'use strict'; const validator = require('validator'); const nconf = require('nconf'); const meta = require('../meta'); const user = require('../user'); const posts = require('../posts'); const topics = require('../topics'); const categories = require('../categories'); const privileges = require('../privileges'); const plugins = require('../plugins'); const translator = require('../translator'); const languages = require('../languages'); const apiController = module.exports; apiController.loadConfig = async function (req) { let config = { relative_path: nconf.get('relative_path'), upload_url: nconf.get('upload_url'), assetBaseUrl: `${nconf.get('relative_path')}/assets`, siteTitle: validator.escape(String(meta.config.title || meta.config.browserTitle || 'NodeBB')), browserTitle: validator.escape(String(meta.config.browserTitle || meta.config.title || 'NodeBB')), titleLayout: (meta.config.titleLayout || '{pageTitle} | {browserTitle}').replace(/{/g, '{').replace(/}/g, '}'), showSiteTitle: meta.config.showSiteTitle === 1, minimumTitleLength: meta.config.minimumTitleLength, maximumTitleLength: meta.config.maximumTitleLength, minimumPostLength: meta.config.minimumPostLength, maximumPostLength: meta.config.maximumPostLength, minimumTagsPerTopic: meta.config.minimumTagsPerTopic || 0, maximumTagsPerTopic: meta.config.maximumTagsPerTopic || 5, minimumTagLength: meta.config.minimumTagLength || 3, maximumTagLength: meta.config.maximumTagLength || 15, useOutgoingLinksPage: meta.config.useOutgoingLinksPage === 1, outgoingLinksWhitelist: meta.config.useOutgoingLinksPage === 1 ? meta.config['outgoingLinks:whitelist'] : undefined, allowGuestHandles: meta.config.allowGuestHandles === 1, allowTopicsThumbnail: meta.config.allowTopicsThumbnail === 1, usePagination: meta.config.usePagination === 1, disableChat: meta.config.disableChat === 1, disableChatMessageEditing: meta.config.disableChatMessageEditing === 1, maximumChatMessageLength: meta.config.maximumChatMessageLength || 1000, socketioTransports: nconf.get('socket.io:transports') || ['polling', 'websocket'], socketioOrigins: nconf.get('socket.io:origins'), websocketAddress: nconf.get('socket.io:address') || '', maxReconnectionAttempts: meta.config.maxReconnectionAttempts || 5, reconnectionDelay: meta.config.reconnectionDelay || 1500, topicsPerPage: meta.config.topicsPerPage || 20, postsPerPage: meta.config.postsPerPage || 20, maximumFileSize: meta.config.maximumFileSize, 'theme:id': meta.config['theme:id'], 'theme:src': meta.config['theme:src'], defaultLang: meta.config.defaultLang || 'en-GB', userLang: req.query.lang ? validator.escape(String(req.query.lang)) : (meta.config.defaultLang || 'en-GB'), loggedIn: !!req.user, uid: req.uid, 'cache-buster': meta.config['cache-buster'] || '', requireEmailConfirmation: meta.config.requireEmailConfirmation === 1, topicPostSort: meta.config.topicPostSort || 'oldest_to_newest', categoryTopicSort: meta.config.categoryTopicSort || 'newest_to_oldest', csrf_token: req.uid >= 0 && req.csrfToken && req.csrfToken(), searchEnabled: plugins.hasListeners('filter:search.query'), bootswatchSkin: meta.config.bootswatchSkin || '', enablePostHistory: meta.config.enablePostHistory === 1, timeagoCutoff: meta.config.timeagoCutoff !== '' ? Math.max(0, parseInt(meta.config.timeagoCutoff, 10)) : meta.config.timeagoCutoff, timeagoCodes: languages.timeagoCodes, cookies: { enabled: meta.config.cookieConsentEnabled === 1, message: translator.escape(validator.escape(meta.config.cookieConsentMessage || '[[global:cookies.message]]')).replace(/\\/g, '\\\\'), dismiss: translator.escape(validator.escape(meta.config.cookieConsentDismiss || '[[global:cookies.accept]]')).replace(/\\/g, '\\\\'), link: translator.escape(validator.escape(meta.config.cookieConsentLink || '[[global:cookies.learn_more]]')).replace(/\\/g, '\\\\'), link_url: translator.escape(validator.escape(meta.config.cookieConsentLinkUrl || 'https://www.cookiesandyou.com')).replace(/\\/g, '\\\\'), }, }; let settings = config; if (req.loggedIn) { settings = await user.getSettings(req.uid); } // Handle old skin configs const oldSkins = ['noskin', 'default']; settings.bootswatchSkin = oldSkins.includes(settings.bootswatchSkin) ? '' : settings.bootswatchSkin; config.usePagination = settings.usePagination; config.topicsPerPage = settings.topicsPerPage; config.postsPerPage = settings.postsPerPage; config.userLang = validator.escape(String((req.query.lang ? req.query.lang : null) || settings.userLang || config.defaultLang)); config.acpLang = validator.escape(String((req.query.lang ? req.query.lang : null) || settings.acpLang)); config.openOutgoingLinksInNewTab = settings.openOutgoingLinksInNewTab; config.topicPostSort = settings.topicPostSort || config.topicPostSort; config.categoryTopicSort = settings.categoryTopicSort || config.categoryTopicSort; config.topicSearchEnabled = settings.topicSearchEnabled || false; config.bootswatchSkin = (meta.config.disableCustomUserSkins !== 1 && settings.bootswatchSkin && settings.bootswatchSkin !== '') ? settings.bootswatchSkin : ''; config = await plugins.fireHook('filter:config.get', config); return config; }; apiController.getConfig = async function (req, res) { const config = await apiController.loadConfig(req); res.json(config); }; apiController.getPostData = async function (pid, uid) { const [userPrivileges, post, voted] = await Promise.all([ privileges.posts.get([pid], uid), posts.getPostData(pid), posts.hasVoted(pid, uid), ]); if (!post) { return null; } Object.assign(post, voted); const userPrivilege = userPrivileges[0]; if (!userPrivilege.read || !userPrivilege['topics:read']) { return null; } post.ip = userPrivilege.isAdminOrMod ? post.ip : undefined; const selfPost = uid && uid === parseInt(post.uid, 10); if (post.deleted && !(userPrivilege.isAdminOrMod || selfPost)) { post.content = '[[topic:post_is_deleted]]'; } return post; }; apiController.getTopicData = async function (tid, uid) { const [userPrivileges, topic] = await Promise.all([ privileges.topics.get(tid, uid), topics.getTopicData(tid), ]); if (!topic || !userPrivileges.read || !userPrivileges['topics:read'] || (topic.deleted && !userPrivileges.view_deleted)) { return null; } return topic; }; apiController.getCategoryData = async function (cid, uid) { const [userPrivileges, category] = await Promise.all([ privileges.categories.get(cid, uid), categories.getCategoryData(cid), ]); if (!category || !userPrivileges.read) { return null; } return category; }; apiController.getObject = async function (req, res, next) { const methods = { post: apiController.getPostData, topic: apiController.getTopicData, category: apiController.getCategoryData, }; const method = methods[req.params.type]; if (!method) { return next(); } try { const result = await method(req.params.id, req.uid); if (!result) { return next(); } res.json(result); } catch (err) { next(err); } }; apiController.getModerators = async function (req, res) { const moderators = await categories.getModerators(req.params.cid); res.json({ moderators: moderators }); }; require('../promisify')(apiController, ['getConfig', 'getObject', 'getModerators']);