calendar

4.8 KB

1. // project.hl — calendar.worldapi.org: THE CALENDAR. The month view at `/` (ticket #1); login with ident and the
2. // user's private events (ticket #2).
3. import WebFramework from 'hl:web'
4. import { env } from 'hl:proc'
5. import { Response } from 'hl:http1'
6. import { randomBytes } from 'hl:crypto'
8. import Styles from './styles.hl'
9. import { exchangeCode, ensureUser } from './users.hl'
10. import Calendar from './components/calendar.hl'
11. import LoginFailed from './components/loginfailed.hl'
13. static siteName = "Calendar"
15. appTitle = siteName
16. appThemeColor = '#191e23'
17. appBackgroundColor = '#191e23'
18. appIcons = [
19. { src = '/icons/icon-192.png' sizes = '192x192' purpose = 'any' }
20. { src = '/icons/icon-512.png' sizes = '512x512' purpose = 'any' }
21. { src = '/icons/icon-192.png' sizes = '192x192' purpose = 'maskable' }
22. { src = '/icons/icon-512.png' sizes = '512x512' purpose = 'maskable' }
23. ]
24. offline = [ Calendar ]
25. styles = Styles
27. // ---- THE LOGIN BUTTON'S RETURN (ident README "How apps use ident") ----------------------------
28. // BACK TO THE PAGE: /login.js puts `?next=` into the button's return URL at the click. Only a same-origin PATH
29. // goes (one `/`, URL-safe characters, ≤ 500). Anything else → `/`.
30. nextChars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~/?&=%+,;@!$()*:'
31. safePath = (want) => {
32. if (want == null || hlTypeName(want) != 'String' || want == '' || want.length > 500) { return '/' }
33. if (want.slice(0, 1) != '/' || want.slice(0, 2) == '//' || want.slice(0, 7) == '/login/') { return '/' }
34. let i = 0
35. while (i < want.length) {
36. if (!nextChars.includes(want[i])) { return '/' }
37. i = i + 1
38. }
39. return want
40. }
42. // A FAILED LOGIN is a page (components/loginfailed.hl): the reason is parked in the session, then → /login/failed
43. failed = (req, why) => {
44. let s = req.session
45. let fresh = s == null
46. if (fresh) { s = server.sessions.mint() }
47. s.data.loginError = why
48. server.sessions.save(s)
49. let res = new Response('login failed: ' + why, { status = 302 headers = { 'Location' = '/login/failed' 'Cache-Control' = 'no-store' 'Content-Type' = 'text/plain; charset=utf-8' } })
50. if (fresh) { res.headers['Set-Cookie'] = server.sessions.cookieHeader(s.id) }
51. return res
52. }
54. // the function route gets the cookie's session as req.session (hybriel #11); none yet → minted here
55. loginCallback = (route, req) => {
56. if (req.method != 'GET') { return failed(req, 'GET only') }
57. let q = req.query != null ? req.query : {}
58. let code = q.ident_code
59. if (code == null || code == '') { return failed(req, 'ident sent no login code') }
60. let x = exchangeCode(code)
61. if (x.error != null) { return failed(req, x.error) }
62. let u = ensureUser(x.identity)
63. if (u == null) { return failed(req, 'could not store the user') }
64. let s = req.session
65. let fresh = s == null
66. if (fresh) { s = server.sessions.mint() }
67. s.user = { id = u.id }
68. s.data.tag = randomBytes(16)
69. s.data.loginError = null
70. server.sessions.save(s)
71. let res = new Response('logged in', { status = 302 headers = { 'Location' = safePath(q.next) 'Cache-Control' = 'no-store' 'Content-Type' = 'text/plain; charset=utf-8' } })
72. if (fresh) { res.headers['Set-Cookie'] = server.sessions.cookieHeader(s.id) }
73. return res
74. }
78. routes = [
79. { pattern = "/favicon.ico" direct = "" }
80. { pattern = "/login/callback" function = loginCallback }
81. { pattern = "/login/failed" component = LoginFailed }
82. { pattern = "/login.js" file = "./login.js" headers = { 'Cache-Control' = 'no-cache' } }
83. // the installable app (ticket #3): the icons (manifest and service worker are hl:web's own, from appIcons / offline)
84. { pattern = "/icons/icon-192.png" file = "./icons/icon-192.png" headers = { 'Cache-Control' = 'no-cache' } }
85. { pattern = "/icons/icon-512.png" file = "./icons/icon-512.png" headers = { 'Cache-Control' = 'no-cache' } }
86. { pattern = "/" component = Calendar }
87. ]
89. // WHO GETS THE PUSH: the login state reaches the tabs of one session.
90. // `calendarSignedIn` / `calendarSignedOut` go to the tabs of ONE session: the one whose login carries that random tag.
91. tagOf = (session) => { return session != null && session.data != null ? session.data.tag : null }
92. audience = {
93. calendarSignedIn = (tag, session) => { return tag != null && tagOf(session) == tag }
94. calendarSignedOut = (tag, session) => { return tag != null && tagOf(session) == tag }
95. }
97. sessionDir = env('CALENDAR_SESSIONS') != null ? env('CALENDAR_SESSIONS') : null
98. port = env('CALENDAR_PORT') != null ? toNumber(env('CALENDAR_PORT')) : 8380
99. // HL_HOST = the interface hl:web binds: 127.0.0.1 on Byrodin behind nginx; unset = 0.0.0.0 (dev on Loreana).
100. // CALENDAR_WATCH=0 = no dev watcher.
101. watching = env('CALENDAR_WATCH') != '0'
102. // The session idles out after the 14 days of sessionMaxAge, not after 15 minutes.
103. sessionCookie = 'calendarsid'
104. sessionIdle = 1209600
105. server = new WebFramework(routes = routes, styles = styles, minify = true, port = port, watchMode = watching, sessionCookie = sessionCookie)
107. on Error(e) { console.log('error absorbed: ' + e.message) }