108 lines
4.7 KiB
JavaScript
108 lines
4.7 KiB
JavaScript
const fs = require('fs');
|
|
|
|
// middleware
|
|
const multipartMiddleware = require('../../middleware/multipartMiddleware');
|
|
const torCheckMiddleware = require('../../middleware/torCheckMiddleware');
|
|
// route handlers
|
|
const channelAvailability = require('../../controllers/api/channel/availability');
|
|
const channelClaims = require('../../controllers/api/channel/claims');
|
|
const channelData = require('../../controllers/api/channel/data');
|
|
const channelShortId = require('../../controllers/api/channel/shortId');
|
|
const claimAvailability = require('../../controllers/api/claim/availability');
|
|
const claimData = require('../../controllers/api/claim/data/');
|
|
const claimGet = require('../../controllers/api/claim/get');
|
|
const claimList = require('../../controllers/api/claim/list');
|
|
const claimLongId = require('../../controllers/api/claim/longId');
|
|
const claimPublish = require('../../controllers/api/claim/publish');
|
|
const claimResolve = require('../../controllers/api/claim/resolve');
|
|
const claimShortId = require('../../controllers/api/claim/shortId');
|
|
const fileAvailability = require('../../controllers/api/file/availability');
|
|
const userPassword = require('../../controllers/api/user/password');
|
|
const publishingConfig = require('../../controllers/api/config/site/publishing');
|
|
const getTorList = require('../../controllers/api/tor');
|
|
const getBlockedList = require('../../controllers/api/blocked');
|
|
const getOEmbedData = require('../../controllers/api/oEmbed');
|
|
|
|
const logger = require('winston');
|
|
const ipBanFile = '../../../config/ipBan.txt';
|
|
const forbiddenMessage = '<h1>Forbidden</h1>If you are seeing this by mistake, please contact us using <a href="https://chat.lbry.io/">https://chat.lbry.io/</a>';
|
|
|
|
let ipCounts = {};
|
|
let blockedAddresses = [];
|
|
|
|
if(fs.existsSync(ipBanFile)) {
|
|
const lineReader = require('readline').createInterface({
|
|
input: require('fs').createReadStream(ipBanFile),
|
|
});
|
|
|
|
lineReader.on('line', (line) => {
|
|
if(line && line !== '') {
|
|
blockedAddresses.push(line);
|
|
}
|
|
});
|
|
}
|
|
|
|
const autoblockPublishMiddleware = (req, res, next) => {
|
|
let ip = (req.headers['x-forwarded-for'] || req.connection.remoteAddress).split(/,\s?/)[0];
|
|
|
|
if(blockedAddresses.indexOf(ip) !== -1) {
|
|
logger.warn(`Banned IP publish attempt: ${ip}`);
|
|
res.status(403).send(forbiddenMessage);
|
|
res.end();
|
|
|
|
return;
|
|
}
|
|
|
|
let count = ipCounts[ip] = (ipCounts[ip] || 0) + 1;
|
|
|
|
setTimeout(() => {
|
|
ipCounts[ip]--;
|
|
if(ipCounts[ip] === 0) {
|
|
delete ipCounts[ip];
|
|
}
|
|
}, 600000 /* 10 minute retainer */)
|
|
|
|
if(count === 10) {
|
|
logger.error(`Banning IP: ${ip}`);
|
|
blockedAddresses.push(ip);
|
|
res.status(403).send(forbiddenMessage);
|
|
res.end();
|
|
|
|
fs.appendFile(ipBanFile, ip + '\n', () => {});
|
|
} else {
|
|
next();
|
|
}
|
|
}
|
|
|
|
module.exports = {
|
|
// homepage routes
|
|
'/api/homepage/data/channels': { controller: [ torCheckMiddleware, channelData ] },
|
|
|
|
// channel routes
|
|
'/api/channel/availability/:name': { controller: [ torCheckMiddleware, channelAvailability ] },
|
|
'/api/channel/short-id/:longId/:name': { controller: [ torCheckMiddleware, channelShortId ] },
|
|
'/api/channel/data/:channelName/:channelClaimId': { controller: [ torCheckMiddleware, channelData ] },
|
|
'/api/channel/data/:channelName/:channelClaimId': { controller: [ torCheckMiddleware, channelData ] },
|
|
'/api/channel/claims/:channelName/:channelClaimId/:page': { controller: [ torCheckMiddleware, channelClaims ] },
|
|
// claim routes
|
|
'/api/claim/availability/:name': { controller: [ torCheckMiddleware, claimAvailability ] },
|
|
'/api/claim/data/:claimName/:claimId': { controller: [ torCheckMiddleware, claimData ] },
|
|
'/api/claim/get/:name/:claimId': { controller: [ torCheckMiddleware, claimGet ] },
|
|
'/api/claim/list/:name': { controller: [ torCheckMiddleware, claimList ] },
|
|
'/api/claim/long-id': { method: 'post', controller: [ torCheckMiddleware, claimLongId ] }, // note: should be a 'get'
|
|
'/api/claim/publish': { method: 'post', controller: [ torCheckMiddleware, autoblockPublishMiddleware, multipartMiddleware, claimPublish ] },
|
|
'/api/claim/resolve/:name/:claimId': { controller: [ torCheckMiddleware, claimResolve ] },
|
|
'/api/claim/short-id/:longId/:name': { controller: [ torCheckMiddleware, claimShortId ] },
|
|
// file routes
|
|
'/api/file/availability/:name/:claimId': { controller: [ torCheckMiddleware, fileAvailability ] },
|
|
// user routes
|
|
'/api/user/password/': { method: 'put', controller: [ torCheckMiddleware, userPassword ] },
|
|
// configs
|
|
'/api/config/site/publishing': { controller: [ torCheckMiddleware, publishingConfig ] },
|
|
// tor
|
|
'/api/tor': { controller: [ torCheckMiddleware, getTorList ] },
|
|
// blocked
|
|
'/api/blocked': { controller: [ torCheckMiddleware, getBlockedList ] },
|
|
// open embed
|
|
'/api/oembed': { controller: [ torCheckMiddleware, getOEmbedData ] },
|
|
};
|