fd5ef14999
Security & correctness hardening: - Gate /__api/token/auth behind auth and self-scope every handler to the caller (was fully unauthenticated — account-takeover hole). - Escape LDAP filter values (injection) and reject empty-password binds. - Enforce per-torrent ownership so private torrents aren't exposed via IDOR. - Assorted cleanup: fix 'use static' typos, drop dead Torrent.migrate + the getTorrentData noUpdate flag, Buffer.alloc, __dirname-relative reads, res.statusCode in the error handler, const-scope pubsub. Login-gated proxy + anti-indexing: - Block all proxying for logged-out users via an auth-token cookie the front end mirrors from its token; serve a local login page instead of hitting TPB. - robots.txt disallow-all + X-Robots-Tag noindex. Torrent category: - Store a normalized category (TV/Movie/Music/Adult/App/Game/Other) mapped from the TPB category id; captured at add time (migration). Smart Search (movies/TV): - New /__api/search: TMDB title confirm -> scrape piratebay.party HTML -> Ollama ranks releases against quality prefs (x265/1080p/~1.5GB/subs, prefer uncut) returning a recommended pick, optional warned 4K, and other editions. Front-end Smart Search box + dialog feeding the existing add flow. Post-download organization -> Emby (public Movie/TV only): - Completion watcher files finished torrents: Ollama parses the release name, TMDB canonicalizes title/year, files main video (+subs) into the library with edition/quality-aware names (movies + TV SxxExx), stops seeding, and triggers an Emby library scan. Low-confidence matches are flagged, not mis-filed; correctable via "Fix match". Adds organizedAt/metadata columns. Shared helpers: controller/tmdb.js, controller/ollama.js. Config blocks for tmdb/ollama/search/emby/library/organize (secrets stay in gitignored secrets.js). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
192 lines
4.7 KiB
JavaScript
192 lines
4.7 KiB
JavaScript
'use strict';
|
|
|
|
const Transmission = require('transmission-promise');
|
|
const conf = require('>/conf');
|
|
|
|
const tr_client = new Transmission(conf.transmission)
|
|
|
|
const statusMap = [
|
|
'STOPPED', // 0
|
|
'CHECK_WAIT', // 1
|
|
'CHECK', // 2
|
|
'DOWNLOAD_WAIT', // 3
|
|
'DOWNLOAD', // 4
|
|
'SEED_WAIT', // 5
|
|
'SEED', // 6
|
|
'ISOLATED', // 7
|
|
];
|
|
|
|
module.exports = (sequelize, DataTypes, Model) => {
|
|
class Torrent extends Model {
|
|
/**
|
|
* Helper method for defining associations.
|
|
* This method is not a part of Sequelize lifecycle.
|
|
* The `models/index` file will call this method automatically.
|
|
*/
|
|
static associate(models) {
|
|
// define association here
|
|
}
|
|
|
|
static trClient = tr_client;
|
|
|
|
// Map a raw TPB category id( e.g. 207) to one of our buckets. TPB groups by the
|
|
// hundreds digit; TV shows are the exception pulled out of the Video group.
|
|
static categoryFromTPB(id){
|
|
id = parseInt(id, 10);
|
|
if([205, 208, 212].includes(id)) return 'TV';
|
|
return {
|
|
1: 'Music',
|
|
2: 'Movie',
|
|
3: 'App',
|
|
4: 'Game',
|
|
5: 'Adult',
|
|
6: 'Other',
|
|
}[Math.floor(id / 100)] || 'Other';
|
|
}
|
|
|
|
static async create(data, ...args){
|
|
try{
|
|
|
|
// let instance = this.build(data);
|
|
// console.log('instance', instance)
|
|
await this.build(data).validate();
|
|
// console.log('validate', val);
|
|
data.isPrivate = data.isPrivate === 'true' ? true : false;
|
|
|
|
let options = {
|
|
'download-dir': data.isPrivate ? `${conf.privateDownloadLocation}/${data.added_by}` : undefined,
|
|
};
|
|
|
|
let res = await tr_client.addUrl(data.magnetLink, options);
|
|
|
|
return await super.create({
|
|
magnetLink: data.magnetLink,
|
|
hashString: res.hashString,
|
|
isPrivate: data.isPrivate,
|
|
name: res.name,
|
|
added_by: data.added_by,
|
|
category: this.categoryFromTPB(data.category),
|
|
status: 0,
|
|
percentDone: 0,
|
|
}, args);
|
|
}catch (error){
|
|
console.log('Torrent create error', error);
|
|
throw error;
|
|
}
|
|
}
|
|
|
|
async getTorrentData(){
|
|
try{
|
|
|
|
if(this.percentDone === 1) return this.dataValues
|
|
|
|
let res = ( await tr_client.get(this.hashString, [
|
|
"eta", "percentDone", "status", "rateDownload",
|
|
"errorString", "hashString", 'name',
|
|
'downloadDir',
|
|
'dateCreated',
|
|
'files', //array of files
|
|
'filesStats', // array of files with status
|
|
'isFinished',
|
|
'isStalled',
|
|
'peers',
|
|
'peersConnected', // array of peers,
|
|
'sizeWhenDone',
|
|
]) ).torrents[0];
|
|
|
|
await this.update(res);
|
|
|
|
return {...res, ...this.dataValues};
|
|
}catch(error){
|
|
if(error.code === 'ECONNREFUSED'){
|
|
let e = new Error('TorrentGatewayDown')
|
|
e.status = 555
|
|
throw e
|
|
}
|
|
// console.error(`Torrent ${this.hashString} getTorrentData error`, error);
|
|
throw error;
|
|
}
|
|
}
|
|
|
|
async stop(){
|
|
return await this.constructor.trClient.stop(this.hashString);
|
|
}
|
|
|
|
async start(force){
|
|
if(force) return await this.constructor.trClient.startNow(this.hashString);
|
|
let res = await this.constructor.trClient.start(this.hashString);
|
|
console.log('start', res);
|
|
return res;
|
|
}
|
|
|
|
async destroy(){
|
|
await this.constructor.trClient.remove(this.hashString, true);
|
|
return await super.destroy()
|
|
}
|
|
}
|
|
Torrent.init({
|
|
hashString: {
|
|
type: DataTypes.STRING,
|
|
allowNull: false,
|
|
primaryKey: true
|
|
},
|
|
magnetLink: {
|
|
type: DataTypes.STRING,
|
|
allowNull: false,
|
|
validate:{
|
|
notNull: true,
|
|
notEmpty: true,
|
|
},
|
|
},
|
|
isPrivate: {
|
|
type: DataTypes.BOOLEAN,
|
|
defaultValue: false,
|
|
},
|
|
name: DataTypes.STRING,
|
|
category: {
|
|
type: DataTypes.STRING,
|
|
allowNull: false,
|
|
defaultValue: 'Other',
|
|
},
|
|
added_by: {
|
|
type: DataTypes.STRING,
|
|
ldapModel: 'User',
|
|
allowNull: false,
|
|
validate:{
|
|
notNull: true,
|
|
notEmpty: true,
|
|
},
|
|
},
|
|
status: DataTypes.NUMBER,
|
|
percentDone: DataTypes.FLOAT,
|
|
downloadDir: {
|
|
type: DataTypes.STRING,
|
|
allowNull: true,
|
|
},
|
|
errorString: {
|
|
type: DataTypes.STRING,
|
|
allowNull: true,
|
|
},
|
|
sizeWhenDone: {
|
|
type: DataTypes.NUMBER,
|
|
allowNull: true,
|
|
},
|
|
createdAt: {
|
|
type: DataTypes.DATE
|
|
},
|
|
organizedAt: {
|
|
type: DataTypes.DATE,
|
|
allowNull: true,
|
|
},
|
|
metadata: {
|
|
type: DataTypes.JSON,
|
|
allowNull: true,
|
|
},
|
|
}, {
|
|
sequelize,
|
|
modelName: 'Torrent',
|
|
logging: false,
|
|
});
|
|
return Torrent;
|
|
};
|