app.js

let cookieParser = require('cookie-parser');
let moment = require('moment');

var sysUtils = require('./utils');

console.log("");
console.log("Starting Iframely...");
console.log("Base URL for embeds that require hosted renders:", CONFIG.baseAppUrl);

if (!CONFIG.baseAppUrl) {
  console.warn('Warning: CONFIG.baseAppUrl not set, default value used');
}

var path = require('path');
var express = require('express');
var jsonxml = require('jsontoxml');

var NotFound = sysUtils.NotFound;

var app = express();

app.set('view engine', 'ejs');

if (CONFIG.allowedOrigins) {
  app.use(function(req, res, next) {
    var origin = req.headers["origin"];

    if (origin) {
      if (CONFIG.allowedOrigins.indexOf('*') > -1) {
        res.setHeader('Access-Control-Allow-Origin', '*');
      } else {
        if (CONFIG.allowedOrigins.indexOf(origin) > -1) {
          res.setHeader('Access-Control-Allow-Origin', origin);
        }
      }
    }
    next();
  });
}
app.disable( 'x-powered-by' );
app.use(function(req, res, next) {
  res.setHeader('X-Powered-By', 'Iframely');
  next();
});

app.use(cookieParser());

app.use(async function(req, res, next) {
	let sessionResult = await global.env.mongo.db('live').collection('sessions').findOne({
		token: req.cookies.sessionid,
		expires: {
			$gt: moment.utc().toDate()
		},
		logout: null
	});

	if (sessionResult == null || sessionResult.length === 0) {
	    req.user = null;
	}
	else {
	  req.user = await global.env.mongo.db('live').collection('users').findOne({
          _id: sessionResult.user_id
      });
    }

	next();
});

app.use(sysUtils.cacheMiddleware);


require('./modules/api/views')(app);
require('./modules/debug/views')(app);
require('./modules/tests-ui/views')(app);

app.use(logErrors);
app.use(errorHandler);


function logErrors(err, req, res, next) {
  if (CONFIG.RICH_LOG_ENABLED) {
    console.error(err.stack);
  } else {
    console.log(err.message);
  }

  next(err);
}

function respondWithError(req, res, code, msg, messages) {
  var err = {
    error: {
      source: 'iframely',
      code: code,
      message: msg
    }
  };

  if (messages) {
    err.error.messages = messages;
  }

  var ttl;
  if (code === 404) {
    ttl = CONFIG.CACHE_TTL_PAGE_404;
  } else if (code === 408) {
    ttl = CONFIG.CACHE_TTL_PAGE_TIMEOUT;
  } else {
    ttl = CONFIG.CACHE_TTL_PAGE_OTHER_ERROR
  }

  if (req.query.format === 'xml') {

    var xmlError = jsonxml(err, {
      escape: true,
      xmlHeader: {
        standalone: true
      }
    });

    res.sendCached('text/xml', xmlError, {
      code: code,
      ttl: ttl
    });

  } else {

    res.sendJsonCached(err, {
      code: code,
      ttl: ttl
    });
  }
}

var proxyErrorCodes = [401, 403, 408];

function errorHandler(err, req, res, next) {
  console.log(err.code);
  if (err instanceof NotFound) {
    respondWithError(req, res, 404, err.message, err.messages);
  } else {
    var code = err.code || 500;
    proxyErrorCodes.map(function(e) {
      if (err.message.indexOf(e) > - 1) {
        code = e;
      }
    });

    var message = 'Server error';

    if (code === 401) {
      message = 'Unauthorized';
    }
    else if (code === 403) {
      message = 'Forbidden';
    }
    else if (code === 404) {
      message = 'Not found';
    }
    else if (code === 408) {
      message = 'Timeout';
    }
    else if (code === 410) {
      message = 'Gone';
    }
    else if (code === 415 || code === 417) {
      message = err.message || 'Unsupported Media Type';
    }

    respondWithError(req, res, code, message, err.messages);
  }
}

process.on('uncaughtException', function(err) {
  if (CONFIG.DEBUG) {
    console.log(err.stack);
  } else {
    console.log(err.message);
  }
});

if (!CONFIG.DISABLE_SERVE_STATIC) {
  // This code not compatible with 'supertest' (in e2e.js)
  // Disabled for tests.
  app.use(CONFIG.relativeStaticUrl, express.static('static'));
}

app.get('/', function(req, res) {
  res.writeHead(302, { Location: 'http://iframely.com'});
  res.end();
});

process.title = "iframely";
process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";

module.exports = app;