62cbc451aa
Move object ID, token, and random string generation into their own module, cryptoUtils. Remove hat dependency, which was used to generate session and some other tokens, because it used non-cryptographic random number generator. Replace it with the cryptographically secure one. The result has the same format (32-character hex string, 128 bits of entropy). Remove randomstring dependency, as we already have this functionality. Add tests.
74 lines
2.1 KiB
JavaScript
74 lines
2.1 KiB
JavaScript
// testing-routes.js
|
|
|
|
var express = require('express'),
|
|
cache = require('./cache'),
|
|
middlewares = require('./middlewares'),
|
|
cryptoUtils = require('./cryptoUtils');
|
|
|
|
var router = express.Router();
|
|
|
|
// creates a unique app in the cache, with a collection prefix
|
|
function createApp(req, res) {
|
|
var appId = cryptoUtils.randomHexString(32);
|
|
cache.apps[appId] = {
|
|
'collectionPrefix': appId + '_',
|
|
'masterKey': 'master'
|
|
};
|
|
var keys = {
|
|
'application_id': appId,
|
|
'client_key': 'unused',
|
|
'windows_key': 'unused',
|
|
'javascript_key': 'unused',
|
|
'webhook_key': 'unused',
|
|
'rest_api_key': 'unused',
|
|
'master_key': 'master'
|
|
};
|
|
res.status(200).send(keys);
|
|
}
|
|
|
|
// deletes all collections with the collectionPrefix of the app
|
|
function clearApp(req, res) {
|
|
if (!req.auth.isMaster) {
|
|
return res.status(401).send({"error": "unauthorized"});
|
|
}
|
|
req.database.deleteEverything().then(() => {
|
|
res.status(200).send({});
|
|
});
|
|
}
|
|
|
|
// deletes all collections and drops the app from cache
|
|
function dropApp(req, res) {
|
|
if (!req.auth.isMaster) {
|
|
return res.status(401).send({"error": "unauthorized"});
|
|
}
|
|
req.database.deleteEverything().then(() => {
|
|
delete cache.apps[req.config.applicationId];
|
|
res.status(200).send({});
|
|
});
|
|
}
|
|
|
|
// Lets just return a success response and see what happens.
|
|
function notImplementedYet(req, res) {
|
|
res.status(200).send({});
|
|
}
|
|
|
|
router.post('/rest_clear_app',
|
|
middlewares.handleParseHeaders, clearApp);
|
|
router.post('/rest_block',
|
|
middlewares.handleParseHeaders, notImplementedYet);
|
|
router.post('/rest_mock_v8_client',
|
|
middlewares.handleParseHeaders, notImplementedYet);
|
|
router.post('/rest_unmock_v8_client',
|
|
middlewares.handleParseHeaders, notImplementedYet);
|
|
router.post('/rest_verify_analytics',
|
|
middlewares.handleParseHeaders, notImplementedYet);
|
|
router.post('/rest_create_app', createApp);
|
|
router.post('/rest_drop_app',
|
|
middlewares.handleParseHeaders, dropApp);
|
|
router.post('/rest_configure_app',
|
|
middlewares.handleParseHeaders, notImplementedYet);
|
|
|
|
module.exports = {
|
|
router: router
|
|
};
|