URL Parameters for accessing files using JavaScript

Question

In my node.js project I have a server.js and a folder "views" that has a file called index.html, so right now when someone goes to example.com (or example.com/index.html) they go to index.js, well I'm trying to secure it so that only via specific links access is granted, for example

example.com -> takes you to access_denied.html and example.com/client={code-that-i-assign} example example.com/client=th9wdn298n3d2

I tried doing it with URLparams but I couldn't, can someone help me with a solution to this problem?

function api() {
    const apikey = "";
    const searchselect = window.location.search;
    const urlsearchparams = URLSearchParams(searchselect);
    urlsearchparams.has(apikey).then(return true);

}

Would you be able to show us what you have so far?

Zeromika
– Zeromika

2021-01-14 10:42:18 +00:00
Commented Jan 14, 2021 at 10:42 — Zeromika
– Zeromika, Commented Jan 14, 2021 at 10:42
sure, here pastebin.com/P1H1nDCu

Supreme Gang Certified Member
– Supreme Gang Certified Member

2021-01-14 10:48:07 +00:00
Commented Jan 14, 2021 at 10:48 — Supreme Gang Certified Member
– Supreme Gang Certified Member, Commented Jan 14, 2021 at 10:48
Are you using express on your server-side?

Nick Parsons
– Nick Parsons

2021-01-14 10:57:22 +00:00
Commented Jan 14, 2021 at 10:57 — Nick Parsons
– Nick Parsons, Commented Jan 14, 2021 at 10:57
Yes @NickParsons

Supreme Gang Certified Member
– Supreme Gang Certified Member

2021-01-14 13:33:50 +00:00
Commented Jan 14, 2021 at 13:33 — Supreme Gang Certified Member
– Supreme Gang Certified Member, Commented Jan 14, 2021 at 13:33

AlTheLazyMonkey · Accepted Answer · 2021-01-14 15:06:38Z

2

I think to undertand that you want to check if there is a get variable in the url like a token for enter and use a determinate pages, for to do that you must use the express middleware before the the middleware that serve the page in your server.js file, like:

app.use(function (req, res, next) { // controlla il token
  const foo = req.query.foo;

  if (foo !== 'MAGIC_KEY' /* or what control you want to do */) next(Error('Nope'));
  else next();
});
app.use(express.static(path.join(__dirname, 'public')));

and call the page whit this param /?foo=MAGIC_KEY

EDIT with your code:

const path = require("path");
const express = require("express");
const app = express();

// make all the files in 'public' available
// https://expressjs.com/en/starter/static-files.html
app.use(express.static("public"));

// this is the code I writed before
app.use(function (req, res, next) { //  /?foo=MAGIC_KEY
  const foo = req.query.foo;

  if (foo !== 'MAGIC_KEY') next(Error('Nope'));
  else next();
});

// This is the middleware that serve the index
// https://expressjs.com/en/starter/basic-routing.html
app.get("/", (request, response) => {
  response.sendFile(__dirname + "/views/index.html");
});

app.use(express.static(path.join(__dirname + "/views/gg.txt")));

const listener = app.listen(process.env.PORT, () => {
  console.log("Your app is listening on port " + listener.address().port);
});

edited Jan 14, 2021 at 15:06

answered Jan 14, 2021 at 10:58

AlTheLazyMonkey

1,2421 gold badge10 silver badges23 bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

Supreme Gang Certified Member Over a year ago

Hey this isn't working this is my code --> pastebin.com/ZKQmK7vS It just takes me to index.js

AlTheLazyMonkey Over a year ago

In your code, you put the middleware after the middleware that serve index page. I edit the answer with edit

Supreme Gang Certified Member Over a year ago

It still doesn't work here's a GIF of what happens and I changed views with public gyazo.com/006fb582ef4f802c0bf8e9e308bbd379

AlTheLazyMonkey Over a year ago

After the change did you restart the server? I try using server.js with the code in the answer and an easy views/index.html. When I call localhost:3000/?foo=MAGIC_KEY I see the page, where I don't use ?foo=MAGIC_KEY or I set a wrong foovalue like MAGIC_KEYs the server returns me an error.

AlTheLazyMonkey Over a year ago

this is the code github.com/AlTheLazyMonkey/problemStack.git

|

Cristian · Accepted Answer · 2021-01-15 13:08:14Z

In this particular instance, you could manage the requests one by one, however it usually isn't a great solution. Just replace \key to whatever you need. If you land on example.com it will respond with access-denied.html, however, requesting example.com/key for instance will get you to the index.

const path = require("path");
const express = require("express");
const app = express();

// This is the middleware that serve the index
app.get("/", (request, response) => {
  response.sendFile(__dirname + "/public/access-denied.html");
});

app.get("/key", (request, response) => {
  response.sendFile(__dirname + "/public/index.html");
});

app.use(express.static(path.join(__dirname + "/public/gg.txt")));

const listener = app.listen(process.env.PORT, () => {
  console.log("Your app is listening on port " + listener.address().port);
});

Collectives™ on Stack Overflow

URL Parameters for accessing files using JavaScript

2 Answers 2

7 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

7 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related