adding

packages/server/_bootstrap.js

@@ -12,7 +12,11 @@ const server = fastify()
 // adding eventEmitter
 server.decorate('eventEmitter', new EventEmitter())
 
-// adding xmpp
+/**
+ *  add xmpp
+ *
+ */
+
 import xmpp from './plugins/xmpp.js'
 
 server.register(xmpp, {
@@ -23,6 +27,43 @@ server.register(xmpp, {
     to: process.env.XMPP_TO
 })
 
+/**
+ *  add helmet
+ *
+ */
+
+import helmet from '@fastify/helmet'
+ 
+server.register(
+    helmet, { 
+        referrerPolicy: {
+            policy: ['origin']
+        }
+    }
+)
+
+/**
+ *  add rateLimit
+ *
+ */
+
+import rateLimit from '@fastify/rate-limit'
+
+const rateLimitSettings = {
+    max: 100,
+    timeWindow: 60000
+}
+
+if (process.env.APP_RATE_LIMIT_MAX) {
+    rateLimitSettings.max = process.env.APP_RATE_LIMIT_MAX
+}
+
+if (process.env.APP_RATE_LIMIT_TIMEWINDOW) {
+    rateLimitSettings.timeWindow = process.env.APP_RATE_LIMIT_TIMEWINDOW
+}
+
+server.register(rateLimit, rateLimitSettings)
+
 /**
  *  add routes
  *

packages/server/handlers/parser.js

@@ -0,0 +1,35 @@
+import * as DOMPurify from 'dompurify'
+
+/**
+ *
+ *  handle parser
+ *
+ *
+ *  @author Björn Hase <me@herr-hase.wtf>
+ *  @license http://opensource.org/licenses/MIT The MIT License
+ *  @link https://gitea.node001.net/HerrHase/super-fastify-directus.git
+ *
+ */
+
+async function parserHandler(request, response) {
+
+    // getting allowed parsers from .env as array
+    const allowedParsers = process.env.APP_API_ALLOWED_PARSERS.split(',')
+
+    // getting name from request 
+    const parserName = DOMPurify.sanitize(request.params.parser)
+
+    // if parser not found send 404
+    if (allowedParsers.indexOf(parserName) === -1) {
+        return response
+            .code(404)
+            .send()
+    }
+
+    // getting parser and set body to parser
+    const Parser = await import('./../../parsers/' + parserName + '.js')
+    
+    response.locals.parser = new Parser.default(request.body)
+}
+  
+export default parserHandler

packages/server/handlers/token.js

@@ -0,0 +1,18 @@
+/**
+ *  handle token
+ *
+ *  @author Björn Hase <me@herr-hase.wtf>
+ *  @license http://opensource.org/licenses/MIT The MIT License
+ *  @link https://gitea.node001.net/HerrHase/super-fastify-directus.git
+ *
+ */
+
+async function tokenHandler(request, token) {
+    if (request.params.token !== process.env.APP_API_TOKEN) {
+        return response
+            .code(401)
+            .send()
+    }
+}
+ 
+export default tokenHandler

packages/server/http/api/health.js

@@ -16,9 +16,9 @@ export default async function(fastify, opts)
      *  @param  {object} response
      *
      */
-    fastify.get('/v1', async function (request, reply)
+    fastify.get('/v1', async function (request, response)
     {
-        reply
+        response
             .code(200)
             .send()
     })

packages/server/http/api/webhook.js

@@ -1,3 +1,6 @@
+import tokenHandler from './../../handlers/token.js'
+import parserHandler from './../../handlers/parser.js'
+
 /**
  *  handle webhook
  *
@@ -7,8 +10,11 @@
  *
  */
 
-export default async function(fastify, opts)
-{
+export default async function(fastify, options) {
+
+    fastify.addHook('preHandler', tokenHandler)
+    fastify.addHook('preHandler', parserHandler)
+    
     /**
      *  getting post getting allowed parser class and send over xmpp
      *
@@ -16,36 +22,19 @@ export default async function(fastify, opts)
      *  @param  {object} response
      *
      */
-    fastify.post('/v1/:parser([a-zA-Z0-9]{0,255})/:token([a-zA-Z0-9])', async function (request, reply)
-    {
-        if (request.params.token !== process.env.APP_API_TOKEN) {
-            return reply
-                .code(401)
-                .send()
-        }
-
-        // getting allowed parsers from .env as array
-        const allowedParsers = process.env.APP_API_ALLOWED_PARSERS.split(',')
+    fastify.post('/v1/:parser([a-zA-Z0-9]{0,255})/:token([a-zA-Z0-9])', async function (request, response) {
 
-        if (allowedParsers.indexOf(request.params.parser) === -1) {
-            return reply
-                .code(404)
-                .send()
-        }
-
-        // getting parser and set body to parser
-        const Parser = await import('./../../parsers/' + request.params.parser + '.js')
-        const parser = new Parser.default(request.body)
-
-        const result = parser.run()
+        // getting parser from preHandler: parserHandler
+        const result = response.locals.parser.run()
 
         // send event for send xmpp
         fastify.eventEmitter.emit('send-message', {
             'message': result
         })
 
-        reply
+        response
             .code(200)
             .send()
     })
+
 }

packages/server/index.js

@@ -1,10 +1,14 @@
-import server from './bootstrap.js'
+import server from './_bootstrap.js'
 
 // let it rain
 const start = async () => {
     try {
-        await server.listen(process.env.APP_PORT)
-        console.log('Server is running on port ' + process.env.APP_PORT)
+        await server.listen({
+            port: process.env.APP_PORT
+        })
+
+        console.log('Server: start')
+        console.log('Server: running on port ' + process.env.APP_PORT)
     } catch (error) {
         console.log(error)
         process.exit(1)

packages/server/package.json

@@ -1,16 +1,18 @@
 {
     "private": true,
     "name": "server",
-    "version": "0.1.1",
+    "version": "0.1.0",
     "scripts": {
         "start": "node index.js"
     },
     "type": "module",
     "dependencies": {
-        "@xmpp/client": "^0.13.0",
+        "@fastify/helmet": "^11.0.0",
+        "@fastify/rate-limit": "^8.0.1",
+        "@xmpp/client": "^0.13.1",
+        "dompurify": "^3.0.4",
         "dotenv": "^10.0.0",
-        "fastify": "^3.24.0",
-        "fastify-formbody": "^5.2.0",
-        "isomorphic-dompurify": "^0.16.0"
+        "fastify": "^4.19.2",
+        "fastify-plugin": "^4.5.0"
     }
 }

packages/server/parsers/kuma.js

@@ -1,5 +1,5 @@
 import Parser from './parser.js'
-import DOMPurify from 'isomorphic-dompurify'
+import * as DOMPurify from 'dompurify'
 
 /**
  *  Parser for Kuma, getting only error message
@@ -9,10 +9,14 @@ import DOMPurify from 'isomorphic-dompurify'
  *  @link https://gitea.node001.net/HerrHase/tellme-bot.git
  *
  */
-class Kuma extends Parser
-{
-    parse()
-    {
+class Kuma extends Parser {
+
+    /**
+     *
+     *  
+     */
+    parse() {
+
         // check for msg and clean it
         if (this.body.msg) {
             this.message = DOMPurify.sanitize(this.body.msg)

packages/server/parsers/parser.js

@@ -7,14 +7,14 @@
  *  @link https://gitea.node001.net/HerrHase/tellme-bot.git
  *
  */
-class Parser
-{
+class Parser {
+
     /**
      *
      *
      */
-    constructor(body)
-    {
+    constructor(body) {
+
         // body from webhook
         this.body = body
 
@@ -28,8 +28,7 @@ class Parser
      *  @return string
      *
      */
-    run()
-    {
+    run() {
         this.parse()
         return this.message
     }

packages/server/parsers/text.js

@@ -1,5 +1,5 @@
 import Parser from './parser.js'
-import DOMPurify from 'isomorphic-dompurify'
+import * as DOMPurify from 'dompurify'
 
 /**
  *  Parser for "text" in Json, is used by slack
@@ -9,10 +9,14 @@ import DOMPurify from 'isomorphic-dompurify'
  *  @link https://gitea.node001.net/HerrHase/tellme-bot.git
  *
  */
-class Text extends Parser
-{
-    parse()
-    {
+class Text extends Parser {
+
+    /**
+     *
+     *
+     */
+    parse() {
+        
         // check for msg and clean it
         if (this.body.text) {
             this.message = DOMPurify.sanitize(this.body.text)

packages/server/plugins/xmpp.js

@@ -21,17 +21,22 @@ export default function (fastify, options, done) {
      */
     async function handleSendMessage(data) {
 
+        let send = false
+
         // Sends a chat message to itself
         const message = xml(
-            'message',
-            {
+            'message', {
                 type: 'chat',
                 to: options.to
             },
             xml('body', {}, data.message)
         )
 
-        await xmpp.send(message)
+        try {
+            await xmpp.send(message)
+        } catch (error) {
+            console.log(error)
+        }
     }
 
     const xmpp = client({
@@ -47,9 +52,8 @@ export default function (fastify, options, done) {
     })
 
     // handle if client goes online
-    xmpp.on('online', (address) =>
-    {
-        console.log('connected to ' + address)
+    xmpp.on('online', (address) => {
+        console.log('Xmpp: connected to ' + address)
 
         // check for event and remove it
         if (fastify.eventEmitter.listeners('send-message').length > 0) {