@ -1,24 +1,27 @@
const fs = require ( 'fs-extra' ) ;
const bb = require ( 'express-busboy' ) ;
import { FileData , AssRequest , AssResponse , ErrWrap , User } from "../definitions" ;
import fs from 'fs-extra' ;
import bb from 'express-busboy' ;
//const rateLimit = require('express-rate-limit');
const { DateTime } = require ( 'luxon' ) ;
const { Webhook , MessageBuilder } = require ( 'discord-webhook-node' ) ;
const { processUploaded } = require ( '../storage' ) ;
const { maxUploadSize , resourceIdSize , gfyIdSize , resourceIdType , spaceReplace } = require ( '../ config.json') ;
cons t { path , log , verify , getTrueHttp , getTrueDomain , generateId , formatBytes } = require ( '../utils' ) ;
const { CODE_UNAUTHORIZED , CODE_PAYLOAD_TOO_LARGE } = require ( '../ MagicNumbers.json') ;
const data = require ( '../data' ) ;
const users = require ( '../auth' ) ;
import { DateTime } from 'luxon' ;
import { Webhook , MessageBuilder } from 'discord-webhook-node' ;
import { processUploaded } from '../storage' ;
const { maxUploadSize , resourceIdSize , gfyIdSize , resourceIdType , spaceReplace } = require ( '../ ../ config.json') ;
impor t { path , log , verify , getTrueHttp , getTrueDomain , generateId , formatBytes } from '../utils' ;
const { CODE_UNAUTHORIZED , CODE_PAYLOAD_TOO_LARGE } = require ( '../ ../ MagicNumbers.json') ;
import { data } from '../data' ;
import { users } from '../auth' ;
const ASS_LOGO = 'https://cdn.discordapp.com/icons/848274994375294986/8d339d4a2f3f54b2295e5e0ff62bd9e6.png?size=1024' ;
const express = require ( 'express' ) ;
import express from 'express' ;
const router = express . Router ( ) ;
// Set up express-busboy
// @ts-ignore
bb . extend ( router , {
upload : true ,
restrictMultiple : true ,
allowedPath : ( url ) = > url === '/' ,
allowedPath : ( url : string ) = > url === '/' ,
} ) ;
// Rate limit middleware
@ -28,7 +31,7 @@ bb.extend(router, {
} ) ) ; * /
// Block unauthorized requests and attempt token sanitization
router . post ( '/' , ( req , res , next ) = > {
router . post ( '/' , ( req : AssRequest , res : AssResponse , next : Function ) = > {
req . headers . authorization = req . headers . authorization || '' ;
req . token = req . headers . authorization . replace ( /[^\da-z]/gi , '' ) ; // Strip anything that isn't a digit or ASCII letter
! verify ( req , users ) ? log . warn ( 'Upload blocked' , 'Unauthorized' ) . callback ( ( ) = > res . sendStatus ( CODE_UNAUTHORIZED ) ) : next ( ) ; // skipcq: JS-0093
@ -38,28 +41,28 @@ router.post('/', (req, res, next) => {
router . post ( '/' , processUploaded ) ;
// Max upload size error handling
router . use ( '/' , ( err , _req , res , next ) = > err . message === 'LIMIT_FILE_SIZE' ? log . warn ( 'Upload blocked' , 'File too large' ) . callback ( ( ) = > res . status ( CODE_PAYLOAD_TOO_LARGE ) . send ( ` Max upload size: ${ maxUploadSize } MB ` ) ) : next ( err ) ) ; // skipcq: JS-0229
router . use ( '/' , ( err : ErrWrap , _req : AssRequest , res : AssResponse , next : Function ) = > err . message === 'LIMIT_FILE_SIZE' ? log . warn ( 'Upload blocked' , 'File too large' ) . callback ( ( ) = > res . status ( CODE_PAYLOAD_TOO_LARGE ) . send ( ` Max upload size: ${ maxUploadSize } MB ` ) ) : next ( err ) ) ; // skipcq: JS-0229
// Process uploaded file
router . post ( '/' , ( req , res , next ) = > {
router . post ( '/' , ( req : AssRequest , res : AssResponse , next : Function ) = > {
// Load overrides
const trueDomain = getTrueDomain ( req . headers [ 'x-ass-domain' ] ) ;
const generator = req . headers [ 'x-ass-access' ] || resourceIdType ;
// Save domain with file
req . file . domain = ` ${ getTrueHttp ( ) } ${ trueDomain } ` ;
req . file ! . domain = ` ${ getTrueHttp ( ) } ${ trueDomain } ` ;
// Get the uploaded time in milliseconds
req . file . timestamp = DateTime . now ( ) . toMillis ( ) ;
req . file ! . timestamp = DateTime . now ( ) . toMillis ( ) ;
// Save the timezone offset
req . file . timeoffset = req . headers [ 'x-ass-timeoffset' ] || 'UTC+0' ;
req . file ! . timeoffset = req . headers [ 'x-ass-timeoffset' ] ? . toString ( ) || 'UTC+0' ;
// Keep track of the token that uploaded the resource
req . file . token = req . token ;
req . file ! . token = req . token ? ? '' ;
// Attach any embed overrides, if necessary
req . file . opengraph = {
req . file ! . opengraph = {
title : req.headers [ 'x-ass-og-title' ] ,
description : req.headers [ 'x-ass-og-description' ] ,
author : req.headers [ 'x-ass-og-author' ] ,
@ -70,13 +73,13 @@ router.post('/', (req, res, next) => {
} ;
// Fix spaces in originalname
req . file . originalname = req . file . originalname . replace ( /\s/g , spaceReplace === '!' ? '' : spaceReplace ) ;
req . file ! . originalname = req . file ! . originalname . replace ( /\s/g , spaceReplace === '!' ? '' : spaceReplace ) ;
// Generate a unique resource ID
let resourceId = '' ;
// Function to call to generate a fresh ID. Used for multiple attempts in case an ID is already taken
const gen = ( ) = > generateId ( generator , resourceIdSize , req . headers [ 'x-ass-gfycat' ] || gfyIdSize , req . file . originalname ) ;
const gen = ( ) = > generateId ( generator , resourceIdSize , req . headers [ 'x-ass-gfycat' ] || gfyIdSize , req . file ! . originalname ) ;
// Keeps track of the number of attempts in case all ID's are taken
const attempts = {
@ -85,11 +88,11 @@ router.post('/', (req, res, next) => {
} ;
// Called by a promise, this will recursively resolve itself until a unique ID is found
function genCheckId ( resolve , reject ) {
function genCheckId ( resolve : Function , reject : Function ) {
const uniqueId = gen ( ) ;
attempts . count ++ ;
data . has ( uniqueId )
. then ( ( exists ) = > {
. then ( ( exists : boolean ) = > {
log . debug ( 'ID check' , exists ? 'Taken' : 'Available' ) ;
return attempts . count - 1 >= attempts . max ? reject ( new Error ( 'No ID\'s remaining' ) ) : exists ? genCheckId ( resolve , reject ) : resolve ( uniqueId ) ;
} )
@ -98,19 +101,20 @@ router.post('/', (req, res, next) => {
new Promise ( ( resolve , reject ) = > genCheckId ( resolve , reject ) )
. then ( ( uniqueId ) = > {
//@ts-ignore
resourceId = uniqueId ;
log . debug ( 'Saving data' , data . name ) ;
} )
. then ( ( ) = > data . put ( resourceId . split ( '.' ) [ 0 ] , req . file ) )
. then ( ( ) = > {
// Log the upload
const logInfo = ` ${ req . file . originalname } ( ${ req . file . mimetype } , ${ formatBytes ( req . file . size ) } ) ` ;
log . success ( 'File uploaded' , logInfo , ` uploaded by ${ users [ req . token ] ? users [ req . token ] . username : '<token-only>' } ` ) ;
const logInfo = ` ${ req . file ! . originalname } ( ${ req . file ! . mimetype } , ${ formatBytes ( req . file ! . size ) } ) ` ;
log . success ( 'File uploaded' , logInfo , ` uploaded by ${ users [ req . token ? ? '' ] ? users [ req . token ? ? '' ] . username : '<token-only>' } ` ) ;
// Build the URLs
const resourceUrl = ` ${ getTrueHttp ( ) } ${ trueDomain } / ${ resourceId } ` ;
const thumbnailUrl = ` ${ getTrueHttp ( ) } ${ trueDomain } / ${ resourceId } /thumbnail ` ;
const deleteUrl = ` ${ getTrueHttp ( ) } ${ trueDomain } / ${ resourceId } /delete/ ${ req . file . deleteId } ` ;
const deleteUrl = ` ${ getTrueHttp ( ) } ${ trueDomain } / ${ resourceId } /delete/ ${ req . file ! . deleteId } ` ;
// Send the response
res . type ( 'json' ) . send ( { resource : resourceUrl , thumbnail : thumbnailUrl , delete : deleteUrl } )
@ -121,17 +125,18 @@ router.post('/', (req, res, next) => {
if ( req . headers [ 'x-ass-webhook-url' ] ) {
// Build the webhook
const hook = new Webhook ( req . headers [ 'x-ass-webhook-url' ] ) ;
hook . setUsername ( req . headers [ 'x-ass-webhook-username' ] || 'ass' ) ;
hook . setAvatar ( req . headers [ 'x-ass-webhook-avatar' ] || ASS_LOGO ) ;
const hook = new Webhook ( req . headers [ 'x-ass-webhook-url' ] ? . toString ( ) ) ;
hook . setUsername ( req . headers [ 'x-ass-webhook-username' ] ? . toString ( ) || 'ass' ) ;
hook . setAvatar ( req . headers [ 'x-ass-webhook-avatar' ] ? . toString ( ) || ASS_LOGO ) ;
// Build the embed
const embed = new MessageBuilder ( )
. setTitle ( logInfo )
//@ts-ignore
. setURL ( resourceUrl )
. setDescription ( ` **Size:** \` ${ formatBytes ( req . file . size ) } \` \ n**[Delete]( ${ deleteUrl } )** ` )
. setDescription ( ` **Size:** \` ${ formatBytes ( req . file ! . size ) } \` \ n**[Delete]( ${ deleteUrl } )** ` )
. setThumbnail ( thumbnailUrl )
. setColor ( req . file . vibrant )
. setColor ( req . file ! . vibrant )
. setTimestamp ( ) ;
// Send the embed to the webhook, then delete the client after to free resources
@ -142,19 +147,25 @@ router.post('/', (req, res, next) => {
}
// Also update the users upload count
if ( ! users [ req . token ] ) {
const generateUsername = ( ) = > generateId ( 'random' , 20 , null ) ; // skipcq: JS-0074
let username = generateUsername ( ) ;
while ( Object . values ( users ) . findIndex ( ( user ) = > user . username === username ) !== - 1 ) // skipcq: JS-0073
if ( ! users [ req . token ? ? '' ] ) {
const generateUsername = ( ) = > generateId ( 'random' , 20 , 0 , req . file ! . size . toString ( ) ) ; // skipcq: JS-0074
let username : string = generateUsername ( ) ;
// eslint-disable-next-line @typescript-eslint/ban-ts-comment
// @ts-ignore
while ( Object . values ( users ) . findIndex ( ( user : User ) = > user . username === username ) !== - 1 ) // skipcq: JS-0073
username = generateUsername ( ) ;
users [ req . token ] = { username , count : 0 } ;
users [ req . token ? ? '' ] = { username , count : 0 } ;
}
users [ req . token ] . count += 1 ;
users [ req . token ? ? '' ] . count += 1 ;
fs . writeJsonSync ( path ( 'auth.json' ) , { users } , { spaces : 4 } ) ;
log . debug ( 'Upload request flow completed' , '' ) ;
} ) ;
} ) . catch ( next ) ;
} )
//@ts-ignore
. catch ( next ) ;
} ) ;
module.exports = router ;
export default router ;
Josh Moore
3 years ago
committed by