Matthew Jackson
f836948e6d
Replace browser prompt() with full-screen auth overlay that blocks access to the upload UI until a valid token is entered. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
567 lines
18 KiB
JavaScript
567 lines
18 KiB
JavaScript
// server.js
|
||
import express from "express";
|
||
import sharp from "sharp";
|
||
import { execFile } from "child_process";
|
||
import fs from "fs/promises";
|
||
import { randomUUID } from "crypto";
|
||
|
||
import libheifModule from "libheif-js";
|
||
const libheif = libheifModule?.default ?? libheifModule;
|
||
|
||
const app = express();
|
||
app.use(express.raw({ type: "*/*", limit: "30mb" }));
|
||
|
||
app.get("/health", (_req, res) => res.status(200).send("ok"));
|
||
|
||
/* ------------------------------------------------------------------ */
|
||
/* Request context / logging */
|
||
/* ------------------------------------------------------------------ */
|
||
|
||
const DEFAULT_REQ_TIMEOUT_MS = clampInt(
|
||
process.env.REQ_TIMEOUT_MS,
|
||
5_000,
|
||
10 * 60_000,
|
||
120_000
|
||
);
|
||
|
||
const DEFAULT_REQ_TIMEOUT_PDF_MS = clampInt(
|
||
process.env.REQ_TIMEOUT_PDF_MS,
|
||
10_000,
|
||
30 * 60_000,
|
||
5 * 60_000
|
||
);
|
||
|
||
app.use((req, res, next) => {
|
||
const requestId =
|
||
String(req.headers["x-request-id"] || "").trim() || randomUUID();
|
||
req.requestId = requestId;
|
||
|
||
res.setHeader("x-request-id", requestId);
|
||
|
||
const started = Date.now();
|
||
req.setTimeout(DEFAULT_REQ_TIMEOUT_MS);
|
||
res.setTimeout(DEFAULT_REQ_TIMEOUT_MS);
|
||
|
||
res.on("finish", () => {
|
||
const ms = Date.now() - started;
|
||
const len =
|
||
Number(req.headers["content-length"] || 0) ||
|
||
(req.body?.length ?? 0) ||
|
||
0;
|
||
|
||
console.log(
|
||
JSON.stringify({
|
||
requestId,
|
||
method: req.method,
|
||
path: req.originalUrl,
|
||
status: res.statusCode,
|
||
bytesIn: len,
|
||
ms,
|
||
})
|
||
);
|
||
});
|
||
|
||
next();
|
||
});
|
||
|
||
function isAborted(req, res) {
|
||
return Boolean(req.aborted || res.writableEnded || res.destroyed);
|
||
}
|
||
|
||
function sendError(res, status, code, message, requestId) {
|
||
if (res.headersSent) {
|
||
try {
|
||
res.end();
|
||
} catch {}
|
||
return;
|
||
}
|
||
res.status(status).json({ error: code, message, requestId });
|
||
}
|
||
|
||
/* ------------------------------------------------------------------ */
|
||
/* Auth */
|
||
/* ------------------------------------------------------------------ */
|
||
|
||
function requireAuth(req, res) {
|
||
const token = process.env.CONVERTER_TOKEN;
|
||
const auth = req.headers.authorization || "";
|
||
if (!token || auth !== `Bearer ${token}`) {
|
||
sendError(res, 401, "unauthorized", "Unauthorized", req.requestId);
|
||
return false;
|
||
}
|
||
return true;
|
||
}
|
||
|
||
/* ------------------------------------------------------------------ */
|
||
/* Type detection */
|
||
/* ------------------------------------------------------------------ */
|
||
|
||
function isPdfRequest(req) {
|
||
const ct = String(req.headers["content-type"] || "").toLowerCase();
|
||
const fn = String(req.headers["x-filename"] || "").toLowerCase();
|
||
return ct.startsWith("application/pdf") || fn.endsWith(".pdf");
|
||
}
|
||
|
||
function looksLikeHeic(buf) {
|
||
if (!buf || buf.length < 16) return false;
|
||
if (buf.toString("ascii", 4, 8) !== "ftyp") return false;
|
||
const brands = buf.toString("ascii", 8, Math.min(buf.length, 256));
|
||
return (
|
||
brands.includes("heic") ||
|
||
brands.includes("heif") ||
|
||
brands.includes("heix") ||
|
||
brands.includes("hevc") ||
|
||
brands.includes("hevx") ||
|
||
brands.includes("mif1") ||
|
||
brands.includes("msf1")
|
||
);
|
||
}
|
||
|
||
async function assertSupportedRaster(input) {
|
||
if (looksLikeHeic(input)) return;
|
||
try {
|
||
await sharp(input, { failOnError: false }).metadata();
|
||
} catch {
|
||
throw Object.assign(new Error("Unsupported image input"), {
|
||
statusCode: 415,
|
||
code: "unsupported_media_type",
|
||
});
|
||
}
|
||
}
|
||
|
||
/* ------------------------------------------------------------------ */
|
||
/* Options */
|
||
/* ------------------------------------------------------------------ */
|
||
|
||
function parseBool(v, fallback = false) {
|
||
if (v == null) return fallback;
|
||
const s = String(v).toLowerCase().trim();
|
||
if (["1", "true", "yes", "y", "on"].includes(s)) return true;
|
||
if (["0", "false", "no", "n", "off"].includes(s)) return false;
|
||
return fallback;
|
||
}
|
||
|
||
function parseOptions(req) {
|
||
return {
|
||
quality: clampInt(req.headers["x-jpeg-quality"], 40, 100, 85),
|
||
maxDim: clampInt(req.headers["x-max-dimension"], 500, 6000, 2000),
|
||
withoutEnlargement: parseBool(req.headers["x-without-enlargement"], true),
|
||
pdfDpi: clampInt(req.headers["x-pdf-dpi"], 72, 600, 300),
|
||
};
|
||
}
|
||
|
||
/* ------------------------------------------------------------------ */
|
||
/* Vision-safe normalization */
|
||
/* ------------------------------------------------------------------ */
|
||
|
||
function normalizeForVision(input, opts) {
|
||
const sharpInputOpts = {
|
||
failOnError: false,
|
||
limitInputPixels: 200e6,
|
||
...(opts?.raw ? { raw: opts.raw } : {}),
|
||
};
|
||
|
||
let pipeline = sharp(input, sharpInputOpts).rotate();
|
||
|
||
// Normalize into sRGB (NOT "rgb"). This avoids:
|
||
// vips_colourspace: no known route from 'srgb' to 'rgb'
|
||
pipeline = pipeline.toColorspace("srgb");
|
||
|
||
// If input has alpha, flatten to white so OCR/vision doesn't get weird transparency artifacts.
|
||
pipeline = pipeline.flatten({ background: { r: 255, g: 255, b: 255 } });
|
||
|
||
if (opts.maxDim) {
|
||
pipeline = pipeline.resize({
|
||
width: opts.maxDim,
|
||
height: opts.maxDim,
|
||
fit: "inside",
|
||
withoutEnlargement: opts.withoutEnlargement,
|
||
});
|
||
}
|
||
|
||
return pipeline
|
||
.jpeg({
|
||
quality: opts.quality,
|
||
chromaSubsampling: "4:4:4",
|
||
mozjpeg: true,
|
||
progressive: true,
|
||
})
|
||
.withMetadata(false)
|
||
.toBuffer();
|
||
}
|
||
|
||
/* ------------------------------------------------------------------ */
|
||
/* HEIC via WASM */
|
||
/* ------------------------------------------------------------------ */
|
||
|
||
function heifDisplayToRGBA(img) {
|
||
return new Promise((resolve, reject) => {
|
||
try {
|
||
const w = img.get_width();
|
||
const h = img.get_height();
|
||
const rgba = new Uint8Array(w * h * 4);
|
||
img.display({ data: rgba, width: w, height: h, channels: 4 }, () =>
|
||
resolve({ width: w, height: h, rgba })
|
||
);
|
||
} catch (e) {
|
||
reject(e);
|
||
}
|
||
});
|
||
}
|
||
|
||
async function heicToJpeg(input, opts) {
|
||
if (!libheif?.HeifDecoder) throw new Error("libheif-js unavailable");
|
||
const dec = new libheif.HeifDecoder();
|
||
const imgs = dec.decode(input);
|
||
if (!imgs?.length) throw new Error("HEIC decode failed");
|
||
|
||
const { width, height, rgba } = await heifDisplayToRGBA(imgs[0]);
|
||
|
||
// Feed Sharp raw pixel metadata so it doesn't treat the buffer as an encoded image.
|
||
return normalizeForVision(Buffer.from(rgba), {
|
||
...opts,
|
||
raw: { width, height, channels: 4 },
|
||
});
|
||
}
|
||
|
||
/* ------------------------------------------------------------------ */
|
||
/* PDF handling */
|
||
/* ------------------------------------------------------------------ */
|
||
|
||
async function pdfFirstPageToJpeg(input, opts) {
|
||
const id = randomUUID();
|
||
const pdf = `/tmp/${id}.pdf`;
|
||
const out = `/tmp/${id}.jpg`;
|
||
|
||
try {
|
||
await fs.writeFile(pdf, input);
|
||
|
||
await execFilePromise(
|
||
"pdftoppm",
|
||
["-jpeg", "-singlefile", "-r", String(opts.pdfDpi), pdf, `/tmp/${id}`],
|
||
DEFAULT_REQ_TIMEOUT_PDF_MS
|
||
);
|
||
|
||
const buf = await fs.readFile(out);
|
||
return normalizeForVision(buf, opts);
|
||
} finally {
|
||
await safeUnlink(pdf);
|
||
await safeUnlink(out);
|
||
}
|
||
}
|
||
|
||
/* ------------------------------------------------------------------ */
|
||
/* Single-flight per machine (ONLY for /convert) */
|
||
/* ------------------------------------------------------------------ */
|
||
|
||
const MAX_CONVERT_INFLIGHT = 1;
|
||
let convertInflight = 0;
|
||
|
||
async function withConvertSingleFlight(req, res, fn) {
|
||
if (convertInflight >= MAX_CONVERT_INFLIGHT) {
|
||
res.setHeader("Retry-After", "1");
|
||
return sendError(res, 429, "busy", "Converter busy; retry shortly", req.requestId);
|
||
}
|
||
convertInflight++;
|
||
try {
|
||
return await fn();
|
||
} finally {
|
||
convertInflight--;
|
||
}
|
||
}
|
||
|
||
/* ------------------------------------------------------------------ */
|
||
/* Routes */
|
||
/* ------------------------------------------------------------------ */
|
||
|
||
/* ------------------------------------------------------------------ */
|
||
/* Web UI */
|
||
/* ------------------------------------------------------------------ */
|
||
|
||
app.get("/", (_req, res) => {
|
||
res.setHeader("Content-Type", "text/html");
|
||
res.send(`<!DOCTYPE html>
|
||
<html lang="en">
|
||
<head>
|
||
<meta charset="utf-8">
|
||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||
<title>PostConvert – Strip Metadata</title>
|
||
<style>
|
||
* { box-sizing: border-box; margin: 0; padding: 0; }
|
||
body { font-family: -apple-system, system-ui, sans-serif; background: #111; color: #eee;
|
||
display: flex; align-items: center; justify-content: center; min-height: 100vh; }
|
||
.wrap { max-width: 420px; width: 100%; padding: 2rem; }
|
||
h1 { font-size: 1.3rem; margin-bottom: 1.5rem; text-align: center; }
|
||
.drop { border: 2px dashed #444; border-radius: 12px; padding: 3rem 1.5rem; text-align: center;
|
||
cursor: pointer; transition: border-color .2s; }
|
||
.drop.over { border-color: #4a9eff; }
|
||
.drop p { color: #888; font-size: .95rem; }
|
||
.drop input { display: none; }
|
||
.status { margin-top: 1rem; text-align: center; font-size: .9rem; color: #888; }
|
||
.status.error { color: #f66; }
|
||
.overlay { position: fixed; inset: 0; background: #111; display: flex;
|
||
align-items: center; justify-content: center; z-index: 10; }
|
||
.auth { max-width: 340px; width: 100%; padding: 2rem; text-align: center; }
|
||
.auth h2 { font-size: 1.1rem; margin-bottom: 1rem; }
|
||
.auth input { width: 100%; padding: .6rem .8rem; border: 1px solid #444; border-radius: 8px;
|
||
background: #222; color: #eee; font-size: .95rem; margin-bottom: .8rem; }
|
||
.auth input:focus { outline: none; border-color: #4a9eff; }
|
||
.auth button { width: 100%; padding: .6rem; border: none; border-radius: 8px;
|
||
background: #4a9eff; color: #fff; font-size: .95rem; cursor: pointer; }
|
||
.auth button:hover { background: #3a8eef; }
|
||
.auth .err { color: #f66; font-size: .85rem; margin-top: .5rem; }
|
||
</style>
|
||
</head>
|
||
<body>
|
||
<div class="overlay" id="auth-overlay" style="display:none">
|
||
<div class="auth">
|
||
<h2>Enter access token</h2>
|
||
<input type="password" id="token-input" placeholder="Token" autocomplete="off">
|
||
<button id="token-submit">Continue</button>
|
||
<div class="err" id="token-err"></div>
|
||
</div>
|
||
</div>
|
||
<div class="wrap" id="main" style="display:none">
|
||
<h1>Strip Photo Metadata</h1>
|
||
<div class="drop" id="drop">
|
||
<p>Drop a photo here or tap to choose</p>
|
||
<input type="file" id="file" accept="image/*">
|
||
</div>
|
||
<div class="status" id="status"></div>
|
||
</div>
|
||
<script>
|
||
(function() {
|
||
const KEY = "postconvert_token";
|
||
const overlay = document.getElementById("auth-overlay");
|
||
const main = document.getElementById("main");
|
||
const tokenInput = document.getElementById("token-input");
|
||
const tokenSubmit = document.getElementById("token-submit");
|
||
const tokenErr = document.getElementById("token-err");
|
||
const drop = document.getElementById("drop");
|
||
const fileInput = document.getElementById("file");
|
||
const status = document.getElementById("status");
|
||
|
||
function showApp() { overlay.style.display = "none"; main.style.display = ""; }
|
||
function showAuth() { overlay.style.display = ""; main.style.display = "none"; tokenErr.textContent = ""; }
|
||
|
||
if (localStorage.getItem(KEY)) {
|
||
showApp();
|
||
} else {
|
||
showAuth();
|
||
}
|
||
|
||
tokenSubmit.addEventListener("click", () => {
|
||
const t = tokenInput.value.trim();
|
||
if (!t) { tokenErr.textContent = "Token required"; return; }
|
||
localStorage.setItem(KEY, t);
|
||
showApp();
|
||
});
|
||
|
||
tokenInput.addEventListener("keydown", (e) => {
|
||
if (e.key === "Enter") tokenSubmit.click();
|
||
});
|
||
|
||
function getToken() { return localStorage.getItem(KEY); }
|
||
|
||
async function strip(file) {
|
||
const token = getToken();
|
||
if (!token) { showAuth(); return; }
|
||
|
||
status.className = "status";
|
||
status.textContent = "Stripping metadata…";
|
||
|
||
try {
|
||
const res = await fetch("/strip", {
|
||
method: "POST",
|
||
headers: {
|
||
"Authorization": "Bearer " + token,
|
||
"Content-Type": file.type || "image/jpeg",
|
||
},
|
||
body: file,
|
||
});
|
||
|
||
if (res.status === 401) {
|
||
localStorage.removeItem(KEY);
|
||
showAuth();
|
||
tokenErr.textContent = "Invalid token. Please try again.";
|
||
return;
|
||
}
|
||
|
||
if (!res.ok) {
|
||
const err = await res.json().catch(() => ({}));
|
||
throw new Error(err.message || "Strip failed");
|
||
}
|
||
|
||
const blob = await res.blob();
|
||
const url = URL.createObjectURL(blob);
|
||
const a = document.createElement("a");
|
||
const name = (file.name || "photo").replace(/\\.[^.]+$/, "") + "_clean.jpg";
|
||
a.href = url;
|
||
a.download = name;
|
||
a.click();
|
||
URL.revokeObjectURL(url);
|
||
|
||
status.className = "status";
|
||
status.textContent = "Done — saved " + name;
|
||
} catch (e) {
|
||
status.className = "status error";
|
||
status.textContent = e.message;
|
||
}
|
||
}
|
||
|
||
drop.addEventListener("click", () => fileInput.click());
|
||
fileInput.addEventListener("change", () => { if (fileInput.files[0]) strip(fileInput.files[0]); });
|
||
|
||
drop.addEventListener("dragover", (e) => { e.preventDefault(); drop.classList.add("over"); });
|
||
drop.addEventListener("dragleave", () => drop.classList.remove("over"));
|
||
drop.addEventListener("drop", (e) => {
|
||
e.preventDefault();
|
||
drop.classList.remove("over");
|
||
if (e.dataTransfer.files[0]) strip(e.dataTransfer.files[0]);
|
||
});
|
||
})();
|
||
</script>
|
||
</body>
|
||
</html>`);
|
||
});
|
||
|
||
app.post("/strip", async (req, res) => {
|
||
res.setHeader("Connection", "close");
|
||
|
||
return withConvertSingleFlight(req, res, async () => {
|
||
try {
|
||
if (!requireAuth(req, res)) return;
|
||
|
||
if (!req.body?.length) {
|
||
return sendError(res, 400, "empty_body", "Empty body", req.requestId);
|
||
}
|
||
|
||
const opts = {
|
||
quality: clampInt(req.headers["x-jpeg-quality"], 40, 100, 92),
|
||
maxDim: 0,
|
||
withoutEnlargement: true,
|
||
};
|
||
|
||
let jpeg;
|
||
if (looksLikeHeic(req.body)) {
|
||
if (isAborted(req, res)) return;
|
||
jpeg = await heicToJpeg(req.body, opts);
|
||
} else {
|
||
await assertSupportedRaster(req.body);
|
||
if (isAborted(req, res)) return;
|
||
jpeg = await normalizeForVision(req.body, opts);
|
||
}
|
||
|
||
if (isAborted(req, res)) return;
|
||
res.setHeader("Content-Type", "image/jpeg");
|
||
return res.send(jpeg);
|
||
} catch (e) {
|
||
const status = e?.statusCode || 500;
|
||
const code = e?.code || "strip_failed";
|
||
|
||
console.error(JSON.stringify({ requestId: req.requestId, err: String(e?.stack || e) }));
|
||
|
||
return sendError(
|
||
res,
|
||
status,
|
||
code,
|
||
status === 415 ? "Unsupported media type" : "Metadata strip failed",
|
||
req.requestId
|
||
);
|
||
}
|
||
});
|
||
});
|
||
|
||
app.post("/convert", async (req, res) => {
|
||
res.setHeader("Connection", "close");
|
||
|
||
return withConvertSingleFlight(req, res, async () => {
|
||
try {
|
||
if (!requireAuth(req, res)) return;
|
||
|
||
if (!req.body?.length) {
|
||
return sendError(res, 400, "empty_body", "Empty body", req.requestId);
|
||
}
|
||
|
||
const opts = parseOptions(req);
|
||
|
||
if (isPdfRequest(req)) {
|
||
if (isAborted(req, res)) return;
|
||
const jpeg = await pdfFirstPageToJpeg(req.body, opts);
|
||
if (isAborted(req, res)) return;
|
||
res.setHeader("Content-Type", "image/jpeg");
|
||
return res.send(jpeg);
|
||
}
|
||
|
||
if (looksLikeHeic(req.body)) {
|
||
if (isAborted(req, res)) return;
|
||
const jpeg = await heicToJpeg(req.body, opts);
|
||
if (isAborted(req, res)) return;
|
||
res.setHeader("Content-Type", "image/jpeg");
|
||
return res.send(jpeg);
|
||
}
|
||
|
||
await assertSupportedRaster(req.body);
|
||
|
||
if (isAborted(req, res)) return;
|
||
const jpeg = await normalizeForVision(req.body, opts);
|
||
if (isAborted(req, res)) return;
|
||
|
||
res.setHeader("Content-Type", "image/jpeg");
|
||
return res.send(jpeg);
|
||
} catch (e) {
|
||
const status = e?.statusCode || 500;
|
||
const code = e?.code || "conversion_failed";
|
||
|
||
console.error(JSON.stringify({ requestId: req.requestId, err: String(e?.stack || e) }));
|
||
|
||
return sendError(
|
||
res,
|
||
status,
|
||
code,
|
||
status === 415 ? "Unsupported media type" : "Conversion failed",
|
||
req.requestId
|
||
);
|
||
}
|
||
});
|
||
});
|
||
|
||
/* ------------------------------------------------------------------ */
|
||
/* Helpers */
|
||
/* ------------------------------------------------------------------ */
|
||
|
||
function execFilePromise(cmd, args, timeoutMs) {
|
||
return new Promise((resolve, reject) => {
|
||
execFile(cmd, args, { timeout: timeoutMs }, (err, _stdout, stderr) => {
|
||
if (err) {
|
||
if (err.code === "ENOENT") return reject(new Error(`Missing dependency: ${cmd}`));
|
||
if (err.killed || err.signal === "SIGTERM") {
|
||
return reject(new Error(`${cmd} timed out after ${timeoutMs}ms`));
|
||
}
|
||
return reject(new Error(stderr || String(err)));
|
||
}
|
||
resolve();
|
||
});
|
||
});
|
||
}
|
||
|
||
function clampInt(v, min, max, fallback) {
|
||
const n = Number(v);
|
||
if (!Number.isFinite(n)) return fallback;
|
||
return Math.max(min, Math.min(max, Math.floor(n)));
|
||
}
|
||
|
||
async function safeUnlink(p) {
|
||
try { await fs.unlink(p); } catch {}
|
||
}
|
||
|
||
/* ------------------------------------------------------------------ */
|
||
|
||
const port = Number(process.env.PORT) || 8080;
|
||
const server = app.listen(port, "0.0.0.0", () =>
|
||
console.log(`converter listening on :${port}`)
|
||
);
|
||
|
||
server.keepAliveTimeout = 5_000;
|
||
server.headersTimeout = 10_000;
|