2019-05-09 18:54:39 +12:00
|
|
|
<?php
|
|
|
|
|
|
|
|
// Init
|
2019-08-01 08:35:42 +12:00
|
|
|
if(file_exists(__DIR__ . '/../vendor/autoload.php')) {
|
|
|
|
require_once __DIR__ . '/../vendor/autoload.php';
|
|
|
|
}
|
2019-05-09 18:54:39 +12:00
|
|
|
|
|
|
|
use Utopia\App;
|
|
|
|
use Utopia\Request;
|
|
|
|
use Utopia\Response;
|
|
|
|
use Auth\Auth;
|
|
|
|
use Database\Database;
|
|
|
|
use Database\Document;
|
|
|
|
use Database\Validator\Authorization;
|
|
|
|
use Database\Adapter\MySQL as MySQLAdapter;
|
|
|
|
use Database\Adapter\Redis as RedisAdapter;
|
|
|
|
use Utopia\Locale\Locale;
|
|
|
|
use Utopia\Registry\Registry;
|
2019-08-09 09:49:46 +12:00
|
|
|
use PHPMailer\PHPMailer\PHPMailer;
|
2019-05-09 18:54:39 +12:00
|
|
|
|
|
|
|
const APP_NAME = 'Appwrite';
|
|
|
|
const APP_DOMAIN = 'appwrite.io';
|
|
|
|
const APP_EMAIL_TEAM = 'team@' . APP_DOMAIN;
|
|
|
|
const APP_EMAIL_SECURITY = 'security@' . APP_DOMAIN;
|
|
|
|
const APP_EMAIL_NEWSLETTER = 'newsletter@' . APP_DOMAIN;
|
|
|
|
const APP_USERAGENT = APP_NAME . '-Server/%s Please report abuse at ' . APP_EMAIL_SECURITY;
|
|
|
|
const APP_SOCIAL_TWITTER = 'https://twitter.com/appwrite_io';
|
|
|
|
const APP_SOCIAL_TWITTER_HANDLE = 'appwrite_io';
|
|
|
|
const APP_SOCIAL_FACEBOOK = 'https://www.facebook.com/appwrite.io';
|
|
|
|
const APP_SOCIAL_LINKEDIN = 'https://www.linkedin.com/company/appwrite';
|
|
|
|
const APP_SOCIAL_INSTAGRAM = 'https://www.instagram.com/appwrite.io';
|
|
|
|
const APP_SOCIAL_GITHUB = 'https://github.com/appwrite';
|
|
|
|
const APP_SOCIAL_DISCORD = 'https://discord.gg/GSeTUeA';
|
|
|
|
const APP_MODE_ADMIN = 'admin';
|
|
|
|
const APP_LOCALES = ['en', 'he'];
|
2019-08-15 01:50:40 +12:00
|
|
|
const APP_PAGING_LIMIT = 15;
|
2019-05-09 18:54:39 +12:00
|
|
|
|
|
|
|
$register = new Registry();
|
|
|
|
$request = new Request();
|
|
|
|
$response = new Response();
|
|
|
|
|
|
|
|
/**
|
|
|
|
* ENV vars
|
|
|
|
*/
|
|
|
|
$env = $request->getServer('_APP_ENV', App::ENV_TYPE_PRODUCTION);
|
|
|
|
$domain = $request->getServer('HTTP_HOST', '');
|
|
|
|
$version = include __DIR__ . '/../app/config/version.php';
|
|
|
|
$redisHost = $request->getServer('_APP_REDIS_HOST', '');
|
|
|
|
$redisPort = $request->getServer('_APP_REDIS_PORT', '');
|
2019-08-25 23:05:04 +12:00
|
|
|
$utopia = new App('Asia/Tel_Aviv', $env);
|
2019-05-09 18:54:39 +12:00
|
|
|
|
|
|
|
Resque::setBackend($redisHost . ':' . $redisPort);
|
|
|
|
|
|
|
|
define('COOKIE_DOMAIN', ($request->getServer('HTTP_HOST', null) !== 'localhost') ? '.' . $request->getServer('HTTP_HOST', false) : false);
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Registry
|
|
|
|
*/
|
|
|
|
$register->set('db', function() use ($request) { // Register DB connection
|
|
|
|
$dbHost = $request->getServer('_APP_DB_HOST', '');
|
|
|
|
$dbUser = $request->getServer('_APP_DB_USER', '');
|
|
|
|
$dbPass = $request->getServer('_APP_DB_PASS', '');
|
|
|
|
$dbScheme = $request->getServer('_APP_DB_SCHEMA', '');
|
|
|
|
|
2019-07-10 02:01:08 +12:00
|
|
|
$pdo = new PDO("mysql:host={$dbHost};dbname={$dbScheme};charset=utf8mb4", $dbUser, $dbPass, array(
|
|
|
|
PDO::MYSQL_ATTR_INIT_COMMAND => 'SET NAMES utf8mb4',
|
2019-05-09 18:54:39 +12:00
|
|
|
PDO::ATTR_TIMEOUT => 5 // Seconds
|
|
|
|
));
|
|
|
|
|
|
|
|
// Connection settings
|
|
|
|
$pdo->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC); // Return arrays
|
|
|
|
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); // Handle all errors with exceptions
|
|
|
|
|
|
|
|
return $pdo;
|
|
|
|
});
|
|
|
|
$register->set('influxdb', function() use ($request) { // Register DB connection
|
2019-07-30 05:37:25 +12:00
|
|
|
$host = $request->getServer('_APP_INFLUXDB_HOST', '');
|
|
|
|
$port = $request->getServer('_APP_INFLUXDB_PORT', '');
|
|
|
|
|
|
|
|
if(empty($host) || empty($port)) {
|
|
|
|
return null;
|
|
|
|
}
|
2019-05-09 18:54:39 +12:00
|
|
|
|
|
|
|
$client = new InfluxDB\Client($host, $port, '', '', false, false, 5);
|
|
|
|
|
|
|
|
return $client;
|
|
|
|
});
|
|
|
|
$register->set('statsd', function() use ($request) { // Register DB connection
|
2019-08-07 19:56:08 +12:00
|
|
|
$host = $request->getServer('_APP_STATSD_HOST', 'telegraf');
|
2019-05-09 18:54:39 +12:00
|
|
|
$port = $request->getServer('_APP_STATSD_PORT', 8125);
|
|
|
|
|
|
|
|
$connection = new \Domnikl\Statsd\Connection\UdpSocket($host, $port);
|
|
|
|
$statsd = new \Domnikl\Statsd\Client($connection);
|
|
|
|
|
|
|
|
return $statsd;
|
|
|
|
});
|
|
|
|
$register->set('cache', function() use ($redisHost, $redisPort) { // Register cache connection
|
|
|
|
$redis = new Redis();
|
|
|
|
|
|
|
|
$redis->connect($redisHost, $redisPort);
|
|
|
|
return $redis;
|
|
|
|
});
|
2019-08-09 09:49:46 +12:00
|
|
|
$register->set('smtp', function() use ($request) {
|
|
|
|
$mail = new PHPMailer(true);
|
2019-05-09 18:54:39 +12:00
|
|
|
|
2019-08-09 09:49:46 +12:00
|
|
|
$mail->isSMTP();
|
2019-05-09 18:54:39 +12:00
|
|
|
|
2019-08-09 09:49:46 +12:00
|
|
|
$username = $request->getServer('_APP_SMTP_USERNAME', '');
|
|
|
|
$password = $request->getServer('_APP_SMTP_PASSWORD', '');
|
|
|
|
|
|
|
|
$mail->XMailer = 'Appwrite Mailer';
|
|
|
|
$mail->Host = $request->getServer('_APP_SMTP_HOST', 'smtp');
|
|
|
|
$mail->Port = $request->getServer('_APP_SMTP_PORT', 25);
|
|
|
|
$mail->SMTPAuth = (!empty($username) && !empty($password));
|
|
|
|
$mail->Username = $username;
|
|
|
|
$mail->Password = $password;
|
|
|
|
$mail->SMTPSecure = $request->getServer('_APP_SMTP_SECURE', '');
|
|
|
|
|
|
|
|
$mail->setFrom('team@appwrite.io', APP_NAME . ' Team');
|
|
|
|
$mail->addReplyTo('team@appwrite.io', APP_NAME . ' Team');
|
2019-05-09 18:54:39 +12:00
|
|
|
|
2019-08-09 09:49:46 +12:00
|
|
|
$mail->isHTML(true);
|
|
|
|
|
|
|
|
return $mail;
|
2019-05-09 18:54:39 +12:00
|
|
|
});
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Localization
|
|
|
|
*/
|
|
|
|
$locale = $request->getParam('locale', $request->getHeader('X-Appwrite-Locale', null));
|
|
|
|
|
|
|
|
Locale::$exceptions = false;
|
|
|
|
|
|
|
|
Locale::setLanguage('en', include __DIR__ . '/config/locale/en.php');
|
|
|
|
Locale::setLanguage('he', include __DIR__ . '/config/locale/he.php');
|
|
|
|
|
|
|
|
if(in_array($locale, APP_LOCALES)) {
|
|
|
|
Locale::setDefault($locale);
|
|
|
|
}
|
|
|
|
|
|
|
|
stream_context_set_default([ // Set global user agent and http settings
|
|
|
|
'http' => [
|
|
|
|
'method' => 'GET',
|
|
|
|
'user_agent' => sprintf(APP_USERAGENT, $version),
|
|
|
|
'timeout' => 2
|
|
|
|
]
|
|
|
|
]);
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Auth & Project Scope
|
|
|
|
*/
|
|
|
|
$consoleDB = new Database();
|
|
|
|
$consoleDB->setAdapter(new RedisAdapter(new MySQLAdapter($register), $register));
|
|
|
|
$consoleDB->setNamespace('app_console'); // Should be replaced with param if we want to have parent projects
|
2019-08-10 02:46:09 +12:00
|
|
|
$consoleDB->setMocks(include __DIR__ . '/../app/config/collections.php');
|
2019-05-09 18:54:39 +12:00
|
|
|
|
|
|
|
Authorization::disable();
|
|
|
|
|
|
|
|
$project = $consoleDB->getDocument($request->getParam('project', $request->getHeader('X-Appwrite-Project', null)));
|
|
|
|
|
|
|
|
Authorization::enable();
|
|
|
|
|
|
|
|
$console = $consoleDB->getDocument('console');
|
|
|
|
|
|
|
|
if(is_null($project->getUid()) || Database::SYSTEM_COLLECTION_PROJECTS !== $project->getCollection()) {
|
|
|
|
$project = $console;
|
|
|
|
}
|
|
|
|
|
|
|
|
$mode = $request->getParam('mode', $request->getHeader('X-Appwrite-Mode', 'default'));
|
|
|
|
|
|
|
|
Auth::setCookieName('a-session-' . $project->getUid());
|
|
|
|
|
|
|
|
if(APP_MODE_ADMIN === $mode) {
|
|
|
|
Auth::setCookieName('a-session-' . $console->getUid());
|
|
|
|
}
|
|
|
|
|
|
|
|
$session = Auth::decodeSession($request->getCookie(Auth::$cookieName, $request->getHeader('X-Appwrite-Key', '')));
|
|
|
|
Auth::$unique = $session['id'];
|
|
|
|
Auth::$secret = $session['secret'];
|
|
|
|
|
|
|
|
$projectDB = new Database();
|
|
|
|
$projectDB->setAdapter(new RedisAdapter(new MySQLAdapter($register), $register));
|
|
|
|
$projectDB->setNamespace('app_' . $project->getUid());
|
2019-08-10 17:41:27 +12:00
|
|
|
$projectDB->setMocks(include __DIR__ . '/../app/config/collections.php');
|
2019-05-09 18:54:39 +12:00
|
|
|
|
|
|
|
$user = $projectDB->getDocument(Auth::$unique);
|
|
|
|
|
|
|
|
if(APP_MODE_ADMIN === $mode) {
|
|
|
|
$user = $consoleDB->getDocument(Auth::$unique);
|
|
|
|
|
|
|
|
$user
|
|
|
|
->setAttribute('$uid', 'admin-' . $user->getAttribute('$uid'))
|
|
|
|
;
|
|
|
|
}
|
|
|
|
|
|
|
|
if(empty($user->getUid()) // Check a document has been found in the DB
|
|
|
|
|| Database::SYSTEM_COLLECTION_USERS !== $user->getCollection() // Validate returned document is really a user document
|
|
|
|
|| !Auth::tokenVerify($user->getAttribute('tokens', []), Auth::TOKEN_TYPE_LOGIN, Auth::$secret)) { // Validate user has valid login token
|
|
|
|
$user = new Document(['$uid' => '', '$collection' => Database::SYSTEM_COLLECTION_USERS]);
|
|
|
|
}
|
|
|
|
|
|
|
|
if(APP_MODE_ADMIN === $mode) {
|
|
|
|
if(!empty($user->search('teamId', $project->getAttribute('teamId'), $user->getAttribute('memberships')))) {
|
|
|
|
Authorization::disable();
|
|
|
|
}
|
|
|
|
else {
|
|
|
|
$user = new Document(['$uid' => '', '$collection' => Database::SYSTEM_COLLECTION_USERS]);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// Set project mail
|
2019-08-09 09:49:46 +12:00
|
|
|
$register->get('smtp')->setFrom(APP_EMAIL_TEAM, sprintf(Locale::getText('auth.emails.team'), $project->getAttribute('name')));
|