Simon
7d464c21eb
- VAPID-based push via web-push package - push_subscriptions table: endpoint + keys per user (upsert on conflict) - GET /api/push/vapid-key — public key for subscribe flow - POST/DELETE /api/push/subscribe — store/remove subscription - POST /api/push/test — manual test notification - Hourly scheduler: notifies users day before homework due + countdown expires - SW: push event handler shows notification; notificationclick opens /app - Settings: Push section with enable/disable/test buttons, auto-detects browser support and VAPID availability
59 lines
1.8 KiB
JavaScript
59 lines
1.8 KiB
JavaScript
require('dotenv').config();
|
|
const express = require('express');
|
|
const cookieParser = require('cookie-parser');
|
|
const helmet = require('helmet');
|
|
const path = require('path');
|
|
const routes = require('./src/routes');
|
|
const { router: filesRouter } = require('./src/files');
|
|
const teacherRouter = require('./src/teacher');
|
|
const { startNotificationScheduler } = require('./src/push');
|
|
|
|
if (!process.env.JWT_SECRET) {
|
|
console.error('FATAL: JWT_SECRET environment variable is not set.');
|
|
process.exit(1);
|
|
}
|
|
|
|
const app = express();
|
|
const PORT = 3010;
|
|
|
|
app.use(helmet({
|
|
contentSecurityPolicy: {
|
|
directives: {
|
|
defaultSrc: ["'self'"],
|
|
scriptSrc: ["'self'", "'unsafe-inline'", 'unpkg.com'],
|
|
scriptSrcAttr: ["'unsafe-inline'"],
|
|
styleSrc: ["'self'", "'unsafe-inline'", 'https://fonts.googleapis.com'],
|
|
fontSrc: ["'self'", 'https://fonts.gstatic.com'],
|
|
imgSrc: ["'self'", 'data:'],
|
|
connectSrc: ["'self'", 'https://api.open-meteo.com'],
|
|
workerSrc: ["'self'"],
|
|
frameAncestors: ["'none'"],
|
|
objectSrc: ["'none'"],
|
|
},
|
|
},
|
|
}));
|
|
app.use(express.json());
|
|
app.use(cookieParser());
|
|
app.get('/sw.js', (req, res, next) => {
|
|
res.setHeader('Cache-Control', 'no-cache');
|
|
next();
|
|
});
|
|
app.use(express.static(path.join(__dirname, 'public')));
|
|
app.use('/api', routes);
|
|
app.use('/api/files', filesRouter);
|
|
app.use('/api/teacher', teacherRouter);
|
|
|
|
const html = f => (req, res) => res.sendFile(path.join(__dirname, 'public', f));
|
|
|
|
app.get('/login', html('login.html'));
|
|
app.get('/admin', html('admin.html'));
|
|
app.get('/datenschutz', html('datenschutz.html'));
|
|
app.get('/app', html('app.html'));
|
|
app.get('/reset-password', html('reset-password.html'));
|
|
app.get('/{*path}', html('index.html'));
|
|
|
|
app.listen(PORT, '127.0.0.1', () => {
|
|
console.log(`info1 läuft auf :${PORT}`);
|
|
startNotificationScheduler();
|
|
});
|