X-Git-Url: https://git.cworth.org/git?a=blobdiff_plain;f=lmno.js;h=abcdba2ef220bd6aff8375bb3190d0cfbc87c727;hb=0cd4f406b4ace0bc16d84adf4573f3a0d8084ad5;hp=64a106bf9a492f0475c5e6a9800a306b0c5bfcdb;hpb=fb0b1540096a2014db71c374d3147d6c2143f491;p=empires-server diff --git a/lmno.js b/lmno.js index 64a106b..abcdba2 100644 --- a/lmno.js +++ b/lmno.js @@ -1,9 +1,44 @@ const express = require("express"); const cors = require("cors"); const body_parser = require("body-parser"); +const session = require("express-session"); +const bcrypt = require("bcrypt"); +const path = require("path"); + +try { + var lmno_config = require("./lmno-config.json"); +} catch (err) { + config_usage(); + process.exit(1); +} + +function config_usage() { + console.log(`Error: Refusing to run without configuration. + +Please create a file named lmno-config.json that looks as follows: + +{ + "session_secret": "", + "users": { + "username": "", + "password_hash_bcrypt": "" + } +} + +Note: Of course, change all of to actual values desired. + +The "node lmno-passwd.js" command can help generate password hashes.`); +} const app = express(); app.use(cors()); +app.use(body_parser.urlencoded({ extended: false })); +app.use(body_parser.json()); +app.use(session({ + secret: lmno_config.session_secret, + resave: false, + saveUninitialized: false +})); /* Load each of our game mini-apps. */ var empires = require("./empires"); @@ -107,14 +142,85 @@ app.use('/empires/:game_id([a-zA-Z0-9]{4})', (request, response, next) => { return; } - request.game = lmno.ids[game_id].game; - if (request.game === undefined) { + /* See if there is any game with this ID. */ + const game = lmno.ids[game_id]; + if (game === undefined) { response.sendStatus(404); return; } + + /* Stash the game onto the request to be used by the game-specific code. */ + request.game = game.game; next(); }); +function auth_admin(request, response, next) { + /* If there is no user associated with this session, redirect to the login + * page (and set a "next" query parameter so we can come back here). + */ + if (! request.session.user) { + response.redirect(302, "/login?next=" + request.path); + return; + } + + /* If the user is logged in but not authorized to view the page then + * we return that error. */ + if (request.session.user.role !== "admin") { + response.status(401).send("Unauthorized"); + return; + } + next(); +} + +app.get('/logout', (request, response) => { + request.session.user = undefined; + + response.send("You are now logged out."); +}); + +app.get('/login', (request, response) => { + if (request.session.user) { + response.send("Welcome, " + request.session.user + "."); + return; + } + + response.sendFile(path.join(__dirname, './login.html')); +}); + +app.post('/login', async (request, response) => { + const username = request.body.username; + const password = request.body.password; + const user = lmno_config.users[username]; + if (! user) { + response.sendStatus(404); + return; + } + const match = await bcrypt.compare(password, user.password_hash_bcrypt); + if (! match) { + response.sendStatus(404); + return; + } + request.session.user = { username: user.username, role: user.role }; + response.sendStatus(200); + return; +}); + +/* A stats page (only available to admin users) */ +app.get('/stats/', auth_admin, (request, response) => { + let active = 0; + let idle = 0; + + for (let id in lmno.ids) { + if (lmno.ids[id].game.clients.length) + active++; + else + idle++; + } + response.send(`Active games: ${active}.
+Idle games: ${idle}`); +}); + + /* Mount sub apps. only _after_ we have done all the middleware we need. */ app.use('/empires/[a-zA-Z0-9]{4}/', empires.app);