const authenticator = require("otplib").authenticator; const axios = require("axios"); const bcrypt = require("bcrypt"); register = ah(async (user, ip, requireChallenge) => { if (!(user && user.username)) throw new Error("Username required"); let exists = await db.User.count({ where: { username: user.username } }); if (exists) throw new Error(`Username ${user.username} taken`); if (user.password) { user.password = await bcrypt.hash(user.password, 1); } user.sms = user.formattedPhone || user.sms // Separate logic for presetting user preferences below into separate manageable file ... (& remove redundant user / account reference) let countries = { CA: "CAD", US: "USD", JP: "JPY", CN: "CNY", AU: "AUD", GB: "GBP", }; if (!config.ipstack || ip.startsWith("127") || ip.startsWith("192")) user.currency = "CAD"; else { let info = await axios.get( `http://api.ipstack.com/${ip}?access_key=${config.ipstack}` ); user.currency = countries[info.data.country_code] || "USD"; } user.currencies = [...new Set([user.currency, "CAD", "USD"])]; user.fiat = false; user.otpsecret = authenticator.generateSecret(); user = await db.User.create(user); let account = await db.Account.create({ user_id: user.id, asset: config.liquid.btcasset, balance: 0, pending: 0, name: "Bitcoin", ticker: "BTC", precision: 8, }); user.accounts = [account]; const d = ip.split("."); const numericIp = ((+d[0] * 256 + +d[1]) * 256 + +d[2]) * 256 + +d[3]; if (Number.isInteger(numericIp)) { user.ip = numericIp; const ipExists = await db.User.findOne({ where: { ip: numericIp } }); } user.account_id = account.id; await user.save(); l.info("new user", user.username, ip); return user; }); coinos server — legacy coinos.io backend (Lightning, on-chain, Liquid)coinos
aboutsummaryrefslogtreecommitdiffstats
path: root/src/app.coffee
blob: f62b7696526e6b9eda6d64c5b82da040feeb6821 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
request = require('request')
express = require('express')
bodyParser = require('body-parser')
cookieParser = require('cookie-parser')
path = require('path')
passport = require('./passport')
config = require('./config')
fs = require('fs')

calculator = require("./routes/calculator")
sessions = require("./routes/sessions")(passport)
transactions = require("./routes/transactions")
users = require("./routes/users")(sessions)

session = require('express-session')
RedisStore = require('connect-redis')(session)
sessionStore = new RedisStore(require('./redis').host, ttl: 172800)

app = express()
app.enable('trust proxy')
app.engine('html', require('hogan-express'))
app.set('view engine', 'html')
app.set('views', __dirname + '/views')
app.use(express.static(__dirname + '/public'))
app.use(bodyParser.urlencoded({ extended: true}))
app.use(bodyParser.json())
app.use(bodyParser.json({ type: 'application/vnd.api+json' }))
app.use(cookieParser(config.secret))
app.use(session(
  resave: true
  saveUninitialized: true
  secret: config.secret
  store: sessionStore
  cookie: maxAge: 1209600000
  key: 'vanbtc.sid'
))
app.use(passport.initialize())
app.use(passport.session())

authorize = (req, res, next) ->
  if req.params.user is req.user?.username or
    req.user?.username is 'admin'
      return next() 

  req.session.redirect = req.path
  res.redirect('/login')

cache = (req, res, next) ->
  unless req.path is '/login'
    res.setHeader "Cache-Control", "public, max-age=900"
  next()

do fetchRates = ->
  request("https://api.bitcoinaverage.com/exchanges/all", (error, response, body) ->
    try 
      require('util').isDate(JSON.parse(body).timestamp)
      file = 'public/js/rates.json'
      stream = fs.createWriteStream(file)
      fs.truncate(file, 0, ->
        stream.write(body)
      )
  )
  setTimeout(fetchRates, 120000)

tips = 

app.get('/', cache, sessions.new)
app.get('/register', cache, users.new)
app.get('/ticker', cache, calculator.ticker)
app.get('/sweep', calculator.sweep)
app.get('/address', cache, calculator.address)
app.get('/tips', cache, (req, res) ->
  res.render('tips', 
    notice: true,
    layout: 'layout',
    js: (-> global.js), 
    css: (-> global.css)
  )
)

app.get('/login', cache, sessions.new)
app.post('/login', sessions.create)
app.get('/logout', sessions.destroy)

app.get('/users/new', cache, users.new)
app.post('/users', users.create)
app.get('/verify/:token', users.verify)

app.get('/:user/profile', authorize, users.profile)
app.get('/:user/edit', authorize, users.edit)
app.post('/:user', authorize, users.update)

app.get('/:user/transactions.json', authorize, transactions.json)
app.post('/:user/transactions', transactions.create)
app.post('/transactions/:txid', transactions.update)
app.delete('/:user/transactions/:txid', transactions.delete)
app.get('/:user/report', authorize, transactions.index)

app.get('/:user.json', users.json)
app.get('/:user', cache, users.show)

app.use(require('connect-assets')(src: 'public', detectChanges: false))

app.use((err, req, res, next) ->
  res.status(500)
  res.send('An error occurred');
  console.error(err.stack)
  res.end()
)

app.listen(3000)