127b46aef8
- Periodically log github auth information
- Tokens are hashed which reduces the security risk inherent in the logs
- A consistent hash is used so tokens can be correlated across the three data structures and across the three servers
- Add an admin endpoint for github auth information
- Tokens are returned as-is to enable troubleshooting (e.g. comparing our reqRemaining to github’s)
59 lines
1.4 KiB
JavaScript
59 lines
1.4 KiB
JavaScript
'use strict';
|
|
|
|
// This file should only be required by server.js. To simplify testing, config
|
|
// should be injected into other components needing it.
|
|
|
|
const url = require('url');
|
|
const envFlag = require('node-env-flag');
|
|
|
|
function envArray(envVar, defaultValue, delimiter) {
|
|
delimiter = delimiter || ',';
|
|
if (envVar) {
|
|
return envVar.split(delimiter);
|
|
} else {
|
|
return defaultValue;
|
|
}
|
|
}
|
|
|
|
const isSecure = envFlag(process.env.HTTPS, false);
|
|
const port = +process.env.PORT || +process.argv[2] || (isSecure ? 443 : 80);
|
|
const address = process.env.BIND_ADDRESS || process.argv[3] || '::';
|
|
const baseUri = url.format({
|
|
protocol: isSecure ? 'https' : 'http',
|
|
hostname: address,
|
|
port,
|
|
pathname: '/',
|
|
});
|
|
|
|
// The base URI provides a suitable value for development. Production should
|
|
// configure this.
|
|
const allowedOrigin = envArray(process.env.ALLOWED_ORIGIN, baseUri.replace(/\/$/, ''), ',');
|
|
|
|
const config = {
|
|
bind: {
|
|
port,
|
|
address,
|
|
},
|
|
ssl: {
|
|
isSecure,
|
|
key: process.env.HTTPS_KEY,
|
|
cert: process.env.HTTPS_CRT,
|
|
},
|
|
baseUri,
|
|
redirectUri: process.env.REDIRECT_URI || process.env.INFOSITE,
|
|
cors: {
|
|
allowedOrigin,
|
|
},
|
|
services: {
|
|
github: {
|
|
baseUri: process.env.GITHUB_URL || 'https://api.github.com',
|
|
debug: {
|
|
enabled: envFlag(process.env.GITHUB_DEBUG_ENABLED, true),
|
|
intervalSeconds: process.env.GITHUB_DEBUG_INTERVAL_SECONDS || 300,
|
|
},
|
|
},
|
|
},
|
|
};
|
|
|
|
module.exports = config;
|