nodebb/src/middleware/admin.js

'use strict';

var async = require('async');
var winston = require('winston');
var jsesc = require('jsesc');
var nconf = require('nconf');
var semver = require('semver');

var user = require('../user');
var meta = require('../meta');
var plugins = require('../plugins');
var versions = require('../admin/versions');

var controllers = {
	api: require('../controllers/api'),
	helpers: require('../controllers/helpers'),
};

module.exports = function (middleware) {
	middleware.admin = {};
	middleware.admin.isAdmin = function (req, res, next) {
		winston.warn('[middleware.admin.isAdmin] deprecation warning, no need to use this from plugins!');
		middleware.isAdmin(req, res, next);
	};

	middleware.admin.buildHeader = function (req, res, next) {
		res.locals.renderAdminHeader = true;

		async.waterfall([
			function (next) {
				controllers.api.loadConfig(req, next);
			},
			function (config, next) {
				res.locals.config = config;
				next();
			},
		], next);
	};

	middleware.admin.renderHeader = function (req, res, data, next) {
		var custom_header = {
			plugins: [],
			authentication: [],
		};
		res.locals.config = res.locals.config || {};
		async.waterfall([
			function (next) {
				async.parallel({
					userData: function (next) {
						user.getUserFields(req.uid, ['username', 'userslug', 'email', 'picture', 'email:confirmed'], next);
					},
					scripts: function (next) {
						getAdminScripts(next);
					},
					custom_header: function (next) {
						plugins.fireHook('filter:admin.header.build', custom_header, next);
					},
					configs: function (next) {
						meta.configs.list(next);
					},
					latestVersion: function (next) {
						versions.getLatestVersion(function (err, result) {
							if (err) {
								winston.error('[acp] Failed to fetch latest version', err);
							}

							next(null, err ? null : result);
						});
					},
				}, next);
			},
			function (results, next) {
				var userData = results.userData;
				userData.uid = req.uid;
				userData['email:confirmed'] = userData['email:confirmed'] === 1;

				var acpPath = req.path.slice(1).split('/');
				acpPath.forEach(function (path, i) {
					acpPath[i] = path.charAt(0).toUpperCase() + path.slice(1);
				});
				acpPath = acpPath.join(' > ');

				var version = nconf.get('version');

				res.locals.config.userLang = res.locals.config.acpLang || res.locals.config.userLang;
				var templateValues = {
					config: res.locals.config,
					configJSON: jsesc(JSON.stringify(res.locals.config), { isScriptContext: true }),
					relative_path: res.locals.config.relative_path,
					adminConfigJSON: encodeURIComponent(JSON.stringify(results.configs)),
					user: userData,
					userJSON: jsesc(JSON.stringify(userData), { isScriptContext: true }),
					plugins: results.custom_header.plugins,
					authentication: results.custom_header.authentication,
					scripts: results.scripts,
					'cache-buster': meta.config['cache-buster'] || '',
					env: !!process.env.NODE_ENV,
					title: (acpPath || 'Dashboard') + ' | NodeBB Admin Control Panel',
					bodyClass: data.bodyClass,
					version: version,
					latestVersion: results.latestVersion,
					upgradeAvailable: results.latestVersion && semver.gt(results.latestVersion, version),
				};

				templateValues.template = { name: res.locals.template };
				templateValues.template[res.locals.template] = true;

				req.app.render('admin/header', templateValues, next);
			},
		], next);
	};

	function getAdminScripts(callback) {
		async.waterfall([
			function (next) {
				plugins.fireHook('filter:admin.scripts.get', [], next);
			},
			function (scripts, next) {
				next(null, scripts.map(function (script) {
					return { src: script };
				}));
			},
		], callback);
	}

	middleware.admin.renderFooter = function (req, res, data, next) {
		req.app.render('admin/footer', data, next);
	};
};