be8d2b9de0
Establishing 1 connection for every website visit is too much. Only after calling frappe.realtime.on(...) for ANY event, we will establish a websocket connection. This is used for handful of things: - Discussion component - File upload Socketio was initially added here: https://github.com/frappe/frappe/pull/6866 this use case no longer exists. Rarely anywhere website uses realtime.
76 lines
2 KiB
JavaScript
76 lines
2 KiB
JavaScript
const cookie = require("cookie");
|
|
const request = require("superagent");
|
|
const { get_url } = require("../utils");
|
|
|
|
const { get_conf } = require("../../node_utils");
|
|
const conf = get_conf();
|
|
|
|
function authenticate_with_frappe(socket, next) {
|
|
let namespace = socket.nsp.name;
|
|
namespace = namespace.slice(1, namespace.length); // remove leading `/`
|
|
|
|
if (namespace != get_site_name(socket)) {
|
|
next(new Error("Invalid namespace"));
|
|
}
|
|
|
|
if (get_hostname(socket.request.headers.host) != get_hostname(socket.request.headers.origin)) {
|
|
next(new Error("Invalid origin"));
|
|
return;
|
|
}
|
|
|
|
if (!socket.request.headers.cookie) {
|
|
next(new Error("No cookie transmitted."));
|
|
return;
|
|
}
|
|
|
|
let cookies = cookie.parse(socket.request.headers.cookie);
|
|
|
|
if (!cookies.sid) {
|
|
next(new Error("No sid transmitted."));
|
|
return;
|
|
}
|
|
|
|
request
|
|
.get(get_url(socket, "/api/method/frappe.realtime.get_user_info"))
|
|
.type("form")
|
|
.query({
|
|
sid: cookies.sid,
|
|
})
|
|
.then((res) => {
|
|
socket.user = res.body.message.user;
|
|
socket.user_type = res.body.message.user_type;
|
|
socket.sid = cookies.sid;
|
|
next();
|
|
})
|
|
.catch((e) => {
|
|
next(new Error(`Unauthorized: ${e}`));
|
|
});
|
|
}
|
|
|
|
function get_site_name(socket) {
|
|
if (socket.site_name) {
|
|
return socket.site_name;
|
|
} else if (socket.request.headers["x-frappe-site-name"]) {
|
|
socket.site_name = get_hostname(socket.request.headers["x-frappe-site-name"]);
|
|
} else if (
|
|
conf.default_site &&
|
|
["localhost", "127.0.0.1"].indexOf(get_hostname(socket.request.headers.host)) !== -1
|
|
) {
|
|
socket.site_name = conf.default_site;
|
|
} else if (socket.request.headers.origin) {
|
|
socket.site_name = get_hostname(socket.request.headers.origin);
|
|
} else {
|
|
socket.site_name = get_hostname(socket.request.headers.host);
|
|
}
|
|
return socket.site_name;
|
|
}
|
|
|
|
function get_hostname(url) {
|
|
if (!url) return undefined;
|
|
if (url.indexOf("://") > -1) {
|
|
url = url.split("/")[2];
|
|
}
|
|
return url.match(/:/g) ? url.slice(0, url.indexOf(":")) : url;
|
|
}
|
|
|
|
module.exports = authenticate_with_frappe;
|