keyoxide-web/routes/server.js

/*
Copyright (C) 2021 Yarmo Mackenbach

This program is free software: you can redistribute it and/or modify it under
the terms of the GNU Affero General Public License as published by the Free
Software Foundation, either version 3 of the License, or (at your option)
any later version.

This program is distributed in the hope that it will be useful, but WITHOUT
ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
details.

You should have received a copy of the GNU Affero General Public License along
with this program. If not, see <https://www.gnu.org/licenses/>.

Also add information on how to contact you by electronic and paper mail.

If your software can interact with users remotely through a computer network,
you should also make sure that it provides a way for users to get its source.
For example, if your program is a web application, its interface could display
a "Source" link that leads users to an archive of the code. There are many
ways you could offer source, and different solutions will be better for different
programs; see section 13 for the specific requirements.

You should also get your employer (if you work as a programmer) or school,
if any, to sign a "copyright disclaimer" for the program, if necessary. For
more information on this, and how to apply and follow the GNU AGPL, see <https://www.gnu.org/licenses/>.
*/
const router = require('express').Router();
const { check, query, validationResult } = require('express-validator');
const proofVerification = require('../server/proofVerification');

router.get('/verify/proxy', [
  query('url').isURL().exists(),
  query('fingerprint').isHexadecimal().exists(),
  query('checkClaim').escape(),
  query('checkClaimFormat').escape(),
  query('checkRelation').escape().exists(),
  query('checkPath').escape().exists()
], async function(req, res) {
    const errors = validationResult(req);
    if (!errors.isEmpty()) {
        return res.status(400).json({ success: false, errors: errors.array() });
    }

    let params = {
        url: req.query.url,
        fingerprint: req.query.fingerprint,
        checkClaim: req.query.checkClaim ? req.query.checkClaim : null,
        checkClaimFormat: req.query.checkClaimFormat ? req.query.checkClaimFormat : "uri",
        checkRelation: req.query.checkRelation,
        checkPath: req.query.checkPath.split(',')
    }

    try {
        const proofResult = await proofVerification.Proxy(params);
        res.status(200).send(proofResult);
    } catch (e) {
        console.log(e);
        res.status(400).send({ success: false, errors: e });
    }
});

router.get('/verify/twitter', [
  query('tweetId').isInt().exists(),
  query('account').exists(),
  query('fingerprint').isHexadecimal().exists()
], async function(req, res) {
    const errors = validationResult(req);
    if (!errors.isEmpty()) {
        return res.status(400).json({ success: false, errors: errors.array() });
    }

    let params = {
        tweetId: req.query.tweetId,
        account: req.query.account,
        fingerprint: req.query.fingerprint
    }

    try {
        const proofResult = await proofVerification.Twitter(params);
        res.status(200).send(proofResult);
    } catch (e) {
        console.log(e);
        res.status(400).send({ success: false, errors: e });
    }
});

module.exports = router;