httpserver.js

var fs = require("fs"),
    url = require("url"),
    http = require("http"),
    https = require("https"),
    godauth = require("prezi-godauth");

//
// ===============================================
//
//                  HttpServer
//
// ===============================================
//

var HttpServer = function(settings) {
    // public:
    this.addUrlRewrite = function(pattern, rule) {
        _rewrites.push({"pattern": pattern, "rule": rule});
    };

    this.addGetHandler = function(pattern, callback) {
        _getHandlers.push({"pattern": pattern, "callback": callback});
    };

    this.addPostHandler = function(pattern, callback) {
        _postHandlers.push({"pattern": pattern, "callback": callback});
    };

    this.addDefaultGetHandler = function(callback) {
        _defaultGetHandler = callback;
    };

    this.addDefaultPostHandler = function(callback) {
        _defaultPostHandler = callback;
    };

    this.addGetLogger = function(callback) {
        _getLoggers.push(callback);
    };

    this.addPostLogger = function(callback) {
        _postLoggers.push(callback);
    };

    this.run = function() {
        if (_settings.catchExceptions) {
            try {
                _createServer();
            } catch(err) {
                log.error(err);
            }
        } else {
            _createServer();
        }
    };

    // private:
    var _createServer = function() {
        if (_settings.port == 443) {
            https.createServer(_options, function(request, response) {
                if (_settings.catchExceptions) {
                    try {
                        _handleRequest(request, response);
                    } catch(err) {
                        log.error(err);
                    }
                } else {
                    _handleRequest(request, response);
                }
            }).listen(_settings.port);
        } else {
            http.createServer(function(request, response) {
                if (_settings.catchExceptions) {
                    try {
                        _handleRequest(request, response);
                    } catch(err) {
                        log.error(err);
                    }
                } else {
                    _handleRequest(request, response);
                }
            }).listen(_settings.port);
        }
    };

    var _getHTTPAuthCredentials = function(request) {
        // Credits: http://stackoverflow.com/questions/5951552/basic-http-authentication-in-node-js

        var header = request.headers['authorization']||'',        // get the header
            token = header.split(/\s+/).pop()||'';                // and the encoded auth token
            if (token != '') {
                auth = new Buffer(token, 'base64').toString(),    // convert from base64
                parts = auth.split(/:/),                          // split on colon
                username = parts[0],
                password = parts[1];
                return { 'username': username, 'password': password };
            } else {
                return null;
            }
    }

    var _overrideGodAuthWithCredentials = function(request) {
        creds = _getHTTPAuthCredentials(request);
        if (creds === null)
            return false;
        else
            return (creds.username == _settings.godAuth.bypassUsername && creds.password == _settings.godAuth.bypassPassword);
    }

    var _handleRequest = function(request, response) {
        if ("godAuth" in _settings) {
            if (!_overrideGodAuthWithCredentials(request)) {
                var authenticator = godauth.create(_settings.godAuth.secret, "https://" + request.headers.host + request.url);
                authSuccess = authenticator.authenticateRequest(request, response);
                console.log(authSuccess);
                if (!authSuccess) {
                    console.log("GodAuth Authentication failed");
                    return;
                }
                console.log("GodAuth authentication succeeded");
            } else {
                console.log("Using HTTP Authentication instead of GodAuth");
            }
        }

        _handleTrailingSlashes(request, response);
        _handleUrlRewrites(request, response);

        request.urls = url.parse(request.url, true);
        if (!request.urls.pathname)
            request.urls.pathname = "";
        request.path = request.urls.pathname.substring(1); // get rid of leading '/'

        log.info("request to " + request.originalUrl);

        if (request.method == "GET")
            _handleGetRequest(request, response);
        else if (request.method == "POST")
            _handlePostRequest(request, response);
    };

    var _handleTrailingSlashes = function(request, response) {
        request.originalUrl = request.url;
        if (_settings.removeTrailingSlashes) {
            if (request.url[request.url.length - 1] == "/")
                request.url = request.url.substring(0, request.url.length - 1);
        }
    };

    var _handleUrlRewrites = function(request, response) {
        var i, max;
        for (i = 0, max = _rewrites.length; i < max; i += 1) {
            var rewrite = _rewrites[i];
            if (rewrite.pattern.test(request.url)) {
                request.url = rewrite.rule(request.url);
                return;
            }
        }
    };

    var _routeRequest = function(handlers, defaultHandler, request, response) {
        var i, max;
        for (i = 0, max = handlers.length; i < max; i += 1) {
            var handler = handlers[i];
            if (handler.pattern.test(request.url)) {
                handler.callback(request, response);
                return;
            }
        }
        defaultHandler(request, response);
    };

    var _handleGetRequest = function(request, response) {
        var i, max;
        for (i = 0, max = _getLoggers.length; i < max; i += 1) {
            _getLoggers[i](request);
        }
        _routeRequest(_getHandlers, _defaultGetHandler, request, response);
    };

    var _handlePostRequest = function(request, response) {
        var i, max;
        _savePostData(request);
        for (i = 0, max = _postLoggers.length; i < max; i += 1) {
            _postLoggers[i](request);
        }
        request.on("end", function() {
            _routeRequest(_postHandlers, _defaultPostHandler, request, response);
        });
    };

    var _savePostData = function(request) {
        request.postData = "";
        request.on("data", function(chunk) {
            request.postData += chunk.toString();
        });
    };

    var log = settings["logger"];
    var _settings = settings;
    var _rewrites = [];
    var _getHandlers = [];
    var _postHandlers = [];
    var _defaultGetHandler = function(request, response) {};
    var _defaultPostHandler = function(request, response) {};
    var _getLoggers = [];
    var _postLoggers = [];

    if (_settings.port == 443) {
        var _options = {
            key: fs.readFileSync(_settings.httpsOptions.key),
            cert: fs.readFileSync(_settings.httpsOptions.cert),
            secureProtocol: 'SSLv23_method',
            secureOptions: require('constants').SSL_OP_NO_SSLv3
        };
    }
};

module.exports.create = function(settings) {
    return new HttpServer(settings);
};