mirror of https://github.com/Chocobozzz/PeerTube
124 lines
3.4 KiB
TypeScript
124 lines
3.4 KiB
TypeScript
import { basename } from 'path'
|
|
import { Segment } from '@peertube/p2p-media-loader-core'
|
|
import { logger } from '@root-helpers/logger'
|
|
import { wait } from '@root-helpers/utils'
|
|
import { removeQueryParams } from '@shared/core-utils'
|
|
import { isSameOrigin } from '../common'
|
|
|
|
type SegmentsJSON = { [filename: string]: string | { [byterange: string]: string } }
|
|
|
|
const maxRetries = 10
|
|
|
|
export class SegmentValidator {
|
|
|
|
private readonly bytesRangeRegex = /bytes=(\d+)-(\d+)/
|
|
|
|
private destroyed = false
|
|
|
|
constructor (private readonly options: {
|
|
serverUrl: string
|
|
segmentsSha256Url: string
|
|
authorizationHeader: () => string
|
|
requiresUserAuth: boolean
|
|
requiresPassword: boolean
|
|
videoPassword: () => string
|
|
}) {
|
|
|
|
}
|
|
|
|
async validate (segment: Segment, _method: string, _peerId: string, retry = 1) {
|
|
if (this.destroyed) return
|
|
|
|
const filename = basename(removeQueryParams(segment.url))
|
|
|
|
const segmentValue = (await this.fetchSha256Segments())[filename]
|
|
|
|
if (!segmentValue && retry > maxRetries) {
|
|
throw new Error(`Unknown segment name ${filename} in segment validator`)
|
|
}
|
|
|
|
if (!segmentValue) {
|
|
logger.info(`Refetching sha segments for ${filename}`)
|
|
|
|
await wait(500)
|
|
|
|
await this.validate(segment, _method, _peerId, retry + 1)
|
|
|
|
return
|
|
}
|
|
|
|
let hashShouldBe: string
|
|
let range = ''
|
|
|
|
if (typeof segmentValue === 'string') {
|
|
hashShouldBe = segmentValue
|
|
} else {
|
|
const captured = this.bytesRangeRegex.exec(segment.range)
|
|
range = captured[1] + '-' + captured[2]
|
|
|
|
hashShouldBe = segmentValue[range]
|
|
}
|
|
|
|
if (hashShouldBe === undefined) {
|
|
throw new Error(`Unknown segment name ${filename}/${range} in segment validator`)
|
|
}
|
|
|
|
const calculatedSha = await this.sha256Hex(segment.data)
|
|
if (calculatedSha !== hashShouldBe) {
|
|
throw new Error(
|
|
`Hashes does not correspond for segment ${filename}/${range}` +
|
|
`(expected: ${hashShouldBe} instead of ${calculatedSha})`
|
|
)
|
|
}
|
|
}
|
|
|
|
destroy () {
|
|
this.destroyed = true
|
|
}
|
|
|
|
private fetchSha256Segments (): Promise<SegmentsJSON> {
|
|
let headers: { [ id: string ]: string } = {}
|
|
|
|
if (isSameOrigin(this.options.serverUrl, this.options.segmentsSha256Url)) {
|
|
if (this.options.requiresPassword) headers = { 'x-peertube-video-password': this.options.videoPassword() }
|
|
else if (this.options.requiresUserAuth) headers = { Authorization: this.options.authorizationHeader() }
|
|
}
|
|
|
|
return fetch(this.options.segmentsSha256Url, { headers })
|
|
.then(res => res.json() as Promise<SegmentsJSON>)
|
|
.catch(err => {
|
|
logger.error('Cannot get sha256 segments', err)
|
|
return {}
|
|
})
|
|
}
|
|
|
|
private async sha256Hex (data?: ArrayBuffer) {
|
|
if (!data) return undefined
|
|
|
|
if (window.crypto.subtle) {
|
|
return window.crypto.subtle.digest('SHA-256', data)
|
|
.then(data => this.bufferToHex(data))
|
|
}
|
|
|
|
// Fallback for non HTTPS context
|
|
const shaModule = (await import('sha.js') as any).default
|
|
// eslint-disable-next-line new-cap
|
|
return new shaModule.sha256().update(Buffer.from(data)).digest('hex')
|
|
}
|
|
|
|
// Thanks: https://stackoverflow.com/a/53307879
|
|
private bufferToHex (buffer?: ArrayBuffer) {
|
|
if (!buffer) return ''
|
|
|
|
let s = ''
|
|
const h = '0123456789abcdef'
|
|
const o = new Uint8Array(buffer)
|
|
|
|
o.forEach((v: any) => {
|
|
s += h[v >> 4] + h[v & 15]
|
|
})
|
|
|
|
return s
|
|
}
|
|
}
|