try { // Check if config.json exists require('./config.json'); } catch (err) { console.error('No config.json found! Please run \'npm run setup\''); process.exit(1); } // Load the config const { host, port, domain, useSsl, resourceIdSize, gfyIdSize, resourceIdType, isProxied, s3enabled, saveAsOriginal } = require('./config.json'); //#region Imports const fs = require('fs-extra'); const express = require('express'); const useragent = require('express-useragent'); const rateLimit = require("express-rate-limit"); const fetch = require('node-fetch'); const marked = require('marked'); const DateTime = require('luxon').DateTime; const { WebhookClient, MessageEmbed } = require('discord.js'); const OpenGraph = require('./ogp'); const Thumbnail = require('./thumbnails'); const Vibrant = require('./vibrant'); const Hash = require('./hash'); const Path = require('path'); const { uploadLocal, uploadS3 } = require('./storage'); const { path, saveData, log, verify, generateToken, generateId, formatBytes, arrayEquals, getS3url, downloadTempS3 } = require('./utils'); //#endregion //#region Variables, module setup const ASS_LOGO = 'https://cdn.discordapp.com/icons/848274994375294986/8d339d4a2f3f54b2295e5e0ff62bd9e6.png?size=1024'; const app = express(); // Configure filename and location settings var users = {}; var data = {}; //#endregion preStartup(); startup(); function preStartup() { // Make sure data.json exists if (!fs.existsSync(path('data.json'))) { fs.writeJsonSync(path('data.json'), data, { spaces: 4 }); log('File [data.json] created'); } else log('File [data.json] exists'); // Make sure auth.json exists and generate the first key if (!fs.existsSync(path('auth.json'))) { let token = generateToken(); users[token] = { username: 'ass', count: 0 }; fs.writeJsonSync(path('auth.json'), { users }, { spaces: 4 }); log(`File [auth.json] created\n!! Important: save this token in a secure spot: ${Object.keys(users)[0]}\n`); } else log('File [auth.json] exists'); // Read users and data users = fs.readJsonSync(path('auth.json')).users || {}; data = fs.readJsonSync(path('data.json')); log('Users & data read from filesystem'); // Monitor auth.json for changes (triggered by running 'npm run new-token') fs.watch(path('auth.json'), { persistent: false }, (eventType, _filename) => eventType === 'change' && fs.readJson(path('auth.json')) .then((json) => !(arrayEquals(Object.keys(users), Object.keys(json.users))) && (users = json.users) && log(`New token added: ${Object.keys(users)[Object.keys(users).length - 1]}`)) .catch(console.error)); // Create thumbnails directory fs.ensureDirSync(path('uploads/thumbnails')); } function startup() { app.enable('case sensitive routing'); app.set('trust proxy', isProxied); app.set('view engine', 'pug'); app.use(useragent.express()); app.use((req, _res, next) => (req.randomId = generateId('random', 32, null, null), next())); // Don't process favicon requests app.use((req, res, next) => req.url.includes('favicon.ico') ? res.sendStatus(204) : next()); // Middleware for parsing the resource ID and handling 404 app.use('/:resourceId', (req, res, next) => { // Parse the resource ID req.ass = { resourceId: req.params.resourceId.split('.')[0] }; // If the ID is invalid, return 404. Otherwise, continue normally (!req.ass.resourceId || !data[req.ass.resourceId]) ? res.sendStatus(404) : next(); }); // Index app.get('/', (_req, res) => fs.readFile(path('README.md')).then((bytes) => bytes.toString()).then(marked).then((data) => res.render('index', { data }))); // Rate limit app.post('/', rateLimit({ windowMs: 1000 * 60, // 60 seconds max: 30 // Limit each IP to 30 requests per windowMs })); // Upload file (local & S3) s3enabled ? app.post('/', (req, res, next) => uploadS3(req, res, (error) => ((error) && console.error(error), next()))) : app.post('/', uploadLocal, ({ next }) => next()); // Pre-response operations app.post('/', (req, _res, next) => { req.file.randomId = req.randomId; // Download a temp copy to work with if using S3 storage (s3enabled ? downloadTempS3(req.file) : new Promise((resolve) => resolve())) // Generate the Thumbnail, Vibrant, and SHA1 hash .then(() => Promise.all([Thumbnail(req.file), Vibrant(req.file), Hash(req.file)])) .then(([thumbnail, vibrant, sha1]) => ( req.file.thumbnail = thumbnail, req.file.vibrant = vibrant, req.file.sha1 = sha1 )) // Remove the temp file if using S3 storage, otherwise rename the local file .then(() => s3enabled ? fs.remove(path('uploads/', req.file.originalname)) : renameFile(saveAsOriginal ? req.file.originalname : req.file.sha1)) .then(() => next()) .catch((err) => next(err)); function renameFile(newName) { return new Promise((resolve, reject) => { try { let paths = [req.file.destination, newName]; fs.rename(path(req.file.path), path(...paths)); req.file.path = Path.join(...paths); resolve(); } catch (err) { reject(err); } }); } }); // Process uploaded file app.post('/', (req, res) => { // Prevent uploads from unauthorized clients if (!verify(req, users)) return res.sendStatus(401); // Load overrides let trueDomain = getTrueDomain(req.headers["x-ass-domain"]); let generator = req.headers["x-ass-access"] || resourceIdType; // Get the uploaded time in milliseconds req.file.timestamp = DateTime.now().toMillis(); // Keep track of the token that uploaded the resource let uploadToken = req.headers.authorization; req.file.token = uploadToken; // Attach any embed overrides, if necessary req.file.opengraph = { title: req.headers['x-ass-og-title'], description: req.headers['x-ass-og-description'], author: req.headers['x-ass-og-author'], authorUrl: req.headers['x-ass-og-author-url'], provider: req.headers['x-ass-og-provider'], providerUrl: req.headers['x-ass-og-provider-url'], color: req.headers['x-ass-og-color'] }; // Save the file information let resourceId = generateId(generator, resourceIdSize, req.headers['x-ass-gfycat'] || gfyIdSize, req.file.originalname); data[resourceId.split('.')[0]] = req.file; saveData(data); // Log the upload let logInfo = `${req.file.originalname} (${req.file.mimetype})`; log(`Uploaded: ${logInfo} (user: ${users[uploadToken] ? users[uploadToken].username : ''})`); // Build the URLs let resourceUrl = `${getTrueHttp()}${trueDomain}/${resourceId}`; let thumbnailUrl = `${getTrueHttp()}${trueDomain}/${resourceId}/thumbnail`; let deleteUrl = `${getTrueHttp()}${trueDomain}/delete/${req.file.filename}`; // Send the response res.type('json').send({ resource: resourceUrl, thumbnail: thumbnailUrl, delete: deleteUrl }) .on('finish', () => { // After we have sent the user the response, also send a Webhook to Discord (if headers are present) if (req.headers['x-ass-webhook-client'] && req.headers['x-ass-webhook-token']) { // Build the webhook client & embed let whc = new WebhookClient(req.headers['x-ass-webhook-client'], req.headers['x-ass-webhook-token']); let embed = new MessageEmbed() .setTitle(logInfo) .setURL(resourceUrl) .setDescription(`**Size:** \`${formatBytes(req.file.size)}\`\n**[Delete](${deleteUrl})**`) .setThumbnail(thumbnailUrl) .setColor(req.file.vibrant) .setTimestamp(req.file.timestamp); // Send the embed to the webhook, then delete the client after to free resources whc.send(null, { username: req.headers['x-ass-webhook-username'] || 'ass', avatarURL: req.headers['x-ass-webhook-avatar'] || ASS_LOGO, embeds: [embed] }).then((_msg) => whc.destroy()); } // Also update the users upload count if (!users[uploadToken]) { let generator = () => generateId('random', 20, null); let username = generator(); while (Object.values(users).findIndex((user) => user.username == username) != -1) username = generator(); users[uploadToken] = { username, count: 0 }; } users[uploadToken].count += 1; fs.writeJsonSync(path('auth.json'), { users }, { spaces: 4 }) }); }); // View file app.get('/:resourceId', (req, res) => { let resourceId = req.ass.resourceId; let fileData = data[resourceId]; // If the client is Discord, send an Open Graph embed if (req.useragent.isBot) return res.type('html').send(new OpenGraph(getTrueHttp(), getTrueDomain(), resourceId, fileData.randomId, fileData).build()); // Return the file differently depending on what storage option was used let uploaders = { s3: () => fetch(getS3url(fileData.randomId, fileData.mimetype)).then((file) => { file.headers.forEach((value, header) => res.setHeader(header, value)); file.body.pipe(res); }), local: () => { res.header('Accept-Ranges', 'bytes').header('Content-Length', fileData.size).type(fileData.mimetype); fs.createReadStream(path(fileData.path)).pipe(res); } }; uploaders[s3enabled ? 's3' : 'local'](); }); // Thumbnail response app.get('/:resourceId/thumbnail', (req, res) => { let resourceId = req.ass.resourceId; // Read the file and send it to the client fs.readFile(path('uploads/thumbnails/', data[resourceId].thumbnail)) .then((fileData) => res.type('jpg').send(fileData)) .catch(console.error); }); // oEmbed response for clickable authors/providers // https://oembed.com/ // https://old.reddit.com/r/discordapp/comments/82p8i6/a_basic_tutorial_on_how_to_get_the_most_out_of/ app.get('/:resourceId/oembed.json', (req, res) => { let resourceId = req.ass.resourceId; // Build the oEmbed object & send the response let { opengraph, mimetype } = data[resourceId]; res.type('json').send({ version: '1.0', type: mimetype.includes('video') ? 'video' : 'photo', author_name: opengraph.author, author_url: opengraph.authorUrl, provider_name: opengraph.provider, provider_url: opengraph.providerUrl }); }); // Delete file app.get('/delete/:filename', (req, res) => { let filename = req.params.filename; let resourceId = Object.keys(data)[Object.values(data).indexOf(Object.values(data).find((d) => d.filename == filename))]; // If the ID is invalid, return 400 because we are unable to process the resource if (!resourceId || !data[resourceId]) return res.sendStatus(400); log(`Deleted: ${data[resourceId].originalname} (${data[resourceId].mimetype})`); // Save the file information fs.rmSync(path(data[resourceId].path)); delete data[resourceId]; saveData(data); res.type('text').send('File has been deleted!'); }) app.listen(port, host, () => log(`Server started on [${host}:${port}]\nAuthorized users: ${Object.keys(users).length}\nAvailable files: ${Object.keys(data).length}`)); } function getTrueHttp() { return ('http').concat(useSsl ? 's' : '').concat('://'); } function getTrueDomain(d = domain) { return d.concat((port == 80 || port == 443 || isProxied) ? '' : `:${port}`); }