mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-02-03 23:00:14 -05:00
6271e2f5f3
refs: https://github.com/TryGhost/Ghost/issues/5998#issuecomment-928981043 - Starting to see more people using long form content and otherwise exceeding the 1mb internal limit - Setting it to 50mb matches Ghost-CLI's max body for nginx - It might be ideal at some point to make this configurable, but I think increasing the limit solves the problem very simply for the foreseeable future
68 lines
3.5 KiB
JavaScript
68 lines
3.5 KiB
JavaScript
const debug = require('@tryghost/debug')('members');
|
|
const {URL} = require('url');
|
|
const cors = require('cors');
|
|
const bodyParser = require('body-parser');
|
|
const express = require('../../../shared/express');
|
|
const urlUtils = require('../../../shared/url-utils');
|
|
const sentry = require('../../../shared/sentry');
|
|
const membersService = require('../../services/members');
|
|
const stripeService = require('../../services/stripe');
|
|
const middleware = membersService.middleware;
|
|
const shared = require('../shared');
|
|
const labs = require('../../../shared/labs');
|
|
const errorHandler = require('@tryghost/mw-error-handler');
|
|
|
|
module.exports = function setupMembersApp() {
|
|
debug('Members App setup start');
|
|
const membersApp = express('members');
|
|
|
|
// Members API shouldn't be cached
|
|
membersApp.use(shared.middleware.cacheControl('private'));
|
|
|
|
// Support CORS for requests from the frontend
|
|
const siteUrl = new URL(urlUtils.getSiteUrl());
|
|
membersApp.use(cors(siteUrl.origin));
|
|
|
|
// Currently global handling for signing in with ?token= magiclinks
|
|
membersApp.use(middleware.createSessionFromMagicLink);
|
|
|
|
// Routing
|
|
|
|
// Webhooks
|
|
membersApp.post('/webhooks/stripe', bodyParser.raw({type: 'application/json'}), stripeService.webhookController.handle.bind(stripeService.webhookController));
|
|
|
|
// Initializes members specific routes as well as assigns members specific data to the req/res objects
|
|
// We don't want to add global bodyParser middleware as that interfers with stripe webhook requests on - `/webhooks`.
|
|
|
|
// Manage newsletter subscription via unsubscribe link
|
|
membersApp.get('/api/member/newsletters', middleware.getMemberNewsletters);
|
|
membersApp.put('/api/member/newsletters', bodyParser.json({limit: '50mb'}), middleware.updateMemberNewsletters);
|
|
|
|
// Get and update member data
|
|
membersApp.get('/api/member', middleware.getMemberData);
|
|
membersApp.put('/api/member', bodyParser.json({limit: '50mb'}), middleware.updateMemberData);
|
|
membersApp.post('/api/member/email', bodyParser.json({limit: '50mb'}), (req, res) => membersService.api.middleware.updateEmailAddress(req, res));
|
|
|
|
// Manage session
|
|
membersApp.get('/api/session', middleware.getIdentityToken);
|
|
membersApp.delete('/api/session', middleware.deleteSession);
|
|
|
|
// NOTE: this is wrapped in a function to ensure we always go via the getter
|
|
membersApp.post('/api/send-magic-link', bodyParser.json(), shared.middleware.brute.membersAuth, (req, res, next) => membersService.api.middleware.sendMagicLink(req, res, next));
|
|
membersApp.post('/api/create-stripe-checkout-session', (req, res, next) => membersService.api.middleware.createCheckoutSession(req, res, next));
|
|
membersApp.post('/api/create-stripe-update-session', (req, res, next) => membersService.api.middleware.createCheckoutSetupSession(req, res, next));
|
|
membersApp.put('/api/subscriptions/:id', (req, res, next) => membersService.api.middleware.updateSubscription(req, res, next));
|
|
membersApp.post('/api/events', labs.enabledMiddleware('membersActivity'), middleware.loadMemberSession, (req, res, next) => membersService.api.middleware.createEvents(req, res, next));
|
|
|
|
// API error handling
|
|
membersApp.use('/api', errorHandler.resourceNotFound);
|
|
membersApp.use('/api', errorHandler.handleJSONResponse(sentry));
|
|
|
|
// Webhook error handling
|
|
membersApp.use('/webhooks', errorHandler.resourceNotFound);
|
|
membersApp.use('/webhooks', errorHandler.handleJSONResponse(sentry));
|
|
|
|
debug('Members App setup end');
|
|
|
|
return membersApp;
|
|
};
|