Kyoo/Kyoo.WebApp/WebAppModule.cs

using System;
using System.Collections.Generic;
using System.IO;
using Kyoo.Controllers;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Hosting;
using Microsoft.AspNetCore.SpaServices.AngularCli;
using Microsoft.AspNetCore.StaticFiles;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.FileProviders;
using Microsoft.Extensions.Hosting;
using Microsoft.Extensions.Logging;

namespace Kyoo.WebApp
{
	/// <summary>
	/// A module to enable the web-app (the front-end of kyoo).
	/// </summary>
	public class WebAppModule : IPlugin
	{
		/// <inheritdoc />
		public string Slug => "webapp";
		
		/// <inheritdoc />
		public string Name => "WebApp";

		/// <inheritdoc />
		public string Description => "A module to enable the web-app (the front-end of kyoo).";

		/// <inheritdoc />
		public Dictionary<string, Type> Configuration => new();

		/// <inheritdoc />
		public bool Enabled => Directory.Exists(Path.Combine(AppDomain.CurrentDomain.BaseDirectory, "wwwroot"));


		/// <summary>
		/// A logger only used to inform the user if the webapp could not be enabled.
		/// </summary>
		private readonly ILogger<WebAppModule> _logger;
		
		/// <summary>
		/// Create a new <see cref="WebAppModule"/>.
		/// </summary>
		/// <param name="logger">A logger only used to inform the user if the webapp could not be enabled.</param>
		public WebAppModule(ILogger<WebAppModule> logger)
		{
			_logger = logger;
		}
		
		/// <inheritdoc />
		public void Disabled()
		{
			_logger.LogError("The web app files could not be found, it will be disabled. " +
				"If you cloned the project, you probably forgot to use the --recurse flag");
		}
		
		/// <inheritdoc />
		public void Configure(IServiceCollection services)
		{
			services.AddSpaStaticFiles(x =>
			{
				x.RootPath = Path.Join(AppDomain.CurrentDomain.BaseDirectory, "wwwroot");
			});
		}
		
		/// <inheritdoc />
		public IEnumerable<IStartupAction> ConfigureSteps => new IStartupAction[]
		{
			SA.New<IApplicationBuilder, IWebHostEnvironment>((app, env) =>
			{
				if (!env.IsDevelopment())
					app.UseSpaStaticFiles();
			}, SA.StaticFiles),
			SA.New<IApplicationBuilder, IContentTypeProvider>((app, contentTypeProvider) =>
			{
				app.UseStaticFiles(new StaticFileOptions
				{
					ContentTypeProvider = contentTypeProvider,
					FileProvider = new PhysicalFileProvider(Path.Join(AppDomain.CurrentDomain.BaseDirectory, "wwwroot"))
				});
			}, SA.StaticFiles),
			SA.New<IApplicationBuilder>(app =>
			{
				app.Use((ctx, next) => 
				{
					ctx.Response.Headers.Remove("X-Powered-By");
					ctx.Response.Headers.Remove("Server");
					ctx.Response.Headers.Add("Feature-Policy", "autoplay 'self'; fullscreen");
					ctx.Response.Headers.Add("Content-Security-Policy", "default-src 'self' blob:; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src 'self'");
					ctx.Response.Headers.Add("X-Frame-Options", "SAMEORIGIN");
					ctx.Response.Headers.Add("Referrer-Policy", "no-referrer");
					ctx.Response.Headers.Add("Access-Control-Allow-Origin", "null");
					ctx.Response.Headers.Add("X-Content-Type-Options", "nosniff");
					return next();
				});
			}, SA.Endpoint - 499),
			SA.New<IApplicationBuilder, IWebHostEnvironment>((app, env) =>
			{
				app.UseSpa(spa =>
				{
					spa.Options.SourcePath = Path.Join(AppDomain.CurrentDomain.BaseDirectory, "Kyoo.WebApp", "Front");
			
					if (env.IsDevelopment())
						spa.UseAngularCliServer("start");
				});
			}, SA.Endpoint - 500)
		};
	}
}