AGPL its Section 15 shall be amended to the effect
|
|
* that Ascensio System SIA expressly excludes the warranty of non-infringement
|
|
* of any third-party rights.
|
|
*
|
|
* This program is distributed WITHOUT ANY WARRANTY; without even the implied
|
|
* warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. For
|
|
* details, see the GNU AGPL at: http://www.gnu.org/licenses/agpl-3.0.html
|
|
*
|
|
* You can contact Ascensio System SIA at 20A-6 Ernesta Birznieka-Upish
|
|
* street, Riga, Latvia, EU, LV-1050.
|
|
*
|
|
* The interactive user interfaces in modified source and object code versions
|
|
* of the Program must display Appropriate Legal Notices, as required under
|
|
* Section 5 of the GNU AGPL version 3.
|
|
*
|
|
* Pursuant to Section 7(b) of the License you must retain the original Product
|
|
* logo when distributing the program. Pursuant to Section 7(e) we decline to
|
|
* grant you any rights under trademark law for use of our trademarks.
|
|
*
|
|
* All the Product's GUI elements, including illustrations and icon sets, as
|
|
* well as technical writing content are licensed under the terms of the
|
|
* Creative Commons Attribution-ShareAlike 4.0 International. See the License
|
|
* terms at http://creativecommons.org/licenses/by-sa/4.0/legalcode
|
|
*
|
|
*/
|
|
|
|
'use strict';
|
|
|
|
const moduleReloader = require('./../../Common/sources/moduleReloader');
|
|
const config = moduleReloader.requireConfigWithRuntime();
|
|
//process.env.NODE_ENV = config.get('services.CoAuthoring.server.mode');
|
|
const logger = require('./../../Common/sources/logger');
|
|
const co = require('co');
|
|
const license = require('./../../Common/sources/license');
|
|
const fs = require('fs');
|
|
|
|
const express = require('express');
|
|
const http = require('http');
|
|
const path = require('path');
|
|
const bodyParser = require('body-parser');
|
|
const multer = require('multer');
|
|
const apicache = require('apicache');
|
|
const docsCoServer = require('./DocsCoServer');
|
|
const canvasService = require('./canvasservice');
|
|
const converterService = require('./converterservice');
|
|
const fileUploaderService = require('./fileuploaderservice');
|
|
const wopiClient = require('./wopiClient');
|
|
const constants = require('./../../Common/sources/constants');
|
|
const utils = require('./../../Common/sources/utils');
|
|
const commonDefines = require('./../../Common/sources/commondefines');
|
|
const operationContext = require('./../../Common/sources/operationContext');
|
|
const tenantManager = require('./../../Common/sources/tenantManager');
|
|
const staticRouter = require('./routes/static');
|
|
const infoRouter = require('./routes/info');
|
|
const ms = require('ms');
|
|
const aiProxyHandler = require('./ai/aiProxyHandler');
|
|
const runtimeConfigManager = require('./../../Common/sources/runtimeConfigManager');
|
|
|
|
const cfgWopiEnable = config.get('wopi.enable');
|
|
const cfgWopiDummyEnable = config.get('wopi.dummy.enable');
|
|
const cfgHtmlTemplate = config.get('wopi.htmlTemplate');
|
|
const cfgTokenEnableBrowser = config.get('services.CoAuthoring.token.enable.browser');
|
|
const cfgTokenEnableRequestInbox = config.get('services.CoAuthoring.token.enable.request.inbox');
|
|
const cfgTokenEnableRequestOutbox = config.get('services.CoAuthoring.token.enable.request.outbox');
|
|
const cfgLicenseFile = config.get('license.license_file');
|
|
const cfgDownloadMaxBytes = config.get('FileConverter.converter.maxDownloadBytes');
|
|
|
|
// if (false) {
|
|
// var cluster = require('cluster');
|
|
// cluster.schedulingPolicy = cluster.SCHED_RR
|
|
// if (cluster.isMaster) {
|
|
// let workersCount = 2;
|
|
// logger.warn('start cluster with %s workers %s', workersCount, cluster.schedulingPolicy);
|
|
// for (let nIndexWorker = 0; nIndexWorker < workersCount; ++nIndexWorker) {
|
|
// var worker = cluster.fork().process;
|
|
// logger.warn('worker %s started.', worker.pid);
|
|
// }
|
|
|
|
// cluster.on('exit', function (worker) {
|
|
// logger.warn('worker %s died. restart...', worker.process.pid);
|
|
// cluster.fork();
|
|
// });
|
|
// return;
|
|
// }
|
|
// }
|
|
|
|
const app = express();
|
|
app.disable('x-powered-by');
|
|
|
|
// Enable CORS in development mode for AdminPanel webpack dev server
|
|
if (process.env.NODE_ENV.startsWith('development-')) {
|
|
const cors = require('cors');
|
|
app.use(
|
|
cors({
|
|
origin: true,
|
|
credentials: true,
|
|
methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
|
|
allowedHeaders: ['Content-Type', 'Authorization']
|
|
})
|
|
);
|
|
}
|
|
|
|
//path.resolve uses __dirname by default(unexpected path in pkg)
|
|
app.set('views', path.resolve(process.cwd(), cfgHtmlTemplate));
|
|
app.set('view engine', 'ejs');
|
|
const server = http.createServer(app);
|
|
|
|
let licenseInfo, licenseOriginal, updatePluginsTime, userPlugins;
|
|
const updatePluginsCacheExpire = ms('5m');
|
|
|
|
const updatePlugins = (eventType, filename) => {
|
|
operationContext.global.logger.info('update Folder true: %s ; %s', eventType, filename);
|
|
userPlugins = undefined;
|
|
};
|
|
const readLicense = async function () {
|
|
[licenseInfo, licenseOriginal] = await license.readLicense(cfgLicenseFile);
|
|
};
|
|
const updateLicense = async () => {
|
|
try {
|
|
await readLicense();
|
|
await docsCoServer.setLicenseInfo(operationContext.global, licenseInfo, licenseOriginal);
|
|
operationContext.global.logger.info('End updateLicense');
|
|
} catch (err) {
|
|
operationContext.global.logger.error('updateLicense error: %s', err.stack);
|
|
}
|
|
};
|
|
|
|
operationContext.global.logger.warn('Express server starting...');
|
|
|
|
if (!(cfgTokenEnableBrowser && cfgTokenEnableRequestInbox && cfgTokenEnableRequestOutbox)) {
|
|
operationContext.global.logger.warn(
|
|
'Set services.CoAuthoring.token.enable.browser, services.CoAuthoring.token.enable.request.inbox, ' +
|
|
'services.CoAuthoring.token.enable.request.outbox in the Document Server config ' +
|
|
'to prevent an unauthorized access to your documents and the substitution of important parameters in Document Server requests.'
|
|
);
|
|
}
|
|
|
|
updateLicense();
|
|
fs.watchFile(cfgLicenseFile, updateLicense);
|
|
setInterval(updateLicense, 86400000);
|
|
|
|
try {
|
|
const staticContent = config.get('services.CoAuthoring.server.static_content');
|
|
const pluginsUri = config.get('services.CoAuthoring.plugins.uri');
|
|
let pluginsPath = undefined;
|
|
if (staticContent[pluginsUri]) {
|
|
pluginsPath = staticContent[pluginsUri].path;
|
|
}
|
|
fs.watch(pluginsPath, updatePlugins);
|
|
} catch (e) {
|
|
operationContext.global.logger.warn(
|
|
'Failed to subscribe to plugin folder updates. When changing the list of plugins, you must restart the server. https://nodejs.org/docs/latest/api/fs.html#fs_availability. %s',
|
|
e.stack
|
|
);
|
|
}
|
|
|
|
// If you want to use 'development' and 'production',
|
|
// then with app.settings.env (https://github.com/strongloop/express/issues/936)
|
|
// If error handling is needed, now it's like this https://github.com/expressjs/errorhandler
|
|
docsCoServer.install(server, app, () => {
|
|
operationContext.global.logger.info('Start callbackFunction');
|
|
|
|
server.listen(config.get('services.CoAuthoring.server.port'), () => {
|
|
operationContext.global.logger.warn(
|
|
'Express server listening on port %d in %s mode. Version: %s. Build: %s',
|
|
config.get('services.CoAuthoring.server.port'),
|
|
app.settings.env,
|
|
commonDefines.buildVersion,
|
|
commonDefines.buildNumber
|
|
);
|
|
});
|
|
|
|
app.get('/index.html', (req, res) => {
|
|
return co(function* () {
|
|
const ctx = new operationContext.Context();
|
|
try {
|
|
ctx.initFromRequest(req);
|
|
yield ctx.initTenantCache();
|
|
const [licenseInfo] = yield tenantManager.getTenantLicense(ctx);
|
|
const buildVersion = commonDefines.buildVersion;
|
|
const buildNumber = commonDefines.buildNumber;
|
|
const alias = '';
|
|
let buildDate,
|
|
packageType,
|
|
customerId = '',
|
|
multitenancy = '';
|
|
if (licenseInfo) {
|
|
buildDate = licenseInfo.buildDate.toISOString();
|
|
packageType = licenseInfo.packageType;
|
|
customerId = licenseInfo.customerId;
|
|
multitenancy = licenseInfo.multitenancy;
|
|
}
|
|
let output = `Server is functioning normally. Version: ${buildVersion}. Build: ${buildNumber}`;
|
|
output += `. Release date: ${buildDate}. Package type: ${packageType}. Customer Id: ${customerId}`;
|
|
output += `. Multitenancy: ${multitenancy}. Alias: ${alias}`;
|
|
res.send(output);
|
|
} catch (err) {
|
|
ctx.logger.error('index.html error: %s', err.stack);
|
|
res.sendStatus(400);
|
|
}
|
|
});
|
|
});
|
|
|
|
app.use('/', staticRouter);
|
|
|
|
const rawFileParser = bodyParser.raw({
|
|
inflate: true,
|
|
limit: config.get('services.CoAuthoring.server.limits_tempfile_upload'),
|
|
type() {
|
|
return true;
|
|
}
|
|
});
|
|
const urleEcodedParser = bodyParser.urlencoded({extended: false});
|
|
const forms = multer();
|
|
|
|
app.get('/coauthoring/CommandService.ashx', utils.checkClientIp, rawFileParser, docsCoServer.commandFromServer);
|
|
app.post('/coauthoring/CommandService.ashx', utils.checkClientIp, rawFileParser, docsCoServer.commandFromServer);
|
|
app.post('/command', utils.checkClientIp, rawFileParser, docsCoServer.commandFromServer);
|
|
|
|
app.get('/ConvertService.ashx', utils.checkClientIp, rawFileParser, converterService.convertXml);
|
|
app.post('/ConvertService.ashx', utils.checkClientIp, rawFileParser, converterService.convertXml);
|
|
app.post('/converter', utils.checkClientIp, rawFileParser, converterService.convertJson);
|
|
|
|
app.param('docid', (req, res, next, val) => {
|
|
if (constants.DOC_ID_REGEX.test(val)) {
|
|
next();
|
|
} else {
|
|
res.sendStatus(403);
|
|
}
|
|
});
|
|
app.param('index', (req, res, next, val) => {
|
|
if (!isNaN(parseInt(val))) {
|
|
next();
|
|
} else {
|
|
res.sendStatus(403);
|
|
}
|
|
});
|
|
app.post('/upload/:docid*', rawFileParser, fileUploaderService.uploadImageFile);
|
|
|
|
app.post('/downloadas/:docid', rawFileParser, canvasService.downloadAs);
|
|
app.post('/savefile/:docid', rawFileParser, canvasService.saveFile);
|
|
app.get('/printfile/:docid/:filename', canvasService.printFile);
|
|
app.get('/downloadfile/:docid', canvasService.downloadFile);
|
|
app.post('/downloadfile/:docid', rawFileParser, canvasService.downloadFile);
|
|
app.get('/healthcheck', utils.checkClientIp, docsCoServer.healthCheck);
|
|
|
|
app.get('/baseurl', (req, res) => {
|
|
const ctx = new operationContext.Context();
|
|
try {
|
|
ctx.initFromRequest(req);
|
|
//todo
|
|
// yield ctx.initTenantCache();
|
|
res.send(utils.getBaseUrlByRequest(ctx, req));
|
|
} catch (err) {
|
|
ctx.logger.error('baseurl error: %s', err.stack);
|
|
}
|
|
});
|
|
|
|
app.get('/robots.txt', (req, res) => {
|
|
res.setHeader('Content-Type', 'plain/text');
|
|
res.send('User-agent: *\nDisallow: /');
|
|
});
|
|
|
|
app.post('/docbuilder', utils.checkClientIp, rawFileParser, (req, res) => {
|
|
converterService.builder(req, res);
|
|
});
|
|
// Shared Info router (provides /info.json)
|
|
app.use('/info', infoRouter(docsCoServer.getConnections));
|
|
app.put('/internal/cluster/inactive', utils.checkClientIp, docsCoServer.shutdown);
|
|
app.delete('/internal/cluster/inactive', utils.checkClientIp, docsCoServer.shutdown);
|
|
app.put('/internal/cluster/pre-stop', utils.checkClientIp, docsCoServer.preStop);
|
|
app.delete('/internal/cluster/pre-stop', utils.checkClientIp, docsCoServer.preStop);
|
|
|
|
app.get('/internal/connections/edit', docsCoServer.getEditorConnectionsCount);
|
|
|
|
function checkWopiEnable(req, res, next) {
|
|
//todo may be move code into wopiClient or wopiClient.discovery...
|
|
const ctx = new operationContext.Context();
|
|
ctx.initFromRequest(req);
|
|
ctx
|
|
.initTenantCache()
|
|
.then(() => {
|
|
const tenWopiEnable = ctx.getCfg('wopi.enable', cfgWopiEnable);
|
|
if (tenWopiEnable) {
|
|
next();
|
|
} else {
|
|
res.sendStatus(404);
|
|
}
|
|
})
|
|
.catch(err => {
|
|
ctx.logger.error('checkWopiEnable error: %s', err.stack);
|
|
res.sendStatus(404);
|
|
});
|
|
}
|
|
function checkWopiDummyEnable(req, res, next) {
|
|
//todo may be move code into wopiClient or wopiClient.discovery...
|
|
const ctx = new operationContext.Context();
|
|
ctx.initFromRequest(req);
|
|
ctx
|
|
.initTenantCache()
|
|
.then(() => {
|
|
const tenWopiEnable = ctx.getCfg('wopi.enable', cfgWopiEnable);
|
|
const tenWopiDummyEnable = ctx.getCfg('wopi.dummy.enable', cfgWopiDummyEnable);
|
|
if (tenWopiEnable && tenWopiDummyEnable) {
|
|
next();
|
|
} else {
|
|
res.sendStatus(404);
|
|
}
|
|
})
|
|
.catch(err => {
|
|
ctx.logger.error('checkWopiDummyEnable error: %s', err.stack);
|
|
res.sendStatus(404);
|
|
});
|
|
}
|
|
//todo dest
|
|
const fileForms = multer({limits: {fieldSize: cfgDownloadMaxBytes}});
|
|
app.get('/hosting/discovery', checkWopiEnable, utils.checkClientIp, wopiClient.discovery);
|
|
app.get('/hosting/capabilities', checkWopiEnable, utils.checkClientIp, wopiClient.collaboraCapabilities);
|
|
app.post('/lool/convert-to/:format?', checkWopiEnable, utils.checkClientIp, urleEcodedParser, fileForms.any(), converterService.convertTo);
|
|
app.post('/cool/convert-to/:format?', checkWopiEnable, utils.checkClientIp, urleEcodedParser, fileForms.any(), converterService.convertTo);
|
|
app.post(
|
|
'/hosting/wopi/:documentType/:mode',
|
|
checkWopiEnable,
|
|
urleEcodedParser,
|
|
forms.none(),
|
|
utils.lowercaseQueryString,
|
|
wopiClient.getEditorHtml
|
|
);
|
|
app.post(
|
|
'/hosting/wopi/convert-and-edit/:ext/:targetext',
|
|
checkWopiEnable,
|
|
urleEcodedParser,
|
|
forms.none(),
|
|
utils.lowercaseQueryString,
|
|
wopiClient.getConverterHtml
|
|
);
|
|
app.get('/hosting/wopi/convert-and-edit-handler', checkWopiEnable, utils.lowercaseQueryString, converterService.getConverterHtmlHandler);
|
|
app.get('/wopi/files/:docid', apicache.middleware('5 minutes'), checkWopiDummyEnable, utils.lowercaseQueryString, wopiClient.dummyCheckFileInfo);
|
|
app.post('/wopi/files/:docid', checkWopiDummyEnable, wopiClient.dummyOk);
|
|
app.get('/wopi/files/:docid/contents', apicache.middleware('5 minutes'), checkWopiDummyEnable, wopiClient.dummyGetFile);
|
|
app.post('/wopi/files/:docid/contents', checkWopiDummyEnable, wopiClient.dummyOk);
|
|
|
|
app.use('/ai-proxy', rawFileParser, aiProxyHandler.proxyRequest);
|
|
|
|
app.post('/dummyCallback', utils.checkClientIp, apicache.middleware('5 minutes'), rawFileParser, (req, res) => {
|
|
const ctx = new operationContext.Context();
|
|
ctx.initFromRequest(req);
|
|
//yield ctx.initTenantCache();//no need
|
|
ctx.logger.debug(`dummyCallback req.body:%s`, req.body);
|
|
utils.fillResponseSimple(res, JSON.stringify({error: 0}, 'application/json'));
|
|
});
|
|
|
|
const sendUserPlugins = (res, data) => {
|
|
res.setHeader('Content-Type', 'application/json');
|
|
res.send(JSON.stringify(data));
|
|
};
|
|
app.get('/plugins.json', (req, res) => {
|
|
//fs.watch is not reliable. Set cache expiry time
|
|
if (userPlugins && new Date() - updatePluginsTime < updatePluginsCacheExpire) {
|
|
sendUserPlugins(res, userPlugins);
|
|
return;
|
|
}
|
|
|
|
if (!config.has('services.CoAuthoring.server.static_content') || !config.has('services.CoAuthoring.plugins.uri')) {
|
|
res.sendStatus(404);
|
|
return;
|
|
}
|
|
|
|
const staticContent = config.get('services.CoAuthoring.server.static_content');
|
|
const pluginsUri = config.get('services.CoAuthoring.plugins.uri');
|
|
let pluginsPath = undefined;
|
|
const pluginsAutostart = config.get('services.CoAuthoring.plugins.autostart');
|
|
|
|
if (staticContent[pluginsUri]) {
|
|
pluginsPath = staticContent[pluginsUri].path;
|
|
}
|
|
|
|
const baseUrl = '../../../..';
|
|
utils.listFolders(pluginsPath, true).then(values => {
|
|
return co(function* () {
|
|
const configFile = 'config.json';
|
|
let stats = null;
|
|
const result = [];
|
|
for (let i = 0; i < values.length; ++i) {
|
|
try {
|
|
stats = yield utils.fsStat(path.join(values[i], configFile));
|
|
} catch (_err) {
|
|
stats = null;
|
|
}
|
|
|
|
if (stats && stats.isFile) {
|
|
result.push(baseUrl + pluginsUri + '/' + path.basename(values[i]) + '/' + configFile);
|
|
}
|
|
}
|
|
|
|
updatePluginsTime = new Date();
|
|
userPlugins = {url: '', pluginsData: result, autostart: pluginsAutostart};
|
|
sendUserPlugins(res, userPlugins);
|
|
});
|
|
});
|
|
});
|
|
app.get('/themes.json', apicache.middleware('5 minutes'), (req, res) => {
|
|
return co(function* () {
|
|
const themes = [];
|
|
const ctx = new operationContext.Context();
|
|
try {
|
|
ctx.initFromRequest(req);
|
|
yield ctx.initTenantCache();
|
|
ctx.logger.info('themes.json start');
|
|
if (!config.has('services.CoAuthoring.server.static_content') || !config.has('services.CoAuthoring.themes.uri')) {
|
|
return;
|
|
}
|
|
const staticContent = config.get('services.CoAuthoring.server.static_content');
|
|
const themesUri = config.get('services.CoAuthoring.themes.uri');
|
|
let themesList = [];
|
|
|
|
for (const i in staticContent) {
|
|
if (Object.hasOwn(staticContent, i) && themesUri.startsWith(i)) {
|
|
const dir = staticContent[i].path + themesUri.substring(i.length);
|
|
themesList = yield utils.listObjects(dir, true);
|
|
ctx.logger.debug('themes.json dir:%s', dir);
|
|
ctx.logger.debug('themes.json themesList:%j', themesList);
|
|
for (let j = 0; j < themesList.length; ++j) {
|
|
if (themesList[j].endsWith('.json')) {
|
|
try {
|
|
const data = yield utils.readFile(themesList[j], true);
|
|
const text = new TextDecoder('utf-8', {ignoreBOM: false}).decode(data);
|
|
themes.push(JSON.parse(text));
|
|
} catch (err) {
|
|
ctx.logger.error('themes.json file:%s error:%s', themesList[j], err.stack);
|
|
}
|
|
}
|
|
}
|
|
break;
|
|
}
|
|
}
|
|
} catch (err) {
|
|
ctx.logger.error('themes.json error:%s', err.stack);
|
|
} finally {
|
|
if (themes.length > 0) {
|
|
res.setHeader('Content-Type', 'application/json');
|
|
res.send({themes});
|
|
} else {
|
|
res.sendStatus(404);
|
|
}
|
|
ctx.logger.info('themes.json end');
|
|
}
|
|
});
|
|
});
|
|
app.get('/document_editor_service_worker.js', apicache.middleware('5 min'), async (req, res) => {
|
|
const staticContent = config.get('services.CoAuthoring.server.static_content');
|
|
if (staticContent['/sdkjs']) {
|
|
//make handler only for development version
|
|
res.sendFile(path.resolve(staticContent['/sdkjs'].path + '/common/serviceworker/document_editor_service_worker.js'));
|
|
} else {
|
|
res.sendStatus(404);
|
|
}
|
|
});
|
|
app.use((err, req, res, _next) => {
|
|
const ctx = new operationContext.Context();
|
|
ctx.initFromRequest(req);
|
|
ctx.logger.error('default error handler:%s', err.stack);
|
|
res.sendStatus(500);
|
|
});
|
|
});
|
|
|
|
process.on('uncaughtException', err => {
|
|
operationContext.global.logger.error('uncaughtException:%s', err.stack);
|
|
logger.shutdown(() => {
|
|
process.exit(1);
|
|
});
|
|
});
|
|
|
|
//Initialize watch here to avoid circular import with operationContext
|
|
runtimeConfigManager.initRuntimeConfigWatcher(operationContext.global).catch(err => {
|
|
operationContext.global.logger.warn('initRuntimeConfigWatcher error: %s', err.stack);
|
|
});
|
|
//after all required modules in all files
|
|
moduleReloader.finalizeConfigWithRuntime();
|