mirror of
https://github.com/TryGhost/Ghost.git
synced 2024-12-19 00:11:49 +03:00
61bf54ec88
refs #4172 * 🎨 Use bodyParser only where it is needed This is a pretty extreme optimisation, however in the interests of killing middleware/index.js it seemed prudent to move towards not having in there that wasn't strictly necessary 😁 We should reassess how apps do this sort of thing, but it seems pretty sane to declare bodyParsing if and only if it is necessary. * 🎨 Move all API code to API router * 🎨 Refactor API into an App, not just a router - Apps have their own rendering engines, only the frontend & the admin panel need views - The API should be JSON only, with minimal middleware - Individual sections within the API could/should be treated as Routers * 🎨 Flatten API middleware inclusion - get rid of the weird middleware object - move the api-only middleware into the middleware/api folder
42 lines
1.2 KiB
JavaScript
42 lines
1.2 KiB
JavaScript
var path = require('path'),
|
|
express = require('express'),
|
|
middleware = require('./middleware'),
|
|
bodyParser = require('body-parser'),
|
|
templates = require('../../../controllers/frontend/templates'),
|
|
setResponseContext = require('../../../controllers/frontend/context'),
|
|
privateRouter = express.Router();
|
|
|
|
function controller(req, res) {
|
|
var defaultView = path.resolve(__dirname, 'views', 'private.hbs'),
|
|
paths = templates.getActiveThemePaths(req.app.get('activeTheme')),
|
|
data = {};
|
|
|
|
if (res.error) {
|
|
data.error = res.error;
|
|
}
|
|
|
|
setResponseContext(req, res);
|
|
if (paths.hasOwnProperty('private.hbs')) {
|
|
return res.render('private', data);
|
|
} else {
|
|
return res.render(defaultView, data);
|
|
}
|
|
}
|
|
|
|
// password-protected frontend route
|
|
privateRouter.route('/')
|
|
.get(
|
|
middleware.isPrivateSessionAuth,
|
|
controller
|
|
)
|
|
.post(
|
|
bodyParser.urlencoded({extended: true}),
|
|
middleware.isPrivateSessionAuth,
|
|
middleware.spamPrevention,
|
|
middleware.authenticateProtection,
|
|
controller
|
|
);
|
|
|
|
module.exports = privateRouter;
|
|
module.exports.controller = controller;
|