68 lines
2.1 KiB
JavaScript
68 lines
2.1 KiB
JavaScript
import path from "path";
|
|
import fs from "fs"
|
|
|
|
const failureFile = fs.readFileSync("Checkfailed.html", "utf8");
|
|
|
|
export async function masqrCheck(config) {
|
|
return async (req, res, next) => {
|
|
if (req.headers.host && config.whitelist.includes(req.headers.host)) {
|
|
next();
|
|
return;
|
|
}
|
|
const authheader = req.headers.authorization;
|
|
if (req.cookies["authcheck"]) {
|
|
next();
|
|
return;
|
|
}
|
|
|
|
if (req.cookies["refreshcheck"] != "true") {
|
|
res.cookie("refreshcheck", "true", { maxAge: 10000 }); // 10s refresh check
|
|
MasqFail(req, res);
|
|
return;
|
|
}
|
|
|
|
if (!authheader) {
|
|
res.setHeader("WWW-Authenticate", "Basic");
|
|
res.status(401);
|
|
MasqFail(req, res);
|
|
return;
|
|
}
|
|
|
|
const auth = Buffer.from(authheader.split(" ")[1], "base64").toString().split(":");
|
|
const pass = auth[1];
|
|
|
|
const licenseCheck = (
|
|
await (await fetch(config.licenseServer + pass + "&host=" + req.headers.host)).json()
|
|
)["status"];
|
|
if (licenseCheck == "License valid") {
|
|
res.cookie("authcheck", "true", {
|
|
expires: new Date(Date.now() + 365 * 24 * 60 * 60 * 1000),
|
|
}); // authorize session, for like a year, by then the link will be expired lol
|
|
res.send(`<script> window.location.href = window.location.href </script>`); // fun hack to make the browser refresh and remove the auth params from the URL
|
|
return;
|
|
}
|
|
|
|
MasqFail(req, res);
|
|
return;
|
|
};
|
|
}
|
|
|
|
async function MasqFail(req, res) {
|
|
if (!req.headers.host) {
|
|
return;
|
|
}
|
|
const unsafeSuffix = req.headers.host + ".html";
|
|
let safeSuffix = path.normalize(unsafeSuffix).replace(/^(\.\.(\/|\\|$))+/, "");
|
|
let safeJoin = path.join(process.cwd() + "/Masqrd", safeSuffix);
|
|
try {
|
|
await fs.promises.access(safeJoin); // man do I wish this was an if-then instead of a "exception on fail"
|
|
const failureFileLocal = await fs.promises.readFile(safeJoin, "utf8");
|
|
res.setHeader("Content-Type", "text/html");
|
|
res.send(failureFileLocal);
|
|
return;
|
|
} catch (e) {
|
|
res.setHeader("Content-Type", "text/html");
|
|
res.send(failureFile);
|
|
return;
|
|
}
|
|
}
|