2017-01-20 22:17:35 -06:00
|
|
|
import * as express from 'express';
|
2017-11-22 22:25:33 -06:00
|
|
|
import * as cookie from 'cookie';
|
|
|
|
import * as uuid from 'uuid';
|
2017-04-14 06:45:37 -05:00
|
|
|
// import * as Twitter from 'twitter';
|
|
|
|
// const Twitter = require('twitter');
|
2017-01-20 22:17:35 -06:00
|
|
|
import autwh from 'autwh';
|
2018-03-28 11:20:40 -05:00
|
|
|
import redis from '../../../db/redis';
|
2018-03-29 06:32:18 -05:00
|
|
|
import User, { pack } from '../../../models/user';
|
2018-04-01 23:33:46 -05:00
|
|
|
import event from '../../../publishers/stream';
|
2018-04-01 23:15:53 -05:00
|
|
|
import config from '../../../config';
|
2017-11-22 22:25:33 -06:00
|
|
|
import signin from '../common/signin';
|
2017-01-20 22:17:35 -06:00
|
|
|
|
|
|
|
module.exports = (app: express.Application) => {
|
2017-12-10 03:08:28 -06:00
|
|
|
function getUserToken(req: express.Request) {
|
2017-12-10 02:50:02 -06:00
|
|
|
// req.headers['cookie'] は常に string ですが、型定義の都合上
|
|
|
|
// string | string[] になっているので string を明示しています
|
|
|
|
return ((req.headers['cookie'] as string || '').match(/i=(!\w+)/) || [null, null])[1];
|
|
|
|
}
|
|
|
|
|
2017-12-10 03:08:28 -06:00
|
|
|
function compareOrigin(req: express.Request) {
|
|
|
|
function normalizeUrl(url: string) {
|
|
|
|
return url[url.length - 1] === '/' ? url.substr(0, url.length - 1) : url;
|
|
|
|
}
|
|
|
|
|
2017-12-10 03:12:39 -06:00
|
|
|
// req.headers['referer'] は常に string ですが、型定義の都合上
|
2017-12-10 03:08:28 -06:00
|
|
|
// string | string[] になっているので string を明示しています
|
|
|
|
const referer = req.headers['referer'] as string;
|
|
|
|
|
|
|
|
return (normalizeUrl(referer) == normalizeUrl(config.url));
|
|
|
|
}
|
|
|
|
|
2017-01-21 04:26:45 -06:00
|
|
|
app.get('/disconnect/twitter', async (req, res): Promise<any> => {
|
2017-12-10 03:08:28 -06:00
|
|
|
if (!compareOrigin(req)) {
|
|
|
|
res.status(400).send('invalid origin');
|
|
|
|
return;
|
|
|
|
}
|
2017-12-10 02:50:02 -06:00
|
|
|
|
2017-12-10 03:08:28 -06:00
|
|
|
const userToken = getUserToken(req);
|
2017-12-10 02:50:02 -06:00
|
|
|
if (userToken == null) return res.send('plz signin');
|
|
|
|
|
2017-01-21 04:26:45 -06:00
|
|
|
const user = await User.findOneAndUpdate({
|
2018-03-27 02:51:12 -05:00
|
|
|
host: null,
|
2018-04-07 13:58:11 -05:00
|
|
|
'token': userToken
|
2017-01-21 04:26:45 -06:00
|
|
|
}, {
|
2017-12-10 02:50:02 -06:00
|
|
|
$set: {
|
2018-04-07 13:58:11 -05:00
|
|
|
'twitter': null
|
2017-12-10 02:50:02 -06:00
|
|
|
}
|
|
|
|
});
|
2017-01-21 04:26:45 -06:00
|
|
|
|
|
|
|
res.send(`Twitterの連携を解除しました :v:`);
|
|
|
|
|
|
|
|
// Publish i updated event
|
2018-02-01 17:21:30 -06:00
|
|
|
event(user._id, 'i_updated', await pack(user, user, {
|
2017-01-21 04:26:45 -06:00
|
|
|
detail: true,
|
|
|
|
includeSecrets: true
|
|
|
|
}));
|
|
|
|
});
|
|
|
|
|
2017-01-21 00:31:16 -06:00
|
|
|
if (config.twitter == null) {
|
|
|
|
app.get('/connect/twitter', (req, res) => {
|
2017-11-22 22:25:33 -06:00
|
|
|
res.send('現在Twitterへ接続できません (このインスタンスではTwitterはサポートされていません)');
|
2017-01-21 00:31:16 -06:00
|
|
|
});
|
2017-11-22 22:25:33 -06:00
|
|
|
|
|
|
|
app.get('/signin/twitter', (req, res) => {
|
|
|
|
res.send('現在Twitterへ接続できません (このインスタンスではTwitterはサポートされていません)');
|
|
|
|
});
|
|
|
|
|
2017-01-21 00:31:16 -06:00
|
|
|
return;
|
|
|
|
}
|
2017-01-20 22:17:35 -06:00
|
|
|
|
|
|
|
const twAuth = autwh({
|
|
|
|
consumerKey: config.twitter.consumer_key,
|
2018-04-09 06:03:38 -05:00
|
|
|
consumerSecret: config.twitter.consumer_secret,
|
|
|
|
callbackUrl: `${config.url}/api/tw/cb`
|
2017-01-20 22:17:35 -06:00
|
|
|
});
|
|
|
|
|
2017-01-20 23:41:35 -06:00
|
|
|
app.get('/connect/twitter', async (req, res): Promise<any> => {
|
2017-12-10 03:08:28 -06:00
|
|
|
if (!compareOrigin(req)) {
|
|
|
|
res.status(400).send('invalid origin');
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2017-12-10 02:50:02 -06:00
|
|
|
const userToken = getUserToken(req);
|
|
|
|
if (userToken == null) return res.send('plz signin');
|
2017-12-10 03:08:28 -06:00
|
|
|
|
2017-01-20 22:17:35 -06:00
|
|
|
const ctx = await twAuth.begin();
|
2017-12-10 02:50:02 -06:00
|
|
|
redis.set(userToken, JSON.stringify(ctx));
|
2017-01-20 22:17:35 -06:00
|
|
|
res.redirect(ctx.url);
|
|
|
|
});
|
|
|
|
|
2017-11-22 22:25:33 -06:00
|
|
|
app.get('/signin/twitter', async (req, res): Promise<any> => {
|
2017-11-23 00:59:32 -06:00
|
|
|
const ctx = await twAuth.begin();
|
2017-11-22 22:25:33 -06:00
|
|
|
|
|
|
|
const sessid = uuid();
|
|
|
|
|
|
|
|
redis.set(sessid, JSON.stringify(ctx));
|
|
|
|
|
|
|
|
const expires = 1000 * 60 * 60; // 1h
|
|
|
|
res.cookie('signin_with_twitter_session_id', sessid, {
|
|
|
|
path: '/',
|
|
|
|
domain: `.${config.host}`,
|
|
|
|
secure: config.url.substr(0, 5) === 'https',
|
|
|
|
httpOnly: true,
|
|
|
|
expires: new Date(Date.now() + expires),
|
|
|
|
maxAge: expires
|
|
|
|
});
|
|
|
|
|
|
|
|
res.redirect(ctx.url);
|
|
|
|
});
|
|
|
|
|
2017-11-23 00:59:32 -06:00
|
|
|
app.get('/tw/cb', (req, res): any => {
|
2017-12-10 02:50:02 -06:00
|
|
|
const userToken = getUserToken(req);
|
|
|
|
|
|
|
|
if (userToken == null) {
|
2017-11-23 00:59:32 -06:00
|
|
|
// req.headers['cookie'] は常に string ですが、型定義の都合上
|
|
|
|
// string | string[] になっているので string を明示しています
|
|
|
|
const cookies = cookie.parse((req.headers['cookie'] as string || ''));
|
2017-11-22 22:25:33 -06:00
|
|
|
|
2017-11-23 00:59:32 -06:00
|
|
|
const sessid = cookies['signin_with_twitter_session_id'];
|
2017-11-22 22:25:33 -06:00
|
|
|
|
2017-11-23 00:59:32 -06:00
|
|
|
if (sessid == undefined) {
|
|
|
|
res.status(400).send('invalid session');
|
2017-12-10 03:08:28 -06:00
|
|
|
return;
|
2017-11-23 00:59:32 -06:00
|
|
|
}
|
|
|
|
|
|
|
|
redis.get(sessid, async (_, ctx) => {
|
|
|
|
const result = await twAuth.done(JSON.parse(ctx), req.query.oauth_verifier);
|
2017-11-22 22:25:33 -06:00
|
|
|
|
2017-11-23 00:59:32 -06:00
|
|
|
const user = await User.findOne({
|
2018-03-27 02:51:12 -05:00
|
|
|
host: null,
|
2018-04-07 13:58:11 -05:00
|
|
|
'twitter.userId': result.userId
|
2017-11-23 00:59:32 -06:00
|
|
|
});
|
2017-11-22 22:25:33 -06:00
|
|
|
|
2017-11-23 00:59:32 -06:00
|
|
|
if (user == null) {
|
|
|
|
res.status(404).send(`@${result.screenName}と連携しているMisskeyアカウントはありませんでした...`);
|
2017-12-10 03:08:28 -06:00
|
|
|
return;
|
2017-11-23 00:59:32 -06:00
|
|
|
}
|
|
|
|
|
|
|
|
signin(res, user, true);
|
2017-11-22 22:25:33 -06:00
|
|
|
});
|
2017-11-23 00:59:32 -06:00
|
|
|
} else {
|
2017-12-10 03:08:28 -06:00
|
|
|
const verifier = req.query.oauth_verifier;
|
|
|
|
|
|
|
|
if (verifier == null) {
|
|
|
|
res.status(400).send('invalid session');
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2017-12-10 02:50:02 -06:00
|
|
|
redis.get(userToken, async (_, ctx) => {
|
2017-12-10 03:08:28 -06:00
|
|
|
const result = await twAuth.done(JSON.parse(ctx), verifier);
|
2017-11-23 00:59:32 -06:00
|
|
|
|
|
|
|
const user = await User.findOneAndUpdate({
|
2018-03-27 02:51:12 -05:00
|
|
|
host: null,
|
2018-04-07 13:58:11 -05:00
|
|
|
'token': userToken
|
2017-11-23 00:59:32 -06:00
|
|
|
}, {
|
|
|
|
$set: {
|
2018-04-07 13:58:11 -05:00
|
|
|
'twitter': {
|
2018-03-29 00:48:47 -05:00
|
|
|
accessToken: result.accessToken,
|
|
|
|
accessTokenSecret: result.accessTokenSecret,
|
|
|
|
userId: result.userId,
|
|
|
|
screenName: result.screenName
|
2017-11-23 00:59:32 -06:00
|
|
|
}
|
|
|
|
}
|
|
|
|
});
|
2017-11-22 22:25:33 -06:00
|
|
|
|
2017-11-23 00:59:32 -06:00
|
|
|
res.send(`Twitter: @${result.screenName} を、Misskey: @${user.username} に接続しました!`);
|
2017-11-22 22:25:33 -06:00
|
|
|
|
2017-11-23 00:59:32 -06:00
|
|
|
// Publish i updated event
|
2018-02-03 23:52:33 -06:00
|
|
|
event(user._id, 'i_updated', await pack(user, user, {
|
2017-11-23 00:59:32 -06:00
|
|
|
detail: true,
|
|
|
|
includeSecrets: true
|
|
|
|
}));
|
|
|
|
});
|
|
|
|
}
|
2017-11-22 22:25:33 -06:00
|
|
|
});
|
2017-01-20 22:17:35 -06:00
|
|
|
};
|