server.js

process.env.DEBUG = "*"
const express = require('express')
const app = express()
var session = require('express-session')
var config = require("./config.json");
const fs = require("fs");
const crypto = require('crypto');
const jwt = require("jsonwebtoken");
const axios = require("axios");
const phonetic = require("phonetic");
app.set('view engine', 'ejs');
// Prints:
app.use(express.static("assets"))
app.use(session({
  secret: config.sessionkey,
  cookie: {
    secure: false
  }
}))
app.get("/usernamecookie", (req, res) => {
  res.end(req.session.username)
})
app.post("/hook", (req, res) => {
  var {
    exec
  } = require('child_process');
  exec('git pull', (error, stdout, stderr) => {
    if (error) {
      console.error(`exec error: ${error}`);
      return;
    }
    res.send("ok")
    exec('pm2 restart centro', (error, stdout, stderr) => {
      if (error) {
        console.error(`exec error: ${error}`);
        return;
      }
    });
  });
})
app.get('/requestauth', (req, res) => {
  req.session.redirect = req.query.redirect;
  console.log(req.session);
  if (!req.session.redirect) return res.end("401: Malformed request");
  res.sendFile(__dirname + "/assets/getUsername.html");
})
app.get("/haveusername", (req, res) => {
  console.log(req.query, req.session)
  var usernamefile = JSON.parse(fs.readFileSync("./users.json"));
  if (!usernamefile.hasOwnProperty(req.query.username)) return res.sendFile(__dirname + "/assets/incorrectusername.html")
  req.session.username = req.query.username;
  if (usernamefile[req.session.username].type === "standard") {
    res.sendFile(__dirname + "/assets/passwordAuth.html")
  } else if (usernamefile[req.session.username].type == "discord") {
    var code = phonetic.generate()
      .toLowerCase();
    axios.get("http://jwte.ch:8000/2fa/" + usernamefile[req.session.username].did + "/" + code);
    req.session.code = code
    res.sendFile(__dirname + "/assets/discordAuth.html");
  }
})
app.get("/havepassword", (req, res) => {
  if (!req.session.redirect || req.session.username == undefined || !req.query.password) return res.end("401: Malformed request");
  var usernamefile = JSON.parse(fs.readFileSync("./users.json"));
  var hash = crypto.createHash('sha256');
  hash.update(req.query.password);
  var fullhash = hash.digest('hex');
  if (usernamefile[req.session.username].password !== fullhash) return res.sendFile(__dirname + "/assets/incorrectpassword.html");
  var privatekey = fs.readFileSync("private.key");
  var user = usernamefile[req.session.username];
  user.username = req.session.username
  user.logintime = Date.now();
  delete user.password
  var token = jwt.sign(user, privatekey, {
    algorithm: "RS256",
    issuer: "JW-Centro"
  })
  res.redirect(req.session.redirect.replace("$token", token))
})
app.get("/havediscord", (req, res) => {
  if (!req.session.redirect || req.session.username == undefined || !req.query.discord) return res.end("401: Malformed request");
  var usernamefile = JSON.parse(fs.readFileSync("./users.json"));
  if (req.session.code !== req.query.discord) return res.sendFile(__dirname + "/assets/incorrectdiscord.html");
  var privatekey = fs.readFileSync("private.key");
  var user = usernamefile[req.session.username];
  user.username = req.session.username
  user.logintime = Date.now();
  var token = jwt.sign(user, privatekey, {
    algorithm: "RS256",
    issuer: "JW-Centro"
  })
  res.redirect(req.session.redirect.replace("$token", token))
})
app.listen(config.port, () => console.log('Example app listening on port 3000!'))