Cookie Auth Skeleton

This commit is contained in:
TheEmeraldStarr 2020-10-02 09:33:09 -07:00
parent 55910ea89e
commit 939828c7c4
2 changed files with 287 additions and 213 deletions

42
app.js
View file

@ -8,7 +8,7 @@
sanitizer = require('sanitizer'), sanitizer = require('sanitizer'),
fetch = require('node-fetch'); fetch = require('node-fetch');
const config = JSON.parse(fs.readFileSync('./config.json', {encoding:'utf8'})); const config = JSON.parse(fs.readFileSync('./config.json', { encoding: 'utf8' }));
if (!config.prefix.startsWith('/')) { if (!config.prefix.startsWith('/')) {
config.prefix = `/${config.prefix}`; config.prefix = `/${config.prefix}`;
} }
@ -23,9 +23,11 @@
key: fs.readFileSync('./ssl/default.key'), key: fs.readFileSync('./ssl/default.key'),
cert: fs.readFileSync('./ssl/default.crt') cert: fs.readFileSync('./ssl/default.crt')
} }
if (config.ssl == true) { server = https.createServer(server_options, app); server_protocol = 'https://';} if (config.ssl == true) { server = https.createServer(server_options, app);
else { server = http.createServer(app); server_protocol = 'http://';}; server_protocol = 'https://'; } else { server = http.createServer(app);
server_protocol = 'http://'; };
var login = require('./login');
console.log(`Alloy Proxy now running on ${server_protocol}0.0.0.0:${config.port}! Proxy prefix is "${config.prefix}"!`); console.log(`Alloy Proxy now running on ${server_protocol}0.0.0.0:${config.port}! Proxy prefix is "${config.prefix}"!`);
server.listen(process.env.PORT || config.port); server.listen(process.env.PORT || config.port);
@ -57,8 +59,8 @@
secret: 'alloy', secret: 'alloy',
saveUninitialized: true, saveUninitialized: true,
resave: true resave: true
})); }));
// We made our own version of body-parser instead, due to issues. // We made our own version of body-parser instead, due to issues.
app.use((req, res, next) => { app.use((req, res, next) => {
if (req.method == 'POST') { if (req.method == 'POST') {
req.raw_body = ''; req.raw_body = '';
@ -69,7 +71,7 @@
req.str_body = req.raw_body; req.str_body = req.raw_body;
try { try {
req.body = JSON.parse(req.raw_body); req.body = JSON.parse(req.raw_body);
} catch(err) { } catch (err) {
req.body = {} req.body = {}
} }
next(); next();
@ -78,7 +80,7 @@
}); });
app.use(`${config.prefix}utils/`, async(req, res, next) => { app.use(`${config.prefix}utils/`, async(req, res, next) => {
if (req.url.startsWith('/assets/')){res.sendFile(__dirname + '/utils' + req.url);} if (req.url.startsWith('/assets/')) { res.sendFile(__dirname + '/utils' + req.url); }
if (req.query.url) { if (req.query.url) {
let url = atob(req.query.url); let url = atob(req.query.url);
if (url.startsWith('https://') || url.startsWith('http://')) { if (url.startsWith('https://') || url.startsWith('http://')) {
@ -94,9 +96,7 @@
app.post(`${config.prefix}session/`, async(req, res, next) => { app.post(`${config.prefix}session/`, async(req, res, next) => {
let url = querystring.parse(req.raw_body).url; let url = querystring.parse(req.raw_body).url;
if (url.startsWith('//')) { url = 'http:' + url; } if (url.startsWith('//')) { url = 'http:' + url; } else if (url.startsWith('https://') || url.startsWith('http://')) { url = url } else { url = 'http://' + url };
else if (url.startsWith('https://') || url.startsWith('http://')) { url = url }
else {url = 'http://' + url};
return res.redirect(config.prefix + rewrite_url(url)); return res.redirect(config.prefix + rewrite_url(url));
}); });
@ -105,11 +105,11 @@
proxy.url = rewrite_url(req.url.slice(1), 'decode'); proxy.url = rewrite_url(req.url.slice(1), 'decode');
proxy.url = { proxy.url = {
href: proxy.url, href: proxy.url,
hostname : proxy.url.split('/').splice(2).splice(0, 1).join('/'), hostname: proxy.url.split('/').splice(2).splice(0, 1).join('/'),
origin : proxy.url.split('/').splice(0, 3).join('/'), origin: proxy.url.split('/').splice(0, 3).join('/'),
encoded_origin : btoa(proxy.url.split('/').splice(0, 3).join('/')), encoded_origin: btoa(proxy.url.split('/').splice(0, 3).join('/')),
path : '/' + proxy.url.split('/').splice(3).join('/'), path: '/' + proxy.url.split('/').splice(3).join('/'),
protocol : proxy.url.split('\:').splice(0, 1).join(''), protocol: proxy.url.split('\:').splice(0, 1).join(''),
} }
proxy.url.encoded_origin = btoa(proxy.url.origin); proxy.url.encoded_origin = btoa(proxy.url.origin);
@ -169,15 +169,15 @@
if (req.method == 'POST') { if (req.method == 'POST') {
proxy.options.body = req.str_body; proxy.options.body = req.str_body;
} }
if (proxy.url.hostname == 'discord.com' && proxy.url.path == '/') { return res.redirect(307, config.prefix + rewrite_url('https://discord.com/login'));}; if (proxy.url.hostname == 'discord.com' && proxy.url.path == '/') { return res.redirect(307, config.prefix + rewrite_url('https://discord.com/login')); };
if (proxy.url.hostname == 'www.reddit.com') { return res.redirect(307, config.prefix + rewrite_url('https://old.reddit.com'));}; if (proxy.url.hostname == 'www.reddit.com') { return res.redirect(307, config.prefix + rewrite_url('https://old.reddit.com')); };
if (!req.url.slice(1).startsWith(`${proxy.url.encoded_origin}/`)) { return res.redirect(307, config.prefix + proxy.url.encoded_origin + '/');}; if (!req.url.slice(1).startsWith(`${proxy.url.encoded_origin}/`)) { return res.redirect(307, config.prefix + proxy.url.encoded_origin + '/'); };
proxy.response = await fetch(proxy.url.href, proxy.options).catch(err => res.send(fs.readFileSync('./utils/error/error.html', 'utf8').toString().replace('%ERROR%', `Error 400: Could not make request to '${sanitizer.sanitize(proxy.url.href)}'!`))); proxy.response = await fetch(proxy.url.href, proxy.options).catch(err => res.send(fs.readFileSync('./utils/error/error.html', 'utf8').toString().replace('%ERROR%', `Error 400: Could not make request to '${sanitizer.sanitize(proxy.url.href)}'!`)));
if(typeof proxy.response.buffer != 'function')return; if (typeof proxy.response.buffer != 'function') return;
proxy.buffer = await proxy.response.buffer(); proxy.buffer = await proxy.response.buffer();
@ -238,7 +238,7 @@
// Temp hotfix for Youtube search bar until my script injection can fix it. // Temp hotfix for Youtube search bar until my script injection can fix it.
if (proxy.url.hostname == 'www.youtube.com') { proxy.sendResponse = proxy.sendResponse.replace(/\/results/gi, `${config.prefix}${proxy.url.encoded_origin}/results`);}; if (proxy.url.hostname == 'www.youtube.com') { proxy.sendResponse = proxy.sendResponse.replace(/\/results/gi, `${config.prefix}${proxy.url.encoded_origin}/results`); };
} else if (proxy.content_type.startsWith('text/css')) { } else if (proxy.content_type.startsWith('text/css')) {
proxy.sendResponse = proxy.sendResponse.toString() proxy.sendResponse = proxy.sendResponse.toString()
.replace(/url\("\/\/(.*?)"\)/gi, `url("http://` + `$1` + `")`) .replace(/url\("\/\/(.*?)"\)/gi, `url("http://` + `$1` + `")`)
@ -261,7 +261,7 @@
}); });
}; };
// We send the response from the server rewritten. // We send the response from the server rewritten.
res.send(proxy.sendResponse); res.send(proxy.sendResponse);
}); });

74
auth.js Normal file
View file

@ -0,0 +1,74 @@
/**
* Login Class
*/
function Login() {
// sessionId -> user map
this.sessionMap = {
99999: { name: 'Foo', email: 'foo@bar.com' }
};
}
/**
* Say Hello {name} to the user
*/
Login.prototype.hello = function(sessionId) {
if (this.sessionMap[sessionId] == null) {
return 'Please Login.!';
} else {
return 'Hello, ' + this.sessionMap[sessionId].name;
}
};
/**
* Get Current Session id user name
*/
Login.prototype.getName = function(sessionId) {
return this.sessionMap[sessionId].name;
};
/**
* Get Current Session id user email
*/
Login.prototype.getEmail = function(sessionId) {
return this.sessionMap[sessionId].email;
};
/**
* Check whether the given session id is valid (is in sessionMap) or not.
*/
Login.prototype.isLoggedIn = function(sessionId) {
return sessionId in this.sessionMap;
};
/**
* Create a new session id for the given user.
*/
Login.prototype.login = function(_name, _email) {
var sessionId = new Date().getTime();
this.sessionMap[sessionId] = { name: _name, email: _email }
console.log("inside login functionwh ich take email \n")
console.log('\n new session id ' + sessionId + ' for login::' + _email);
return sessionId;
};
/**
* Remove specific refreshed session from SessionMap
**/
Login.prototype.RefreshSession = function(_sessionId) {
// Delete the session id from sessionMap
delete this.sessionMap[_sessionId];
return "done";
};
/**
* Logout from the server
*/
Login.prototype.logout = function(sessionId) {
console.log('logout::' + sessionId);
// Delete the session id from sessionMap
delete this.sessionMap[sessionId];
};
// Export the Login class
module.exports = new Login();