https-server.js

"use strict";

var fs = require('fs');
var https = require('https');
var express = require('express');
var morgan = require('morgan');
var cookieParser = require('cookie-parser');

var basicAuth = require('basic-auth');

var auth = function (req, res, next) {
    function unauthorized(res) {
        res.set('WWW-Authenticate', 'Basic realm=Authorization Required');
        return res.sendStaus(401);
    };

    var user = basicAuth(req);

    if (!user || !user.name || !user.pass) {
        console.log('https client NOT authorised.');
        return unauthorized(res);
    };

    if (user.name === 'foo' && user.pass === 'bar') {
        console.log("https client authorised.");
        return next();
    } else {
        console.log('https client NOT authorised.');
        return unauthorized(res);
    };
};


var options = {
    ca: [
          fs.readFileSync('ssl/root-cert.pem'),
          fs.readFileSync('ssl/ca1-cert.pem'),
          fs.readFileSync('ssl/ca2-cert.pem'),
          fs.readFileSync('ssl/ca3-cert.pem'),
          fs.readFileSync('ssl/ca4-cert.pem')
        ],
    key: fs.readFileSync('ssl/agent1-key.pem'),
    cert: fs.readFileSync('ssl/agent1-cert.pem'),
    requestCert: true,
    rejectUnauthorized: false 
};

// A secure web server.
// Test with:
//  $ curl --cacert keys/ca1-cert.pem  https://agent1:8081/
// Or if client authentication is required (requestCert:true)
//  $ curl -v -s --key-type pem --key keys/agent2-key.pem --cert keys/agent2-cert.pem --cacert keys/ca1-cert.pem https://agent1:8081


var app = express();
var server = https.createServer(options, app);
server.listen(8443);

app.use(morgan('combined'));

app.use(cookieParser());

/*
// Authenticator
app.use(express.basicAuth(function(user, pass, callback) {
    console.log("Login attempt:", user, pass);
    var result = (user === 'admin' && pass === 'password');
    callback(null / * error * /, result);
}));
*/


app.get('/', auth, function (req, res) {
    res.sendStatus(200, 'Authenticated');
});

/*
app.get('/', function(req,res) {
    console.log("Got cookie: ", req.cookies);

    res.cookie("myCookie", "777", { maxAge: 900000, httpOnly: true });

    if (req.client.authorized) {
        console.log("https client authorised.");
        res.writeHead(200, {"Content-Type": "application/text"});
        res.end('The server has authorized your client certificate.');
    } else {
        console.log('https client NOT authorised.');
        res.writeHead(401, {'WWW-Authenticate': "OpenID realm='My Realm' location='https:/'"});
        res.end('The server has NOT authorized your client certificate.');
        console.log(req.client.getPeerCertificate());
    }
});
*/

// Secure web sockets
var io = require('socket.io').listen(server);
io.set('log level', 3);

var chat = io
    .of('/chat')
    .on('connection', function (socket) {
        console.log('chat socket open.');
        // Messages on a chat socket only go to that one chat connection
        socket.emit('chat message', 'Chat, chat..');
    // Messages on chat will go to every chat connection.
    chat.emit('chat message', 'Hi every body!');
});

var news = io
    .of('/news')
    .on('connection', function (socket) {
        console.log('news socket open.');
        socket.emit('item', 'Propeller II release iminent');
});