/*!
|
* serve-static
|
* Copyright(c) 2010 Sencha Inc.
|
* Copyright(c) 2011 TJ Holowaychuk
|
* Copyright(c) 2014-2016 Douglas Christopher Wilson
|
* MIT Licensed
|
*/
|
|
'use strict'
|
|
/**
|
* Module dependencies.
|
* @private
|
*/
|
|
var encodeUrl = require('encodeurl')
|
var escapeHtml = require('escape-html')
|
var parseUrl = require('parseurl')
|
var resolve = require('path').resolve
|
var send = require('send')
|
var url = require('url')
|
|
/**
|
* Module exports.
|
* @public
|
*/
|
|
module.exports = serveStatic
|
module.exports.mime = send.mime
|
|
/**
|
* @param {string} root
|
* @param {object} [options]
|
* @return {function}
|
* @public
|
*/
|
|
function serveStatic (root, options) {
|
if (!root) {
|
throw new TypeError('root path required')
|
}
|
|
if (typeof root !== 'string') {
|
throw new TypeError('root path must be a string')
|
}
|
|
// copy options object
|
var opts = Object.create(options || null)
|
|
// fall-though
|
var fallthrough = opts.fallthrough !== false
|
|
// default redirect
|
var redirect = opts.redirect !== false
|
|
// headers listener
|
var setHeaders = opts.setHeaders
|
|
if (setHeaders && typeof setHeaders !== 'function') {
|
throw new TypeError('option setHeaders must be function')
|
}
|
|
// setup options for send
|
opts.maxage = opts.maxage || opts.maxAge || 0
|
opts.root = resolve(root)
|
|
// construct directory listener
|
var onDirectory = redirect
|
? createRedirectDirectoryListener()
|
: createNotFoundDirectoryListener()
|
|
return function serveStatic (req, res, next) {
|
if (req.method !== 'GET' && req.method !== 'HEAD') {
|
if (fallthrough) {
|
return next()
|
}
|
|
// method not allowed
|
res.statusCode = 405
|
res.setHeader('Allow', 'GET, HEAD')
|
res.setHeader('Content-Length', '0')
|
res.end()
|
return
|
}
|
|
var forwardError = !fallthrough
|
var originalUrl = parseUrl.original(req)
|
var path = parseUrl(req).pathname
|
|
// make sure redirect occurs at mount
|
if (path === '/' && originalUrl.pathname.substr(-1) !== '/') {
|
path = ''
|
}
|
|
// create send stream
|
var stream = send(req, path, opts)
|
|
// add directory handler
|
stream.on('directory', onDirectory)
|
|
// add headers listener
|
if (setHeaders) {
|
stream.on('headers', setHeaders)
|
}
|
|
// add file listener for fallthrough
|
if (fallthrough) {
|
stream.on('file', function onFile () {
|
// once file is determined, always forward error
|
forwardError = true
|
})
|
}
|
|
// forward errors
|
stream.on('error', function error (err) {
|
if (forwardError || !(err.statusCode < 500)) {
|
next(err)
|
return
|
}
|
|
next()
|
})
|
|
// pipe
|
stream.pipe(res)
|
}
|
}
|
|
/**
|
* Collapse all leading slashes into a single slash
|
* @private
|
*/
|
function collapseLeadingSlashes (str) {
|
for (var i = 0; i < str.length; i++) {
|
if (str.charCodeAt(i) !== 0x2f /* / */) {
|
break
|
}
|
}
|
|
return i > 1
|
? '/' + str.substr(i)
|
: str
|
}
|
|
/**
|
* Create a minimal HTML document.
|
*
|
* @param {string} title
|
* @param {string} body
|
* @private
|
*/
|
|
function createHtmlDocument (title, body) {
|
return '<!DOCTYPE html>\n' +
|
'<html lang="en">\n' +
|
'<head>\n' +
|
'<meta charset="utf-8">\n' +
|
'<title>' + title + '</title>\n' +
|
'</head>\n' +
|
'<body>\n' +
|
'<pre>' + body + '</pre>\n' +
|
'</body>\n' +
|
'</html>\n'
|
}
|
|
/**
|
* Create a directory listener that just 404s.
|
* @private
|
*/
|
|
function createNotFoundDirectoryListener () {
|
return function notFound () {
|
this.error(404)
|
}
|
}
|
|
/**
|
* Create a directory listener that performs a redirect.
|
* @private
|
*/
|
|
function createRedirectDirectoryListener () {
|
return function redirect (res) {
|
if (this.hasTrailingSlash()) {
|
this.error(404)
|
return
|
}
|
|
// get original URL
|
var originalUrl = parseUrl.original(this.req)
|
|
// append trailing slash
|
originalUrl.path = null
|
originalUrl.pathname = collapseLeadingSlashes(originalUrl.pathname + '/')
|
|
// reformat the URL
|
var loc = encodeUrl(url.format(originalUrl))
|
var doc = createHtmlDocument('Redirecting', 'Redirecting to <a href="' + escapeHtml(loc) + '">' +
|
escapeHtml(loc) + '</a>')
|
|
// send redirect response
|
res.statusCode = 301
|
res.setHeader('Content-Type', 'text/html; charset=UTF-8')
|
res.setHeader('Content-Length', Buffer.byteLength(doc))
|
res.setHeader('Content-Security-Policy', "default-src 'none'")
|
res.setHeader('X-Content-Type-Options', 'nosniff')
|
res.setHeader('Location', loc)
|
res.end(doc)
|
}
|
}
|
