WEBDIENSTE/OpenSign
1
0
Fork 0
mirror of https://github.com/OpenSignLabs/OpenSign.git synced 2026-08-17 21:25:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2467 from nxglabs/sync-to-public_repo-26233821722

Browse Source 
Merge pull request #2466 from nxglabs/raktima-main-patch-5
This commit is contained in:
raktima-opensignlabs
2026-05-21 15:14:25 +00:00
parent 3f4007d564
commit 5fbd1fc6f2
2 changed files with 2 additions and 171 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/OpenSign/server.cjs
-169
View File
@@ -1,169 +0,0 @@
#!/usr/bin/env node
/* eslint-env node */
/* eslint-disable no-console */
// Tiny static file server for the production build.
// - Serves real files from ./build (including dotfile dirs like .well-known)
// - Falls back to /index.html only when the requested path does not exist
// (SPA client-side routing).
const http = require("node:http");
const fs = require("node:fs");
const path = require("node:path");
const root = path.join(__dirname, "build");
const port = Number(process.env.PORT) || 3000;
const host = process.env.HOST || "0.0.0.0";
const mime = {
".html": "text/html; charset=utf-8",
".js": "application/javascript; charset=utf-8",
".mjs": "application/javascript; charset=utf-8",
".css": "text/css; charset=utf-8",
".json": "application/json; charset=utf-8",
".map": "application/json; charset=utf-8",
".svg": "image/svg+xml",
".png": "image/png",
".jpg": "image/jpeg",
".jpeg": "image/jpeg",
".gif": "image/gif",
".ico": "image/x-icon",
".webp": "image/webp",
".woff": "font/woff",
".woff2": "font/woff2",
".ttf": "font/ttf",
".otf": "font/otf",
".txt": "text/plain; charset=utf-8",
".pdf": "application/pdf",
".csv": "text/csv; charset=utf-8",
".wasm": "application/wasm",
".xml": "application/xml; charset=utf-8"
};
function contentType(filePath) {
// Files under /.well-known/ are JSON by convention (WebAuthn, apple-app-site-association, etc.)
// and are extensionless, so explicitly set application/json there.
const rel = path.relative(root, filePath).split(path.sep).join("/");
if (rel.startsWith(".well-known/")) {
return "application/json; charset=utf-8";
}
return mime[path.extname(filePath).toLowerCase()] || "application/octet-stream";
}
function applyWellKnownCors(req, res, filePath) {
const rel = path.relative(root, filePath).split(path.sep).join("/");
if (!rel.startsWith(".well-known/")) return;
// .well-known/* must be readable cross-origin (e.g. WebAuthn related-origins
// requests come from any RP host). Echo the request origin when present so
// credentialed fetches still work; otherwise allow all.
const origin = req.headers.origin;
res.setHeader("Access-Control-Allow-Origin", origin || "*");
res.setHeader("Vary", "Origin");
res.setHeader("Access-Control-Allow-Methods", "GET, HEAD, OPTIONS");
res.setHeader("Access-Control-Allow-Headers", "Content-Type");
}
function safeJoin(reqPath) {
let decoded;
try {
decoded = decodeURIComponent(reqPath.split("?")[0].split("#")[0]);
} catch {
return null;
}
const resolved = path.normalize(path.join(root, decoded));
if (resolved !== root && !resolved.startsWith(root + path.sep)) return null;
return resolved;
}
function cacheControl(filePath) {
const ext = path.extname(filePath).toLowerCase();
const relativePath = path.relative(root, filePath);
const isBuildAsset =
relativePath === "assets" ||
relativePath.startsWith(`assets${path.sep}`);
if (ext === ".html" || ext === "") {
return "no-cache";
}
return isBuildAsset
? "public, max-age=31536000, immutable"
: "no-cache";
}
function streamFile(req, res, filePath, stats) {
const headers = {
"Content-Type": contentType(filePath),
"Content-Length": stats.size,
"Last-Modified": stats.mtime.toUTCString(),
"Cache-Control": cacheControl(filePath)
};
applyWellKnownCors(req, res, filePath);
if (req.method === "HEAD") {
res.writeHead(200, headers);
return res.end();
}
const stream = fs.createReadStream(filePath);
stream.on("error", () => {
if (!res.headersSent) {
res.writeHead(500, { "Content-Type": "text/plain" });
return res.end("Internal Server Error");
}
res.destroy();
});
res.on("close", () => {
if (!stream.destroyed) stream.destroy();
});
res.on("error", () => {
if (!stream.destroyed) stream.destroy();
});
res.writeHead(200, headers);
stream.pipe(res);
}
function sendIndex(req, res) {
const indexPath = path.join(root, "index.html");
fs.stat(indexPath, (err, stats) => {
if (err || !stats.isFile()) {
res.writeHead(500, { "Content-Type": "text/plain" });
return res.end("index.html not found");
}
streamFile(req, res, indexPath, stats);
});
}
const server = http.createServer((req, res) => {
if (req.method === "OPTIONS") {
const filePath = safeJoin(req.url || "/");
if (filePath) applyWellKnownCors(req, res, filePath);
res.writeHead(204);
return res.end();
}
if (req.method !== "GET" && req.method !== "HEAD") {
res.writeHead(405, { Allow: "GET, HEAD, OPTIONS" });
return res.end();
}
const reqUrl = req.url || "/";
const filePath = safeJoin(reqUrl);
if (!filePath) {
res.writeHead(400);
return res.end("Bad Request");
}
fs.stat(filePath, (err, stats) => {
if (!err && stats.isFile()) {
return streamFile(req, res, filePath, stats);
}
if (!err && stats.isDirectory()) {
const indexInDir = path.join(filePath, "index.html");
return fs.stat(indexInDir, (e, s) => {
if (!e && s.isFile()) return streamFile(req, res, indexInDir, s);
return sendIndex(req, res);
});
}
// No file at this path → SPA fallback to index.html
sendIndex(req, res);
});
});
server.listen(port, host, () => {
console.log(`Serving ${root} on http://${host}:${port}`);
});
apps/OpenSign/src/pages/PdfRequestFiles.jsx
+2 -2
View File
@@ -577,8 +577,8 @@ function PdfRequestFiles(
setContractName("_Contactbook");
setSignerUserId(contact?.objectId);
handleTourStatus(isTourEnabled, contact?.TourStatus);
} catch (err) {
console.log("err while getting tourstatus", err);
} catch (error) {
console.log("err while getting tourstatus", error);
}
}
}