logger = require 'logger-sharelatex' fs = require 'fs' crypto = require 'crypto' Settings = require('settings-sharelatex') SubscriptionFormatters = require('../Features/Subscription/SubscriptionFormatters') querystring = require('querystring') SystemMessageManager = require("../Features/SystemMessages/SystemMessageManager") AuthenticationController = require("../Features/Authentication/AuthenticationController") _ = require("underscore") async = require("async") Modules = require "./Modules" Url = require "url" PackageVersions = require "./PackageVersions" htmlEncoder = new require("node-html-encoder").Encoder("numerical") fingerprints = {} Path = require 'path' jsPath = if Settings.useMinifiedJs "/minjs/" else "/js/" ace = PackageVersions.lib('ace') pdfjs = PackageVersions.lib('pdfjs') getFileContent = (filePath)-> filePath = Path.join __dirname, "../../../", "public#{filePath}" exists = fs.existsSync filePath if exists content = fs.readFileSync filePath return content else logger.log filePath:filePath, "file does not exist for fingerprints" return "" logger.log "Generating file fingerprints..." pathList = [ ["#{jsPath}libs/require.js"] ["#{jsPath}ide.js"] ["#{jsPath}main.js"] ["#{jsPath}libs.js"] ["#{jsPath}#{ace}/ace.js","#{jsPath}#{ace}/mode-latex.js","#{jsPath}#{ace}/worker-latex.js","#{jsPath}#{ace}/snippets/latex.js"] ["#{jsPath}libs/#{pdfjs}/pdf.js"] ["#{jsPath}libs/#{pdfjs}/pdf.worker.js"] ["#{jsPath}libs/#{pdfjs}/compatibility.js"] ["/stylesheets/style.css"] ["/stylesheets/ol-style.css"] ] for paths in pathList contentList = _.map(paths, getFileContent) content = contentList.join("") hash = crypto.createHash("md5").update(content).digest("hex") _.each paths, (filePath)-> logger.log "#{filePath}: #{hash}" fingerprints[filePath] = hash getFingerprint = (path) -> if fingerprints[path]? return fingerprints[path] else logger.err "No fingerprint for file: #{path}" return "" logger.log "Finished generating file fingerprints" cdnAvailable = Settings.cdn?.web?.host? darkCdnAvailable = Settings.cdn?.web?.darkHost? module.exports = (app, webRouter, privateApiRouter, publicApiRouter)-> webRouter.use (req, res, next)-> res.locals.session = req.session next() addSetContentDisposition = (req, res, next) -> res.setContentDisposition = (type, opts) -> directives = for k, v of opts "#{k}=\"#{encodeURIComponent(v)}\"" contentDispositionValue = "#{type}; #{directives.join('; ')}" res.setHeader( 'Content-Disposition', contentDispositionValue ) next() webRouter.use addSetContentDisposition privateApiRouter.use addSetContentDisposition publicApiRouter.use addSetContentDisposition webRouter.use (req, res, next)-> req.externalAuthenticationSystemUsed = res.locals.externalAuthenticationSystemUsed = -> Settings.ldap? or Settings.saml? or Settings.overleaf?.oauth? next() webRouter.use (req, res, next)-> cdnBlocked = req.query.nocdn == 'true' or req.session.cdnBlocked user_id = AuthenticationController.getLoggedInUserId(req) if cdnBlocked and !req.session.cdnBlocked? logger.log user_id:user_id, ip:req?.ip, "cdnBlocked for user, not using it and turning it off for future requets" req.session.cdnBlocked = true isDark = req.headers?.host?.slice(0,4)?.toLowerCase() == "dark" isSmoke = req.headers?.host?.slice(0,5)?.toLowerCase() == "smoke" isLive = !isDark and !isSmoke if cdnAvailable and isLive and !cdnBlocked staticFilesBase = Settings.cdn?.web?.host else if darkCdnAvailable and isDark staticFilesBase = Settings.cdn?.web?.darkHost else staticFilesBase = "" res.locals.jsPath = jsPath res.locals.fullJsPath = Url.resolve(staticFilesBase, jsPath) res.locals.lib = PackageVersions.lib res.locals.buildJsPath = (jsFile, opts = {})-> path = Path.join(jsPath, jsFile) doFingerPrint = opts.fingerprint != false if !opts.qs? opts.qs = {} if !opts.qs?.fingerprint? and doFingerPrint opts.qs.fingerprint = getFingerprint(path) if opts.cdn != false path = Url.resolve(staticFilesBase, path) qs = querystring.stringify(opts.qs) if qs? and qs.length > 0 path = path + "?" + qs return path res.locals.buildCssPath = (cssFile)-> path = Path.join("/stylesheets/", cssFile) return Url.resolve(staticFilesBase, path) + "?fingerprint=" + getFingerprint(path) res.locals.buildImgPath = (imgFile)-> path = Path.join("/img/", imgFile) return Url.resolve(staticFilesBase, path) next() webRouter.use (req, res, next)-> res.locals.settings = Settings next() webRouter.use (req, res, next)-> res.locals.translate = (key, vars = {}, htmlEncode = false) -> vars.appName = Settings.appName str = req.i18n.translate(key, vars) if htmlEncode then htmlEncoder.htmlEncode(str) else str # Don't include the query string parameters, otherwise Google # treats ?nocdn=true as the canonical version res.locals.currentUrl = Url.parse(req.originalUrl).pathname next() webRouter.use (req, res, next)-> res.locals.getSiteHost = -> Settings.siteUrl.substring(Settings.siteUrl.indexOf("//")+2) next() webRouter.use (req, res, next) -> res.locals.getUserEmail = -> user = AuthenticationController.getSessionUser(req) email = user?.email or "" return email next() webRouter.use (req, res, next)-> res.locals.formatProjectPublicAccessLevel = (privilegeLevel)-> formatedPrivileges = private:"Private", readOnly:"Public: Read Only", readAndWrite:"Public: Read and Write" return formatedPrivileges[privilegeLevel] || "Private" next() webRouter.use (req, res, next)-> res.locals.buildReferalUrl = (referal_medium) -> url = Settings.siteUrl currentUser = AuthenticationController.getSessionUser(req) if currentUser? and currentUser?.referal_id? url+="?r=#{currentUser.referal_id}&rm=#{referal_medium}&rs=b" # Referal source = bonus return url res.locals.getReferalId = -> currentUser = AuthenticationController.getSessionUser(req) if currentUser? and currentUser?.referal_id? return currentUser.referal_id res.locals.getReferalTagLine = -> tagLines = [ "Roar!" "Shout about us!" "Please recommend us" "Tell the world!" "Thanks for using ShareLaTeX" ] return tagLines[Math.floor(Math.random()*tagLines.length)] res.locals.getRedirAsQueryString = -> if req.query.redir? return "?#{querystring.stringify({redir:req.query.redir})}" return "" res.locals.getLoggedInUserId = -> return AuthenticationController.getLoggedInUserId(req) res.locals.isUserLoggedIn = -> return AuthenticationController.isUserLoggedIn(req) res.locals.getSessionUser = -> return AuthenticationController.getSessionUser(req) next() webRouter.use (req, res, next) -> res.locals.csrfToken = req?.csrfToken() next() webRouter.use (req, res, next) -> res.locals.getReqQueryParam = (field)-> return req.query?[field] next() webRouter.use (req, res, next)-> res.locals.fingerprint = getFingerprint next() webRouter.use (req, res, next)-> res.locals.formatPrice = SubscriptionFormatters.formatPrice next() webRouter.use (req, res, next)-> currentUser = AuthenticationController.getSessionUser(req) if currentUser? res.locals.user = email: currentUser.email first_name: currentUser.first_name last_name: currentUser.last_name if req.session.justRegistered res.locals.justRegistered = true delete req.session.justRegistered if req.session.justLoggedIn res.locals.justLoggedIn = true delete req.session.justLoggedIn res.locals.gaToken = Settings.analytics?.ga?.token res.locals.tenderUrl = Settings.tenderUrl res.locals.sentrySrc = Settings.sentry?.src res.locals.sentryPublicDSN = Settings.sentry?.publicDSN next() webRouter.use (req, res, next) -> if req.query? and req.query.scribtex_path? res.locals.lookingForScribtex = true res.locals.scribtexPath = req.query.scribtex_path next() webRouter.use (req, res, next) -> # Clone the nav settings so they can be modified for each request res.locals.nav = {} for key, value of Settings.nav res.locals.nav[key] = _.clone(Settings.nav[key]) res.locals.templates = Settings.templateLinks if res.locals.nav.header console.error {}, "The `nav.header` setting is no longer supported, use `nav.header_extras` instead" next() webRouter.use (req, res, next) -> SystemMessageManager.getMessages (error, messages = []) -> res.locals.systemMessages = messages next() webRouter.use (req, res, next)-> res.locals.query = req.query next() webRouter.use (req, res, next)-> subdomain = _.find Settings.i18n.subdomainLang, (subdomain)-> subdomain.lngCode == req.showUserOtherLng and !subdomain.hide res.locals.recomendSubdomain = subdomain res.locals.currentLngCode = req.lng next() webRouter.use (req, res, next) -> if Settings.reloadModuleViewsOnEachRequest Modules.loadViewIncludes() res.locals.moduleIncludes = Modules.moduleIncludes res.locals.moduleIncludesAvailable = Modules.moduleIncludesAvailable next()