forked from coolaj86/goldilocks.js
100 lines
2.9 KiB
JavaScript
100 lines
2.9 KiB
JavaScript
'use strict';
|
|
|
|
module.exports.create = function (deps, conf) {
|
|
var PromiseA = require('bluebird');
|
|
var request = PromiseA.promisify(require('request'));
|
|
var pending = {};
|
|
|
|
async function checkPublicAddr(host) {
|
|
var result = await request({
|
|
method: 'GET'
|
|
, url: host+'/api/org.oauth3.tunnel/checkip'
|
|
, json: true
|
|
});
|
|
|
|
if (!result.body) {
|
|
throw new Error('No response body in request for public address');
|
|
}
|
|
if (result.body.error) {
|
|
// Note that the error on the body will probably have a message that overwrites the default
|
|
throw Object.assign(new Error('error in check IP response'), result.body.error);
|
|
}
|
|
return result.body.address;
|
|
}
|
|
|
|
async function checkSinglePort(host, address, port) {
|
|
var crypto = require('crypto');
|
|
var token = crypto.randomBytes(8).toString('hex');
|
|
var keyAuth = crypto.randomBytes(32).toString('hex');
|
|
pending[token] = keyAuth;
|
|
|
|
var reqObj = {
|
|
method: 'POST'
|
|
, url: host+'/api/org.oauth3.tunnel/loopback'
|
|
, json: {
|
|
address: address
|
|
, port: port
|
|
, token: token
|
|
, keyAuthorization: keyAuth
|
|
, iat: Date.now()
|
|
}
|
|
};
|
|
|
|
var result;
|
|
try {
|
|
result = await request(reqObj);
|
|
} catch (err) {
|
|
delete pending[token];
|
|
throw err;
|
|
}
|
|
|
|
delete pending[token];
|
|
if (!result.body) {
|
|
throw new Error('No response body in loopback request for port '+port);
|
|
}
|
|
// If the loopback requests don't go to us then there are all kinds of ways it could
|
|
// error, but none of them really provide much extra information so we don't do
|
|
// anything that will break the PromiseA.all out and mask the other results.
|
|
if (conf.debug && result.body.error) {
|
|
console.log('error on remote side of port '+port+' loopback', result.body.error);
|
|
}
|
|
return !!result.body.success;
|
|
}
|
|
|
|
async function loopback(provider) {
|
|
var directives = await deps.OAUTH3.discover(provider);
|
|
var address = await checkPublicAddr(directives.api);
|
|
console.log('checking to see if', address, 'gets back to us');
|
|
|
|
var ports = require('./servers').listeners.tcp.list();
|
|
var values = await PromiseA.all(ports.map(function (port) {
|
|
return checkSinglePort(directives.api, address, port);
|
|
}));
|
|
|
|
if (conf.debug) {
|
|
console.log('remaining loopback tokens', pending);
|
|
}
|
|
|
|
var result = {error: null, address: address};
|
|
ports.forEach(function (port, ind) {
|
|
result[port] = values[ind];
|
|
});
|
|
return result;
|
|
}
|
|
|
|
loopback.checkPublicAddr = checkPublicAddr;
|
|
loopback.server = require('http').createServer(function (req, res) {
|
|
var parsed = require('url').parse(req.url);
|
|
var token = parsed.pathname.replace('/.well-known/cloud-challenge/', '');
|
|
if (pending[token]) {
|
|
res.setHeader('Content-Type', 'text/plain');
|
|
res.end(pending[token]);
|
|
} else {
|
|
res.statusCode = 404;
|
|
res.end();
|
|
}
|
|
});
|
|
|
|
return loopback;
|
|
};
|