Cookie Auth

This commit is contained in:
TheEmeraldStarr 2020-10-02 09:08:36 -07:00
parent f2b7ca0764
commit 18f94a081b

62
app.js
View file

@ -8,7 +8,7 @@
sanitizer = require('sanitizer'),
fetch = require('node-fetch');
const config = JSON.parse(fs.readFileSync('./config.json', {encoding:'utf8'}));
const config = JSON.parse(fs.readFileSync('./config.json', { encoding: 'utf8' }));
if (!config.prefix.startsWith('/')) {
config.prefix = `/${config.prefix}`;
}
@ -23,8 +23,13 @@
key: fs.readFileSync('./ssl/default.key'),
cert: fs.readFileSync('./ssl/default.crt')
}
if (config.ssl == true) { server = https.createServer(server_options, app); server_protocol = 'https://';}
else { server = http.createServer(app); server_protocol = 'http://';};
if (config.ssl == true) {
server = https.createServer(server_options, app);
server_protocol = 'https://';
} else {
server = http.createServer(app);
server_protocol = 'http://';
};
console.log(`Alloy Proxy now running on ${server_protocol}0.0.0.0:${config.port}! Proxy prefix is "${config.prefix}"!`);
@ -52,13 +57,28 @@
}
if (websitePath == '/') { return `${websiteURL}`; } else return `${websiteURL}${websitePath}`;
};
const uuid = require('uuid/v4')
app.use(session({
secret: 'alloy',
genid: (req) => {
return uuid() // use UUIDs for session IDs
},
saveUninitialized: true,
resave: true
}));
// We made our own version of body-parser instead, due to issues.
}));
app.post('/home/session', (req, res, next) => {
console.log('Inside POST /home/session callback')
session.authenticate('local', (err, user, info) => {
console.log('Inside authenticate() callback');
console.log(`req.session: ${JSON.stringify(req.session)}`)
console.log(`req.user: ${JSON.stringify(req.user)}`)
req.login(user, (err) => {
console.log('Inside req.login() callback')
return res.send('You were authenticated & logged in!\n');
})
})(req, res, next);
})
// We made our own version of body-parser instead, due to issues.
app.use((req, res, next) => {
if (req.method == 'POST') {
req.raw_body = '';
@ -69,7 +89,7 @@
req.str_body = req.raw_body;
try {
req.body = JSON.parse(req.raw_body);
} catch(err) {
} catch (err) {
req.body = {}
}
next();
@ -78,7 +98,7 @@
});
app.use(`${config.prefix}utils/`, async(req, res, next) => {
if (req.url.startsWith('/assets/')){res.sendFile(__dirname + '/utils' + req.url);}
if (req.url.startsWith('/assets/')) { res.sendFile(__dirname + '/utils' + req.url); }
if (req.query.url) {
let url = atob(req.query.url);
if (url.startsWith('https://') || url.startsWith('http://')) {
@ -94,9 +114,7 @@
app.post(`${config.prefix}session/`, async(req, res, next) => {
let url = querystring.parse(req.raw_body).url;
if (url.startsWith('//')) { url = 'http:' + url; }
else if (url.startsWith('https://') || url.startsWith('http://')) { url = url }
else {url = 'http://' + url};
if (url.startsWith('//')) { url = 'http:' + url; } else if (url.startsWith('https://') || url.startsWith('http://')) { url = url } else { url = 'http://' + url };
return res.redirect(config.prefix + rewrite_url(url));
});
@ -105,11 +123,11 @@
proxy.url = rewrite_url(req.url.slice(1), 'decode');
proxy.url = {
href: proxy.url,
hostname : proxy.url.split('/').splice(2).splice(0, 1).join('/'),
origin : proxy.url.split('/').splice(0, 3).join('/'),
encoded_origin : btoa(proxy.url.split('/').splice(0, 3).join('/')),
path : '/' + proxy.url.split('/').splice(3).join('/'),
protocol : proxy.url.split('\:').splice(0, 1).join(''),
hostname: proxy.url.split('/').splice(2).splice(0, 1).join('/'),
origin: proxy.url.split('/').splice(0, 3).join('/'),
encoded_origin: btoa(proxy.url.split('/').splice(0, 3).join('/')),
path: '/' + proxy.url.split('/').splice(3).join('/'),
protocol: proxy.url.split('\:').splice(0, 1).join(''),
}
proxy.url.encoded_origin = btoa(proxy.url.origin);
@ -169,15 +187,15 @@
if (req.method == 'POST') {
proxy.options.body = req.str_body;
}
if (proxy.url.hostname == 'discord.com' && proxy.url.path == '/') { return res.redirect(307, config.prefix + rewrite_url('https://discord.com/login'));};
if (proxy.url.hostname == 'discord.com' && proxy.url.path == '/') { return res.redirect(307, config.prefix + rewrite_url('https://discord.com/login')); };
if (proxy.url.hostname == 'www.reddit.com') { return res.redirect(307, config.prefix + rewrite_url('https://old.reddit.com'));};
if (proxy.url.hostname == 'www.reddit.com') { return res.redirect(307, config.prefix + rewrite_url('https://old.reddit.com')); };
if (!req.url.slice(1).startsWith(`${proxy.url.encoded_origin}/`)) { return res.redirect(307, config.prefix + proxy.url.encoded_origin + '/');};
if (!req.url.slice(1).startsWith(`${proxy.url.encoded_origin}/`)) { return res.redirect(307, config.prefix + proxy.url.encoded_origin + '/'); };
proxy.response = await fetch(proxy.url.href, proxy.options).catch(err => res.send(fs.readFileSync('./utils/error/error.html', 'utf8').toString().replace('%ERROR%', `Error 400: Could not make request to '${sanitizer.sanitize(proxy.url.href)}'!`)));
if(typeof proxy.response.buffer != 'function')return;
if (typeof proxy.response.buffer != 'function') return;
proxy.buffer = await proxy.response.buffer();
@ -238,7 +256,7 @@
// Temp hotfix for Youtube search bar until my script injection can fix it.
if (proxy.url.hostname == 'www.youtube.com') { proxy.sendResponse = proxy.sendResponse.replace(/\/results/gi, `${config.prefix}${proxy.url.encoded_origin}/results`);};
if (proxy.url.hostname == 'www.youtube.com') { proxy.sendResponse = proxy.sendResponse.replace(/\/results/gi, `${config.prefix}${proxy.url.encoded_origin}/results`); };
} else if (proxy.content_type.startsWith('text/css')) {
proxy.sendResponse = proxy.sendResponse.toString()
.replace(/url\("\/\/(.*?)"\)/gi, `url("http://` + `$1` + `")`)
@ -261,7 +279,7 @@
});
};
// We send the response from the server rewritten.
// We send the response from the server rewritten.
res.send(proxy.sendResponse);
});