'use strict'; var _ = require('lodash'); var async = require('async'); var log = require('npmlog'); var express = require('express'); var querystring = require('querystring'); var bodyParser = require('body-parser') var WalletService = require('./server'); var stats = require('../scripts/stats'); log.disableColor(); log.debug = log.verbose; log.level = 'debug'; var ExpressApp = function() { this.app = express(); }; /** * start * * @param opts.WalletService options for WalletService class * @param opts.basePath * @param opts.disableLogs * @param {Callback} cb */ ExpressApp.prototype.start = function(opts, cb) { opts = opts || {}; this.app.use(function(req, res, next) { res.setHeader('Access-Control-Allow-Origin', '*'); res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS, PUT, DELETE'); res.setHeader('Access-Control-Allow-Headers', 'x-signature,x-identity,X-Requested-With,Content-Type,Authorization'); next(); }); var allowCORS = function(req, res, next) { if ('OPTIONS' == req.method) { res.sendStatus(200); res.end(); return; } next(); } this.app.use(allowCORS); this.app.enable('trust proxy'); var POST_LIMIT = 1024 * 100 /* Max POST 100 kb */ ; this.app.use(bodyParser.json({ limit: POST_LIMIT })); if (opts.disableLogs) { log.level = 'silent'; } else { // TODO access.log //var accessLogStream = fs.createWriteStream(__dirname + '/access.log', {flags: 'a'}) //app.use(morgan('combined', {stream: accessLogStream})) // app.use(require('morgan')('dev')); this.app.use(require('morgan')(':remote-addr :date[iso] ":method :url" :status :res[content-length] :response-time ":user-agent" ')); } var router = express.Router(); function returnError(err, res, req) { if (err instanceof WalletService.ClientError) { var status = (err.code == 'NOTAUTHORIZED') ? 401 : 400; if (!opts.disableLogs) log.info('Client Err: ' + status + ' ' + req.url + ' ' + err); res.status(status).json({ code: err.code, message: err.message, }).end(); } else { var code, message; if (_.isObject(err)) { code = err.code; message = err.message; } var m = message || err.toString(); if (!opts.disableLogs) log.error('Err: ' + req.url + ' :' + code + ':' + m); res.status(code || 500).json({ error: m, }).end(); } }; function getCredentials(req) { var identity = req.header('x-identity'); if (!identity) return; return { copayerId: identity, signature: req.header('x-signature'), }; }; function getServerWithAuth(req, res, cb) { var credentials = getCredentials(req); if (!credentials) return returnError(new WalletService.ClientError({ code: 'NOTAUTHORIZED' }), res, req); var auth = { copayerId: credentials.copayerId, message: req.method.toLowerCase() + '|' + req.url + '|' + JSON.stringify(req.body), signature: credentials.signature, }; WalletService.getInstanceWithAuth(auth, function(err, server) { if (err) return returnError(err, res, req); return cb(server); }); }; router.post('/v1/wallets/', function(req, res) { var server = WalletService.getInstance(); server.createWallet(req.body, function(err, walletId) { if (err) return returnError(err, res, req); res.json({ walletId: walletId, }); }); }); router.post('/v1/wallets/:id/copayers/', function(req, res) { req.body.walletId = req.params['id']; var server = WalletService.getInstance(); server.joinWallet(req.body, function(err, result) { if (err) return returnError(err, res, req); res.json(result); }); }); router.put('/v1/copayers', function(req, res) { getServerWithAuth(req, res, function(server) { server.replaceTemporaryRequestKey(req.body, function(err, result) { if (err) return returnError(err, res, req); res.json(result); }); }); }); router.get('/v1/wallets/', function(req, res) { getServerWithAuth(req, res, function(server) { var result = {}; async.parallel([ function(next) { server.getWallet({}, function(err, wallet) { if (err) return next(err); result.wallet = wallet; next(); }); }, function(next) { server.getBalance({}, function(err, balance) { if (err) return next(err); result.balance = balance; next(); }); }, function(next) { server.getPendingTxs({}, function(err, pendingTxps) { if (err) return next(err); result.pendingTxps = pendingTxps; next(); }); }, ], function(err) { if (err) return returnError(err, res, req); res.json(result); }); }); }); router.get('/v1/txproposals/', function(req, res) { getServerWithAuth(req, res, function(server) { server.getPendingTxs({}, function(err, pendings) { if (err) return returnError(err, res, req); res.json(pendings); }); }); }); router.post('/v1/txproposals/', function(req, res) { getServerWithAuth(req, res, function(server) { server.createTx(req.body, function(err, txp) { if (err) return returnError(err, res, req); res.json(txp); }); }); }); router.post('/v1/addresses/', function(req, res) { getServerWithAuth(req, res, function(server) { server.createAddress(req.body, function(err, address) { if (err) return returnError(err, res, req); res.json(address); }); }); }); router.get('/v1/addresses/', function(req, res) { getServerWithAuth(req, res, function(server) { server.getMainAddresses({}, function(err, addresses) { if (err) return returnError(err, res, req); res.json(addresses); }); }); }); router.get('/v1/balance/', function(req, res) { getServerWithAuth(req, res, function(server) { server.getBalance({}, function(err, balance) { if (err) return returnError(err, res, req); res.json(balance); }); }); }); router.post('/v1/txproposals/:id/signatures/', function(req, res) { getServerWithAuth(req, res, function(server) { req.body.txProposalId = req.params['id']; server.signTx(req.body, function(err, txp) { if (err) return returnError(err, res, req); res.json(txp); res.end(); }); }); }); // TODO Check HTTP verb and URL name router.post('/v1/txproposals/:id/broadcast/', function(req, res) { getServerWithAuth(req, res, function(server) { req.body.txProposalId = req.params['id']; server.broadcastTx(req.body, function(err, txp) { if (err) return returnError(err, res, req); res.json(txp); res.end(); }); }); }); router.post('/v1/txproposals/:id/rejections', function(req, res) { getServerWithAuth(req, res, function(server) { req.body.txProposalId = req.params['id']; server.rejectTx(req.body, function(err, txp) { if (err) return returnError(err, res, req); res.json(txp); res.end(); }); }); }); router.delete('/v1/txproposals/:id/', function(req, res) { getServerWithAuth(req, res, function(server) { req.body.txProposalId = req.params['id']; server.removePendingTx(req.body, function(err) { if (err) return returnError(err, res, req); res.json({ success: true }); res.end(); }); }); }); router.get('/v1/txproposals/:id/', function(req, res) { getServerWithAuth(req, res, function(server) { req.body.txProposalId = req.params['id']; server.getTx(req.body, function(err, tx) { if (err) return returnError(err, res, req); res.json(tx); res.end(); }); }); }); router.get('/v1/txhistory/', function(req, res) { getServerWithAuth(req, res, function(server) { var opts = {}; if (req.query.skip) opts.skip = +req.query.skip; if (req.query.limit) opts.limit = +req.query.limit; server.getTxHistory(opts, function(err, txs) { if (err) return returnError(err, res, req); res.json(txs); res.end(); }); }); }); router.post('/v1/addresses/scan/', function(req, res) { getServerWithAuth(req, res, function(server) { server.startScan(req.body, function(err, started) { if (err) return returnError(err, res, req); res.json(started); res.end(); }); }); }); router.get('/v1/stats/', function(req, res) { var data = stats.getStats(function(err, data) { if (err) return returnError(err, res, req); res.json(data); res.end(); }); }); this.app.use(opts.basePath || '/bws/api', router); WalletService.initialize(opts, cb); }; module.exports = ExpressApp;