mirror of
https://github.com/danny-avila/LibreChat.git
synced 2025-09-22 08:12:00 +02:00

* fix: sanitize HTTP params and do not send whole error objects backs * fix: prevent path traversal * fix: send custom error message for tokenizer route * chore: handle info exposure vector * chore(oauth): skip check due to false positive as oauth routes are rate-limited * chore(app): disable `x-powered-by` * chore: disable false positives or flagging of hardcoded secrets when they are fake values * chore: add path traversal safety check
48 lines
1.4 KiB
JavaScript
48 lines
1.4 KiB
JavaScript
const express = require('express');
|
|
const crypto = require('crypto');
|
|
const { getPresets, savePreset, deletePresets } = require('~/models');
|
|
const requireJwtAuth = require('~/server/middleware/requireJwtAuth');
|
|
const { logger } = require('~/config');
|
|
|
|
const router = express.Router();
|
|
router.use(requireJwtAuth);
|
|
|
|
router.get('/', async (req, res) => {
|
|
const presets = (await getPresets(req.user.id)).map((preset) => preset);
|
|
res.status(200).json(presets);
|
|
});
|
|
|
|
router.post('/', async (req, res) => {
|
|
const update = req.body || {};
|
|
|
|
update.presetId = update?.presetId || crypto.randomUUID();
|
|
|
|
try {
|
|
const preset = await savePreset(req.user.id, update);
|
|
res.status(201).json(preset);
|
|
} catch (error) {
|
|
logger.error('[/presets] error saving preset', error);
|
|
res.status(500).send('There was an error when saving the preset');
|
|
}
|
|
});
|
|
|
|
router.post('/delete', async (req, res) => {
|
|
let filter = {};
|
|
const { presetId } = req.body || {};
|
|
|
|
if (presetId) {
|
|
filter = { presetId };
|
|
}
|
|
|
|
logger.debug('[/presets/delete] delete preset filter', filter);
|
|
|
|
try {
|
|
const deleteCount = await deletePresets(req.user.id, filter);
|
|
res.status(201).json(deleteCount);
|
|
} catch (error) {
|
|
logger.error('[/presets/delete] error deleting presets', error);
|
|
res.status(500).send('There was an error deleting the presets');
|
|
}
|
|
});
|
|
|
|
module.exports = router;
|