2018-02-10 01:00:55 +01:00
|
|
|
#![feature(plugin, custom_derive)]
|
|
|
|
#![plugin(rocket_codegen)]
|
|
|
|
extern crate rocket;
|
|
|
|
extern crate rocket_contrib;
|
|
|
|
extern crate reqwest;
|
|
|
|
extern crate multipart;
|
|
|
|
extern crate serde;
|
|
|
|
#[macro_use]
|
|
|
|
extern crate serde_derive;
|
|
|
|
#[macro_use]
|
|
|
|
extern crate serde_json;
|
|
|
|
#[macro_use]
|
|
|
|
extern crate diesel;
|
|
|
|
#[macro_use]
|
|
|
|
extern crate diesel_migrations;
|
|
|
|
extern crate ring;
|
|
|
|
extern crate uuid;
|
|
|
|
extern crate chrono;
|
|
|
|
extern crate oath;
|
|
|
|
extern crate data_encoding;
|
|
|
|
extern crate jsonwebtoken as jwt;
|
2018-07-12 21:46:50 +02:00
|
|
|
extern crate u2f;
|
2018-02-10 01:00:55 +01:00
|
|
|
extern crate dotenv;
|
|
|
|
#[macro_use]
|
|
|
|
extern crate lazy_static;
|
2018-07-12 21:46:50 +02:00
|
|
|
#[macro_use]
|
|
|
|
extern crate num_derive;
|
|
|
|
extern crate num_traits;
|
2018-02-10 01:00:55 +01:00
|
|
|
|
2018-06-12 17:24:29 +02:00
|
|
|
use std::{env, path::Path, process::{exit, Command}};
|
2018-02-23 00:38:54 +01:00
|
|
|
use rocket::Rocket;
|
2018-02-10 01:00:55 +01:00
|
|
|
|
|
|
|
#[macro_use]
|
|
|
|
mod util;
|
|
|
|
|
|
|
|
mod api;
|
|
|
|
mod db;
|
|
|
|
mod crypto;
|
|
|
|
mod auth;
|
|
|
|
|
|
|
|
fn init_rocket() -> Rocket {
|
|
|
|
rocket::ignite()
|
|
|
|
.mount("/", api::web_routes())
|
|
|
|
.mount("/api", api::core_routes())
|
|
|
|
.mount("/identity", api::identity_routes())
|
|
|
|
.mount("/icons", api::icons_routes())
|
|
|
|
.manage(db::init_pool())
|
|
|
|
}
|
|
|
|
|
|
|
|
// Embed the migrations from the migrations folder into the application
|
|
|
|
// This way, the program automatically migrates the database to the latest version
|
|
|
|
// https://docs.rs/diesel_migrations/*/diesel_migrations/macro.embed_migrations.html
|
2018-06-12 17:24:29 +02:00
|
|
|
#[allow(unused_imports)]
|
|
|
|
mod migrations {
|
|
|
|
embed_migrations!();
|
|
|
|
|
|
|
|
pub fn run_migrations() {
|
|
|
|
// Make sure the database is up to date (create if it doesn't exist, or run the migrations)
|
|
|
|
let connection = ::db::get_connection().expect("Can't conect to DB");
|
|
|
|
|
|
|
|
use std::io::stdout;
|
|
|
|
embedded_migrations::run_with_output(&connection, &mut stdout()).expect("Can't run migrations");
|
|
|
|
}
|
|
|
|
}
|
2018-02-10 01:00:55 +01:00
|
|
|
|
|
|
|
fn main() {
|
2018-05-12 22:55:18 +02:00
|
|
|
check_db();
|
|
|
|
check_rsa_keys();
|
2018-06-12 17:24:29 +02:00
|
|
|
check_web_vault();
|
|
|
|
migrations::run_migrations();
|
2018-05-12 22:55:18 +02:00
|
|
|
|
2018-02-10 01:00:55 +01:00
|
|
|
|
|
|
|
init_rocket().launch();
|
|
|
|
}
|
|
|
|
|
2018-05-12 22:55:18 +02:00
|
|
|
fn check_db() {
|
|
|
|
let path = Path::new(&CONFIG.database_url);
|
|
|
|
|
|
|
|
if let Some(parent) = path.parent() {
|
|
|
|
use std::fs;
|
|
|
|
if fs::create_dir_all(parent).is_err() {
|
|
|
|
println!("Error creating database directory");
|
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
}
|
2018-07-31 16:07:17 +02:00
|
|
|
|
|
|
|
// Turn on WAL in SQLite
|
|
|
|
use diesel::RunQueryDsl;
|
|
|
|
let connection = db::get_connection().expect("Can't conect to DB");
|
|
|
|
diesel::sql_query("PRAGMA journal_mode=wal").execute(&connection).expect("Failed to turn on WAL");
|
2018-05-12 22:55:18 +02:00
|
|
|
}
|
|
|
|
|
2018-02-17 01:13:02 +01:00
|
|
|
fn check_rsa_keys() {
|
|
|
|
// If the RSA keys don't exist, try to create them
|
|
|
|
if !util::file_exists(&CONFIG.private_rsa_key)
|
|
|
|
|| !util::file_exists(&CONFIG.public_rsa_key) {
|
|
|
|
println!("JWT keys don't exist, checking if OpenSSL is available...");
|
|
|
|
|
|
|
|
Command::new("openssl")
|
|
|
|
.arg("version")
|
|
|
|
.output().unwrap_or_else(|_| {
|
|
|
|
println!("Can't create keys because OpenSSL is not available, make sure it's installed and available on the PATH");
|
|
|
|
exit(1);
|
|
|
|
});
|
|
|
|
|
|
|
|
println!("OpenSSL detected, creating keys...");
|
|
|
|
|
|
|
|
let mut success = Command::new("openssl").arg("genrsa")
|
|
|
|
.arg("-out").arg(&CONFIG.private_rsa_key_pem)
|
|
|
|
.output().expect("Failed to create private pem file")
|
|
|
|
.status.success();
|
|
|
|
|
|
|
|
success &= Command::new("openssl").arg("rsa")
|
|
|
|
.arg("-in").arg(&CONFIG.private_rsa_key_pem)
|
|
|
|
.arg("-outform").arg("DER")
|
|
|
|
.arg("-out").arg(&CONFIG.private_rsa_key)
|
|
|
|
.output().expect("Failed to create private der file")
|
|
|
|
.status.success();
|
|
|
|
|
|
|
|
success &= Command::new("openssl").arg("rsa")
|
|
|
|
.arg("-in").arg(&CONFIG.private_rsa_key)
|
|
|
|
.arg("-inform").arg("DER")
|
|
|
|
.arg("-RSAPublicKey_out")
|
|
|
|
.arg("-outform").arg("DER")
|
|
|
|
.arg("-out").arg(&CONFIG.public_rsa_key)
|
|
|
|
.output().expect("Failed to create public der file")
|
|
|
|
.status.success();
|
|
|
|
|
|
|
|
if success {
|
2018-03-21 00:08:46 +01:00
|
|
|
println!("Keys created correctly.");
|
2018-02-17 01:13:02 +01:00
|
|
|
} else {
|
|
|
|
println!("Error creating keys, exiting...");
|
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2018-04-24 22:38:23 +02:00
|
|
|
fn check_web_vault() {
|
2018-06-12 21:09:42 +02:00
|
|
|
if !CONFIG.web_vault_enabled {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2018-04-24 22:38:23 +02:00
|
|
|
let index_path = Path::new(&CONFIG.web_vault_folder).join("index.html");
|
|
|
|
|
|
|
|
if !index_path.exists() {
|
|
|
|
println!("Web vault is not found. Please follow the steps in the README to install it");
|
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2018-02-10 01:00:55 +01:00
|
|
|
lazy_static! {
|
|
|
|
// Load the config from .env or from environment variables
|
|
|
|
static ref CONFIG: Config = Config::load();
|
|
|
|
}
|
|
|
|
|
|
|
|
#[derive(Debug)]
|
|
|
|
pub struct Config {
|
|
|
|
database_url: String,
|
|
|
|
icon_cache_folder: String,
|
|
|
|
attachments_folder: String,
|
2018-02-17 01:13:02 +01:00
|
|
|
|
|
|
|
private_rsa_key: String,
|
|
|
|
private_rsa_key_pem: String,
|
|
|
|
public_rsa_key: String,
|
|
|
|
|
2018-02-10 01:00:55 +01:00
|
|
|
web_vault_folder: String,
|
2018-06-12 21:09:42 +02:00
|
|
|
web_vault_enabled: bool,
|
2018-02-10 01:00:55 +01:00
|
|
|
|
2018-06-12 21:09:42 +02:00
|
|
|
local_icon_extractor: bool,
|
2018-02-10 01:00:55 +01:00
|
|
|
signups_allowed: bool,
|
|
|
|
password_iterations: i32,
|
2018-08-10 15:21:42 +02:00
|
|
|
show_password_hint: bool,
|
2018-07-12 21:46:50 +02:00
|
|
|
domain: String,
|
2018-07-12 23:28:01 +02:00
|
|
|
domain_set: bool,
|
2018-02-10 01:00:55 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
impl Config {
|
|
|
|
fn load() -> Self {
|
|
|
|
dotenv::dotenv().ok();
|
|
|
|
|
2018-02-17 01:13:02 +01:00
|
|
|
let df = env::var("DATA_FOLDER").unwrap_or("data".into());
|
2018-06-12 21:09:42 +02:00
|
|
|
let key = env::var("RSA_KEY_FILENAME").unwrap_or(format!("{}/{}", &df, "rsa_key"));
|
2018-02-17 01:13:02 +01:00
|
|
|
|
2018-07-12 23:28:01 +02:00
|
|
|
let domain = env::var("DOMAIN");
|
|
|
|
|
2018-02-10 01:00:55 +01:00
|
|
|
Config {
|
2018-02-17 01:13:02 +01:00
|
|
|
database_url: env::var("DATABASE_URL").unwrap_or(format!("{}/{}", &df, "db.sqlite3")),
|
|
|
|
icon_cache_folder: env::var("ICON_CACHE_FOLDER").unwrap_or(format!("{}/{}", &df, "icon_cache")),
|
|
|
|
attachments_folder: env::var("ATTACHMENTS_FOLDER").unwrap_or(format!("{}/{}", &df, "attachments")),
|
|
|
|
|
2018-06-12 21:09:42 +02:00
|
|
|
private_rsa_key: format!("{}.der", &key),
|
|
|
|
private_rsa_key_pem: format!("{}.pem", &key),
|
|
|
|
public_rsa_key: format!("{}.pub.der", &key),
|
2018-02-17 01:13:02 +01:00
|
|
|
|
2018-02-10 01:00:55 +01:00
|
|
|
web_vault_folder: env::var("WEB_VAULT_FOLDER").unwrap_or("web-vault/".into()),
|
2018-06-12 21:09:42 +02:00
|
|
|
web_vault_enabled: util::parse_option_string(env::var("WEB_VAULT_ENABLED").ok()).unwrap_or(true),
|
2018-02-10 01:00:55 +01:00
|
|
|
|
2018-06-12 21:09:42 +02:00
|
|
|
local_icon_extractor: util::parse_option_string(env::var("LOCAL_ICON_EXTRACTOR").ok()).unwrap_or(false),
|
|
|
|
signups_allowed: util::parse_option_string(env::var("SIGNUPS_ALLOWED").ok()).unwrap_or(true),
|
2018-02-10 01:00:55 +01:00
|
|
|
password_iterations: util::parse_option_string(env::var("PASSWORD_ITERATIONS").ok()).unwrap_or(100_000),
|
2018-08-10 15:21:42 +02:00
|
|
|
show_password_hint: util::parse_option_string(env::var("SHOW_PASSWORD_HINT").ok()).unwrap_or(true),
|
|
|
|
|
2018-07-12 23:28:01 +02:00
|
|
|
domain_set: domain.is_ok(),
|
|
|
|
domain: domain.unwrap_or("http://localhost".into()),
|
2018-02-10 01:00:55 +01:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|