This commit is contained in:
@@ -22,19 +22,19 @@ app.use(
|
|||||||
app.get("/v1/auth", (req, res) => {
|
app.get("/v1/auth", (req, res) => {
|
||||||
let logTime = getLogTime()
|
let logTime = getLogTime()
|
||||||
console.log(logTime);
|
console.log(logTime);
|
||||||
// console.log(req.headers);
|
|
||||||
|
|
||||||
|
|
||||||
// Simple ratelimit
|
// Simple ratelimit
|
||||||
if(ipLog[req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip] !== undefined){
|
if(ipLog[req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]] !== undefined){
|
||||||
if(ipLog[req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip] > Date.now()){
|
if(ipLog[req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]] > Date.now()){
|
||||||
ipLog[req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip] = Date.now() + config.ratelimit
|
ipLog[req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]] = Date.now() + config.ratelimit
|
||||||
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip} HIT RATE LIMIT\n`, { flag: "a" }, callback => {});
|
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]} HIT RATE LIMIT\n`, { flag: "a" }, callback => {});
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
ipLog[req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip] = Date.now() + config.ratelimit
|
ipLog[req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]] = Date.now() + config.ratelimit
|
||||||
let passed = true
|
let passed = true
|
||||||
if(req.headers.username === undefined || req.headers.username.trim() === "" || req.headers.password === undefined || req.headers.password.trim() === "")
|
if(req.headers.username === undefined || req.headers.username.trim() === "" || req.headers.password === undefined || req.headers.password.trim() === "")
|
||||||
passed = false
|
passed = false
|
||||||
@@ -54,12 +54,12 @@ app.get("/v1/auth", (req, res) => {
|
|||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip} API KEY REQUEST ${passed?"SUCCESS":"FAILED"}\n`, { flag: "a" }, callback => {});
|
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]} API KEY REQUEST ${passed?"SUCCESS":"FAILED"}\n`, { flag: "a" }, callback => {});
|
||||||
});
|
});
|
||||||
|
|
||||||
app.get("/admin", (req, res) => {
|
app.get("/admin", (req, res) => {
|
||||||
let logTime = getLogTime()
|
let logTime = getLogTime()
|
||||||
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip} ACCESSED ADMIN PANEL\n`, { flag: "a" }, callback => {});
|
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]} ACCESSED ADMIN PANEL\n`, { flag: "a" }, callback => {});
|
||||||
res.sendFile(__dirname + "/ui/index.html")
|
res.sendFile(__dirname + "/ui/index.html")
|
||||||
})
|
})
|
||||||
|
|
||||||
@@ -84,7 +84,7 @@ app.get("/v1/admin-auth", (req,res) => {
|
|||||||
}else{
|
}else{
|
||||||
res.status(401).json({response:"Unauthorised", code:1})
|
res.status(401).json({response:"Unauthorised", code:1})
|
||||||
}
|
}
|
||||||
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip} LOGGED IN TO ADMIN PANEL ${passed?"SUCCESS":"FAILED"}\n`, { flag: "a" }, callback => {});
|
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]} LOGGED IN TO ADMIN PANEL ${passed?"SUCCESS":"FAILED"}\n`, { flag: "a" }, callback => {});
|
||||||
})
|
})
|
||||||
|
|
||||||
|
|
||||||
@@ -110,7 +110,7 @@ app.put("/v1/api-key", (req, res) => {
|
|||||||
let logTime = getLogTime()
|
let logTime = getLogTime()
|
||||||
let keypassed = checkKey(req.headers.key)
|
let keypassed = checkKey(req.headers.key)
|
||||||
if(!keypassed){
|
if(!keypassed){
|
||||||
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip} TRIED TO ADD NEW API KEY : ${req.body.field} ${req.body.value}\n`, { flag: "a" }, callback => {});
|
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]} TRIED TO ADD NEW API KEY : ${req.body.field} ${req.body.value}\n`, { flag: "a" }, callback => {});
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
if(req.body.value === undefined || req.body.value.trim() === "" || req.body.field === undefined || req.body.field.trim() === ""){
|
if(req.body.value === undefined || req.body.value.trim() === "" || req.body.field === undefined || req.body.field.trim() === ""){
|
||||||
@@ -120,7 +120,7 @@ app.put("/v1/api-key", (req, res) => {
|
|||||||
|
|
||||||
apikeys[req.body.field] = req.body.value
|
apikeys[req.body.field] = req.body.value
|
||||||
fs.writeFile("./db/apikeys.json", JSON.stringify(apikeys, null, 4), "utf8", c => {})
|
fs.writeFile("./db/apikeys.json", JSON.stringify(apikeys, null, 4), "utf8", c => {})
|
||||||
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip} ADDED A NEW API KEY : ${req.body.field} ${req.body.value}\n`, { flag: "a" }, callback => {});
|
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]} ADDED A NEW API KEY : ${req.body.field} ${req.body.value}\n`, { flag: "a" }, callback => {});
|
||||||
res.json({response:"key added", code:0})
|
res.json({response:"key added", code:0})
|
||||||
})
|
})
|
||||||
|
|
||||||
@@ -129,7 +129,7 @@ app.delete("/v1/api-key", (req, res) => {
|
|||||||
let logTime = getLogTime()
|
let logTime = getLogTime()
|
||||||
let keypassed = checkKey(req.headers.key)
|
let keypassed = checkKey(req.headers.key)
|
||||||
if(!keypassed){
|
if(!keypassed){
|
||||||
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip} TRIED TO DELETE API KEY : ${req.body.field}\n`, { flag: "a" }, callback => {});
|
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]} TRIED TO DELETE API KEY : ${req.body.field}\n`, { flag: "a" }, callback => {});
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
if(req.body.field === undefined || req.body.field.trim() === ""){
|
if(req.body.field === undefined || req.body.field.trim() === ""){
|
||||||
@@ -139,7 +139,7 @@ app.delete("/v1/api-key", (req, res) => {
|
|||||||
|
|
||||||
delete apikeys[req.body.field]
|
delete apikeys[req.body.field]
|
||||||
fs.writeFile("./db/apikeys.json", JSON.stringify(apikeys, null, 4), "utf8", c => {})
|
fs.writeFile("./db/apikeys.json", JSON.stringify(apikeys, null, 4), "utf8", c => {})
|
||||||
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip} DELETED API KEY : ${req.body.field}\n`, { flag: "a" }, callback => {});
|
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]} DELETED API KEY : ${req.body.field}\n`, { flag: "a" }, callback => {});
|
||||||
res.json({response:"key removed", code:0})
|
res.json({response:"key removed", code:0})
|
||||||
})
|
})
|
||||||
|
|
||||||
@@ -147,7 +147,7 @@ app.get("/v1/api-key", (req, res) => {
|
|||||||
let logTime = getLogTime()
|
let logTime = getLogTime()
|
||||||
let keypassed = checkKey(req.headers.key)
|
let keypassed = checkKey(req.headers.key)
|
||||||
if(!keypassed){
|
if(!keypassed){
|
||||||
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip} TRIED TO GET API KEYS\n`, { flag: "a" }, callback => {});
|
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]} TRIED TO GET API KEYS\n`, { flag: "a" }, callback => {});
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
res.json(apikeys)
|
res.json(apikeys)
|
||||||
@@ -174,7 +174,7 @@ app.put("/v1/user", (req, res) => {
|
|||||||
let logTime = getLogTime()
|
let logTime = getLogTime()
|
||||||
let keypassed = checkKey(req.headers.key)
|
let keypassed = checkKey(req.headers.key)
|
||||||
if(!keypassed){
|
if(!keypassed){
|
||||||
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip} TRIED TO ADD NEW USER : ${req.body.username}\n`, { flag: "a" }, callback => {});
|
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]} TRIED TO ADD NEW USER : ${req.body.username}\n`, { flag: "a" }, callback => {});
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
if(req.body.username === undefined || req.body.username.trim() === "" || req.body.password === undefined || req.body.password.trim() === ""){
|
if(req.body.username === undefined || req.body.username.trim() === "" || req.body.password === undefined || req.body.password.trim() === ""){
|
||||||
@@ -184,7 +184,7 @@ app.put("/v1/user", (req, res) => {
|
|||||||
|
|
||||||
accounts[req.body.username] = bcrypt.hashSync(req.body.password, 12)
|
accounts[req.body.username] = bcrypt.hashSync(req.body.password, 12)
|
||||||
fs.writeFile("./db/useraccounts.json", JSON.stringify(accounts, null, 4), "utf8", c => {})
|
fs.writeFile("./db/useraccounts.json", JSON.stringify(accounts, null, 4), "utf8", c => {})
|
||||||
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip} ADDED A NEW USER : ${req.body.username}\n`, { flag: "a" }, callback => {});
|
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]} ADDED A NEW USER : ${req.body.username}\n`, { flag: "a" }, callback => {});
|
||||||
res.json({response:"user added", code:0})
|
res.json({response:"user added", code:0})
|
||||||
})
|
})
|
||||||
|
|
||||||
@@ -193,7 +193,7 @@ app.delete("/v1/user", (req, res) => {
|
|||||||
let logTime = getLogTime()
|
let logTime = getLogTime()
|
||||||
let keypassed = checkKey(req.headers.key)
|
let keypassed = checkKey(req.headers.key)
|
||||||
if(!keypassed){
|
if(!keypassed){
|
||||||
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip} TRIED TO DELETE USER : ${req.body.username}\n`, { flag: "a" }, callback => {});
|
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]} TRIED TO DELETE USER : ${req.body.username}\n`, { flag: "a" }, callback => {});
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
if(req.body.username === undefined || req.body.username.trim() === ""){
|
if(req.body.username === undefined || req.body.username.trim() === ""){
|
||||||
@@ -203,7 +203,7 @@ app.delete("/v1/user", (req, res) => {
|
|||||||
|
|
||||||
delete accounts[req.body.username]
|
delete accounts[req.body.username]
|
||||||
fs.writeFile("./db/useraccounts.json", JSON.stringify(accounts, null, 4), "utf8", c => {})
|
fs.writeFile("./db/useraccounts.json", JSON.stringify(accounts, null, 4), "utf8", c => {})
|
||||||
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip} DELETED USER : ${req.body.field}\n`, { flag: "a" }, callback => {});
|
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]} DELETED USER : ${req.body.field}\n`, { flag: "a" }, callback => {});
|
||||||
res.json({response:"user removed", code:0})
|
res.json({response:"user removed", code:0})
|
||||||
})
|
})
|
||||||
|
|
||||||
@@ -211,7 +211,7 @@ app.get("/v1/user", (req, res) => {
|
|||||||
let logTime = getLogTime()
|
let logTime = getLogTime()
|
||||||
let keypassed = checkKey(req.headers.key)
|
let keypassed = checkKey(req.headers.key)
|
||||||
if(!keypassed){
|
if(!keypassed){
|
||||||
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] != undefined ? req.headers["x-forwarded-for"] : req.ip} TRIED TO GET USERS\n`, { flag: "a" }, callback => {});
|
fs.writeFile("access.log", `${logTime} : ${req.headers["x-forwarded-for"] == undefined ? req.ip : req.headers["x-forwarded-for"]} TRIED TO GET USERS\n`, { flag: "a" }, callback => {});
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
res.json(accounts)
|
res.json(accounts)
|
||||||
|
|||||||
Reference in New Issue
Block a user