OpenDroneMap-NodeODM/libs/auth/TokenIpAuth.js

/* 
NodeODM App and REST API to access ODM. 
Copyright (C) 2018 Node-OpenDroneMap Contributors

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU Affero General Public License
along with this program.  If not, see <http://www.gnu.org/licenses/>.
*/
const TokenAuthBase = require("./TokenAuthBase");

module.exports = class TokenIpAuth extends TokenAuthBase {
    // @param token {String} token to use for authentication
    // @param authorizedIps {Array} authorizedIps to use for authentication
    
    constructor(token, authorizedIps) {
        super(token);

        this.token = token;
        this.authorizedIps = authorizedIps;
    }

    validateToken(token, cb) {
        if (this.token === token) {
            return cb(null, true);
        } else {
            cb(new Error("token does not match."), false);
        }
    }

    validateIp(ip, cb) {
        if (this.authorizedIps.indexOf(ip) !== -1) return cb(null, true)
        else cb(new Error('IP is not one of authorized IPs.', false))
    }

    getMiddleware() {
        return (req, res, next) => {
            this.validateToken(req.query.token, (err, valid) => {
                if (valid) {
                    this.validateIp(req.connection.remoteAddress, (err, valid) => {
                        if (valid) next();
                        else {
                            res.json({
                                error: "Invalid authentication IP: " + err.message,
                            });
                        }
                    });
                }
                else {
                    res.json({
                        error: "Invalid authentication token: " + err.message,
                    });
                }
            });
        };
    }
};