mirrors/bibliogram
1
0
Fork 0
mirror of https://git.sr.ht/~cadence/bibliogram synced 2025-12-17 03:28:49 +00:00
Code Issues Projects Releases Wiki Activity

Add settings restore link

Browse Source
This commit is contained in:
Cadence Ember
2020-06-19 19:12:43 +12:00
parent 21875a8e83
commit 0c16c027e9
4 changed files with 34 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
src/site/api/settings.js
View File

@@ -8,6 +8,7 @@ const db = require("../../lib/db")
module.exports = [
{
route: "/settings", methods: ["GET"], code: async ({req, url}) => {
const token = getToken(req)
const settings = getSettings(req)
// console.log(settings)
const csrf = generateCSRF()
@@ -19,6 +20,7 @@ module.exports = [
returnURL: url.searchParams.get("referrer") || "/",
constants,
settings,
token,
csrf,
status,
message
@@ -28,7 +30,7 @@ module.exports = [
{
route: "/settings/(stay|return)", methods: ["POST"], upload: true, code: async ({req, body, fill, url}) => {
const action = fill[0]
const oldToken = getToken(req)
const token = getToken(req)
const params = new URLSearchParams(body.toString())
if (!checkCSRF(params.get("csrf"))) {
const returnParams = new URLSearchParams()
@@ -55,14 +57,17 @@ module.exports = [
prepared[setting.name] = valueCorrectType
}
// console.log(prepared)
const checkPrepared = db.prepare("SELECT token FROM UserSettings WHERE token = ?")
do {
prepared.token = crypto.randomBytes(16).toString("hex")
} while (checkPrepared.get(prepared.token))
if (token) {
prepared.token = token
} else {
const checkPrepared = db.prepare("SELECT token FROM UserSettings WHERE token = ?")
do {
prepared.token = crypto.randomBytes(16).toString("hex")
} while (checkPrepared.get(prepared.token))
}
prepared.created = Date.now()
const fields = constants.user_settings.map(s => s.name)
db.prepare(`INSERT INTO UserSettings (token, created, ${fields.join(", ")}) VALUES (@token, @created, ${fields.map(f => "@"+f).join(", ")})`).run(prepared)
db.prepare("DELETE FROM UserSettings WHERE token = ?").run(oldToken)
db.prepare(`REPLACE INTO UserSettings (token, created, ${fields.join(", ")}) VALUES (@token, @created, ${fields.map(f => "@"+f).join(", ")})`).run(prepared)
const expires = new Date(Date.now() + 4000*24*60*60*1000).toUTCString()
let location
if (action === "return" && url.searchParams.has("referrer")) {
@@ -86,5 +91,19 @@ module.exports = [
content: "Redirecting..."
}
}
},
{
route: "/applysettings/([0-9a-f]+)", methods: ["GET"], code: async ({fill}) => {
const expires = new Date(Date.now() + 4000*24*60*60*1000).toUTCString()
return {
statusCode: 302,
headers: {
"Location": "/",
"Set-Cookie": `settings=${fill[0]}; Path=/; Expires=${expires}; SameSite=Lax`
},
contentType: "text/html; charset=UTF-8",
content: "Settings restored. Redirecting..."
}
}
}
]

4
src/site/api/utils/getsettings.js
View File

@@ -1,5 +1,5 @@
const crypto = require("crypto")
const {parse} = require("cookie")
const {parse: parseCookie} = require("cookie")
const constants = require("../../../lib/constants")
const db = require("../../../lib/db")
@@ -22,7 +22,7 @@ function addDefaults(input = {}) {
function getToken(req) {
if (!req.headers.cookie) return null
const cookie = parse(req.headers.cookie)
const cookie = parseCookie(req.headers.cookie)
const token = cookie.settings
if (token) return token
else return null