server.js

/*
 * to run this server, use the command `npm run start`
 * IMPLEMENTATION IS INSECURE, just like me.
 * **Do not** reference this file as an example of proper user authentication.
 */
const cookieKey = 'login';
const correct = {
    user: 'hilarious',
    pass: 'ch33secake'
};
const loginPage = '/public/login.html';

const fs = require('fs');

const ip = require('ip');
const colors = require('colors');

const express = require('express');
const bodyParser = require('body-parser');
const cookieParser = require('cookie-parser');
const app = express();
app.use(cookieParser());
const urlencodedParser = bodyParser.urlencoded({ extended: false });


app.get('/', function (req, res) {
    let target = req.cookies.login ? 'user/page/already.html' : loginPage;
    res.redirect(target);
    output(req, colors.dim(`redirect to ${target}`), res.statusCode);
});

//check POST message, gives cookie then serves content
app.post('/user/page/:file', urlencodedParser, function (req, res) {
    if (!req.body) return res.sendStatus(400);
    if (req.body.username === correct.user && req.body.pass === correct.pass) {
        res.cookie(cookieKey, true);
        res.sendFile(req.params.file, { root: `${__dirname}/user/page/` });
        output(req, colors.cyan('gave cookie'), res.statusCode);
    }
    else
        res.redirect('public/loginfailed.html');
});

//check cookie then serves content
app.get('/user/:folder/:file', function (req, res) {

    let message;
    if (!req.cookies.login) {
        res.status(403).end();
        message = colors.red('denied');
    }
    else {
        res.sendFile(req.params.file, { root: `${__dirname}/user/${req.params.folder}/` });
        if (req.params.folder === 'data')
            message = colors.cyan('data');
        else if (req.params.file.endsWith('.html'))
            message = colors.cyan('allowed');
    }
    if (message)
        output(req, message, res.statusCode);
});

//list of files in /user/data in JSON format
app.get('/user/dataFiles.json', function (req, res) {

    if (!req.cookies.login) {
        res.status(403).end();
        return;
    }

    fs.readdir(__dirname + '/user/data/', function (err, items) {
        if (err)
            res.status(500).end();
        else
            res.json(items);
    });
});

app.all('/user/logout*', function (req, res) {
    res.clearCookie(cookieKey);
    res.redirect(loginPage);
});

app.use('/public', express.static('public'));
app.use('/vendor', express.static('vendor'));

app.use(function (req, res) {
    res.status(404).end();
    output(req, colors.dim('not found'), res.statusCode);
});

const port = process.env.PORT || 3000;
app.listen(port);
let url = (`http://${colors.bold(ip.address())}:${colors.cyan(port.toString())}/`);
console.log(`Server running at ${colors.underline(url)}`);

// output(req, `message`, res.statusCode);
function output(req, info, statusCode) {

    let request;
    switch (req.method) {
    case 'GET':
        request = `${colors.green(req.method)} ${info}`;
        break;
    case 'POST':
        request = `${colors.blue(req.method)} ${colors.bold(info.magenta)}`;
        break;
    case false:
        request = 'invalid';
    default:
        request = colors.red(req.method);
    }
    let date = new Date();
    console.log(colors.dim(`[  ${date.getHours()}:${date.getMinutes()} ${date.getSeconds()} ]`)
        + ` ${req.ip} ${colors.italic(req.originalUrl)}: ${request} ${colors.magenta(statusCode)}`);
}

process.on('SIGINT', function () {
    console.log(`${'SIGINT'.underline.red} recieved, process exiting.`);
    process.exit();
});
process.on('SIGTERM', function () {
    console.log(`${'SIGTERM'.underline.red} recieved, process exiting.`);
    process.exit();
});