2033 lines
95 KiB
JavaScript
2033 lines
95 KiB
JavaScript
var express = require('express');
|
|
var fs = require('fs');
|
|
var bodyParser = require('body-parser');
|
|
var os = require('os');
|
|
var moment = require('moment');
|
|
var request = require('request');
|
|
var execSync = require('child_process').execSync;
|
|
var exec = require('child_process').exec;
|
|
var spawn = require('child_process').spawn;
|
|
var httpProxy = require('http-proxy');
|
|
var onvif = require('node-onvif');
|
|
var proxy = httpProxy.createProxyServer({})
|
|
var ejs = require('ejs');
|
|
var CircularJSON = require('circular-json');
|
|
module.exports = function(s,config,lang,app,io){
|
|
if(config.productType==='Pro'){
|
|
var LdapAuth = require('ldapauth-fork');
|
|
}
|
|
s.renderPage = function(req,res,paths,passables,callback){
|
|
passables.window = {}
|
|
passables.originalURL = s.getOriginalUrl(req)
|
|
passables.config = config
|
|
res.render(paths,passables,callback)
|
|
}
|
|
//child node proxy check
|
|
//params = parameters
|
|
//cb = callback
|
|
//res = response, only needed for express (http server)
|
|
//request = request, only needed for express (http server)
|
|
s.checkChildProxy = function(params,cb,res,req){
|
|
if(s.group[params.ke] && s.group[params.ke].mon[params.id] && s.group[params.ke].mon[params.id].childNode){
|
|
var url = 'http://' + s.group[params.ke].mon[params.id].childNode// + req.originalUrl
|
|
proxy.web(req, res, { target: url })
|
|
}else{
|
|
cb()
|
|
}
|
|
}
|
|
s.closeJsonResponse = function(res,endData){
|
|
res.setHeader('Content-Type', 'application/json')
|
|
res.end(s.prettyPrint(endData))
|
|
}
|
|
//get post data
|
|
s.getPostData = function(req,target,parseJSON){
|
|
if(!target)target = 'data'
|
|
if(!parseJSON)parseJSON = true
|
|
var postData = false
|
|
if(req.query && req.query[target]){
|
|
postData = req.query[target]
|
|
}else{
|
|
postData = req.body[target]
|
|
}
|
|
if(parseJSON === true){
|
|
postData = s.parseJSON(postData)
|
|
}
|
|
return postData
|
|
}
|
|
//get client ip address
|
|
s.getClientIp = function(req){
|
|
return req.headers['cf-connecting-ip']||req.headers["CF-Connecting-IP"]||req.headers["'x-forwarded-for"]||req.connection.remoteAddress;
|
|
}
|
|
////Pages
|
|
app.enable('trust proxy');
|
|
if(config.webPaths.home !== '/'){
|
|
app.use('/libs',express.static(s.mainDirectory + '/web/libs'))
|
|
}
|
|
app.use(s.checkCorrectPathEnding(config.webPaths.home)+'libs',express.static(s.mainDirectory + '/web/libs'))
|
|
app.use(s.checkCorrectPathEnding(config.webPaths.admin)+'libs',express.static(s.mainDirectory + '/web/libs'))
|
|
app.use(s.checkCorrectPathEnding(config.webPaths.super)+'libs',express.static(s.mainDirectory + '/web/libs'))
|
|
app.use(bodyParser.json());
|
|
app.use(bodyParser.urlencoded({extended: true}));
|
|
app.use(function (req,res,next){
|
|
res.header("Access-Control-Allow-Origin",req.headers.origin);
|
|
next()
|
|
})
|
|
app.set('views', s.mainDirectory + '/web');
|
|
app.set('view engine','ejs');
|
|
//add template handler
|
|
if(config.renderPaths.handler!==undefined){require(s.mainDirectory+'/web/'+config.renderPaths.handler+'.js').addHandlers(s,app,io,config)}
|
|
|
|
/**
|
|
* API : Logout
|
|
*/
|
|
app.get(config.webPaths.apiPrefix+':auth/logout/:ke/:id', function (req,res){
|
|
if(s.group[req.params.ke]&&s.group[req.params.ke].users[req.params.auth]){
|
|
delete(s.api[req.params.auth]);
|
|
delete(s.group[req.params.ke].users[req.params.auth]);
|
|
s.sqlQuery("UPDATE Users SET auth=? WHERE auth=? AND ke=? AND uid=?",['',req.params.auth,req.params.ke,req.params.id])
|
|
res.end(s.prettyPrint({ok:true,msg:'You have been logged out, session key is now inactive.'}))
|
|
}else{
|
|
res.end(s.prettyPrint({ok:false,msg:'This group key does not exist or this user is not logged in.'}))
|
|
}
|
|
});
|
|
/**
|
|
* Page : Login Screen
|
|
*/
|
|
app.get(config.webPaths.home, function (req,res){
|
|
s.renderPage(req,res,config.renderPaths.index,{lang:lang,config:config,screen:'dashboard'},function(err,html){
|
|
if(err){
|
|
s.systemLog(err)
|
|
}
|
|
res.end(html)
|
|
})
|
|
});
|
|
/**
|
|
* Page : Administrator Login Screen
|
|
*/
|
|
app.get(config.webPaths.admin, function (req,res){
|
|
s.renderPage(req,res,config.renderPaths.index,{lang:lang,config:config,screen:'admin'},function(err,html){
|
|
if(err){
|
|
s.systemLog(err)
|
|
}
|
|
res.end(html)
|
|
})
|
|
});
|
|
/**
|
|
* Page : Superuser Login Screen
|
|
*/
|
|
app.get(config.webPaths.super, function (req,res){
|
|
|
|
s.renderPage(req,res,config.renderPaths.index,{lang:lang,config:config,screen:'super'},function(err,html){
|
|
if(err){
|
|
s.systemLog(err)
|
|
}
|
|
res.end(html)
|
|
})
|
|
});
|
|
/**
|
|
* API : Get User Info
|
|
*/
|
|
app.get(config.webPaths.apiPrefix+':auth/userInfo/:ke',function (req,res){
|
|
req.ret={ok:false};
|
|
res.setHeader('Content-Type', 'application/json');
|
|
s.auth(req.params,function(user){
|
|
req.ret.ok=true
|
|
req.ret.user=user
|
|
res.end(s.prettyPrint(req.ret));
|
|
},res,req);
|
|
})
|
|
//login function
|
|
s.deleteFactorAuth=function(r){
|
|
delete(s.factorAuth[r.ke][r.uid])
|
|
if(Object.keys(s.factorAuth[r.ke]).length===0){
|
|
delete(s.factorAuth[r.ke])
|
|
}
|
|
}
|
|
/**
|
|
* API : Login handler. Dashboard, Streamer, Dashcam Administrator, Superuser
|
|
*/
|
|
app.post([
|
|
config.webPaths.home,
|
|
config.webPaths.admin,
|
|
config.webPaths.super,
|
|
s.checkCorrectPathEnding(config.webPaths.home)+':screen',
|
|
s.checkCorrectPathEnding(config.webPaths.admin)+':screen',
|
|
s.checkCorrectPathEnding(config.webPaths.super)+':screen',
|
|
],function (req,res){
|
|
req.ip = s.getClientIp(req)
|
|
var screenChooser = function(screen){
|
|
var search = function(screen){
|
|
if(req.url.indexOf(screen) > -1){
|
|
return true
|
|
}
|
|
return false
|
|
}
|
|
switch(true){
|
|
case search(config.webPaths.admin):
|
|
return 'admin'
|
|
break;
|
|
case search(config.webPaths.super):
|
|
return 'super'
|
|
break;
|
|
default:
|
|
return 'dashboard'
|
|
break;
|
|
}
|
|
}
|
|
// brute check
|
|
if(s.failedLoginAttempts[req.body.mail] && s.failedLoginAttempts[req.body.mail].failCount >= 5){
|
|
if(req.query.json=='true'){
|
|
res.end(s.prettyPrint({ok:false}))
|
|
}else{
|
|
s.renderPage(req,res,config.renderPaths.index,{
|
|
failedLogin: true,
|
|
message: lang.failedLoginText1,
|
|
lang: s.copySystemDefaultLanguage(),
|
|
config: config,
|
|
screen: screenChooser(req.params.screen)
|
|
},function(err,html){
|
|
if(err){
|
|
s.systemLog(err)
|
|
}
|
|
res.end(html)
|
|
})
|
|
}
|
|
return false
|
|
}
|
|
//
|
|
renderPage = function(focus,data){
|
|
if(s.failedLoginAttempts[req.body.mail]){
|
|
clearTimeout(s.failedLoginAttempts[req.body.mail].timeout)
|
|
delete(s.failedLoginAttempts[req.body.mail])
|
|
}
|
|
if(req.query.json=='true'){
|
|
delete(data.config)
|
|
data.ok=true;
|
|
res.setHeader('Content-Type', 'application/json');
|
|
res.end(s.prettyPrint(data))
|
|
}else{
|
|
data.screen=req.params.screen
|
|
s.renderPage(req,res,focus,data,function(err,html){
|
|
if(err){
|
|
s.systemLog(err)
|
|
}
|
|
res.end(html)
|
|
})
|
|
}
|
|
}
|
|
failedAuthentication = function(board){
|
|
// brute protector
|
|
if(!s.failedLoginAttempts[req.body.mail]){
|
|
s.failedLoginAttempts[req.body.mail] = {
|
|
failCount : 0,
|
|
ips : {}
|
|
}
|
|
}
|
|
++s.failedLoginAttempts[req.body.mail].failCount
|
|
if(!s.failedLoginAttempts[req.body.mail].ips[req.ip]){
|
|
s.failedLoginAttempts[req.body.mail].ips[req.ip] = 0
|
|
}
|
|
++s.failedLoginAttempts[req.body.mail].ips[req.ip]
|
|
clearTimeout(s.failedLoginAttempts[req.body.mail].timeout)
|
|
s.failedLoginAttempts[req.body.mail].timeout = setTimeout(function(){
|
|
delete(s.failedLoginAttempts[req.body.mail])
|
|
},1000 * 60 * 15)
|
|
// check if JSON
|
|
if(req.query.json === 'true'){
|
|
res.setHeader('Content-Type', 'application/json')
|
|
res.end(s.prettyPrint({ok:false}))
|
|
}else{
|
|
s.renderPage(req,res,config.renderPaths.index,{
|
|
failedLogin: true,
|
|
message: lang.failedLoginText2,
|
|
lang: s.copySystemDefaultLanguage(),
|
|
config: config,
|
|
screen: screenChooser(req.params.screen)
|
|
},function(err,html){
|
|
if(err){
|
|
s.systemLog(err)
|
|
}
|
|
res.end(html)
|
|
})
|
|
}
|
|
var logTo = {
|
|
ke: '$',
|
|
mid: '$USER'
|
|
}
|
|
var logData = {
|
|
type: lang['Authentication Failed'],
|
|
msg: {
|
|
for: board,
|
|
mail: req.body.mail,
|
|
ip: req.ip
|
|
}
|
|
}
|
|
if(board==='super'){
|
|
s.userLog(logTo,logData)
|
|
}else{
|
|
s.sqlQuery('SELECT ke,uid,details FROM Users WHERE mail=?',[req.body.mail],function(err,r) {
|
|
if(r&&r[0]){
|
|
r = r[0]
|
|
r.details=JSON.parse(r.details);
|
|
r.lang=s.getLanguageFile(r.details.lang)
|
|
logData.id=r.uid
|
|
logData.type=r.lang['Authentication Failed']
|
|
logTo.ke = r.ke
|
|
}
|
|
s.userLog(logTo,logData)
|
|
})
|
|
}
|
|
}
|
|
checkRoute = function(r){
|
|
switch(req.body.function){
|
|
case'cam':
|
|
s.sqlQuery('SELECT * FROM Monitors WHERE ke=? AND type=?',[r.ke,"dashcam"],function(err,rr){
|
|
req.resp.mons=rr;
|
|
renderPage(config.renderPaths.dashcam,{
|
|
// config: config,
|
|
$user: req.resp,
|
|
lang: r.lang,
|
|
define: s.getDefinitonFile(r.details.lang),
|
|
customAutoLoad: s.customAutoLoadTree
|
|
})
|
|
})
|
|
break;
|
|
case'streamer':
|
|
s.sqlQuery('SELECT * FROM Monitors WHERE ke=? AND type=?',[r.ke,"socket"],function(err,rr){
|
|
req.resp.mons=rr;
|
|
renderPage(config.renderPaths.streamer,{
|
|
// config: config,
|
|
$user: req.resp,
|
|
lang: r.lang,
|
|
define: s.getDefinitonFile(r.details.lang),
|
|
customAutoLoad: s.customAutoLoadTree
|
|
})
|
|
})
|
|
break;
|
|
case'admin':
|
|
if(!r.details.sub){
|
|
s.sqlQuery('SELECT uid,mail,details FROM Users WHERE ke=? AND details LIKE \'%"sub"%\'',[r.ke],function(err,rr) {
|
|
s.sqlQuery('SELECT * FROM Monitors WHERE ke=?',[r.ke],function(err,rrr) {
|
|
renderPage(config.renderPaths.admin,{
|
|
config: config,
|
|
$user: req.resp,
|
|
$subs: rr,
|
|
$mons: rrr,
|
|
lang: r.lang,
|
|
define: s.getDefinitonFile(r.details.lang),
|
|
customAutoLoad: s.customAutoLoadTree
|
|
})
|
|
})
|
|
})
|
|
}else{
|
|
//not admin user
|
|
renderPage(config.renderPaths.home,{
|
|
$user:req.resp,
|
|
config:config,
|
|
lang:r.lang,
|
|
define:s.getDefinitonFile(r.details.lang),
|
|
addStorage:s.dir.addStorage,
|
|
fs:fs,
|
|
__dirname:s.mainDirectory,
|
|
customAutoLoad: s.customAutoLoadTree
|
|
});
|
|
}
|
|
break;
|
|
default:
|
|
renderPage(config.renderPaths.home,{
|
|
$user:req.resp,
|
|
config:config,
|
|
lang:r.lang,
|
|
define:s.getDefinitonFile(r.details.lang),
|
|
addStorage:s.dir.addStorage,
|
|
fs:fs,
|
|
__dirname:s.mainDirectory,
|
|
customAutoLoad: s.customAutoLoadTree
|
|
});
|
|
break;
|
|
}
|
|
s.userLog({ke:r.ke,mid:'$USER'},{type:r.lang['New Authentication Token'],msg:{for:req.body.function,mail:r.mail,id:r.uid,ip:req.ip}})
|
|
// res.end();
|
|
}
|
|
if(req.body.mail&&req.body.pass){
|
|
req.default=function(){
|
|
s.sqlQuery('SELECT * FROM Users WHERE mail=? AND pass=?',[req.body.mail,s.createHash(req.body.pass)],function(err,r) {
|
|
req.resp={ok:false};
|
|
if(!err&&r&&r[0]){
|
|
r=r[0];r.auth=s.md5(s.gid());
|
|
s.sqlQuery("UPDATE Users SET auth=? WHERE ke=? AND uid=?",[r.auth,r.ke,r.uid])
|
|
req.resp={ok:true,auth_token:r.auth,ke:r.ke,uid:r.uid,mail:r.mail,details:r.details};
|
|
r.details=JSON.parse(r.details);
|
|
r.lang=s.getLanguageFile(r.details.lang)
|
|
req.factorAuth=function(cb){
|
|
if(r.details.factorAuth === "1"){
|
|
if(!r.details.acceptedMachines||!(r.details.acceptedMachines instanceof Object)){
|
|
r.details.acceptedMachines={}
|
|
}
|
|
if(!r.details.acceptedMachines[req.body.machineID]){
|
|
req.complete=function(){
|
|
s.factorAuth[r.ke][r.uid].function = req.body.function
|
|
s.factorAuth[r.ke][r.uid].info = req.resp
|
|
clearTimeout(s.factorAuth[r.ke][r.uid].expireAuth)
|
|
s.factorAuth[r.ke][r.uid].expireAuth=setTimeout(function(){
|
|
s.deleteFactorAuth(r)
|
|
},1000*60*15)
|
|
renderPage(config.renderPaths.factorAuth,{$user:req.resp,lang:r.lang})
|
|
}
|
|
if(!s.factorAuth[r.ke]){s.factorAuth[r.ke]={}}
|
|
if(!s.factorAuth[r.ke][r.uid]){
|
|
s.factorAuth[r.ke][r.uid]={key:s.nid(),user:r}
|
|
s.onTwoFactorAuthCodeNotificationExtensions.forEach(function(extender){
|
|
extender(r)
|
|
})
|
|
req.complete()
|
|
}else{
|
|
req.complete()
|
|
}
|
|
}else{
|
|
checkRoute(r)
|
|
}
|
|
}else{
|
|
checkRoute(r)
|
|
}
|
|
}
|
|
if(r.details.sub){
|
|
s.sqlQuery('SELECT details FROM Users WHERE ke=? AND details NOT LIKE ?',[r.ke,'%"sub"%'],function(err,rr) {
|
|
if(rr && rr[0]){
|
|
rr=rr[0];
|
|
rr.details=JSON.parse(rr.details);
|
|
r.details.mon_groups=rr.details.mon_groups;
|
|
req.resp.details=JSON.stringify(r.details);
|
|
req.factorAuth()
|
|
}else{
|
|
failedAuthentication(req.body.function)
|
|
}
|
|
})
|
|
}else{
|
|
req.factorAuth()
|
|
}
|
|
}else{
|
|
failedAuthentication(req.body.function)
|
|
}
|
|
})
|
|
}
|
|
if(LdapAuth&&req.body.function==='ldap'&&req.body.key!==''){
|
|
s.sqlQuery('SELECT * FROM Users WHERE ke=? AND details NOT LIKE ?',[req.body.key,'%"sub"%'],function(err,r) {
|
|
if(r&&r[0]){
|
|
r=r[0]
|
|
r.details=JSON.parse(r.details)
|
|
r.lang=s.getLanguageFile(r.details.lang)
|
|
if(r.details.use_ldap!=='0'&&r.details.ldap_enable==='1'&&r.details.ldap_url&&r.details.ldap_url!==''){
|
|
req.mailArray={}
|
|
req.body.mail.split(',').forEach(function(v){
|
|
v=v.split('=')
|
|
req.mailArray[v[0]]=v[1]
|
|
})
|
|
if(!r.details.ldap_bindDN||r.details.ldap_bindDN===''){
|
|
r.details.ldap_bindDN=req.body.mail
|
|
}
|
|
if(!r.details.ldap_bindCredentials||r.details.ldap_bindCredentials===''){
|
|
r.details.ldap_bindCredentials=req.body.pass
|
|
}
|
|
if(!r.details.ldap_searchFilter||r.details.ldap_searchFilter===''){
|
|
r.details.ldap_searchFilter=req.body.mail
|
|
if(req.mailArray.cn){
|
|
r.details.ldap_searchFilter='cn='+req.mailArray.cn
|
|
}
|
|
if(req.mailArray.uid){
|
|
r.details.ldap_searchFilter='uid='+req.mailArray.uid
|
|
}
|
|
}else{
|
|
r.details.ldap_searchFilter=r.details.ldap_searchFilter.replace('{{username}}',req.body.mail)
|
|
}
|
|
if(!r.details.ldap_searchBase||r.details.ldap_searchBase===''){
|
|
r.details.ldap_searchBase='dc=test,dc=com'
|
|
}
|
|
req.auth = new LdapAuth({
|
|
url:r.details.ldap_url,
|
|
bindDN:r.details.ldap_bindDN,
|
|
bindCredentials:r.details.ldap_bindCredentials,
|
|
searchBase:r.details.ldap_searchBase,
|
|
searchFilter:'('+r.details.ldap_searchFilter+')',
|
|
reconnect:true
|
|
});
|
|
req.auth.on('error', function (err) {
|
|
console.error('LdapAuth: ', err);
|
|
});
|
|
|
|
req.auth.authenticate(req.body.mail, req.body.pass, function(err, user) {
|
|
if(user){
|
|
//found user
|
|
if(!user.uid){
|
|
user.uid=s.gid()
|
|
}
|
|
req.resp={
|
|
ke:req.body.key,
|
|
uid:user.uid,
|
|
auth:s.createHash(s.gid()),
|
|
mail:user.mail,
|
|
pass:s.createHash(req.body.pass),
|
|
details:JSON.stringify({
|
|
sub:'1',
|
|
ldap:'1',
|
|
allmonitors:'1',
|
|
filter: {}
|
|
})
|
|
}
|
|
user.post=[]
|
|
Object.keys(req.resp).forEach(function(v){
|
|
user.post.push(req.resp[v])
|
|
})
|
|
s.userLog({ke:req.body.key,mid:'$USER'},{type:r.lang['LDAP Success'],msg:{user:user}})
|
|
s.sqlQuery('SELECT * FROM Users WHERE ke=? AND mail=?',[req.body.key,user.cn],function(err,rr){
|
|
if(rr&&rr[0]){
|
|
//already registered
|
|
rr=rr[0]
|
|
req.resp=rr;
|
|
rr.details=JSON.parse(rr.details)
|
|
req.resp.lang=s.getLanguageFile(rr.details.lang)
|
|
s.userLog({ke:req.body.key,mid:'$USER'},{type:r.lang['LDAP User Authenticated'],msg:{user:user,shinobiUID:rr.uid}})
|
|
s.sqlQuery("UPDATE Users SET auth=? WHERE ke=? AND uid=?",[req.resp.auth,req.resp.ke,rr.uid])
|
|
}else{
|
|
//new ldap login
|
|
s.userLog({ke:req.body.key,mid:'$USER'},{type:r.lang['LDAP User is New'],msg:{info:r.lang['Creating New Account'],user:user}})
|
|
req.resp.lang=r.lang
|
|
s.sqlQuery('INSERT INTO Users (ke,uid,auth,mail,pass,details) VALUES (?,?,?,?,?,?)',user.post)
|
|
}
|
|
req.resp.details=JSON.stringify(req.resp.details)
|
|
req.resp.auth_token=req.resp.auth
|
|
req.resp.ok=true
|
|
checkRoute(req.resp)
|
|
})
|
|
return
|
|
}
|
|
s.userLog({ke:req.body.key,mid:'$USER'},{type:r.lang['LDAP Failed'],msg:{err:err}})
|
|
//no user
|
|
req.default()
|
|
});
|
|
|
|
req.auth.close(function(err) {
|
|
|
|
})
|
|
}else{
|
|
req.default()
|
|
}
|
|
}else{
|
|
req.default()
|
|
}
|
|
})
|
|
}else{
|
|
if(req.body.function === 'super'){
|
|
if(!fs.existsSync(s.location.super)){
|
|
res.end(lang.superAdminText)
|
|
return
|
|
}
|
|
var ok = s.superAuth({
|
|
mail: req.body.mail,
|
|
pass: req.body.pass,
|
|
users: true,
|
|
md5: true
|
|
},function(data){
|
|
s.sqlQuery('SELECT * FROM Logs WHERE ke=? ORDER BY `time` DESC LIMIT 30',['$'],function(err,r) {
|
|
if(!r){
|
|
r=[]
|
|
}
|
|
data.Logs = r
|
|
data.customAutoLoad = s.customAutoLoadTree
|
|
fs.readFile(s.location.config,'utf8',function(err,file){
|
|
data.plainConfig = JSON.parse(file)
|
|
renderPage(config.renderPaths.super,data)
|
|
})
|
|
})
|
|
})
|
|
if(ok === false){
|
|
failedAuthentication(req.body.function)
|
|
}
|
|
}else{
|
|
req.default()
|
|
}
|
|
}
|
|
}else{
|
|
if(req.body.machineID&&req.body.factorAuthKey){
|
|
if(s.factorAuth[req.body.ke]&&s.factorAuth[req.body.ke][req.body.id]&&s.factorAuth[req.body.ke][req.body.id].key===req.body.factorAuthKey){
|
|
if(s.factorAuth[req.body.ke][req.body.id].key===req.body.factorAuthKey){
|
|
if(req.body.remember==="1"){
|
|
req.details=JSON.parse(s.factorAuth[req.body.ke][req.body.id].info.details)
|
|
req.lang=s.getLanguageFile(req.details.lang)
|
|
if(!req.details.acceptedMachines||!(req.details.acceptedMachines instanceof Object)){
|
|
req.details.acceptedMachines={}
|
|
}
|
|
if(!req.details.acceptedMachines[req.body.machineID]){
|
|
req.details.acceptedMachines[req.body.machineID]={}
|
|
s.sqlQuery("UPDATE Users SET details=? WHERE ke=? AND uid=?",[s.prettyPrint(req.details),req.body.ke,req.body.id])
|
|
}
|
|
}
|
|
req.body.function = s.factorAuth[req.body.ke][req.body.id].function
|
|
req.resp = s.factorAuth[req.body.ke][req.body.id].info
|
|
checkRoute(s.factorAuth[req.body.ke][req.body.id].user)
|
|
}else{
|
|
renderPage(config.renderPaths.factorAuth,{$user:s.factorAuth[req.body.ke][req.body.id].info,lang:req.lang});
|
|
res.end();
|
|
}
|
|
}else{
|
|
failedAuthentication(lang['2-Factor Authentication'])
|
|
}
|
|
}else{
|
|
failedAuthentication(lang['2-Factor Authentication'])
|
|
}
|
|
}
|
|
})
|
|
/**
|
|
* API : Brute Protection Lock Reset by API
|
|
*/
|
|
app.get([config.webPaths.apiPrefix+':auth/resetBruteProtection/:ke'], function (req,res){
|
|
s.auth(req.params,function(user){
|
|
if(s.failedLoginAttempts[user.mail]){
|
|
clearTimeout(s.failedLoginAttempts[user.mail].timeout)
|
|
delete(s.failedLoginAttempts[user.mail])
|
|
}
|
|
res.end(s.prettyPrint({ok:true}))
|
|
})
|
|
})
|
|
/**
|
|
* Page : Montage - stand alone squished view with gridstackjs
|
|
*/
|
|
app.get([
|
|
config.webPaths.apiPrefix+':auth/grid/:ke',
|
|
config.webPaths.apiPrefix+':auth/grid/:ke/:group',
|
|
config.webPaths.apiPrefix+':auth/cycle/:ke',
|
|
config.webPaths.apiPrefix+':auth/cycle/:ke/:group'
|
|
], function(req,res) {
|
|
s.auth(req.params,function(user){
|
|
if(user.permissions.get_monitors==="0"){
|
|
res.end(user.lang['Not Permitted'])
|
|
return
|
|
}
|
|
|
|
req.params.protocol=req.protocol;
|
|
req.sql='SELECT * FROM Monitors WHERE mode!=? AND mode!=? AND ke=?';req.ar=['stop','idle',req.params.ke];
|
|
if(!req.params.id){
|
|
if(user.details.sub&&user.details.monitors&&user.details.allmonitors!=='1'){
|
|
try{user.details.monitors=JSON.parse(user.details.monitors);}catch(er){}
|
|
req.or=[];
|
|
user.details.monitors.forEach(function(v,n){
|
|
req.or.push('mid=?');req.ar.push(v)
|
|
})
|
|
req.sql+=' AND ('+req.or.join(' OR ')+')'
|
|
}
|
|
}else{
|
|
if(!user.details.sub||user.details.allmonitors!=='0'||user.details.monitors.indexOf(req.params.id)>-1){
|
|
req.sql+=' and mid=?';req.ar.push(req.params.id)
|
|
}else{
|
|
res.end(user.lang['There are no monitors that you can view with this account.']);
|
|
return;
|
|
}
|
|
}
|
|
s.sqlQuery(req.sql,req.ar,function(err,r){
|
|
if(req.params.group){
|
|
var filteredByGroupCheck = {};
|
|
var filteredByGroup = [];
|
|
r.forEach(function(v,n){
|
|
var details = JSON.parse(r[n].details);
|
|
try{
|
|
req.params.group.split('|').forEach(function(group){
|
|
var groups = JSON.parse(details.groups);
|
|
if(groups.indexOf(group) > -1 && !filteredByGroupCheck[v.mid]){
|
|
filteredByGroupCheck[v.mid] = true;
|
|
filteredByGroup.push(v)
|
|
}
|
|
})
|
|
}catch(err){
|
|
|
|
}
|
|
})
|
|
r = filteredByGroup;
|
|
}
|
|
r.forEach(function(v,n){
|
|
if(s.group[v.ke]&&s.group[v.ke].mon[v.mid]&&s.group[v.ke].mon[v.mid].watch){
|
|
r[n].currentlyWatching=Object.keys(s.group[v.ke].mon[v.mid].watch).length
|
|
}
|
|
r[n].subStream={}
|
|
var details = JSON.parse(r[n].details)
|
|
if(details.snap==='1'){
|
|
r[n].subStream.jpeg = '/'+req.params.auth+'/jpeg/'+v.ke+'/'+v.mid+'/s.jpg'
|
|
}
|
|
if(details.stream_channels&&details.stream_channels!==''){
|
|
try{
|
|
details.stream_channels=JSON.parse(details.stream_channels)
|
|
r[n].channels=[]
|
|
details.stream_channels.forEach(function(b,m){
|
|
var streamURL
|
|
switch(b.stream_type){
|
|
case'mjpeg':
|
|
streamURL='/'+req.params.auth+'/mjpeg/'+v.ke+'/'+v.mid+'/'+m
|
|
break;
|
|
case'hls':
|
|
streamURL='/'+req.params.auth+'/hls/'+v.ke+'/'+v.mid+'/'+m+'/s.m3u8'
|
|
break;
|
|
case'h264':
|
|
streamURL='/'+req.params.auth+'/h264/'+v.ke+'/'+v.mid+'/'+m
|
|
break;
|
|
case'flv':
|
|
streamURL='/'+req.params.auth+'/flv/'+v.ke+'/'+v.mid+'/'+m+'/s.flv'
|
|
break;
|
|
case'mp4':
|
|
streamURL='/'+req.params.auth+'/mp4/'+v.ke+'/'+v.mid+'/'+m+'/s.mp4'
|
|
break;
|
|
}
|
|
r[n].channels.push(streamURL)
|
|
})
|
|
}catch(err){
|
|
s.userLog(req.params,{type:'Broken Monitor Object',msg:'Stream Channels Field is damaged. Skipping.'})
|
|
}
|
|
}
|
|
})
|
|
var page = config.renderPaths.grid
|
|
if(req.path.indexOf('/cycle/') > -1){
|
|
page = config.renderPaths.cycle
|
|
}
|
|
s.renderPage(req,res,page,{
|
|
data:Object.assign(req.params,req.query),
|
|
baseUrl:req.protocol+'://'+req.hostname,
|
|
config:config,
|
|
lang:user.lang,
|
|
$user:user,
|
|
monitors:r,
|
|
query:req.query
|
|
});
|
|
})
|
|
},res,req)
|
|
});
|
|
/**
|
|
* API : Get TV Channels (Monitor Streams) json
|
|
*/
|
|
app.get([config.webPaths.apiPrefix+':auth/tvChannels/:ke',config.webPaths.apiPrefix+':auth/tvChannels/:ke/:id','/get.php'], function (req,res){
|
|
req.ret={ok:false};
|
|
if(req.query.username&&req.query.password){
|
|
req.params.username = req.query.username
|
|
req.params.password = req.query.password
|
|
}
|
|
var output = ['h264','hls','mp4']
|
|
if(req.query.output&&req.query.output!==''){
|
|
output = req.query.output.split(',')
|
|
output.forEach(function(type,n){
|
|
if(type==='ts'){
|
|
output[n]='h264'
|
|
if(output.indexOf('hls')===-1){
|
|
output.push('hls')
|
|
}
|
|
}
|
|
})
|
|
}
|
|
var isM3u8 = false;
|
|
if(req.query.type==='m3u8'||req.query.type==='m3u_plus'){
|
|
//is m3u8
|
|
isM3u8 = true;
|
|
}else{
|
|
res.setHeader('Content-Type', 'application/json');
|
|
}
|
|
req.fn=function(user){
|
|
if(user.permissions.get_monitors==="0"){
|
|
res.end(s.prettyPrint([]))
|
|
return
|
|
}
|
|
if(!req.params.ke){
|
|
req.params.ke = user.ke;
|
|
}
|
|
if(req.query.id&&!req.params.id){
|
|
req.params.id = req.query.id;
|
|
}
|
|
req.sql='SELECT * FROM Monitors WHERE mode!=? AND ke=?';req.ar=['stop',req.params.ke];
|
|
if(!req.params.id){
|
|
if(user.details.sub&&user.details.monitors&&user.details.allmonitors!=='1'){
|
|
try{user.details.monitors=JSON.parse(user.details.monitors);}catch(er){}
|
|
req.or=[];
|
|
user.details.monitors.forEach(function(v,n){
|
|
req.or.push('mid=?');req.ar.push(v)
|
|
})
|
|
req.sql+=' AND ('+req.or.join(' OR ')+')'
|
|
}
|
|
}else{
|
|
if(!user.details.sub||user.details.allmonitors!=='0'||user.details.monitors.indexOf(req.params.id)>-1){
|
|
req.sql+=' and mid=?';req.ar.push(req.params.id)
|
|
}else{
|
|
res.end('[]');
|
|
return;
|
|
}
|
|
}
|
|
s.sqlQuery(req.sql,req.ar,function(err,r){
|
|
var tvChannelMonitors = [];
|
|
r.forEach(function(v,n){
|
|
var buildStreamURL = function(channelRow,type,channelNumber){
|
|
var streamURL
|
|
if(channelNumber){channelNumber = '/'+channelNumber}else{channelNumber=''}
|
|
switch(type){
|
|
case'mjpeg':
|
|
streamURL='/'+req.params.auth+'/mjpeg/'+v.ke+'/'+v.mid+channelNumber
|
|
break;
|
|
case'hls':
|
|
streamURL='/'+req.params.auth+'/hls/'+v.ke+'/'+v.mid+channelNumber+'/s.m3u8'
|
|
break;
|
|
case'h264':
|
|
streamURL='/'+req.params.auth+'/h264/'+v.ke+'/'+v.mid+channelNumber
|
|
break;
|
|
case'flv':
|
|
streamURL='/'+req.params.auth+'/flv/'+v.ke+'/'+v.mid+channelNumber+'/s.flv'
|
|
break;
|
|
case'mp4':
|
|
streamURL='/'+req.params.auth+'/mp4/'+v.ke+'/'+v.mid+channelNumber+'/s.ts'
|
|
break;
|
|
}
|
|
if(streamURL){
|
|
if(!channelRow.streamsSortedByType[type]){
|
|
channelRow.streamsSortedByType[type]=[]
|
|
}
|
|
channelRow.streamsSortedByType[type].push(streamURL)
|
|
channelRow.streams.push(streamURL)
|
|
}
|
|
return streamURL
|
|
}
|
|
var details = JSON.parse(r[n].details);
|
|
if(!details.tv_channel_id||details.tv_channel_id==='')details.tv_channel_id = 'temp_'+s.gid(5)
|
|
var channelRow = {
|
|
ke:v.ke,
|
|
mid:v.mid,
|
|
type:v.type,
|
|
groupTitle:details.tv_channel_group_title,
|
|
channel:details.tv_channel_id,
|
|
};
|
|
if(details.snap==='1'){
|
|
channelRow.snapshot = '/'+req.params.auth+'/jpeg/'+v.ke+'/'+v.mid+'/s.jpg'
|
|
}
|
|
channelRow.streams=[]
|
|
channelRow.streamsSortedByType={}
|
|
buildStreamURL(channelRow,details.stream_type)
|
|
if(details.stream_channels&&details.stream_channels!==''){
|
|
details.stream_channels=JSON.parse(details.stream_channels)
|
|
details.stream_channels.forEach(function(b,m){
|
|
buildStreamURL(channelRow,b.stream_type,m.toString())
|
|
})
|
|
}
|
|
if(details.tv_channel==='1'){
|
|
tvChannelMonitors.push(channelRow)
|
|
}
|
|
})
|
|
if(isM3u8){
|
|
var m3u8 = '#EXTM3U'+'\n'
|
|
tvChannelMonitors.forEach(function(channelRow,n){
|
|
output.forEach(function(type){
|
|
if(channelRow.streamsSortedByType[type]){
|
|
if(req.query.type==='m3u_plus'){
|
|
m3u8 +='#EXTINF-1 tvg-id="'+channelRow.mid+'" tvg-name="'+channelRow.channel+'" tvg-logo="'+req.protocol+'://'+req.headers.host+channelRow.snapshot+'" group-title="'+channelRow.groupTitle+'",'+channelRow.channel+'\n'
|
|
}else{
|
|
m3u8 +='#EXTINF:-1,'+channelRow.channel+' ('+type.toUpperCase()+') \n'
|
|
}
|
|
m3u8 += req.protocol+'://'+req.headers.host+channelRow.streamsSortedByType[type][0]+'\n'
|
|
}
|
|
})
|
|
})
|
|
res.end(m3u8)
|
|
}else{
|
|
if(tvChannelMonitors.length===1){tvChannelMonitors=tvChannelMonitors[0];}
|
|
res.end(s.prettyPrint(tvChannelMonitors));
|
|
}
|
|
})
|
|
}
|
|
s.auth(req.params,req.fn,res,req);
|
|
});
|
|
/**
|
|
* API : Get Monitors
|
|
*/
|
|
app.get([config.webPaths.apiPrefix+':auth/monitor/:ke',config.webPaths.apiPrefix+':auth/monitor/:ke/:id'], function (req,res){
|
|
req.ret={ok:false};
|
|
res.setHeader('Content-Type', 'application/json');
|
|
req.fn=function(user){
|
|
if(user.permissions.get_monitors==="0"){
|
|
res.end(s.prettyPrint([]))
|
|
return
|
|
}
|
|
req.sql='SELECT * FROM Monitors WHERE ke=?';req.ar=[req.params.ke];
|
|
if(!req.params.id){
|
|
if(user.details.sub&&user.details.monitors&&user.details.allmonitors!=='1'){
|
|
try{user.details.monitors=JSON.parse(user.details.monitors);}catch(er){}
|
|
req.or=[];
|
|
user.details.monitors.forEach(function(v,n){
|
|
req.or.push('mid=?');req.ar.push(v)
|
|
})
|
|
req.sql+=' AND ('+req.or.join(' OR ')+')'
|
|
}
|
|
}else{
|
|
if(!user.details.sub||user.details.allmonitors!=='0'||user.details.monitors.indexOf(req.params.id)>-1){
|
|
req.sql+=' and mid=?';req.ar.push(req.params.id)
|
|
}else{
|
|
res.end('[]');
|
|
return;
|
|
}
|
|
}
|
|
s.sqlQuery(req.sql,req.ar,function(err,r){
|
|
r.forEach(function(v,n){
|
|
if(s.group[v.ke] && s.group[v.ke].mon[v.mid]){
|
|
r[n].currentlyWatching = Object.keys(s.group[v.ke].mon[v.mid].watch).length
|
|
r[n].currentCpuUsage = s.group[v.ke].mon[v.mid].currentCpuUsage
|
|
r[n].status = s.group[v.ke].mon[v.mid].monitorStatus
|
|
}
|
|
var buildStreamURL = function(type,channelNumber){
|
|
var streamURL
|
|
if(channelNumber){channelNumber = '/'+channelNumber}else{channelNumber=''}
|
|
switch(type){
|
|
case'mjpeg':
|
|
streamURL='/'+req.params.auth+'/mjpeg/'+v.ke+'/'+v.mid+channelNumber
|
|
break;
|
|
case'hls':
|
|
streamURL='/'+req.params.auth+'/hls/'+v.ke+'/'+v.mid+channelNumber+'/s.m3u8'
|
|
break;
|
|
case'h264':
|
|
streamURL='/'+req.params.auth+'/h264/'+v.ke+'/'+v.mid+channelNumber
|
|
break;
|
|
case'flv':
|
|
streamURL='/'+req.params.auth+'/flv/'+v.ke+'/'+v.mid+channelNumber+'/s.flv'
|
|
break;
|
|
case'mp4':
|
|
streamURL='/'+req.params.auth+'/mp4/'+v.ke+'/'+v.mid+channelNumber+'/s.mp4'
|
|
break;
|
|
}
|
|
if(streamURL){
|
|
if(!r[n].streamsSortedByType[type]){
|
|
r[n].streamsSortedByType[type]=[]
|
|
}
|
|
r[n].streamsSortedByType[type].push(streamURL)
|
|
r[n].streams.push(streamURL)
|
|
}
|
|
return streamURL
|
|
}
|
|
var details = JSON.parse(r[n].details);
|
|
if(!details.tv_channel_id||details.tv_channel_id==='')details.tv_channel_id = 'temp_'+s.gid(5)
|
|
if(details.snap==='1'){
|
|
r[n].snapshot = '/'+req.params.auth+'/jpeg/'+v.ke+'/'+v.mid+'/s.jpg'
|
|
}
|
|
r[n].streams=[]
|
|
r[n].streamsSortedByType={}
|
|
buildStreamURL(details.stream_type)
|
|
if(details.stream_channels&&details.stream_channels!==''){
|
|
details.stream_channels=JSON.parse(details.stream_channels)
|
|
details.stream_channels.forEach(function(b,m){
|
|
buildStreamURL(b.stream_type,m.toString())
|
|
})
|
|
}
|
|
})
|
|
if(r.length===1){r=r[0];}
|
|
res.end(s.prettyPrint(r));
|
|
})
|
|
}
|
|
s.auth(req.params,req.fn,res,req);
|
|
});
|
|
/**
|
|
* API : Merge Recorded Videos into one file
|
|
*/
|
|
app.get(config.webPaths.apiPrefix+':auth/videosMerge/:ke', function (req,res){
|
|
var failed = function(resp){
|
|
res.setHeader('Content-Type', 'application/json');
|
|
res.end(s.prettyPrint(resp))
|
|
}
|
|
if(req.query.videos && req.query.videos !== ''){
|
|
s.auth(req.params,function(user){
|
|
var videosSelected = JSON.parse(req.query.videos)
|
|
var where = []
|
|
var values = []
|
|
videosSelected.forEach(function(video){
|
|
where.push("(ke=? AND mid=? AND `time`=?)")
|
|
if(!video.ke)video.ke = req.params.ke
|
|
values.push(video.ke)
|
|
values.push(video.mid)
|
|
var time = s.nameToTime(video.filename)
|
|
if(req.query.isUTC === 'true'){
|
|
time = s.utcToLocal(time)
|
|
}
|
|
time = new Date(time)
|
|
values.push(time)
|
|
})
|
|
s.sqlQuery('SELECT * FROM Videos WHERE '+where.join(' OR '),values,function(err,r){
|
|
var resp = {ok: false}
|
|
if(r && r[0]){
|
|
s.mergeRecordedVideos(r,req.params.ke,function(fullPath,filename){
|
|
res.setHeader('Content-Disposition', 'attachment; filename="'+filename+'"')
|
|
var file = fs.createReadStream(fullPath)
|
|
file.on('close',function(){
|
|
setTimeout(function(){
|
|
s.file('delete',fullPath)
|
|
},1000 * 60 * 3)
|
|
res.end()
|
|
})
|
|
file.pipe(res)
|
|
})
|
|
}else{
|
|
failed({ok:false,msg:'No Videos Found'})
|
|
}
|
|
})
|
|
},res,req);
|
|
}else{
|
|
failed({ok:false,msg:'"videos" query variable is missing from request.'})
|
|
}
|
|
})
|
|
/**
|
|
* API : Get Videos
|
|
*/
|
|
app.get([
|
|
config.webPaths.apiPrefix+':auth/videos/:ke',
|
|
config.webPaths.apiPrefix+':auth/videos/:ke/:id',
|
|
config.webPaths.apiPrefix+':auth/cloudVideos/:ke',
|
|
config.webPaths.apiPrefix+':auth/cloudVideos/:ke/:id'
|
|
], function (req,res){
|
|
res.setHeader('Content-Type', 'application/json');
|
|
s.auth(req.params,function(user){
|
|
var hasRestrictions = user.details.sub && user.details.allmonitors !== '1'
|
|
if(
|
|
user.permissions.watch_videos==="0" ||
|
|
hasRestrictions && (!user.details.video_view || user.details.video_view.indexOf(req.params.id)===-1)
|
|
){
|
|
res.end(s.prettyPrint([]))
|
|
return
|
|
}
|
|
var origURL = req.originalUrl.split('/')
|
|
var videoParam = origURL[origURL.indexOf(req.params.auth) + 1]
|
|
var videoSet = 'Videos'
|
|
switch(videoParam){
|
|
case'cloudVideos':
|
|
videoSet = 'Cloud Videos'
|
|
break;
|
|
}
|
|
req.sql='SELECT * FROM `'+videoSet+'` WHERE ke=?';req.ar=[req.params.ke];
|
|
req.count_sql='SELECT COUNT(*) FROM `'+videoSet+'` WHERE ke=?';req.count_ar=[req.params.ke];
|
|
if(req.query.archived=='1'){
|
|
req.sql+=' AND details LIKE \'%"archived":"1"\''
|
|
req.count_sql+=' AND details LIKE \'%"archived":"1"\''
|
|
}
|
|
if(!req.params.id){
|
|
if(user.details.sub&&user.details.monitors&&user.details.allmonitors!=='1'){
|
|
try{user.details.monitors=JSON.parse(user.details.monitors);}catch(er){}
|
|
req.or=[];
|
|
user.details.monitors.forEach(function(v,n){
|
|
req.or.push('mid=?');req.ar.push(v)
|
|
})
|
|
req.sql+=' AND ('+req.or.join(' OR ')+')'
|
|
req.count_sql+=' AND ('+req.or.join(' OR ')+')'
|
|
}
|
|
}else{
|
|
if(!user.details.sub||user.details.allmonitors!=='0'||user.details.monitors.indexOf(req.params.id)>-1){
|
|
req.sql+=' and mid=?';req.ar.push(req.params.id)
|
|
req.count_sql+=' and mid=?';req.count_ar.push(req.params.id)
|
|
}else{
|
|
res.end('[]');
|
|
return;
|
|
}
|
|
}
|
|
if(req.query.start||req.query.end){
|
|
if(req.query.start && req.query.start !== ''){
|
|
req.query.start = s.stringToSqlTime(req.query.start)
|
|
}
|
|
if(req.query.end && req.query.end !== ''){
|
|
req.query.end = s.stringToSqlTime(req.query.end)
|
|
}
|
|
if(!req.query.startOperator||req.query.startOperator==''){
|
|
req.query.startOperator='>='
|
|
}
|
|
if(!req.query.endOperator||req.query.endOperator==''){
|
|
req.query.endOperator='<='
|
|
}
|
|
var endIsStartTo
|
|
var theEndParameter = '`end`'
|
|
if(req.query.endIsStartTo){
|
|
endIsStartTo = true
|
|
theEndParameter = '`time`'
|
|
}
|
|
switch(true){
|
|
case(req.query.start&&req.query.start!==''&&req.query.end&&req.query.end!==''):
|
|
req.sql+=' AND `time` '+req.query.startOperator+' ? AND '+theEndParameter+' '+req.query.endOperator+' ?';
|
|
req.count_sql+=' AND `time` '+req.query.startOperator+' ? AND '+theEndParameter+' '+req.query.endOperator+' ?';
|
|
req.ar.push(req.query.start)
|
|
req.ar.push(req.query.end)
|
|
req.count_ar.push(req.query.start)
|
|
req.count_ar.push(req.query.end)
|
|
break;
|
|
case(req.query.start&&req.query.start!==''):
|
|
req.sql+=' AND `time` '+req.query.startOperator+' ?';
|
|
req.count_sql+=' AND `time` '+req.query.startOperator+' ?';
|
|
req.ar.push(req.query.start)
|
|
req.count_ar.push(req.query.start)
|
|
break;
|
|
case(req.query.end&&req.query.end!==''):
|
|
req.sql+=' AND '+theEndParameter+' '+req.query.endOperator+' ?';
|
|
req.count_sql+=' AND '+theEndParameter+' '+req.query.endOperator+' ?';
|
|
req.ar.push(req.query.end)
|
|
req.count_ar.push(req.query.end)
|
|
break;
|
|
}
|
|
}
|
|
req.sql+=' ORDER BY `time` DESC';
|
|
if(!req.query.limit||req.query.limit==''){
|
|
req.query.limit='100'
|
|
}
|
|
if(req.query.limit!=='0'){
|
|
req.sql+=' LIMIT '+req.query.limit
|
|
}
|
|
s.sqlQuery(req.sql,req.ar,function(err,r){
|
|
if(!r){
|
|
res.end(s.prettyPrint({total:0,limit:req.query.limit,skip:0,videos:[]}));
|
|
return
|
|
}
|
|
s.sqlQuery(req.count_sql,req.count_ar,function(err,count){
|
|
s.buildVideoLinks(r,{
|
|
auth : req.params.auth,
|
|
videoParam : videoParam,
|
|
hideRemote : config.hideCloudSaveUrls
|
|
})
|
|
if(req.query.limit.indexOf(',')>-1){
|
|
req.skip=parseInt(req.query.limit.split(',')[0])
|
|
req.query.limit=parseInt(req.query.limit.split(',')[1])
|
|
}else{
|
|
req.skip=0
|
|
req.query.limit=parseInt(req.query.limit)
|
|
}
|
|
res.end(s.prettyPrint({isUTC:config.useUTC,total:count[0]['COUNT(*)'],limit:req.query.limit,skip:req.skip,videos:r,endIsStartTo:endIsStartTo}));
|
|
})
|
|
})
|
|
},res,req);
|
|
});
|
|
/**
|
|
* API : Get Events
|
|
*/
|
|
app.get([config.webPaths.apiPrefix+':auth/events/:ke',config.webPaths.apiPrefix+':auth/events/:ke/:id',config.webPaths.apiPrefix+':auth/events/:ke/:id/:limit',config.webPaths.apiPrefix+':auth/events/:ke/:id/:limit/:start',config.webPaths.apiPrefix+':auth/events/:ke/:id/:limit/:start/:end'], function (req,res){
|
|
req.ret={ok:false};
|
|
res.setHeader('Content-Type', 'application/json');
|
|
s.auth(req.params,function(user){
|
|
if(user.permissions.watch_videos==="0"||user.details.sub&&user.details.allmonitors!=='1'&&user.details.video_view.indexOf(req.params.id)===-1){
|
|
res.end(s.prettyPrint([]))
|
|
return
|
|
}
|
|
req.sql='SELECT * FROM Events WHERE ke=?';req.ar=[req.params.ke];
|
|
if(!req.params.id){
|
|
if(user.details.sub&&user.details.monitors&&user.details.allmonitors!=='1'){
|
|
try{user.details.monitors=JSON.parse(user.details.monitors);}catch(er){}
|
|
req.or=[];
|
|
user.details.monitors.forEach(function(v,n){
|
|
req.or.push('mid=?');req.ar.push(v)
|
|
})
|
|
req.sql+=' AND ('+req.or.join(' OR ')+')'
|
|
}
|
|
}else{
|
|
if(!user.details.sub||user.details.allmonitors!=='0'||user.details.monitors.indexOf(req.params.id)>-1){
|
|
req.sql+=' and mid=?';req.ar.push(req.params.id)
|
|
}else{
|
|
res.end('[]');
|
|
return;
|
|
}
|
|
}
|
|
if(req.params.start&&req.params.start!==''){
|
|
req.params.start = s.stringToSqlTime(req.params.start)
|
|
if(req.params.end&&req.params.end!==''){
|
|
req.params.end = s.stringToSqlTime(req.params.end)
|
|
req.sql+=' AND `time` >= ? AND `time` <= ?';
|
|
req.ar.push(decodeURIComponent(req.params.start))
|
|
req.ar.push(decodeURIComponent(req.params.end))
|
|
}else{
|
|
req.sql+=' AND `time` >= ?';
|
|
req.ar.push(decodeURIComponent(req.params.start))
|
|
}
|
|
}
|
|
if(!req.params.limit||req.params.limit==''){req.params.limit=100}
|
|
req.sql+=' ORDER BY `time` DESC LIMIT '+req.params.limit+'';
|
|
s.sqlQuery(req.sql,req.ar,function(err,r){
|
|
if(err){
|
|
err.sql=req.sql;
|
|
res.end(s.prettyPrint(err));
|
|
return
|
|
}
|
|
if(!r){r=[]}
|
|
r.forEach(function(v,n){
|
|
r[n].details=JSON.parse(v.details);
|
|
})
|
|
res.end(s.prettyPrint(r));
|
|
})
|
|
},res,req);
|
|
});
|
|
/**
|
|
* API : Get Logs
|
|
*/
|
|
app.get([config.webPaths.apiPrefix+':auth/logs/:ke',config.webPaths.apiPrefix+':auth/logs/:ke/:id'], function (req,res){
|
|
req.ret={ok:false};
|
|
res.setHeader('Content-Type', 'application/json');
|
|
s.auth(req.params,function(user){
|
|
if(user.permissions.get_logs==="0" || user.details.sub && user.details.view_logs !== '1'){
|
|
res.end(s.prettyPrint([]))
|
|
return
|
|
}
|
|
req.sql='SELECT * FROM Logs WHERE ke=?';req.ar=[req.params.ke];
|
|
if(!req.params.id){
|
|
if(user.details.sub&&user.details.monitors&&user.details.allmonitors!=='1'){
|
|
try{user.details.monitors=JSON.parse(user.details.monitors);}catch(er){}
|
|
req.or=[];
|
|
user.details.monitors.forEach(function(v,n){
|
|
req.or.push('mid=?');req.ar.push(v)
|
|
})
|
|
req.sql+=' AND ('+req.or.join(' OR ')+')'
|
|
}
|
|
}else{
|
|
if(!user.details.sub||user.details.allmonitors!=='0'||user.details.monitors.indexOf(req.params.id)>-1||req.params.id.indexOf('$')>-1){
|
|
req.sql+=' and mid=?';req.ar.push(req.params.id)
|
|
}else{
|
|
res.end('[]');
|
|
return;
|
|
}
|
|
}
|
|
if(req.query.start||req.query.end){
|
|
if(!req.query.startOperator||req.query.startOperator==''){
|
|
req.query.startOperator='>='
|
|
}
|
|
if(!req.query.endOperator||req.query.endOperator==''){
|
|
req.query.endOperator='<='
|
|
}
|
|
if(req.query.start && req.query.start !== '' && req.query.end && req.query.end !== ''){
|
|
req.query.start = s.stringToSqlTime(req.query.start)
|
|
req.query.end = s.stringToSqlTime(req.query.end)
|
|
req.sql+=' AND `time` '+req.query.startOperator+' ? AND `time` '+req.query.endOperator+' ?';
|
|
req.ar.push(req.query.start)
|
|
req.ar.push(req.query.end)
|
|
}else if(req.query.start && req.query.start !== ''){
|
|
req.query.start = s.stringToSqlTime(req.query.start)
|
|
req.sql+=' AND `time` '+req.query.startOperator+' ?';
|
|
req.ar.push(req.query.start)
|
|
}
|
|
}
|
|
if(!req.query.limit||req.query.limit==''){req.query.limit=50}
|
|
req.sql+=' ORDER BY `time` DESC LIMIT '+req.query.limit+'';
|
|
s.sqlQuery(req.sql,req.ar,function(err,r){
|
|
if(err){
|
|
err.sql=req.sql;
|
|
res.end(s.prettyPrint(err));
|
|
return
|
|
}
|
|
if(!r){r=[]}
|
|
r.forEach(function(v,n){
|
|
r[n].info=JSON.parse(v.info)
|
|
})
|
|
res.end(s.prettyPrint(r));
|
|
})
|
|
},res,req);
|
|
})
|
|
/**
|
|
* API : Get Monitors Online
|
|
*/
|
|
app.get(config.webPaths.apiPrefix+':auth/smonitor/:ke', function (req,res){
|
|
req.ret={ok:false};
|
|
res.setHeader('Content-Type', 'application/json');
|
|
req.fn=function(user){
|
|
if(user.permissions.get_monitors==="0"){
|
|
res.end(s.prettyPrint([]))
|
|
return
|
|
}
|
|
req.sql='SELECT * FROM Monitors WHERE ke=?';req.ar=[req.params.ke];
|
|
if(user.details.sub&&user.details.monitors&&user.details.allmonitors!=='1'){
|
|
try{user.details.monitors=JSON.parse(user.details.monitors);}catch(er){}
|
|
req.or=[];
|
|
user.details.monitors.forEach(function(v,n){
|
|
req.or.push('mid=?');req.ar.push(v)
|
|
})
|
|
req.sql+=' AND ('+req.or.join(' OR ')+')'
|
|
}
|
|
s.sqlQuery(req.sql,req.ar,function(err,r){
|
|
if(r&&r[0]){
|
|
req.ar=[];
|
|
r.forEach(function(v){
|
|
if(s.group[req.params.ke]&&s.group[req.params.ke].mon[v.mid]&&s.group[req.params.ke].mon[v.mid].isStarted === true){
|
|
req.ar.push(v)
|
|
}
|
|
})
|
|
}else{
|
|
req.ar=[];
|
|
}
|
|
res.end(s.prettyPrint(req.ar));
|
|
})
|
|
}
|
|
s.auth(req.params,req.fn,res,req);
|
|
});
|
|
/**
|
|
* API : Monitor Mode Controller
|
|
*/
|
|
app.get([config.webPaths.apiPrefix+':auth/monitor/:ke/:id/:f',config.webPaths.apiPrefix+':auth/monitor/:ke/:id/:f/:ff',config.webPaths.apiPrefix+':auth/monitor/:ke/:id/:f/:ff/:fff'], function (req,res){
|
|
req.ret={ok:false};
|
|
res.setHeader('Content-Type', 'application/json');
|
|
s.auth(req.params,function(user){
|
|
if(user.permissions.control_monitors==="0"||user.details.sub&&user.details.allmonitors!=='1'&&user.details.monitor_edit.indexOf(req.params.id)===-1){
|
|
res.end(user.lang['Not Permitted'])
|
|
return
|
|
}
|
|
if(req.params.f===''){req.ret.msg=user.lang.monitorGetText1;res.end(s.prettyPrint(req.ret));return}
|
|
if(req.params.f!=='stop'&&req.params.f!=='start'&&req.params.f!=='record'){
|
|
req.ret.msg='Mode not recognized.';
|
|
res.end(s.prettyPrint(req.ret));
|
|
return;
|
|
}
|
|
s.sqlQuery('SELECT * FROM Monitors WHERE ke=? AND mid=?',[req.params.ke,req.params.id],function(err,r){
|
|
if(r&&r[0]){
|
|
r=r[0];
|
|
if(req.query.reset==='1'||(s.group[r.ke]&&s.group[r.ke].mon_conf[r.mid].mode!==req.params.f)||req.query.fps&&(!s.group[r.ke].mon[r.mid].currentState||!s.group[r.ke].mon[r.mid].currentState.trigger_on)){
|
|
if(req.query.reset!=='1'||!s.group[r.ke].mon[r.mid].trigger_timer){
|
|
if(!s.group[r.ke].mon[r.mid].currentState)s.group[r.ke].mon[r.mid].currentState={}
|
|
s.group[r.ke].mon[r.mid].currentState.mode=r.mode.toString()
|
|
s.group[r.ke].mon[r.mid].currentState.fps=r.fps.toString()
|
|
if(!s.group[r.ke].mon[r.mid].currentState.trigger_on){
|
|
s.group[r.ke].mon[r.mid].currentState.trigger_on=true
|
|
}else{
|
|
s.group[r.ke].mon[r.mid].currentState.trigger_on=false
|
|
}
|
|
r.mode=req.params.f;
|
|
try{r.details=JSON.parse(r.details);}catch(er){}
|
|
if(req.query.fps){
|
|
r.fps=parseFloat(r.details.detector_trigger_record_fps)
|
|
s.group[r.ke].mon[r.mid].currentState.detector_trigger_record_fps=r.fps
|
|
}
|
|
r.id=r.mid;
|
|
s.sqlQuery('UPDATE Monitors SET mode=? WHERE ke=? AND mid=?',[r.mode,r.ke,r.mid]);
|
|
s.group[r.ke].mon_conf[r.mid]=r;
|
|
s.tx({f:'monitor_edit',mid:r.mid,ke:r.ke,mon:r},'GRP_'+r.ke);
|
|
s.tx({f:'monitor_edit',mid:r.mid,ke:r.ke,mon:r},'STR_'+r.ke);
|
|
s.camera('stop',s.cleanMonitorObject(r));
|
|
if(req.params.f!=='stop'){
|
|
s.camera(req.params.f,s.cleanMonitorObject(r));
|
|
}
|
|
req.ret.msg=user.lang['Monitor mode changed']+' : '+req.params.f;
|
|
}else{
|
|
req.ret.msg=user.lang['Reset Timer'];
|
|
}
|
|
req.ret.cmd_at=s.formattedTime(new Date,'YYYY-MM-DD HH:mm:ss');
|
|
req.ret.ok=true;
|
|
if(req.params.ff&&req.params.f!=='stop'){
|
|
req.params.ff=parseFloat(req.params.ff);
|
|
clearTimeout(s.group[r.ke].mon[r.mid].trigger_timer)
|
|
switch(req.params.fff){
|
|
case'day':case'days':
|
|
req.timeout=req.params.ff*1000*60*60*24
|
|
break;
|
|
case'hr':case'hour':case'hours':
|
|
req.timeout=req.params.ff*1000*60*60
|
|
break;
|
|
case'min':case'minute':case'minutes':
|
|
req.timeout=req.params.ff*1000*60
|
|
break;
|
|
default://seconds
|
|
req.timeout=req.params.ff*1000
|
|
break;
|
|
}
|
|
s.group[r.ke].mon[r.mid].trigger_timer=setTimeout(function(){
|
|
delete(s.group[r.ke].mon[r.mid].trigger_timer)
|
|
s.sqlQuery('UPDATE Monitors SET mode=? WHERE ke=? AND mid=?',[s.group[r.ke].mon[r.mid].currentState.mode,r.ke,r.mid]);
|
|
r.neglectTriggerTimer=1;
|
|
r.mode=s.group[r.ke].mon[r.mid].currentState.mode;
|
|
r.fps=s.group[r.ke].mon[r.mid].currentState.fps;
|
|
s.camera('stop',s.cleanMonitorObject(r),function(){
|
|
if(s.group[r.ke].mon[r.mid].currentState.mode!=='stop'){
|
|
s.camera(s.group[r.ke].mon[r.mid].currentState.mode,s.cleanMonitorObject(r));
|
|
}
|
|
s.group[r.ke].mon_conf[r.mid]=r;
|
|
});
|
|
s.tx({f:'monitor_edit',mid:r.mid,ke:r.ke,mon:r},'GRP_'+r.ke);
|
|
s.tx({f:'monitor_edit',mid:r.mid,ke:r.ke,mon:r},'STR_'+r.ke);
|
|
},req.timeout);
|
|
// req.ret.end_at=s.formattedTime(new Date,'YYYY-MM-DD HH:mm:ss').add(req.timeout,'milliseconds');
|
|
}
|
|
}else{
|
|
req.ret.msg=user.lang['Monitor mode is already']+' : '+req.params.f;
|
|
}
|
|
}else{
|
|
req.ret.msg=user.lang['Monitor or Key does not exist.'];
|
|
}
|
|
res.end(s.prettyPrint(req.ret));
|
|
})
|
|
},res,req);
|
|
})
|
|
/**
|
|
* API : Get fileBin files
|
|
*/
|
|
app.get([config.webPaths.apiPrefix+':auth/fileBin/:ke',config.webPaths.apiPrefix+':auth/fileBin/:ke/:id'],function (req,res){
|
|
res.setHeader('Content-Type', 'application/json');
|
|
req.fn=function(user){
|
|
req.sql='SELECT * FROM Files WHERE ke=?';req.ar=[req.params.ke];
|
|
if(user.details.sub&&user.details.monitors&&user.details.allmonitors!=='1'){
|
|
try{user.details.monitors=JSON.parse(user.details.monitors);}catch(er){}
|
|
req.or=[];
|
|
user.details.monitors.forEach(function(v,n){
|
|
req.or.push('mid=?');req.ar.push(v)
|
|
})
|
|
req.sql+=' AND ('+req.or.join(' OR ')+')'
|
|
}else{
|
|
if(req.params.id&&(!user.details.sub||user.details.allmonitors!=='0'||user.details.monitors.indexOf(req.params.id)>-1)){
|
|
req.sql+=' and mid=?';req.ar.push(req.params.id)
|
|
}
|
|
}
|
|
s.sqlQuery(req.sql,req.ar,function(err,r){
|
|
if(!r){
|
|
r=[]
|
|
}else{
|
|
r.forEach(function(v){
|
|
v.details=JSON.parse(v.details)
|
|
v.href='/'+req.params.auth+'/fileBin/'+req.params.ke+'/'+req.params.id+'/'+v.details.year+'/'+v.details.month+'/'+v.details.day+'/'+v.name;
|
|
})
|
|
}
|
|
res.end(s.prettyPrint(r));
|
|
})
|
|
}
|
|
s.auth(req.params,req.fn,res,req);
|
|
});
|
|
/**
|
|
* API : Get fileBin file
|
|
*/
|
|
app.get(config.webPaths.apiPrefix+':auth/fileBin/:ke/:id/:year/:month/:day/:file', function (req,res){
|
|
req.fn=function(user){
|
|
req.failed=function(){
|
|
res.end(user.lang['File Not Found'])
|
|
}
|
|
if (!s.group[req.params.ke].fileBin[req.params.id+'/'+req.params.file]){
|
|
s.sqlQuery('SELECT * FROM Files WHERE ke=? AND mid=? AND name=?',[req.params.ke,req.params.id,req.params.file],function(err,r){
|
|
if(r&&r[0]){
|
|
r=r[0]
|
|
r.details=JSON.parse(r.details)
|
|
req.dir=s.dir.fileBin+req.params.ke+'/'+req.params.id+'/'+r.details.year+'/'+r.details.month+'/'+r.details.day+'/'+req.params.file;
|
|
if(fs.existsSync(req.dir)){
|
|
res.on('finish',function(){res.end();});
|
|
fs.createReadStream(req.dir).pipe(res);
|
|
}else{
|
|
req.failed()
|
|
}
|
|
}else{
|
|
req.failed()
|
|
}
|
|
})
|
|
}else{
|
|
res.end(user.lang['Please Wait for Completion'])
|
|
}
|
|
}
|
|
s.auth(req.params,req.fn,res,req);
|
|
});
|
|
/**
|
|
* API : Zip Videos and Get Link from fileBin
|
|
*/
|
|
app.get(config.webPaths.apiPrefix+':auth/zipVideos/:ke', function (req,res){
|
|
var failed = function(resp){
|
|
res.setHeader('Content-Type', 'application/json');
|
|
res.end(s.prettyPrint(resp))
|
|
}
|
|
if(req.query.videos && req.query.videos !== ''){
|
|
s.auth(req.params,function(user){
|
|
var videosSelected = JSON.parse(req.query.videos)
|
|
var where = []
|
|
var values = []
|
|
videosSelected.forEach(function(video){
|
|
where.push("(ke=? AND mid=? AND `time`=?)")
|
|
if(!video.ke)video.ke = req.params.ke
|
|
values.push(video.ke)
|
|
values.push(video.mid)
|
|
var time = s.nameToTime(video.filename)
|
|
if(req.query.isUTC === 'true'){
|
|
time = s.utcToLocal(time)
|
|
}
|
|
time = new Date(time)
|
|
values.push(time)
|
|
})
|
|
s.sqlQuery('SELECT * FROM Videos WHERE '+where.join(' OR '),values,function(err,r){
|
|
var resp = {ok: false}
|
|
if(r && r[0]){
|
|
resp.ok = true
|
|
var zipDownload = null
|
|
var tempFiles = []
|
|
var fileId = s.gid()
|
|
var fileBinDir = s.dir.fileBin+req.params.ke+'/'
|
|
var tempScript = s.dir.streams+req.params.ke+'/'+fileId+'.sh'
|
|
var zippedFilename = s.formattedTime()+'-'+fileId+'-Shinobi_Recordings.zip'
|
|
var zippedFile = fileBinDir+zippedFilename
|
|
var script = 'cd '+fileBinDir+' && zip -9 -r '+zippedFile
|
|
res.on('close', () => {
|
|
if(zipDownload && zipDownload.destroy){
|
|
zipDownload.destroy()
|
|
}
|
|
fs.unlink(zippedFile);
|
|
})
|
|
if(!fs.existsSync(fileBinDir)){
|
|
fs.mkdirSync(fileBinDir);
|
|
}
|
|
r.forEach(function(video){
|
|
var timeFormatted = s.formattedTime(video.time)
|
|
video.filename = timeFormatted+'.'+video.ext
|
|
var dir = s.getVideoDirectory(video)+video.filename
|
|
var tempVideoFile = timeFormatted+' - '+video.mid+'.'+video.ext
|
|
fs.writeFileSync(fileBinDir+tempVideoFile, fs.readFileSync(dir))
|
|
tempFiles.push(fileBinDir+tempVideoFile)
|
|
script += ' "'+tempVideoFile+'"'
|
|
})
|
|
fs.writeFileSync(tempScript,script,'utf8')
|
|
var zipCreate = spawn('sh',(tempScript).split(' '),{detached: true})
|
|
zipCreate.stderr.on('data',function(data){
|
|
s.userLog({ke:req.params.ke,mid:'$USER'},{title:'Zip Create Error',msg:data.toString()})
|
|
})
|
|
zipCreate.on('exit',function(data){
|
|
fs.unlinkSync(tempScript)
|
|
tempFiles.forEach(function(file){
|
|
fs.unlink(file,function(){})
|
|
})
|
|
res.setHeader('Content-Disposition', 'attachment; filename="'+zippedFilename+'"')
|
|
var zipDownload = fs.createReadStream(zippedFile)
|
|
zipDownload.pipe(res)
|
|
zipDownload.on('error', function (error) {
|
|
var errorString = error.toString()
|
|
s.userLog({
|
|
ke: req.params.ke,
|
|
mid: '$USER'
|
|
},{
|
|
title: 'Zip Download Error',
|
|
msg: errorString
|
|
})
|
|
if(zipDownload && zipDownload.destroy){
|
|
zipDownload.destroy()
|
|
}
|
|
res.end(s.prettyPrint({
|
|
ok: false,
|
|
msg: errorString
|
|
}))
|
|
})
|
|
zipDownload.on('close', function () {
|
|
res.end()
|
|
zipDownload.destroy()
|
|
fs.unlinkSync(zippedFile)
|
|
})
|
|
})
|
|
}else{
|
|
failed({ok:false,msg:'No Videos Found'})
|
|
}
|
|
})
|
|
},res,req);
|
|
}else{
|
|
failed({ok:false,msg:'"videos" query variable is missing from request.'})
|
|
}
|
|
})
|
|
/**
|
|
* API : Zip Cloud Videos and Get Link from fileBin
|
|
*/
|
|
app.get(config.webPaths.apiPrefix+':auth/zipCloudVideos/:ke', function (req,res){
|
|
var failed = function(resp){
|
|
res.setHeader('Content-Type', 'application/json');
|
|
res.end(s.prettyPrint(resp))
|
|
}
|
|
if(req.query.videos && req.query.videos !== ''){
|
|
s.auth(req.params,function(user){
|
|
var videosSelected = JSON.parse(req.query.videos)
|
|
var where = []
|
|
var values = []
|
|
videosSelected.forEach(function(video){
|
|
where.push("(ke=? AND mid=? AND `time`=?)")
|
|
if(!video.ke)video.ke = req.params.ke
|
|
values.push(video.ke)
|
|
values.push(video.mid)
|
|
var time = s.nameToTime(video.filename)
|
|
if(req.query.isUTC === 'true'){
|
|
time = s.utcToLocal(time)
|
|
}
|
|
time = new Date(time)
|
|
values.push(time)
|
|
})
|
|
s.sqlQuery('SELECT * FROM `Cloud Videos` WHERE '+where.join(' OR '),values,function(err,r){
|
|
var resp = {ok: false}
|
|
if(r && r[0]){
|
|
resp.ok = true
|
|
var zipDownload = null
|
|
var tempFiles = []
|
|
var fileId = s.gid()
|
|
var fileBinDir = s.dir.fileBin+req.params.ke+'/'
|
|
var tempScript = s.dir.streams+req.params.ke+'/'+fileId+'.sh'
|
|
var zippedFilename = s.formattedTime()+'-'+fileId+'-Shinobi_Cloud_Backed_Recordings.zip'
|
|
var zippedFile = fileBinDir+zippedFilename
|
|
var script = 'cd '+fileBinDir+' && zip -9 -r '+zippedFile
|
|
res.on('close', () => {
|
|
if(zipDownload && zipDownload.destroy){
|
|
zipDownload.destroy()
|
|
}
|
|
fs.unlink(zippedFile);
|
|
})
|
|
if(!fs.existsSync(fileBinDir)){
|
|
fs.mkdirSync(fileBinDir);
|
|
}
|
|
var cloudDownloadCount = 0
|
|
var getFile = function(video,completed){
|
|
if(!video)completed();
|
|
s.checkDetails(video)
|
|
var filename = video.href.split('/')
|
|
filename = filename[filename.length - 1]
|
|
var timeFormatted = s.formattedTime(video.time)
|
|
var tempVideoFile = video.details.type + '-' + video.mid + '-' + filename
|
|
var tempFileWriteStream = fs.createWriteStream(fileBinDir+tempVideoFile)
|
|
tempFileWriteStream.on('finish', function() {
|
|
++cloudDownloadCount
|
|
getFile(r[cloudDownloadCount],completed)
|
|
})
|
|
var cloudVideoDownload = request(video.href)
|
|
cloudVideoDownload.on('response', function (res) {
|
|
res.pipe(tempFileWriteStream)
|
|
})
|
|
tempFiles.push(fileBinDir+tempVideoFile)
|
|
script += ' "'+tempVideoFile+'"'
|
|
}
|
|
getFile(r[cloudDownloadCount],function(){
|
|
fs.writeFileSync(tempScript,script,'utf8')
|
|
var zipCreate = spawn('sh',(tempScript).split(' '),{detached: true})
|
|
zipCreate.stderr.on('data',function(data){
|
|
s.userLog({ke:req.params.ke,mid:'$USER'},{title:'Zip Create Error',msg:data.toString()})
|
|
})
|
|
zipCreate.on('exit',function(data){
|
|
fs.unlinkSync(tempScript)
|
|
tempFiles.forEach(function(file){
|
|
fs.unlink(file,function(){})
|
|
})
|
|
res.setHeader('Content-Disposition', 'attachment; filename="' + zippedFilename + '"')
|
|
var zipDownload = fs.createReadStream(zippedFile)
|
|
zipDownload.pipe(res)
|
|
zipDownload.on('error', function (error) {
|
|
var errorString = error.toString()
|
|
s.userLog({
|
|
ke: req.params.ke,
|
|
mid: '$USER'
|
|
},{
|
|
title: 'Zip Download Error',
|
|
msg: errorString
|
|
})
|
|
if(zipDownload && zipDownload.destroy){
|
|
zipDownload.destroy()
|
|
}
|
|
res.end(s.prettyPrint({
|
|
ok: false,
|
|
msg: errorString
|
|
}))
|
|
})
|
|
zipDownload.on('close', function () {
|
|
res.end()
|
|
zipDownload.destroy()
|
|
fs.unlinkSync(zippedFile)
|
|
})
|
|
})
|
|
})
|
|
}else{
|
|
failed({ok:false,msg:'No Videos Found'})
|
|
}
|
|
})
|
|
},res,req);
|
|
}else{
|
|
failed({ok:false,msg:'"videos" query variable is missing from request.'})
|
|
}
|
|
})
|
|
/**
|
|
* API : Get Cloud Video File (proxy)
|
|
*/
|
|
app.get(config.webPaths.apiPrefix+':auth/cloudVideos/:ke/:id/:file', function (req,res){
|
|
s.auth(req.params,function(user){
|
|
if(user.permissions.watch_videos==="0"||user.details.sub&&user.details.allmonitors!=='1'&&user.details.monitors.indexOf(req.params.id)===-1){
|
|
res.end(user.lang['Not Permitted'])
|
|
return
|
|
}
|
|
var time = s.nameToTime(req.params.file)
|
|
if(req.query.isUTC === 'true'){
|
|
time = s.utcToLocal(time)
|
|
}
|
|
time = new Date(time)
|
|
s.sqlQuery('SELECT * FROM `Cloud Videos` WHERE ke=? AND mid=? AND `time`=? LIMIT 1',[req.params.ke,req.params.id,time],function(err,r){
|
|
if(r&&r[0]){
|
|
r = r[0]
|
|
req.pipe(request(r.href)).pipe(res)
|
|
}else{
|
|
res.end(user.lang['File Not Found in Database'])
|
|
}
|
|
})
|
|
},res,req);
|
|
});
|
|
/**
|
|
* API : Get Video File
|
|
*/
|
|
app.get(config.webPaths.apiPrefix+':auth/videos/:ke/:id/:file', function (req,res){
|
|
s.auth(req.params,function(user){
|
|
if(user.permissions.watch_videos==="0"||user.details.sub&&user.details.allmonitors!=='1'&&user.details.monitors.indexOf(req.params.id)===-1){
|
|
res.end(user.lang['Not Permitted'])
|
|
return
|
|
}
|
|
var time = s.nameToTime(req.params.file)
|
|
if(req.query.isUTC === 'true'){
|
|
time = s.utcToLocal(time)
|
|
}
|
|
time = new Date(time)
|
|
s.sqlQuery('SELECT * FROM Videos WHERE ke=? AND mid=? AND `time`=? LIMIT 1',[req.params.ke,req.params.id,time],function(err,r){
|
|
if(r&&r[0]){
|
|
req.dir=s.getVideoDirectory(r[0])+req.params.file
|
|
if (fs.existsSync(req.dir)){
|
|
s.streamMp4FileOverHttp(req.dir,req,res)
|
|
}else{
|
|
res.end(user.lang['File Not Found in Filesystem'])
|
|
}
|
|
}else{
|
|
res.end(user.lang['File Not Found in Database'])
|
|
}
|
|
})
|
|
},res,req);
|
|
});
|
|
/**
|
|
* API : Motion Trigger via GET request
|
|
*/
|
|
app.get(config.webPaths.apiPrefix+':auth/motion/:ke/:id', function (req,res){
|
|
s.auth(req.params,function(user){
|
|
var endData = {
|
|
|
|
}
|
|
if(req.query.data){
|
|
try{
|
|
var d = {
|
|
id: req.params.id,
|
|
ke: req.params.ke,
|
|
details: JSON.parse(req.query.data)
|
|
}
|
|
}catch(err){
|
|
res.end('Data Broken',err)
|
|
return
|
|
}
|
|
}else{
|
|
res.end('No Data')
|
|
return
|
|
}
|
|
if(!d.ke||!d.id||!s.group[d.ke]){
|
|
res.end(user.lang['No Group with this key exists'])
|
|
return
|
|
}
|
|
s.triggerEvent(d)
|
|
res.end(user.lang['Trigger Successful'])
|
|
},res,req)
|
|
})
|
|
/**
|
|
* API : WebHook Tester
|
|
*/
|
|
app.get(config.webPaths.apiPrefix+':auth/hookTester/:ke/:id', function (req,res){
|
|
res.setHeader('Content-Type', 'application/json');
|
|
s.auth(req.params,function(user){
|
|
s.userLog(req.params,{type:'Test',msg:'Hook Test'})
|
|
res.end(s.prettyPrint({ok:true}))
|
|
},res,req);
|
|
})
|
|
/**
|
|
* API : Camera PTZ Controller
|
|
*/
|
|
app.get(config.webPaths.apiPrefix+':auth/control/:ke/:id/:direction', function (req,res){
|
|
res.setHeader('Content-Type', 'application/json');
|
|
s.auth(req.params,function(user){
|
|
s.cameraControl(req.params,function(resp){
|
|
res.end(s.prettyPrint(resp))
|
|
});
|
|
},res,req);
|
|
})
|
|
/**
|
|
* API : Modify Video File
|
|
*/
|
|
app.get([
|
|
config.webPaths.apiPrefix+':auth/videos/:ke/:id/:file/:mode',
|
|
config.webPaths.apiPrefix+':auth/videos/:ke/:id/:file/:mode/:f',
|
|
config.webPaths.apiPrefix+':auth/cloudVideos/:ke/:id/:file/:mode',
|
|
config.webPaths.apiPrefix+':auth/cloudVideos/:ke/:id/:file/:mode/:f'
|
|
], function (req,res){
|
|
req.ret={ok:false};
|
|
res.setHeader('Content-Type', 'application/json');
|
|
s.auth(req.params,function(user){
|
|
if(user.permissions.watch_videos==="0"||user.details.sub&&user.details.allmonitors!=='1'&&user.details.video_delete.indexOf(req.params.id)===-1){
|
|
res.end(user.lang['Not Permitted'])
|
|
return
|
|
}
|
|
var time = s.nameToTime(req.params.file)
|
|
if(req.query.isUTC === 'true'){
|
|
time = s.utcToLocal(time)
|
|
}
|
|
time = new Date(time)
|
|
var origURL = req.originalUrl.split('/')
|
|
var videoParam = origURL[origURL.indexOf(req.params.auth) + 1]
|
|
var videoSet = 'Videos'
|
|
switch(videoParam){
|
|
case'cloudVideos':
|
|
videoSet = 'Cloud Videos'
|
|
break;
|
|
}
|
|
req.sql='SELECT * FROM `'+videoSet+'` WHERE ke=? AND mid=? AND `time`=?';
|
|
req.ar=[req.params.ke,req.params.id,time];
|
|
s.sqlQuery(req.sql,req.ar,function(err,r){
|
|
if(r&&r[0]){
|
|
r=r[0];r.filename=s.formattedTime(r.time)+'.'+r.ext;
|
|
switch(req.params.mode){
|
|
case'fix':
|
|
req.ret.ok=true;
|
|
s.video('fix',r)
|
|
break;
|
|
case'status':
|
|
r.f = 'video_edit'
|
|
switch(videoParam){
|
|
case'cloudVideos':
|
|
r.f += '_cloud'
|
|
break;
|
|
}
|
|
r.status = parseInt(req.params.f)
|
|
if(isNaN(req.params.f)||req.params.f===0){
|
|
req.ret.msg='Not a valid value.';
|
|
}else{
|
|
req.ret.ok=true;
|
|
s.sqlQuery('UPDATE `'+videoSet+'` SET status=? WHERE ke=? AND mid=? AND `time`=?',[req.params.f,req.params.ke,req.params.id,time])
|
|
s.tx(r,'GRP_'+r.ke);
|
|
}
|
|
break;
|
|
case'delete':
|
|
req.ret.ok=true;
|
|
switch(videoParam){
|
|
case'cloudVideos':
|
|
s.deleteVideoFromCloud(r)
|
|
break;
|
|
default:
|
|
s.deleteVideo(r)
|
|
break;
|
|
}
|
|
break;
|
|
default:
|
|
req.ret.msg=user.lang.modifyVideoText1;
|
|
break;
|
|
}
|
|
}else{
|
|
req.ret.msg=user.lang['No such file'];
|
|
}
|
|
res.end(s.prettyPrint(req.ret));
|
|
})
|
|
},res,req);
|
|
})
|
|
/**
|
|
* API : Stream In to push data to ffmpeg by HTTP
|
|
*/
|
|
app.all(['/streamIn/:ke/:id','/streamIn/:ke/:id/:feed'], function (req, res) {
|
|
var checkOrigin = function(search){return req.headers.host.indexOf(search)>-1}
|
|
if(checkOrigin('127.0.0.1')){
|
|
if(!req.params.feed){req.params.feed='1'}
|
|
if(!s.group[req.params.ke].mon[req.params.id].streamIn[req.params.feed]){
|
|
s.group[req.params.ke].mon[req.params.id].streamIn[req.params.feed] = new events.EventEmitter().setMaxListeners(0)
|
|
}
|
|
//req.params.feed = Feed Number
|
|
res.connection.setTimeout(0);
|
|
req.on('data', function(buffer){
|
|
s.group[req.params.ke].mon[req.params.id].streamIn[req.params.feed].emit('data',buffer)
|
|
});
|
|
req.on('end',function(){
|
|
// console.log('streamIn closed',req.params);
|
|
});
|
|
}else{
|
|
res.end('Local connection is only allowed.')
|
|
}
|
|
})
|
|
/**
|
|
* API : FFprobe
|
|
*/
|
|
app.get(config.webPaths.apiPrefix+':auth/probe/:ke',function (req,res){
|
|
req.ret={ok:false};
|
|
res.setHeader('Content-Type', 'application/json');
|
|
s.auth(req.params,function(user){
|
|
switch(req.query.action){
|
|
// case'stop':
|
|
// exec('kill -9 '+user.ffprobe.pid,{detatched: true})
|
|
// break;
|
|
default:
|
|
if(!req.query.url){
|
|
req.ret.error = 'Missing URL'
|
|
res.end(s.prettyPrint(req.ret));
|
|
return
|
|
}
|
|
if(user.ffprobe){
|
|
req.ret.error = 'Account is already probing'
|
|
res.end(s.prettyPrint(req.ret));
|
|
return
|
|
}
|
|
user.ffprobe=1;
|
|
if(req.query.flags==='default'){
|
|
req.query.flags = '-v quiet -print_format json -show_format -show_streams'
|
|
}else{
|
|
if(!req.query.flags){
|
|
req.query.flags = ''
|
|
}
|
|
}
|
|
req.probeCommand = s.splitForFFPMEG(req.query.flags+' -i '+req.query.url).join(' ')
|
|
exec('ffprobe '+req.probeCommand+' | echo ',function(err,stdout,stderr){
|
|
delete(user.ffprobe)
|
|
if(err){
|
|
req.ret.error=(err)
|
|
}else{
|
|
req.ret.ok=true
|
|
req.ret.result = stdout+stderr
|
|
}
|
|
req.ret.probe = req.probeCommand
|
|
res.end(s.prettyPrint(req.ret));
|
|
})
|
|
break;
|
|
}
|
|
},res,req);
|
|
})
|
|
/**
|
|
* API : ONVIF Method Controller
|
|
*/
|
|
app.all([config.webPaths.apiPrefix+':auth/onvif/:ke/:id/:action',config.webPaths.apiPrefix+':auth/onvif/:ke/:id/:service/:action'],function (req,res){
|
|
var response = {ok:false};
|
|
res.setHeader('Content-Type', 'application/json');
|
|
s.auth(req.params,function(user){
|
|
var errorMessage = function(msg,error){
|
|
response.ok = false
|
|
response.msg = msg
|
|
response.error = error
|
|
res.end(s.prettyPrint(response))
|
|
}
|
|
var actionCallback = function(onvifActionResponse){
|
|
response.ok = true
|
|
if(onvifActionResponse.data){
|
|
response.responseFromDevice = onvifActionResponse.data
|
|
}else{
|
|
response.responseFromDevice = onvifActionResponse
|
|
}
|
|
if(onvifActionResponse.soap)response.soap = onvifActionResponse.soap
|
|
res.end(s.prettyPrint(response))
|
|
}
|
|
var isEmpty = function(obj) {
|
|
for(var key in obj) {
|
|
if(obj.hasOwnProperty(key))
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
var doAction = function(Camera){
|
|
var completeAction = function(command){
|
|
if(command.then){
|
|
command.then(actionCallback).catch(function(error){
|
|
errorMessage('Device responded with an error',error)
|
|
})
|
|
}else if(command){
|
|
response.ok = true
|
|
response.repsonseFromDevice = command
|
|
res.end(s.prettyPrint(response))
|
|
}else{
|
|
response.error = 'Big Errors, Please report it to Shinobi Development'
|
|
res.end(s.prettyPrint(response))
|
|
}
|
|
}
|
|
var action
|
|
if(req.params.service){
|
|
if(Camera.services[req.params.service] === undefined){
|
|
return errorMessage('This is not an available service. Please use one of the following : '+Object.keys(Camera.services).join(', '))
|
|
}
|
|
if(Camera.services[req.params.service] === null){
|
|
return errorMessage('This service is not activated. Maybe you are not connected through ONVIF. You can test by attempting to use the "Control" feature with ONVIF in Shinobi.')
|
|
}
|
|
action = Camera.services[req.params.service][req.params.action]
|
|
}else{
|
|
action = Camera[req.params.action]
|
|
}
|
|
if(!action || typeof action !== 'function'){
|
|
errorMessage(req.params.action+' is not an available ONVIF function. See https://github.com/futomi/node-onvif for functions.')
|
|
}else{
|
|
var argNames = s.getFunctionParamNames(action)
|
|
var options
|
|
var command
|
|
if(argNames[0] === 'options' || argNames[0] === 'params'){
|
|
options = {}
|
|
if(req.query.options){
|
|
var jsonRevokedText = 'JSON not formated correctly'
|
|
try{
|
|
options = JSON.parse(req.query.options)
|
|
}catch(err){
|
|
return errorMessage(jsonRevokedText,err)
|
|
}
|
|
}else if(req.body.options){
|
|
try{
|
|
options = JSON.parse(req.body.options)
|
|
}catch(err){
|
|
return errorMessage(jsonRevokedText,err)
|
|
}
|
|
}else if(req.query.params){
|
|
try{
|
|
options = JSON.parse(req.query.params)
|
|
}catch(err){
|
|
return errorMessage(jsonRevokedText,err)
|
|
}
|
|
}else if(req.body.params){
|
|
try{
|
|
options = JSON.parse(req.body.params)
|
|
}catch(err){
|
|
return errorMessage(jsonRevokedText,err)
|
|
}
|
|
}
|
|
}
|
|
if(req.params.service){
|
|
command = Camera.services[req.params.service][req.params.action](options)
|
|
}else{
|
|
command = Camera[req.params.action](options)
|
|
}
|
|
completeAction(command)
|
|
}
|
|
}
|
|
if(!s.group[req.params.ke].mon[req.params.id].onvifConnection){
|
|
//prepeare onvif connection
|
|
var controlURL
|
|
var monitorConfig = s.group[req.params.ke].mon_conf[req.params.id]
|
|
if(!monitorConfig.details.control_base_url||monitorConfig.details.control_base_url===''){
|
|
controlURL = s.buildMonitorUrl(monitorConfig, true)
|
|
}else{
|
|
controlURL = monitorConfig.details.control_base_url
|
|
}
|
|
var controlURLOptions = s.cameraControlOptionsFromUrl(controlURL,monitorConfig)
|
|
//create onvif connection
|
|
s.group[req.params.ke].mon[req.params.id].onvifConnection = new onvif.OnvifDevice({
|
|
xaddr : 'http://' + controlURLOptions.host + ':' + controlURLOptions.port + '/onvif/device_service',
|
|
user : controlURLOptions.username,
|
|
pass : controlURLOptions.password
|
|
})
|
|
var device = s.group[req.params.ke].mon[req.params.id].onvifConnection
|
|
device.init().then((info) => {
|
|
if(info)doAction(device)
|
|
}).catch(function(error){
|
|
return errorMessage('Device responded with an error',error)
|
|
})
|
|
}else{
|
|
doAction(s.group[req.params.ke].mon[req.params.id].onvifConnection)
|
|
}
|
|
},res,req);
|
|
})
|
|
/**
|
|
* API : Account Edit from Dashboard
|
|
*/
|
|
app.all(config.webPaths.apiPrefix+':auth/accounts/:ke/edit',function (req,res){
|
|
s.auth(req.params,function(user){
|
|
var endData = {
|
|
ok : false
|
|
}
|
|
var form = s.getPostData(req)
|
|
if(form){
|
|
endData.ok = true
|
|
s.accountSettingsEdit({
|
|
ke: req.params.ke,
|
|
uid: user.uid,
|
|
form: form,
|
|
cnid: user.cnid
|
|
})
|
|
}else{
|
|
endData.msg = lang.postDataBroken
|
|
}
|
|
s.closeJsonResponse(res,endData)
|
|
},res,req)
|
|
})
|
|
/**
|
|
* Robots.txt
|
|
*/
|
|
app.get('/robots.txt', function (req,res){
|
|
res.on('finish',function(){
|
|
res.end()
|
|
})
|
|
fs.createReadStream(s.mainDirectory + '/web/pages/robots.txt').pipe(res)
|
|
})
|
|
}
|