Nareshkumar Rao
3 years ago
committed by
GitHub
GitHub
32 changed files with 879 additions and 521 deletions
@ -1,12 +0,0 @@ |
|||
module.exports = { |
|||
env: { |
|||
node: true, |
|||
commonjs: true, |
|||
es2021: true, |
|||
}, |
|||
extends: "eslint:recommended", |
|||
parserOptions: { |
|||
ecmaVersion: 12, |
|||
}, |
|||
rules: {}, |
|||
}; |
|||
@ -0,0 +1 @@ |
|||
{} |
|||
@ -1,14 +1,15 @@ |
|||
const express = require("express"); |
|||
const session = require("express-session"); |
|||
const cors = require("cors"); |
|||
require("dotenv-flow").config(); |
|||
import * as dotenvFlow from "dotenv-flow"; |
|||
dotenvFlow.config(); |
|||
|
|||
const { LoginRoute } = require("./routes/LoginRoute"); |
|||
const { CodeRoute } = require("./routes/CodeRoute"); |
|||
const { VerifyRoute } = require("./routes/VerifyRoute"); |
|||
const { corsOpts, sessionOpts } = require("./session"); |
|||
const { TelegramWebhookRoute } = require("./routes/TelegramWebhookRoute"); |
|||
const { CovidRoute } = require("./routes/CovidRoute"); |
|||
import express from "express"; |
|||
import session from "express-session"; |
|||
import cors from "cors"; |
|||
import { corsOpts, sessionOpts } from "./session"; |
|||
import { TelegramWebhookRoute } from "./routes/TelegramWebhookRoute"; |
|||
import { LoginRoute } from "./routes/LoginRoute"; |
|||
import { CodeRoute } from "./routes/CodeRoute"; |
|||
import { VerifyRoute } from "./routes/VerifyRoute"; |
|||
import { CovidRoute } from "./routes/CovidRoute"; |
|||
|
|||
console.log(`Node Environment: ${process.env.NODE_ENV}`); |
|||
|
|||
@ -1,89 +0,0 @@ |
|||
const session = require("express-session"); |
|||
const { Sequelize, DataTypes } = require("sequelize"); |
|||
var SequelizeStore = require("connect-session-sequelize")(session.Store); |
|||
|
|||
const isProduction = process.env.NODE_ENV == "production"; |
|||
|
|||
const sequelize = (() => { |
|||
if (isProduction) { |
|||
return new Sequelize( |
|||
process.env.DB_DATA_NAME, |
|||
process.env.DB_USER, |
|||
process.env.DB_PASS, |
|||
{ |
|||
host: process.env.DB_PATH, |
|||
dialect: process.env.DB_DATA_DIALECT, |
|||
} |
|||
); |
|||
} else { |
|||
return new Sequelize("sqlite::memory:"); |
|||
} |
|||
})(); |
|||
|
|||
const storeDB = (() => { |
|||
if (isProduction) { |
|||
return new Sequelize( |
|||
process.env.DB_STORE_NAME, |
|||
process.env.DB_USER, |
|||
process.env.DB_PASS, |
|||
{ |
|||
host: process.env.DB_PATH, |
|||
dialect: process.env.DB_DATA_DIALECT, |
|||
} |
|||
); |
|||
} else { |
|||
return new Sequelize("sqlite::memory:"); |
|||
} |
|||
})(); |
|||
|
|||
const store = new SequelizeStore({ |
|||
db: storeDB, |
|||
}); |
|||
|
|||
const Contact = sequelize.define("Contact", { |
|||
user: { |
|||
type: DataTypes.INTEGER, |
|||
allowNull: false, |
|||
}, |
|||
with: { |
|||
type: DataTypes.INTEGER, |
|||
allowNull: false, |
|||
}, |
|||
}); |
|||
|
|||
const User = sequelize.define("User", { |
|||
telegram: { |
|||
type: DataTypes.INTEGER, |
|||
allowNull: false, |
|||
unique: true, |
|||
}, |
|||
verification: { |
|||
type: DataTypes.STRING, |
|||
}, |
|||
isInfected: { |
|||
type: DataTypes.BOOLEAN, |
|||
}, |
|||
infectionDate: { |
|||
type: DataTypes.DATE, |
|||
} |
|||
}); |
|||
|
|||
Contact.sync(); |
|||
|
|||
User.sync().then(() => { |
|||
if (process.env.ADMIN_USERNAME && process.env.ADMIN_PASSWORD) { |
|||
User.create({ |
|||
telegram: process.env.ADMIN_USERNAME, |
|||
}).catch(() => { |
|||
console.log("Couldn't create admin account. Probably exists."); |
|||
}); |
|||
} |
|||
}); |
|||
|
|||
store.sync(); |
|||
|
|||
exports.User = User; |
|||
exports.Contact = Contact; |
|||
exports.sequelize = sequelize; |
|||
exports.storeDB = storeDB; |
|||
exports.store = store; |
|||
@ -0,0 +1,44 @@ |
|||
import ConnectSessionSequelize from "connect-session-sequelize"; |
|||
import session from "express-session"; |
|||
import { Sequelize } from "sequelize"; |
|||
|
|||
const SequelizeStore = ConnectSessionSequelize(session.Store); |
|||
|
|||
const isProduction: boolean = process.env.NODE_ENV == "production"; |
|||
|
|||
export const sequelize: Sequelize = (() => { |
|||
if (isProduction) { |
|||
return new Sequelize( |
|||
process.env.DB_DATA_NAME || "DATABASE", |
|||
process.env.DB_USER || "USERNAME", |
|||
process.env.DB_PASS || "PASSWORD", |
|||
{ |
|||
host: process.env.DB_PATH || "localhost", |
|||
dialect: "postgres", |
|||
} |
|||
); |
|||
} else { |
|||
return new Sequelize("sqlite::memory:"); |
|||
} |
|||
})(); |
|||
|
|||
export const storeDB: Sequelize = (() => { |
|||
if (isProduction) { |
|||
return new Sequelize( |
|||
process.env.DB_STORE_NAME || "DATABASE", |
|||
process.env.DB_USER || "USERNAME", |
|||
process.env.DB_PASS || "PASSWORD", |
|||
{ |
|||
host: process.env.DB_PATH, |
|||
dialect: "postgres", |
|||
} |
|||
); |
|||
} else { |
|||
return new Sequelize("sqlite::memory:"); |
|||
} |
|||
})(); |
|||
|
|||
export const store = new SequelizeStore({ |
|||
db: storeDB, |
|||
}); |
|||
store.sync(); |
|||
@ -0,0 +1,23 @@ |
|||
import { DataTypes, Model } from "sequelize"; |
|||
import { UserRowID } from "../../types"; |
|||
import { sequelize } from "../db"; |
|||
|
|||
interface ContactAttributes { |
|||
user: UserRowID; |
|||
with: UserRowID; |
|||
} |
|||
export interface ContactInterface |
|||
extends Model<ContactAttributes, ContactAttributes>, |
|||
ContactAttributes {} |
|||
export const Contact = sequelize.define<ContactInterface>("Contact", { |
|||
user: { |
|||
type: DataTypes.INTEGER, |
|||
allowNull: false, |
|||
}, |
|||
with: { |
|||
type: DataTypes.INTEGER, |
|||
allowNull: false, |
|||
}, |
|||
}); |
|||
|
|||
Contact.sync(); |
|||
@ -0,0 +1,80 @@ |
|||
import { TelegramID, UserRowID, VerificationString } from "../../types"; |
|||
import { User, UserInstance } from "./User"; |
|||
|
|||
export function getUserByTelegramID( |
|||
telegramID: TelegramID, |
|||
callback: (user?: UserInstance, message?: string) => void |
|||
): void { |
|||
User.findOne({ |
|||
where: { |
|||
telegram: telegramID, |
|||
}, |
|||
}) |
|||
.then((result) => { |
|||
callback(!!result ? result : undefined); |
|||
}) |
|||
.catch(() => { |
|||
callback(undefined); |
|||
}); |
|||
} |
|||
|
|||
export function getUserByRowID( |
|||
rowID: UserRowID, |
|||
callback: (user?: UserInstance, message?: string) => void |
|||
): void { |
|||
User.findOne({ |
|||
where: { |
|||
id: rowID, |
|||
}, |
|||
}) |
|||
.then((result) => { |
|||
callback(!!result ? result : undefined); |
|||
}) |
|||
.catch(() => { |
|||
callback(undefined); |
|||
}); |
|||
} |
|||
|
|||
export function getUserByVerification( |
|||
verification: VerificationString, |
|||
callback: (user?: UserInstance, message?: string) => void |
|||
): void { |
|||
User.findOne({ |
|||
where: { |
|||
verification: verification, |
|||
}, |
|||
}) |
|||
.then((result) => { |
|||
callback(!!result ? result : undefined); |
|||
}) |
|||
.catch(() => { |
|||
callback(undefined); |
|||
}); |
|||
} |
|||
|
|||
export function getUserCovidPositivity(telegramID: TelegramID, callback: (isInfected?: boolean) => void): void { |
|||
getUserByTelegramID(telegramID, user => { |
|||
if (!!user) { |
|||
const infectionDuration = +user.infectionDate - Date.now(); |
|||
if (infectionDuration > 60 * 60 * 24 * 14) { |
|||
setUserCovidPositivity(telegramID, false, success => { |
|||
callback(success ? false : undefined); |
|||
}); |
|||
} else { |
|||
callback(user.isInfected); |
|||
} |
|||
} else { |
|||
callback(); |
|||
} |
|||
}); |
|||
} |
|||
|
|||
export function setUserCovidPositivity(telegramID: TelegramID, infectionState: boolean, callback: (success: boolean) => void): void { |
|||
getUserByTelegramID(telegramID, user => { |
|||
if (!!user) { |
|||
user.isInfected = infectionState; |
|||
user.infectionDate = new Date(); |
|||
user.save().then(() => callback(true)).catch(() => callback(false)); |
|||
} else { callback(false) } |
|||
}); |
|||
} |
|||
@ -0,0 +1,50 @@ |
|||
import { DataTypes, Model } from "sequelize"; |
|||
import { TelegramID, UserRowID, VerificationString } from "../../types"; |
|||
import { sequelize } from "../db"; |
|||
|
|||
interface UserAttributes { |
|||
id: UserRowID; |
|||
telegram: TelegramID; |
|||
verification: VerificationString; |
|||
isInfected: boolean; |
|||
infectionDate: Date; |
|||
} |
|||
interface UserCreationAttributes { |
|||
telegram: TelegramID; |
|||
} |
|||
export interface UserInstance |
|||
extends Model<UserAttributes, UserCreationAttributes>, |
|||
UserAttributes {} |
|||
|
|||
export const User = sequelize.define<UserInstance>("User", { |
|||
id: { |
|||
type: DataTypes.INTEGER, |
|||
autoIncrement: true, |
|||
primaryKey: true, |
|||
}, |
|||
telegram: { |
|||
type: DataTypes.INTEGER, |
|||
allowNull: false, |
|||
unique: true, |
|||
}, |
|||
verification: { |
|||
type: DataTypes.STRING, |
|||
}, |
|||
isInfected: { |
|||
type: DataTypes.BOOLEAN, |
|||
defaultValue: false, |
|||
}, |
|||
infectionDate: { |
|||
type: DataTypes.DATE, |
|||
}, |
|||
}); |
|||
|
|||
User.sync().then(() => { |
|||
if (process.env.ADMIN_USERNAME && process.env.ADMIN_PASSWORD) { |
|||
User.create({ |
|||
telegram: 12345 as TelegramID, |
|||
}).catch(() => { |
|||
console.log("Couldn't create admin account. Probably exists."); |
|||
}); |
|||
} |
|||
}); |
|||
@ -1,48 +0,0 @@ |
|||
const { strings_en } = require("../strings"); |
|||
const { sendTelegramMessage } = require("../telegram"); |
|||
const { User, Contact } = require("./db"); |
|||
|
|||
function addContact(telegram, withUserID, done) { |
|||
User.findOne({ where: { telegram: telegram } }).then((user) => { |
|||
User.findOne({ where: { id: withUserID } }).then((withUser) => { |
|||
Contact.create({ user: user.id, with: withUserID }) |
|||
.then(() => { |
|||
console.log( |
|||
`Registering contact between ${user.id} and ${withUserID}` |
|||
); |
|||
sendTelegramMessage( |
|||
withUser.telegram, |
|||
strings_en.telegram_qr_scanned, |
|||
() => {} |
|||
); |
|||
done(true, "Successfully added contact"); |
|||
}) |
|||
.catch((e) => { |
|||
done(false, e); |
|||
}); |
|||
}); |
|||
}); |
|||
} |
|||
|
|||
function createUser(telegram, done) { |
|||
User.create({ |
|||
telegram: telegram, |
|||
}) |
|||
.then((user) => { |
|||
if (!user) { |
|||
done(false, "Could not create user"); |
|||
} else { |
|||
done(true, "Success"); |
|||
} |
|||
}) |
|||
.catch((reason) => { |
|||
if (reason.name == "SequelizeUniqueConstraintError") { |
|||
done(false, "User already exists"); |
|||
} else { |
|||
done(false, "Unknown error"); |
|||
} |
|||
}); |
|||
} |
|||
|
|||
exports.addContact = addContact; |
|||
exports.createUser = createUser; |
|||
@ -0,0 +1,56 @@ |
|||
import { strings_en } from "../strings"; |
|||
import { sendTelegramMessage } from "../telegram"; |
|||
import { TelegramID, UserRowID } from "../types"; |
|||
import { Contact } from "./models/Contact"; |
|||
import { User } from "./models/User"; |
|||
import { getUserByRowID, getUserByTelegramID } from "./models/User.helper"; |
|||
|
|||
export function addContact( |
|||
userATelegram: TelegramID, |
|||
userBTelegram: TelegramID, |
|||
callback: (success: boolean, message?: string) => void |
|||
): void { |
|||
getUserByTelegramID(userATelegram, (userA) => { |
|||
getUserByTelegramID(userBTelegram, (userB) => { |
|||
if (!userA || !userB) { |
|||
callback(false, "Could not find user."); |
|||
return; |
|||
} |
|||
|
|||
Contact.create({ user: userA.id, with: userB.id }) |
|||
.then(() => { |
|||
console.log( |
|||
`Registering contact between ${userA.id} and ${userB.id}` |
|||
); |
|||
sendTelegramMessage(userB.telegram, strings_en.telegram_qr_scanned); |
|||
callback(true, "Successfully added contact"); |
|||
}) |
|||
.catch((e) => { |
|||
callback(false, e); |
|||
}); |
|||
}); |
|||
}); |
|||
} |
|||
|
|||
export function createUser( |
|||
telegram: TelegramID, |
|||
callback: (success: boolean, message: string) => void |
|||
): void { |
|||
User.create({ |
|||
telegram: telegram, |
|||
}) |
|||
.then((user) => { |
|||
if (!user) { |
|||
callback(false, "Could not create user"); |
|||
} else { |
|||
callback(true, "Success"); |
|||
} |
|||
}) |
|||
.catch((reason) => { |
|||
if (reason.name == "SequelizeUniqueConstraintError") { |
|||
callback(false, "User already exists"); |
|||
} else { |
|||
callback(false, "Unknown error"); |
|||
} |
|||
}); |
|||
} |
|||
@ -1,47 +0,0 @@ |
|||
const bcrypt = require("bcrypt"); |
|||
const QRCode = require("qrcode"); |
|||
const { User } = require("../db/db"); |
|||
|
|||
function CodeRoute(req, res) { |
|||
if (!req.session.user) { |
|||
res.status(401).send("Not logged in"); |
|||
return; |
|||
} |
|||
createQRCode(req.session.user, (err, url) => { |
|||
res.status(url ? 200 : 401).send({ error: err, data: url }); |
|||
}); |
|||
} |
|||
|
|||
function createQRCode(telegram, done) { |
|||
User.findOne({ |
|||
where: { |
|||
telegram: telegram, |
|||
}, |
|||
}) |
|||
.then((user) => { |
|||
refreshVerification(user, (result) => { |
|||
const verifyURL = `${ |
|||
process.env.WEBSITE_URL |
|||
}/#/verify/${encodeURIComponent(result.verification)}`;
|
|||
QRCode.toDataURL(verifyURL, { width: 300, height: 300 }, (err, url) => { |
|||
done(err, url); |
|||
}); |
|||
}); |
|||
}) |
|||
.catch((err) => { |
|||
done(err); |
|||
}); |
|||
} |
|||
|
|||
function refreshVerification(user, done) { |
|||
let newVerification = bcrypt |
|||
.hashSync(`${new Date().getTime()}-${user.hash}`, 5) |
|||
.replace(/[^a-zA-Z0-9]+/g, ""); |
|||
newVerification = newVerification.substr(0, newVerification.length / 2); |
|||
user.verification = newVerification; |
|||
user.save().then((result) => { |
|||
done(result); |
|||
}); |
|||
} |
|||
|
|||
exports.CodeRoute = CodeRoute; |
|||
@ -0,0 +1,54 @@ |
|||
import { Request, Response } from "express"; |
|||
import bcrypt from "bcrypt"; |
|||
import QRCode, { QRCodeToDataURLOptions } from "qrcode"; |
|||
import { TelegramID, VerificationString } from "../types"; |
|||
import { User, UserInstance } from "../db/models/User"; |
|||
import { getUserByTelegramID } from "../db/models/User.helper"; |
|||
|
|||
export function CodeRoute(req: Request, res: Response) { |
|||
if (!req.session.userTelegramID) { |
|||
res.status(401).send("Not logged in"); |
|||
return; |
|||
} |
|||
createQRCode(req.session.userTelegramID, (err, url) => { |
|||
res.status(url ? 200 : 401).send({ error: err, data: url }); |
|||
}); |
|||
} |
|||
|
|||
function createQRCode( |
|||
telegram: TelegramID, |
|||
callback: (errorMessage: string | Error, url?: string) => void |
|||
): void { |
|||
getUserByTelegramID(telegram, (user) => { |
|||
!!user && |
|||
refreshVerification(user, (result) => { |
|||
const verifyURL = `${ |
|||
process.env.WEBSITE_URL |
|||
}/#/verify/${encodeURIComponent(result.verification)}`;
|
|||
QRCode.toDataURL( |
|||
verifyURL, |
|||
{ width: 300, height: 300 } as QRCodeToDataURLOptions, |
|||
(error, url) => { |
|||
callback(error, url); |
|||
} |
|||
); |
|||
}); |
|||
}); |
|||
} |
|||
|
|||
function refreshVerification( |
|||
user: UserInstance, |
|||
callback: (success: UserInstance) => void |
|||
): void { |
|||
let newVerification = bcrypt |
|||
.hashSync(`${new Date().getTime()}-${user.telegram}`, 5) |
|||
.replace(/[^a-zA-Z0-9]+/g, "") as VerificationString; |
|||
newVerification = newVerification.substr( |
|||
0, |
|||
newVerification.length / 2 |
|||
) as VerificationString; |
|||
user.verification = newVerification; |
|||
user.save().then((result) => { |
|||
callback(result); |
|||
}); |
|||
} |
|||
@ -1,61 +0,0 @@ |
|||
const { User } = require("../db/db"); |
|||
|
|||
function CovidRoute(req, res){ |
|||
if(!req.session.user){ |
|||
res.status(401).send("Not logged in"); |
|||
return; |
|||
} |
|||
|
|||
console.log(`SetPositive: ${req.body.setPositive}`); |
|||
|
|||
if(req.body.setPositive){ |
|||
setUserCovidPositive(req.session.user, true, response=>{ |
|||
res.send({covidPositive: response}); |
|||
}); |
|||
}else{ |
|||
getUserCovidPositivity(req.session.user, (success, positivity)=>{ |
|||
res.status(success ? 200 : 400).send({covidPositive: positivity}); |
|||
}); |
|||
} |
|||
} |
|||
|
|||
function getUserCovidPositivity(telegramID, callback){ |
|||
User.findOne({ |
|||
where: {telegram: telegramID}, |
|||
}) |
|||
.then(user=>{ |
|||
if(user){ |
|||
const infectionDuration = user.infectionDate - Date.now(); |
|||
if(infectionDuration > 60 * 60 * 24 * 14){ |
|||
setUserCovidPositive(telegramID, false, res=>{ |
|||
callback(res, res ? false : null); |
|||
}); |
|||
}else{ |
|||
callback(true, user.isInfected); |
|||
} |
|||
}else{ |
|||
callback(false, null); |
|||
} |
|||
}) |
|||
.catch(()=>{ |
|||
callback(false, null); |
|||
}) |
|||
} |
|||
|
|||
function setUserCovidPositive(telegramID, infectionState, callback){ |
|||
User.findOne({ |
|||
where: {telegram: telegramID}, |
|||
}) |
|||
.then(user=>{ |
|||
if(user){ |
|||
user.isInfected = infectionState; |
|||
user.infectionDate = Date.now(); |
|||
user.save().then(()=>callback(true)).catch(()=>callback(false)); |
|||
}else{ |
|||
callback(false); |
|||
} |
|||
}) |
|||
.catch(()=>callback(false)); |
|||
} |
|||
|
|||
exports.CovidRoute = CovidRoute; |
|||
@ -0,0 +1,26 @@ |
|||
import { Request, Response } from "express"; |
|||
import { getUserCovidPositivity, setUserCovidPositivity } from "../db/models/User.helper"; |
|||
|
|||
interface CovidRouteRequest extends Request { |
|||
body:{ |
|||
setPositive: boolean; |
|||
} |
|||
} |
|||
|
|||
export function CovidRoute(req: CovidRouteRequest, res:Response){ |
|||
if(!req.session.userTelegramID){ |
|||
res.status(401).send("Not logged in"); |
|||
return; |
|||
} |
|||
|
|||
if(req.body.setPositive){ |
|||
setUserCovidPositivity(req.session.userTelegramID, true, success=>{ |
|||
res.send({covidPositive: true}); |
|||
}); |
|||
}else{ |
|||
getUserCovidPositivity(req.session.userTelegramID, isInfected=>{ |
|||
res.send({covidPositive: isInfected}); |
|||
}); |
|||
} |
|||
} |
|||
|
|||
@ -1,78 +0,0 @@ |
|||
const crypto = require("crypto"); |
|||
const { User } = require("../db/db"); |
|||
const { addContact, createUser } = require("../db/utils"); |
|||
|
|||
function LoginRoute(req, res) { |
|||
const telegramResponse = req.body.telegramResponse; |
|||
|
|||
authUser(telegramResponse, (success, msg) => { |
|||
if (success) { |
|||
// User is already logged in
|
|||
if (req.session.user == telegramResponse.id) { |
|||
res.send({ authorized: success }); |
|||
return; |
|||
} |
|||
|
|||
const verified = req.session.verified; |
|||
const verifiedBy = req.session.verifiedBy; |
|||
req.session.regenerate(() => { |
|||
req.session.user = telegramResponse.id; |
|||
if (verified) { |
|||
addContact(telegramResponse.id, verifiedBy, (contactSuccess) => { |
|||
res.send({ |
|||
authorized: success, |
|||
message: msg, |
|||
contactSuccess: contactSuccess, |
|||
}); |
|||
}); |
|||
} else { |
|||
res.send({ authorized: success, message: msg }); |
|||
} |
|||
}); |
|||
} else { |
|||
res.status(401).send({ authorized: success, message: msg }); |
|||
} |
|||
}); |
|||
} |
|||
|
|||
function authUser(telegramResponse, done) { |
|||
let dataCheckArray = []; |
|||
|
|||
for (const [key, value] of Object.entries(telegramResponse)) { |
|||
if (key == "hash") continue; |
|||
dataCheckArray.push(`${key}=${value}`); |
|||
} |
|||
dataCheckArray.sort(); |
|||
const dataCheckString = dataCheckArray.join("\n"); |
|||
|
|||
const secretKey = crypto |
|||
.createHash("sha256") |
|||
.update(process.env.TELEGRAM_TOKEN) |
|||
.digest(); |
|||
const confirmationHash = crypto |
|||
.createHmac("sha256", secretKey) |
|||
.update(dataCheckString) |
|||
.digest("hex"); |
|||
|
|||
const authorized = confirmationHash == telegramResponse.hash; |
|||
|
|||
if (!authorized) { |
|||
done({ authorized: false }); |
|||
} |
|||
|
|||
User.findOne({ |
|||
where: { |
|||
telegram: telegramResponse.id, |
|||
}, |
|||
}).then((user) => { |
|||
if (!user) { |
|||
createUser(telegramResponse.id, (success) => { |
|||
done({ authorized: success }); |
|||
}); |
|||
} else { |
|||
done({ authorized: true }); |
|||
} |
|||
}); |
|||
} |
|||
|
|||
exports.LoginRoute = LoginRoute; |
|||
@ -0,0 +1,87 @@ |
|||
import { Request, Response } from "express"; |
|||
import crypto from "crypto"; |
|||
import { addContact, createUser } from "../db/utils"; |
|||
import { TelegramID, UserRowID } from "../types"; |
|||
import { User } from "../db/models/User"; |
|||
import { getUserByTelegramID } from "../db/models/User.helper"; |
|||
|
|||
type TelegramLoginResponse = { |
|||
id: TelegramID; |
|||
hash: string; |
|||
}; |
|||
|
|||
interface LoginRequest extends Request { |
|||
body: { |
|||
telegramResponse: TelegramLoginResponse; |
|||
}; |
|||
} |
|||
|
|||
export function LoginRoute(req: LoginRequest, res: Response) { |
|||
const telegramResponse = req.body.telegramResponse; |
|||
authUser(telegramResponse, (authorized) => { |
|||
if (authorized) { |
|||
// User is already logged in
|
|||
if (req.session.userTelegramID == telegramResponse.id) { |
|||
res.send({authorized: authorized}); |
|||
return; |
|||
} |
|||
const verified = req.session.isVerified; |
|||
const verifiedBy = req.session.verifiedByTelegramID; |
|||
req.session.regenerate(() => { |
|||
req.session.userTelegramID = telegramResponse.id; |
|||
if (verified) { |
|||
addContact(telegramResponse.id, verifiedBy, (success) => { |
|||
res.send({ |
|||
authorized: authorized, |
|||
contactSuccess: success, |
|||
}); |
|||
}); |
|||
} else { |
|||
res.send({authorized: authorized}); |
|||
} |
|||
}); |
|||
} else { |
|||
res.status(401).send(authorized); |
|||
} |
|||
}); |
|||
} |
|||
|
|||
function authUser( |
|||
telegramResponse: TelegramLoginResponse, |
|||
callback: (authorized: boolean, message?: string) => void |
|||
): void { |
|||
let dataCheckArray = []; |
|||
|
|||
for (const [key, value] of Object.entries(telegramResponse)) { |
|||
if (key == "hash") continue; |
|||
dataCheckArray.push(`${key}=${value}`); |
|||
} |
|||
dataCheckArray.sort(); |
|||
const dataCheckString = dataCheckArray.join("\n"); |
|||
|
|||
const secretKey = crypto |
|||
.createHash("sha256") |
|||
.update(process.env.TELEGRAM_TOKEN!) |
|||
.digest(); |
|||
const confirmationHash = crypto |
|||
.createHmac("sha256", secretKey) |
|||
.update(dataCheckString) |
|||
.digest("hex"); |
|||
|
|||
const authorized = confirmationHash == telegramResponse.hash; |
|||
|
|||
if (!authorized) { |
|||
callback(false); |
|||
return; |
|||
} |
|||
|
|||
getUserByTelegramID(telegramResponse.id, (user) => { |
|||
if (!!user) { |
|||
callback(true); |
|||
} else { |
|||
createUser(telegramResponse.id, (success, message) => { |
|||
callback(success, message); |
|||
}); |
|||
} |
|||
}); |
|||
} |
|||
@ -1,97 +0,0 @@ |
|||
const { Op } = require("sequelize"); |
|||
const { User, Contact } = require("../db/db"); |
|||
const { strings_en } = require("../strings"); |
|||
const { sendTelegramMessage } = require("../telegram"); |
|||
|
|||
function TelegramWebhookRoute(req, res) { |
|||
try { |
|||
if (req.body.message.connected_website) { |
|||
sendTelegramMessage( |
|||
req.body.message.from.id, |
|||
"Thanks for using OurSejahtera! Let's stay safer together <3" |
|||
); |
|||
} else { |
|||
const messageText = req.body.message.text; |
|||
const telegramID = req.body.message.from.id; |
|||
if (messageText.toLowerCase() == "/covidpositive") { |
|||
userInfected(telegramID, (result) => { |
|||
if (result.saved) { |
|||
sendTelegramMessage( |
|||
telegramID, |
|||
strings_en.telegram_inform_positive |
|||
); |
|||
informContacts(telegramID); |
|||
} else { |
|||
sendTelegramMessage(telegramID, "Sorry, something went wrong."); |
|||
} |
|||
}); |
|||
} |
|||
} |
|||
} catch (e) { |
|||
console.log("Could not get Telegram Message"); |
|||
} |
|||
|
|||
res.send(); |
|||
} |
|||
|
|||
function informContacts(telegramID, doneCallback = () => {}) { |
|||
User.findOne({ |
|||
where: { |
|||
telegram: telegramID, |
|||
}, |
|||
}).then((user) => { |
|||
if (user) { |
|||
const userRowID = user.id; |
|||
Contact.findAll({ |
|||
where: { |
|||
[Op.or]: [{ user: userRowID }, { with: userRowID }], |
|||
}, |
|||
}).then((result) => { |
|||
result.forEach((contact) => { |
|||
const otherPersonID = |
|||
contact.user == userRowID ? contact.with : contact.user; |
|||
User.findOne({ |
|||
where: { |
|||
id: otherPersonID, |
|||
}, |
|||
}).then((otherPerson) => { |
|||
sendTelegramMessage( |
|||
otherPerson.telegram, |
|||
strings_en.telegram_inform_infect |
|||
); |
|||
}); |
|||
}); |
|||
}); |
|||
} |
|||
}); |
|||
} |
|||
|
|||
function userInfected(telegramID, doneCallback) { |
|||
User.findOne({ |
|||
where: { |
|||
telegram: telegramID, |
|||
}, |
|||
}) |
|||
.then((user) => { |
|||
if (!user) { |
|||
done({ saved: false }); |
|||
} else { |
|||
user.isInfected = true; |
|||
user |
|||
.save() |
|||
.then((result) => { |
|||
if (result) { |
|||
doneCallback({ saved: true }); |
|||
} |
|||
}) |
|||
.catch((err) => { |
|||
doneCallback({ saved: false }); |
|||
}); |
|||
} |
|||
}) |
|||
.catch((err) => { |
|||
doneCallback({ saved: false }); |
|||
}); |
|||
} |
|||
|
|||
exports.TelegramWebhookRoute = TelegramWebhookRoute; |
|||
@ -0,0 +1,99 @@ |
|||
import { Request, Response } from "express"; |
|||
import { Op } from "sequelize"; |
|||
import { Contact } from "../db/models/Contact"; |
|||
import { User } from "../db/models/User"; |
|||
import { getUserByRowID, getUserByTelegramID } from "../db/models/User.helper"; |
|||
import { strings_en } from "../strings"; |
|||
import { sendTelegramMessage } from "../telegram"; |
|||
import { TelegramID } from "../types"; |
|||
|
|||
interface TelegramWebhookRequest extends Request { |
|||
body: { |
|||
message: { |
|||
text: string; |
|||
from: { |
|||
id: TelegramID; |
|||
}; |
|||
connected_website: string; |
|||
}; |
|||
}; |
|||
} |
|||
|
|||
export function TelegramWebhookRoute( |
|||
req: TelegramWebhookRequest, |
|||
res: Response |
|||
) { |
|||
try { |
|||
if (req.body.message.connected_website) { |
|||
sendTelegramMessage( |
|||
req.body.message.from.id, |
|||
"Thanks for using OurSejahtera! Let's stay safer together <3" |
|||
); |
|||
} else { |
|||
const messageText = req.body.message.text; |
|||
const telegramID = req.body.message.from.id; |
|||
if (messageText.toLowerCase() == "/covidpositive") { |
|||
userInfected(telegramID, (success) => { |
|||
if (success) { |
|||
sendTelegramMessage( |
|||
telegramID, |
|||
strings_en.telegram_inform_positive |
|||
); |
|||
informContacts(telegramID); |
|||
} else { |
|||
sendTelegramMessage(telegramID, "Sorry, something went wrong."); |
|||
} |
|||
}); |
|||
} |
|||
} |
|||
} catch (e) { |
|||
console.log("Could not get Telegram Message"); |
|||
} |
|||
|
|||
res.send(); |
|||
} |
|||
|
|||
function informContacts(telegramID: TelegramID) { |
|||
getUserByTelegramID(telegramID, (user) => { |
|||
if (user) { |
|||
Contact.findAll({ |
|||
where: { |
|||
[Op.or]: [{ user: user.id }, { with: user.id }], |
|||
}, |
|||
}).then((result) => { |
|||
result.forEach((contact) => { |
|||
const otherPersonID = |
|||
contact.user == user.id ? contact.with : contact.user; |
|||
getUserByRowID(otherPersonID, (otherUser) => { |
|||
otherUser && |
|||
sendTelegramMessage( |
|||
otherUser.telegram, |
|||
strings_en.telegram_inform_infect |
|||
); |
|||
}); |
|||
}); |
|||
}); |
|||
} |
|||
}); |
|||
} |
|||
|
|||
function userInfected( |
|||
telegramID: TelegramID, |
|||
callback: (success: boolean) => void |
|||
): void { |
|||
getUserByTelegramID(telegramID, (user) => { |
|||
if (!!user) { |
|||
user.isInfected = true; |
|||
user |
|||
.save() |
|||
.then((result) => { |
|||
callback(!!result); |
|||
}) |
|||
.catch(() => { |
|||
callback(false); |
|||
}); |
|||
} else { |
|||
callback(false); |
|||
} |
|||
}); |
|||
} |
|||
@ -1,41 +0,0 @@ |
|||
const { User } = require("../db/db"); |
|||
const { addContact } = require("../db/utils"); |
|||
|
|||
function VerifyRoute(req, res) { |
|||
checkVerification(req.body.id, (success, msg, withUserID) => { |
|||
req.session.verified = success; |
|||
req.session.verifiedBy = withUserID; |
|||
|
|||
if (success) { |
|||
if (req.session.user) { |
|||
// If Logged In
|
|||
addContact(req.session.user, withUserID, (success, msg) => { |
|||
res |
|||
.status(success ? 200 : 400) |
|||
.send({ success: success, message: msg, loggedIn: true }); |
|||
}); |
|||
} else { |
|||
// If Not Logged In
|
|||
res.send({ success: success, message: msg, loggedIn: false }); |
|||
} |
|||
} else { |
|||
res.status(400).send({ success: success, message: msg }); |
|||
} |
|||
}); |
|||
} |
|||
|
|||
function checkVerification(id, done) { |
|||
User.findOne({ |
|||
where: { |
|||
verification: decodeURIComponent(id), |
|||
}, |
|||
}).then((user) => { |
|||
if (user) { |
|||
done(true, "User verified", user.id); |
|||
} else { |
|||
done(false, "No such verification"); |
|||
} |
|||
}); |
|||
} |
|||
|
|||
exports.VerifyRoute = VerifyRoute; |
|||
@ -0,0 +1,44 @@ |
|||
import { Request, Response } from "express"; |
|||
import { User } from "../db/models/User"; |
|||
import { getUserByVerification } from "../db/models/User.helper"; |
|||
import { addContact } from "../db/utils"; |
|||
import { UserRowID, VerificationString } from "../types"; |
|||
|
|||
interface VerifyRequest extends Request { |
|||
body: { |
|||
id: VerificationString; |
|||
}; |
|||
} |
|||
|
|||
export function VerifyRoute(req: VerifyRequest, res: Response) { |
|||
getUserByVerification( |
|||
decodeURIComponent(req.body.id) as VerificationString, |
|||
(verifiedByUser, message) => { |
|||
if (!!verifiedByUser) { |
|||
req.session.isVerified = !!verifiedByUser; |
|||
req.session.verifiedByTelegramID = verifiedByUser.telegram; |
|||
if (req.session.userTelegramID) { |
|||
// If Logged In
|
|||
addContact( |
|||
req.session.userTelegramID, |
|||
verifiedByUser.telegram, |
|||
(success, message) => { |
|||
res |
|||
.status(success ? 200 : 400) |
|||
.send({ success: success, message: message, loggedIn: true }); |
|||
} |
|||
); |
|||
} else { |
|||
// If Not Logged In
|
|||
res.send({ |
|||
success: !!verifiedByUser, |
|||
message: message, |
|||
loggedIn: false, |
|||
}); |
|||
} |
|||
} else { |
|||
res.status(400).send({ success: !!verifiedByUser, message: message }); |
|||
} |
|||
} |
|||
); |
|||
} |
|||
@ -1,18 +0,0 @@ |
|||
const { store } = require("./db/db"); |
|||
|
|||
const sessionOpts = { |
|||
secret: process.env.SERVER_SESSION_SECRET, |
|||
resave: false, |
|||
saveUninitialized: false, |
|||
cookie: { |
|||
secure: true, |
|||
sameSite: "none", |
|||
maxAge: Number(process.env.SESSION_LENGTH), |
|||
}, |
|||
store: store, |
|||
}; |
|||
|
|||
const corsOpts = { credentials: true, origin: true, secure: true }; |
|||
|
|||
exports.sessionOpts = sessionOpts; |
|||
exports.corsOpts = corsOpts; |
|||
@ -0,0 +1,16 @@ |
|||
import { SessionOptions } from "express-session"; |
|||
import { store } from "./db/db"; |
|||
|
|||
export const sessionOpts: SessionOptions = { |
|||
secret: process.env.SERVER_SESSION_SECRET!, |
|||
resave: false, |
|||
saveUninitialized: false, |
|||
cookie: { |
|||
secure: true, |
|||
sameSite: "none", |
|||
maxAge: Number(process.env.SESSION_LENGTH), |
|||
}, |
|||
store: store, |
|||
}; |
|||
|
|||
export const corsOpts = { credentials: true, origin: true, secure: true }; |
|||
@ -0,0 +1,14 @@ |
|||
/* |
|||
* Branding allows to use nominal typing and avoid errors |
|||
*/ |
|||
export type UserRowID = number & { __userRowIDBrand: any }; |
|||
export type TelegramID = number & { __telegramIDBrand: any }; |
|||
export type VerificationString = string & { __verificationStringBrand: any }; |
|||
|
|||
declare module "express-session" { |
|||
interface Session { |
|||
isVerified: boolean; |
|||
verifiedByTelegramID: TelegramID; |
|||
userTelegramID: TelegramID; |
|||
} |
|||
} |
|||
@ -1,5 +0,0 @@ |
|||
function getCookieExpiry() { |
|||
return new Date(Date.now() + process.env.COOKIE_EXPIRY_DURATION); |
|||
} |
|||
|
|||
exports.getCookieExpiry = getCookieExpiry; |
|||
@ -0,0 +1,3 @@ |
|||
export function getCookieExpiry(): Date { |
|||
return new Date(Date.now() + Number(process.env.COOKIE_EXPIRY_DURATION)); |
|||
} |
|||
@ -0,0 +1,7 @@ |
|||
{ |
|||
"extends": "@tsconfig/node14/tsconfig.json", |
|||
"include": ["./src/**/*"], |
|||
"compilerOptions": { |
|||
"outDir": "./dist" |
|||
} |
|||
} |
|||
Loading…
Reference in new issue