tracker

4.7 KB

1. // project.hl — tracker.worldapi.org: STEP 1 (tracker.worldapi.org#1), an empty shell.
2. // Login exactly like calendar/notes: ident only, no own passwords (README "How apps use
3. // ident" of ident.worldapi.org). No shows, no data yet — later steps come from the creator
4. // (CONCEPT.md).
5. //
6. // GET /login -> <ident>/login?key=<key>&return=<this app>/callback
7. // /callback?ident_code=<code> the app's server exchanges the code for the identity's
8. // short id (POST <ident>/api/exchange) and signs this
9. // app's OWN session in (session.user = { identity })
10. // POST /logout signs this app's session out (ident's own session,
11. // and the browser's ident cookie, are untouched)
12. //
13. // Config (env; no committed secret — the first deploy registers this app in ident and sets
14. // these, done by the architect, as with ident's own .env for SMTP):
15. // TRACKER_PORT (45008), TRACKER_URL (this app's own origin, for the return URL),
16. // IDENT_URL (https://ident.worldapi.org), TRACKER_KEY (pk_…), TRACKER_SECRET (sk_…)
17. import WebFramework from 'hl:web'
18. import { Response } from 'hl:http1'
19. import { fetch } from 'hl:fetch'
20. import { env } from 'hl:proc'
22. import Styles from './styles.hl'
23. import Home from './components/home.hl'
25. static appTitle = "tracker"
27. styles = Styles
29. port = env('TRACKER_PORT') != null ? toNumber(env('TRACKER_PORT')) : 45008
30. selfUrl = env('TRACKER_URL') != null ? env('TRACKER_URL') : 'http://127.0.0.1:' + port
31. identUrl = env('IDENT_URL') != null ? env('IDENT_URL') : 'https://ident.worldapi.org'
32. identKey = env('TRACKER_KEY') != null ? env('TRACKER_KEY') : ''
33. identSecret = env('TRACKER_SECRET') != null ? env('TRACKER_SECRET') : ''
35. escape = (s) => { return ('' + s).replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;').replaceAll('"', '&quot;') }
37. errorPage = (status, message) => {
38. let html = '<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>tracker</title></head><body style="margin:0;padding:2rem;font:16px/1.5 system-ui,sans-serif;color:rgb(195,200,205);background:rgb(25,30,35)"><p style="color:#f44747">' + escape(message) + '</p><p><a id="home" href="/" style="color:#4ec9b0">start page</a></p></body></html>'
39. return new Response(html, { status = status headers = { 'Content-Type' = 'text/html; charset=utf-8' 'Cache-Control' = 'no-store' } })
40. }
41. redirect = (url) => { return new Response('', { status = 302 headers = { 'Location' = url 'Cache-Control' = 'no-store' } }) }
43. // ---- GET /login: the login button --------------------------------------------------------
44. login = (route, req) => {
45. if (req.method != 'GET') { return errorPage(405, 'Use a GET request.') }
46. if (identKey == '') { return errorPage(500, 'This app is not registered with ident yet (TRACKER_KEY/TRACKER_SECRET missing).') }
47. let href = identUrl + '/login?key=' + identKey + '&return=' + encodeURIComponent(selfUrl + '/callback')
48. return redirect(href)
49. }
51. // ---- /callback?ident_code=<code>: exchange it for the identity's short id ----------------
52. callback = (route, req) => {
53. let q = req.query != null ? req.query : {}
54. let code = q.ident_code
55. if (code == null || code == '') { return errorPage(400, 'no ident_code on the callback.') }
56. let r = fetch(identUrl + '/api/exchange', { method = 'POST' json = { key = identKey secret = identSecret code = code } timeoutMs = 5000 })
57. let j = r.json()
58. if (r.status != 200 || j == null || j.identity == null) {
59. return errorPage(400, 'sign-in failed (' + r.status + '): ' + (j != null && j.error != null ? j.error : r.text()))
60. }
61. let s = req.session
62. if (s == null) { return errorPage(500, 'no session — reload and try again.') }
63. s.user = { identity = j.identity }
64. return redirect('/')
65. }
67. // ---- POST /logout: ends THIS app's session; ident's own login is untouched --------------
68. logout = (route, req) => {
69. if (req.method != 'POST') { return redirect('/') }
70. let s = req.session
71. if (s != null) { s.user = null }
72. return redirect('/')
73. }
75. routes = [
76. { pattern = "/favicon.ico" direct = "" }
77. { pattern = "/login" function = login }
78. { pattern = "/callback" function = callback }
79. { pattern = "/logout" function = logout }
80. { pattern = "/" component = Home }
81. ]
83. // cookies are per host, not per port: an own name keeps this app's session apart from
84. // ident's own (and from any other worldapi app sharing a dev host), see ident README "Design
85. // tokens" / hybriel#10 hybriel#17.
86. sessionCookie = 'trackersid'
87. watching = env('TRACKER_WATCH') != '0'
88. server = new WebFramework(routes = routes, styles = styles, port = port, sessionCookie = sessionCookie, watchMode = watching)