fileServer.js

var express = require("express");
var multer = require("multer");
var bodyParser = require("body-parser");
var fs = require("fs-extra");
var path = require("path");
var dateTime = require("node-datetime");
var session = require("express-session");
var bcrypt = require("bcrypt");

function getDateTime() {
  var dt = dateTime.create();
  var formatted = dt.format("Y-m-d H:M:S");
  return formatted;
}

var _filename = "";
var listFiles = [];

fs.ensureDirSync("./Share");
fs.ensureDirSync("./Record");

// Initialize users database
var usersFile = "./users.json";
if (!fs.existsSync(usersFile)) {
  // Create default admin user with password "admin"
  var defaultPassword = bcrypt.hashSync("admin", 10);
  var defaultUsers = [
    {
      username: "admin",
      password: defaultPassword,
      role: "admin"
    }
  ];
  fs.writeFileSync(usersFile, JSON.stringify(defaultUsers, null, 2));
  console.log("Default admin user created: username='admin', password='admin'");
}

// Helper functions for user management
function getUsers() {
  if (fs.existsSync(usersFile)) {
    return JSON.parse(fs.readFileSync(usersFile, "utf8"));
  }
  return [];
}

function saveUsers(users) {
  fs.writeFileSync(usersFile, JSON.stringify(users, null, 2));
}

function findUser(username) {
  var users = getUsers();
  return users.find(function(u) { return u.username === username; });
}

// Middleware to check authentication
function requireAuth(req, res, next) {
  if (req.session && req.session.user) {
    return next();
  }
  // If it's an API request (JSON), return 401, otherwise redirect
  if (req.headers.accept && req.headers.accept.indexOf('application/json') !== -1) {
    return res.status(401).json({ error: 'Unauthorized' });
  }
  res.redirect("/login");
}

// Middleware to check admin role
function requireAdmin(req, res, next) {
  if (req.session && req.session.user && req.session.user.role === "admin") {
    return next();
  }
  res.status(403).send("Access denied. Admin privileges required.");
}

var storage = multer.diskStorage({
  destination: function (req, file, callback) {
    callback(null, "./Share");
  },
  filename: function (req, file, callback) {
    _filename = file.originalname;
    callback(null, _filename);
  },
});
var upload = multer({ storage: storage }).array("fileUploader", 1);

const app = express();
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({ extended: true }));
app.use(session({
  secret: "file-server-secret-key-change-in-production",
  resave: false,
  saveUninitialized: false,
  cookie: { secure: false, maxAge: 24 * 60 * 60 * 1000 } // 24 hours
}));
app.use(express.static(__dirname + "/Share"));
app.use(express.static(__dirname + "/Record"));
app.use(express.static(__dirname + "/styles"));
app.use(express.static(__dirname + "/scripts"));
app.set("view engine", "ejs");
app.set("views", path.join(__dirname, "views"));

// Login page
app.get("/login", function (req, res) {
  if (req.session && req.session.user) {
    return res.redirect("/");
  }
  res.render("login.ejs", { error: "" });
});

// Register page
app.get("/register", function (req, res) {
  if (req.session && req.session.user) {
    return res.redirect("/");
  }
  res.render("register.ejs", { error: "" });
});

// Login handler
app.post("/login", function (req, res) {
  var username = req.body.username;
  var password = req.body.password;

  if (!username || !password) {
    return res.render("login.ejs", { error: "Username and password are required" });
  }

  var user = findUser(username);
  if (!user) {
    return res.render("login.ejs", { error: "Invalid username or password" });
  }

  if (bcrypt.compareSync(password, user.password)) {
    req.session.user = {
      username: user.username,
      role: user.role
    };
    res.redirect("/");
  } else {
    res.render("login.ejs", { error: "Invalid username or password" });
  }
});

// Register handler
app.post("/register", function (req, res) {
  var username = req.body.username;
  var password = req.body.password;

  if (!username || !password) {
    return res.render("register.ejs", { error: "Username and password are required" });
  }

  if (username.length < 3) {
    return res.render("register.ejs", { error: "Username must be at least 3 characters" });
  }

  if (password.length < 4) {
    return res.render("register.ejs", { error: "Password must be at least 4 characters" });
  }

  var users = getUsers();
  if (users.find(function(u) { return u.username === username; })) {
    return res.render("register.ejs", { error: "Username already exists" });
  }

  var hashedPassword = bcrypt.hashSync(password, 10);
  users.push({
    username: username,
    password: hashedPassword,
    role: "user"
  });
  saveUsers(users);

  req.session.user = {
    username: username,
    role: "user"
  };
  res.redirect("/");
});

// Logout handler
app.get("/logout", function (req, res) {
  req.session.destroy();
  res.redirect("/login");
});

// Main page - requires authentication
app.get("/", requireAuth, function (req, res) {
  res.render("index.ejs", { 
    _result: "",
    user: req.session.user
  });
});

// Files list - requires authentication (available to all authenticated users: admin and user)
app.get("/files", requireAuth, function (req, res) {
  listFiles = [];
  try {
    var files = fs.readdirSync("./Share");
    files.forEach(function(file) {
      // Only include files, not directories
      var filePath = path.join("./Share", file);
      if (fs.statSync(filePath).isFile()) {
        listFiles.push(file);
      }
    });
    console.log("User", req.session.user.username, "(" + req.session.user.role + ") requested files. Returning", listFiles.length, "files");
  } catch (err) {
    console.error("Error reading files:", err);
    listFiles = [];
  }
  res.json(listFiles);
});

// Upload - requires admin
app.post("/upload", requireAdmin, function (req, res) {
  upload(req, res, function (err) {
    if (err) {
      return res.render('index.ejs', { 
        _result: "Error: Something went wrong!",
        user: req.session.user
      });
    } else {
      res.render('index.ejs', { 
        _result: "Files uploaded successfully!",
        user: req.session.user
      });
    }
  });
});

// Delete - requires admin
app.get("/delete", requireAdmin, function (req, res) {
  try {
    fs.unlinkSync("./Share/" + req.query._file);
    res.redirect("/");
  } catch (err) {
    res.redirect("/");
  }
});

// Chat messages (keeping for compatibility)
app.post("/sendMsg", function (req, res) {
  var dateTime = getDateTime();
  var fileName = __dirname + "/Record/" + dateTime.split(" ")[0];
  fs.ensureFileSync(fileName);
  fs.appendFileSync(
    fileName,
    `${new Date()}:F@!M!@S:${req.body.chatname}:F@!M!@S:${
      req.body.msg
    }\nF@!!@S\n`
  );
  res.redirect("/");
});

app.get("/getMsgs", function (req, res) {
  listMsgs = [];
  var dateTime = getDateTime();
  var fileName = __dirname + "/Record/" + dateTime.split(" ")[0];
  if (fs.existsSync(fileName)) {
    var data = fs.readFileSync(fileName).toString().split("\nF@!!@S\n");
    data.map((msg) => {
      var splitMsg = msg.split(":F@!M!@S:");
      if (new Date() - new Date(splitMsg[0]) < 1800000) {
        listMsgs.push(
          `${splitMsg[1]}:F@!M!@S:${splitMsg[2]}:F@!M!@S:${new Date(
            splitMsg[0]
          ).getHours()}:${new Date(splitMsg[0]).getMinutes()}:${new Date(
            splitMsg[0]
          ).getSeconds()}`
        );
      }
    });
  }
  res.json(listMsgs);
});

app.listen(process.argv[2] || 3000, function () {
  console.log("Node server is running..");
});