- Visit the - NHS digital service manual - for guidance and code examples. -
- -You can find these templates in the /lib/example-templates folder.
- -You can copy and paste the templates in any folder within /app/views.
- -- [Page content goes here] -
- -- [Visit the - NHS digital service manual - for guidance and examples.] -
- - {{ pagination({ - nextUrl: "/example-templates/mini-hub/page-2", - nextPage: "Page two" - }) }} - -- [Page content goes here] -
- -- [Visit the - NHS digital service manual - for guidance and examples.] -
- - {{ pagination({ - previousUrl: "/example-templates/mini-hub", - previousPage: "Main page", - nextUrl: "/example-templates/mini-hub/page-3", - nextPage: "Page two" - }) }} - -- [Page content goes here] -
- -- [Visit the - NHS digital service manual - for guidance and examples.] -
- - {{ pagination({ - previousUrl: "/example-templates/mini-hub/page-2", - previousPage: "Page two" - }) }} - -Password not set. See guidance for setting a password.
' - ) -} - -/** - * @param {Request} req - * @param {Response} res - * @param {NextFunction} next - */ -function authentication(req, res, next) { - if (!process.env.PROTOTYPE_PASSWORD) { - showNoPasswordError(res) - } else if ( - req.path.startsWith('/nhsuk-frontend/assets/') || - allowedPathsWhenUnauthenticated.includes(req.path) - ) { - next() - } else if (req.cookies.authentication === encryptedPassword) { - next() - } else { - sendUserToPasswordPage(req, res) - } -} - -module.exports = authentication - -/** - * @import { NextFunction, Request, Response } from 'express' - */ diff --git a/lib/middleware/auto-routing.js b/lib/middleware/auto-routing.js deleted file mode 100644 index 73f4a0c6..00000000 --- a/lib/middleware/auto-routing.js +++ /dev/null @@ -1,60 +0,0 @@ -/** - * Automatically route pages - * - * Try to match a request to a template, for example a request for /test - * would look for /app/views/test.html and /app/views/test/index.html - * - * 1. Try to render the path - * 2. if success - send the response - * 3. if error other than template not found - call next with the error - * 4. Maybe it's a folder - try to render [path]/index.html - * 5. We got template not found both times - call next to trigger the 404 page - * 6. Remove the first slash, render won't work with it - * 7. If it's blank, render the root index - * - * @param {string} path - * @param {Response} res - * @param {NextFunction} next - */ -function renderPath(path, res, next) { - res.render(path, (error, html) => { - // [1] // - if (!error) { - res.set({ 'Content-type': 'text/html; charset=utf-8' }) // [2] // - res.end(html) - return - } - if (!error.message.startsWith('template not found')) { - // [3] // - next(error) - return - } - if (!path.endsWith('/index')) { - renderPath(`${path}/index`, res, next) // [4] // - return - } - next() // [5] // - }) -} - -/** - * @param {Request} req - * @param {Response} res - * @param {NextFunction} next - */ -exports.matchRoutes = function (req, res, next) { - let { path } = req - - path = path.substr(1) // [6] // - - if (path === '') { - // [7] // - path = 'index' - } - - renderPath(path, res, next) -} - -/** - * @import { NextFunction, Request, Response } from 'express' - */ diff --git a/lib/middleware/production.js b/lib/middleware/production.js deleted file mode 100644 index 56be9ea8..00000000 --- a/lib/middleware/production.js +++ /dev/null @@ -1,34 +0,0 @@ -/** - * This Express middleware function sets some - * HTTP headers which should only be set in deployed - * environments - * - * @param {Request} req - * @param {Response} res - * @param {NextFunction} next - */ -function production(req, res, next) { - // Set Strict-Transport-Security header to - // ensure that browsers only use HTTPS - res.setHeader( - 'Strict-Transport-Security', - 'max-age=31536000; includeSubDomains; preload' - ) - - // Set content security policy to upgrade - // all HTTP requests to HTTPS - res.setHeader('Content-Security-Policy', 'upgrade-insecure-requests') - - // Redirect HTTP requests to HTTPS - if (req.protocol !== 'https') { - res.redirect(302, `https://${req.get('Host')}${req.url}`) - } else { - next() - } -} - -module.exports = production - -/** - * @import { NextFunction, Request, Response } from 'express' - */ diff --git a/lib/middleware/prototype-admin-routes.js b/lib/middleware/prototype-admin-routes.js deleted file mode 100644 index 3be6d414..00000000 --- a/lib/middleware/prototype-admin-routes.js +++ /dev/null @@ -1,89 +0,0 @@ -const { join, resolve } = require('node:path') - -const express = require('express') - -const router = express.Router() - -const password = process.env.PROTOTYPE_PASSWORD - -const { encryptPassword } = require('../utils') - -router.get('/password', (req, res) => { - const returnURL = req.query.returnURL || '/' - const { error } = req.query - res.render('password', { - returnURL, - error - }) -}) - -// Check authentication password -router.post('/password', (req, res) => { - const submittedPassword = req.body.password - const { returnURL } = req.body - - if (submittedPassword === password) { - // see lib/middleware/authentication.js for explanation - res.cookie('authentication', encryptPassword(password), { - maxAge: 1000 * 60 * 60 * 24 * 30, // 30 days - sameSite: 'None', // Allows GET and POST requests from other domains - httpOnly: true, - secure: true - }) - res.redirect(returnURL) - } else { - res.redirect( - `/prototype-admin/password?error=wrong-password&returnURL=${encodeURIComponent(returnURL)}` - ) - } -}) - -router.get('/reset', (req, res) => { - let { returnPage } = req.query - - // Allow local paths only - if (!returnPage?.startsWith('/')) { - returnPage = '/' - } - - res.render('reset', { - returnPage - }) -}) - -router.all('/reset-session-data', (req, res) => { - let { returnPage } = req.body ?? req.query - - // Allow local paths only - if (!returnPage?.startsWith('/')) { - returnPage = '/' - } - - console.log('Clearing session data') - - const dataDirectory = join(__dirname, '../../app/data') - const sessionDataPath = resolve(dataDirectory, 'session-data-defaults.js') - const generatedDataPath = resolve(dataDirectory, 'generated') - - // Clear the require cache for session data defaults - // eslint-disable-next-line @typescript-eslint/no-dynamic-delete - delete require.cache[require.resolve(sessionDataPath)] - - // Clear cache for the generated JSON files - Object.keys(require.cache).forEach((key) => { - if (key.startsWith(generatedDataPath)) { - // eslint-disable-next-line @typescript-eslint/no-dynamic-delete - delete require.cache[key] - } - }) - - // Load fresh session defaults after clearing cache - req.session.data = require(sessionDataPath) - req.flash('success', 'Session data cleared') - - res.render('reset-done', { - returnPage - }) -}) - -module.exports = router diff --git a/lib/prototype-admin/password.html b/lib/prototype-admin/password.html deleted file mode 100644 index d20f77c0..00000000 --- a/lib/prototype-admin/password.html +++ /dev/null @@ -1,54 +0,0 @@ -{% extends "layout.html" %} - -{% set pageName = "Enter password" %} -{% set errors = error == "wrong-password" %} - -{% block content %} - -This will reset all of the data entered in this session.
- - -