163 lines
6.0 KiB
JavaScript
163 lines
6.0 KiB
JavaScript
// Login + protected directory listing — replaces index.php.
|
|
|
|
import { readdir, stat } from 'node:fs/promises';
|
|
import { join } from 'node:path';
|
|
import { ROOT, TITLE, PASSWORD } from '../config.js';
|
|
|
|
const HIDDEN = new Set(['index.php', '.htaccess', 'node_modules', 'package.json', 'package-lock.json', 'config.js', 'server.js', 'lib', 'routes', 'cron', 'test', '.git']);
|
|
|
|
function esc(s) {
|
|
if (s == null) return '';
|
|
return String(s)
|
|
.replace(/&/g, '&')
|
|
.replace(/</g, '<')
|
|
.replace(/>/g, '>')
|
|
.replace(/"/g, '"')
|
|
.replace(/'/g, ''');
|
|
}
|
|
|
|
function formatBytes(bytes) {
|
|
const units = ['B', 'KB', 'MB', 'GB', 'TB', 'PB'];
|
|
let i = bytes > 0 ? Math.floor(Math.log(bytes) / Math.log(1024)) : 0;
|
|
if (i >= units.length) i = units.length - 1;
|
|
return `${(bytes / Math.pow(1024, i)) || 0} ${units[i]}`;
|
|
}
|
|
|
|
function pad(n) { return n < 10 ? `0${n}` : String(n); }
|
|
function fmtDate(ms) {
|
|
const d = new Date(ms);
|
|
return `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())} ${pad(d.getHours())}:${pad(d.getMinutes())}`;
|
|
}
|
|
|
|
function loginPage(error = '') {
|
|
return `<!doctype html>
|
|
<html lang="fr">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width,initial-scale=1">
|
|
<title>${esc(TITLE)}</title>
|
|
<style>
|
|
*, *::before, *::after { box-sizing: border-box; }
|
|
body { font-family: system-ui, -apple-system, Segoe UI, Roboto, sans-serif; background:#0b1220; color:#e5e7eb; display:flex; align-items:center; justify-content:center; min-height:100vh; margin:0; }
|
|
.card { background:#111827; padding:24px; border-radius:12px; width:100%; max-width:360px; box-shadow:0 10px 30px rgba(0,0,0,.35); }
|
|
h1 { font-size:18px; margin:0 0 16px; color:#f9fafb; }
|
|
label { display:block; font-size:14px; margin-bottom:8px; color:#cbd5e1; }
|
|
input[type=password]{ width:100%; padding:10px 12px; border:1px solid #334155; border-radius:8px; background:#0f172a; color:#e5e7eb; outline:none; }
|
|
input[type=password]:focus{ border-color:#60a5fa; }
|
|
.btn { margin-top:12px; width:100%; padding:10px 12px; border:0; border-radius:8px; background:#2563eb; color:white; font-weight:600; cursor:pointer; }
|
|
.btn:hover { filter:brightness(1.05); }
|
|
.err { color:#fca5a5; font-size:14px; margin-top:10px; min-height:18px; }
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<form class="card" method="post" autocomplete="off">
|
|
<h1>${esc(TITLE)}</h1>
|
|
<label for="pw">Mot de passe</label>
|
|
<input id="pw" name="password" type="password" required autofocus>
|
|
<button class="btn" type="submit">Entrer</button>
|
|
<div class="err">${esc(error)}</div>
|
|
</form>
|
|
</body>
|
|
</html>`;
|
|
}
|
|
|
|
async function listingPage() {
|
|
const names = await readdir(ROOT);
|
|
const entries = [];
|
|
for (const name of names) {
|
|
if (HIDDEN.has(name)) continue;
|
|
if (name.startsWith('.')) continue;
|
|
let st;
|
|
try { st = await stat(join(ROOT, name)); } catch { continue; }
|
|
entries.push({
|
|
name,
|
|
isDir: st.isDirectory(),
|
|
size: st.isFile() ? st.size : 0,
|
|
mtime: st.mtimeMs,
|
|
});
|
|
}
|
|
entries.sort((a, b) => {
|
|
if (a.isDir !== b.isDir) return a.isDir ? -1 : 1;
|
|
return a.name.toLowerCase().localeCompare(b.name.toLowerCase());
|
|
});
|
|
|
|
const rows = entries.map((e) => {
|
|
const href = encodeURIComponent(e.name);
|
|
return `<tr>
|
|
<td class="name"><a href="${href}${e.isDir ? '/' : ''}">${esc(e.name)}</a>${e.isDir ? '<span class="badge">dossier</span>' : ''}</td>
|
|
<td>${e.isDir ? '—' : esc(formatBytes(e.size))}</td>
|
|
<td>${esc(fmtDate(e.mtime))}</td>
|
|
</tr>`;
|
|
}).join('');
|
|
|
|
return `<!doctype html>
|
|
<html lang="fr">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width,initial-scale=1">
|
|
<title>${esc(TITLE)}</title>
|
|
<style>
|
|
body{ font-family: ui-sans-serif,system-ui,-apple-system,Segoe UI,Roboto,sans-serif; background:#0b1220; color:#e5e7eb; margin:0; }
|
|
header{ display:flex; gap:12px; align-items:center; justify-content:space-between; padding:16px 20px; background:#0f172a; position:sticky; top:0; }
|
|
h1{ font-size:18px; margin:0; color:#f9fafb; }
|
|
a.logout{ color:#93c5fd; text-decoration:none; font-size:14px; }
|
|
a.logout:hover{ text-decoration:underline; }
|
|
.wrap{ max-width:1100px; margin:20px auto; padding:0 16px; }
|
|
table{ width:100%; border-collapse:collapse; background:#111827; border-radius:12px; overflow:hidden; }
|
|
th,td{ padding:12px 14px; border-bottom:1px solid #1f2937; text-align:left; font-size:14px; }
|
|
th{ background:#0f172a; color:#cbd5e1; font-weight:600; }
|
|
tr:hover td{ background:#0b1324; }
|
|
.name a{ color:#93c5fd; text-decoration:none; }
|
|
.name a:hover{ text-decoration:underline; }
|
|
.badge{ font-size:11px; padding:2px 8px; border-radius:999px; background:#1f2937; color:#cbd5e1; margin-left:8px; }
|
|
footer{ color:#94a3b8; font-size:12px; text-align:center; padding:16px; }
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<header>
|
|
<h1>${esc(TITLE)}</h1>
|
|
<a class="logout" href="?logout=1">Se déconnecter</a>
|
|
</header>
|
|
<div class="wrap">
|
|
<table>
|
|
<thead><tr><th>Nom</th><th>Taille</th><th>Modifié</th></tr></thead>
|
|
<tbody>${rows}</tbody>
|
|
</table>
|
|
<footer>Les liens ci-dessus pointent directement vers les fichiers/dossiers non protégés.</footer>
|
|
</div>
|
|
</body>
|
|
</html>`;
|
|
}
|
|
|
|
export default async function indexRoutes(fastify) {
|
|
fastify.get('/', async (req, reply) => {
|
|
reply.header('Content-Type', 'text/html; charset=utf-8');
|
|
if (req.query?.logout != null) {
|
|
req.session.delete();
|
|
return reply.redirect('/');
|
|
}
|
|
if (!req.session.get('auth_ok')) {
|
|
return loginPage();
|
|
}
|
|
return listingPage();
|
|
});
|
|
|
|
fastify.post('/', async (req, reply) => {
|
|
reply.header('Content-Type', 'text/html; charset=utf-8');
|
|
const submitted = req.body?.password ?? '';
|
|
if (timingSafeEqual(submitted, PASSWORD)) {
|
|
req.session.set('auth_ok', true);
|
|
return reply.redirect('/');
|
|
}
|
|
return loginPage('Mot de passe incorrect.');
|
|
});
|
|
}
|
|
|
|
function timingSafeEqual(a, b) {
|
|
if (typeof a !== 'string' || typeof b !== 'string') return false;
|
|
if (a.length !== b.length) return false;
|
|
let diff = 0;
|
|
for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
|
|
return diff === 0;
|
|
}
|