server.js

var express = require('express');
var bodyParser = require('body-parser');
var morgan = require('morgan');
var radius = require('radius');
var dgram = require('dgram');
var hat = require('hat');
var mongoose = require('mongoose');
var session = require('express-session');
var MongoStore = require('connect-mongo')(session);
var db = require('./db');
var util = require('./util');
var portPool = require('./port-pool');
var config = require('./config');

portPool.initialize();

mongoose.connect('mongodb://localhost/radius');

var app = express();
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({ extended: false }));
// app.use(morgan('combined'));
app.use('/static', express.static(__dirname + '/static'));
app.use('/bower_components', express.static(__dirname + '/bower_components'));
app.set('view engine', 'ejs');
app.use(session({
	secret: 'keyboard cat',
	store: new MongoStore({
		db: 'radius'
	}),
	resave: true,
	saveUninitialized: true
}));
app.disable('x-powered-by');

app.get('/ping', function(req, res){
	res.send('Pong');
});

app.get('/login', function(req, res){
	var vals = {
		gw_address: req.query.gw_address,
		gw_port: req.query.gw_port
	};
	if(req.query['msg'] === 'denied') vals['msg'] = '使用者名稱或密碼錯誤。';
	if(req.query['msg'] === 'blank')  vals['msg'] = '所有欄位皆必須填寫！';
	res.render('login', vals);
});

app.post('/validate', function(req, res){
	if(!(req.body.username && req.body.password)){
		res.redirect('/login?gw_address=' + req.body.gw_address + '&gw_port=' + req.body.gw_port + '&msg=blank');
		return;
	}
	
	if(!config.test){
		var packet = {
			code: 'Access-Request',
			secret: config.secret,
			identifier: 0,
			attributes: [
				[ 'User-Name', req.body.username ],
				[ 'User-Password', req.body.password ]
			]
		};

		var client = dgram.createSocket('udp4');
		var bind_port = portPool.request();
		var sent_packet = null;

		client.bind(bind_port);
		client.on('message', function(msg, rinfo){
			var response = radius.decode({ packet: msg, secret: config.secret });
			var valid_response = radius.verify_response({
				response: msg,
				request: sent_packet.raw_packet,
				secret: sent_packet.secret
			});
			var ip = req.ip;
			if(valid_response){
				var token = hat();
				if(response.code !== 'Access-Accept'){
					res.redirect('/login?gw_address=' + req.body.gw_address + '&gw_port=' + req.body.gw_port + '&msg=denied');
				} else {
					console.log('[login] User ' + req.body.username + ' successfully logged in');
					var tokObj = new db.Token({
						token: token,
						ip: req.ip,
						username: req.body.username,
						time: new Date()
					});
					tokObj.save(function(err){
						res.redirect('http://' + req.body.gw_address + ':' + req.body.gw_port + '/wifidog/auth?token=' + token);
					});
				}
			} else {
				res.send('500 Internal Server Error', 500);
				console.log('[login] Invalid RADIUS response received');
			}
			client.close();
			portPool.free(bind_port);
		});
		var encoded = radius.encode(packet);
		sent_packet = {
			raw_packet: encoded,
			secret: packet.secret
		};
		client.send(encoded, 0, encoded.length, config.port, config.host);
	} else {
		var token = hat();
		console.log('[login-test] User ' + req.body.username + ' successfully logged in');
		var tokObj = new db.Token({
			token: token,
			ip: req.ip,
			username: req.body.username,
			time: new Date()
		});
		tokObj.save(function(err){
			res.send('OK, token: ' + token);
		});
	}
});

app.get('/auth', function(req, res){
	if(req.query.stage === 'counters'){
		res.send('Auth: 1');
		return;
	}
	db.Token.findOne({ token: req.query.token }, function(err, token){
		if(!token){
			res.send('Auth: 0');
		} else {
			if(token.ip === req.query.ip){
				token.mac = req.query.mac;
				token.save(function(err){
					res.send('Auth: 1');
					console.log('[auth] ' + req.query.ip + ' authenticate success');
				});
			} else {
				res.send('Auth: 0');
				console.log('[auth] ' + req.query.ip + ' authenticate failure');
				console.log('[auth]   |- MAC  : ' + req.query.mac);
				console.log('[auth]   |- token: ' + req.query.token);
			}
		}
	});
});

app.get('/portal', function(req, res){
	res.redirect('http://www.hs.ntnu.edu.tw/');
});

app.get('/manage/login', function(req, res){
	res.render('manage_login');
});

app.get('/manage/logout', function(req, res){
	req.session.destroy();
	res.redirect('/manage');
});

app.get('/manage', function(req, res){
	res.redirect('/manage/home');
});

app.post('/manage/login', function(req, res){
	var username = req.body.username;
	var password = util.hash(req.body.password);
	db.User.findOne({ username: username, password: password }, function(err, user){
		if(!user){
			res.redirect('/manage/login?msg=denied');
		} else {
			req.session.username = req.body.username;
			user.lastLogin = new Date();
			user.lastLoginIp = req.ip;
			user.save(function(err){
				res.redirect('/manage/home');
			});
		}
	});
});

app.get('/manage/home', util.checkLogin, function(req, res){
	db.Token.find({}).sort('-time').limit(20).exec(function(err, tokens){
		res.render('home', { recent: tokens, pageDashboard: true });
	});
});

app.get('/manage/account', util.checkLogin, function(req, res){
	db.User.find({}).sort('username').exec(function(err, users){
		res.render('account', { users: users, pageAccount: true });
	});
});

app.get('/manage/account/add', util.checkLogin, function(req, res){
	res.render('account_add', { pageAccount: true });
});

app.post('/manage/account/add', util.checkLogin, function(req, res){
	if(req.body.username && req.body.password){
		if(req.body.password !== req.body.passwordRepeat){
			res.redirect('/manage/account/add?msg=repeat');
			return;
		}
		var username = req.body.username;
		var password = req.body.password;
		db.User.findOne({ username: username }, function(err, user){
			if(user){
				res.redirect('/manage/account/add?msg=exist');
				return;
			}
			var user = new db.User({
				username: username,
				password: util.hash(password)
			});
			user.save(function(err){
				res.redirect('/manage/account?msg=add');
			});
		});
	} else {
		res.redirect('/manage/account/add?msg=blank');
	}
});

app.get('/manage/account/delete', util.checkLogin, function(req, res){
	if(!req.query.id){
		res.redirect('/manage/account');
		return;
	}
	var id = req.query.id;
	db.User.remove({ _id: id }, function(err){
		res.redirect('/manage/account?msg=delete');
	});
});

app.get('/manage/account/edit', util.checkLogin, function(req, res){
	if(!req.query.id){
		res.redirect('/manage/account');
		return;
	}
	var id = req.query.id;
	db.User.findOne({ _id: id }, function(err, user){
		if(!user){
			res.redirect('/manage/account');
			return;
		}
		res.render('account_edit', { pageAccount: true, user: user });
	});
});

app.post('/manage/account/edit', util.checkLogin, function(req, res){
	if(!req.body.id || !req.body.password || !req.body.passwordRepeat){
		res.redirect('/manage/account');
		return;
	}
	if(req.body.password !== req.body.passwordRepeat){
		res.redirect('/manage/account/edit?id=' + req.body.id + '&msg=repeat');
		return;
	}
	var id = req.body.id;
	db.User.findOne({ _id: id }, function(err, user){
		if(!user){
			res.redirect('/manage/account');
			return;
		}
		user.password = util.hash(req.body.password);
		user.save(function(err){
			res.redirect('/manage/account?msg=edit');
		});
	});
});

app.get('/manage/search', util.checkLogin, function(req, res){
	res.render('search', { pageSearch: true });
});

app.use(function(req, res){
	res.send('Not found.', 404);
});

var server = app.listen(3000, function() {
	console.log('Listening on port %d', server.address().port);
});