nodebb/src/socket.io/index.js

"use strict";

var	SocketIO = require('socket.io');
var socketioWildcard = require('socketio-wildcard')();
var async = require('async');
var nconf = require('nconf');
var cookieParser = require('cookie-parser')(nconf.get('secret'));
var winston = require('winston');
var url = require('url');

var db = require('../database');
var logger = require('../logger');
var ratelimit = require('../middleware/ratelimit');

(function(Sockets) {
	var Namespaces = {};
	var io;

	Sockets.init = function (server) {
		requireModules();

		io = new SocketIO({
			path: nconf.get('relative_path') + '/socket.io'
		});

		addRedisAdapter(io);

		io.use(socketioWildcard);
		io.use(authorize);

		io.on('connection', onConnection);

		io.listen(server, {
			transports: nconf.get('socket.io:transports')
		});

		Sockets.server = io;
	};

	function onConnection(socket) {
		socket.ip = socket.request.headers['x-forwarded-for'] || socket.request.connection.remoteAddress;

		logger.io_one(socket, socket.uid);

		onConnect(socket);

		socket.on('*', function (payload) {
			onMessage(socket, payload);
		});
	}

	function onConnect(socket) {
		if (socket.uid) {
			socket.join('uid_' + socket.uid);
			socket.join('online_users');
		} else {
			socket.join('online_guests');
		}
	}

	function onMessage(socket, payload) {
		if (!payload.data.length) {
			return winston.warn('[socket.io] Empty payload');
		}

		var eventName = payload.data[0];
		var params = payload.data[1];
		var callback = typeof payload.data[payload.data.length - 1] === 'function' ? payload.data[payload.data.length - 1] : function () {
		};

		if (!eventName) {
			return winston.warn('[socket.io] Empty method name');
		}

		var parts = eventName.toString().split('.');
		var namespace = parts[0];
		var methodToCall = parts.reduce(function (prev, cur) {
			if (prev !== null && prev[cur]) {
				return prev[cur];
			} else {
				return null;
			}
		}, Namespaces);

		if (!methodToCall) {
			if (process.env.NODE_ENV === 'development') {
				winston.warn('[socket.io] Unrecognized message: ' + eventName);
			}
			return;
		}

		socket.previousEvents = socket.previousEvents || [];
		socket.previousEvents.push(eventName);
		if (socket.previousEvents.length > 20) {
			socket.previousEvents.shift();
		}

		if (!eventName.startsWith('admin.') && ratelimit.isFlooding(socket)) {
			winston.warn('[socket.io] Too many emits! Disconnecting uid : ' + socket.uid + '. Events : ' + socket.previousEvents);
			return socket.disconnect();
		}

		async.waterfall([
			function (next) {
				validateSession(socket, next);
			},
			function (next) {
				if (Namespaces[namespace].before) {
					Namespaces[namespace].before(socket, eventName, params, next);
				} else {
					next();
				}
			},
			function (next) {
				methodToCall(socket, params, next);
			}
		], function (err, result) {
			callback(err ? {message: err.message} : null, result);
		});
	}

	function requireModules() {
		var modules = ['admin', 'categories', 'groups', 'meta', 'modules',
			'notifications', 'plugins', 'posts', 'topics', 'user', 'blacklist'
		];

		modules.forEach(function (module) {
			Namespaces[module] = require('./' + module);
		});
	}

	function validateSession(socket, callback) {
		var req = socket.request;
		if (!req.signedCookies || !req.signedCookies['express.sid']) {
			return callback(new Error('[[error:invalid-session]]'));
		}
		db.sessionStore.get(req.signedCookies['express.sid'], function (err, sessionData) {
			if (err || !sessionData) {
				return callback(err || new Error('[[error:invalid-session]]'));
			}

			callback();
		});
	}

	function authorize(socket, callback) {
		var request = socket.request;

		if (!request) {
			return callback(new Error('[[error:not-authorized]]'));
		}

		async.waterfall([
			function (next) {
				cookieParser(request, {}, next);
			},
			function (next) {
				db.sessionStore.get(request.signedCookies['express.sid'], function (err, sessionData) {
					if (err) {
						return next(err);
					}
					if (sessionData && sessionData.passport && sessionData.passport.user) {
						request.session = sessionData;
						socket.uid = parseInt(sessionData.passport.user, 10);
					} else {
						socket.uid = 0;
					}
					next();
				});
			}
		], callback);
	}

	function addRedisAdapter(io) {
		if (nconf.get('redis')) {
			var redisAdapter = require('socket.io-redis');
			var redis = require('../database/redis');
			var pub = redis.connect({return_buffers: true});
			var sub = redis.connect({return_buffers: true});

			io.adapter(redisAdapter({pubClient: pub, subClient: sub}));
		} else if (nconf.get('isCluster') === 'true') {
			winston.warn('[socket.io] Clustering detected, you are advised to configure Redis as a websocket store.');
		}
	}

	Sockets.in = function (room) {
		return io.in(room);
	};

	Sockets.getUserSocketCount = function (uid) {
		if (!io) {
			return 0;
		}

		var room = io.sockets.adapter.rooms['uid_' + uid];
		return room ? room.length : 0;
	};


	Sockets.reqFromSocket = function (socket, payload, event) {
		var headers = socket.request.headers;
		var host = headers.host;
		var referer = headers.referer || '';
		var data = ((payload || {}).data || []);

		if (!host) {
			host = url.parse(referer).host;
		}

		return {
			uid: socket.uid,
			params: data[1],
			method: event || data[0],
			body: payload,
			ip: headers['x-forwarded-for'] || socket.ip,
			host: host,
			protocol: socket.request.connection.encrypted ? 'https' : 'http',
			secure: !!socket.request.connection.encrypted,
			url: referer,
			path: referer.substr(referer.indexOf(host) + host.length),
			headers: headers
		};
	};

})(exports);