@nodesecure/cli/src/commands/http.js

Node.js security CLI

// Import Node.js Dependencies
import fs from "node:fs";
import path from "node:path";
import crypto from "node:crypto";

// Import Third-party Dependencies
import * as SemVer from "semver";
import kleur from "kleur";
import * as i18n from "@nodesecure/i18n";

// Import Internal Dependencies
import { buildServer } from "../http-server/index.js";
import { appCache } from "../cache.js";

// CONSTANTS
const kRequiredScannerRange = ">=5.1.0";

export async function start(
  payloadFileBasename = "nsecure-result.json",
  options = {}
) {
  const port = Number(options.port);
  const freshStart = Boolean(options.f);
  const enableDeveloperMode = Boolean(options.developer);

  const fileExtension = path.extname(payloadFileBasename);
  if (fileExtension !== ".json" && fileExtension !== "") {
    throw new Error("You must provide a JSON file (scanner payload) to open");
  }

  const dataFilePath = path.join(
    process.cwd(),
    fileExtension === "" ? `${payloadFileBasename}.json` : payloadFileBasename
  );
  const dataFilePathExists = fs.existsSync(dataFilePath);
  const runFromPayload = dataFilePathExists && freshStart === false;
  if (runFromPayload) {
    assertScannerVersion(dataFilePath);
  }
  else {
    appCache.prefix = crypto.randomBytes(4).toString("hex");
  }

  const httpServer = buildServer(dataFilePath, {
    port: Number.isNaN(port) ? 0 : port,
    hotReload: enableDeveloperMode,
    runFromPayload
  });

  for (const eventName of ["SIGINT", "SIGTERM"]) {
    process.on(eventName, () => httpServer.server.close());
  }
}

function assertScannerVersion(
  dataFilePath
) {
  const rawStr = fs.readFileSync(dataFilePath, "utf-8");
  const { scannerVersion } = JSON.parse(rawStr);

  if (!SemVer.satisfies(scannerVersion, kRequiredScannerRange)) {
    const error = i18n.getTokenSync(
      "cli.startHttp.invalidScannerVersion",
      kleur.yellow(scannerVersion),
      kleur.yellow(kRequiredScannerRange)
    );
    const regenerate = i18n.getTokenSync("cli.startHttp.regenerate");

    console.log(" > " + path.basename(dataFilePath));
    console.log(" > " + kleur.red().bold(error));
    console.log(` > ${regenerate}`);
    console.log();

    process.exit(0);
  }
}