New web server

Author: doZennn

.gitignore

@@ -1,3 +1,4 @@
 zoom-platform.sh
 innoextract*
-/www/out
+/www/out
+www/.env

.vscode/settings.json

@@ -0,0 +1,12 @@
+{
+  "deno.enable": true,
+  "deno.lint": true,
+  "deno.unstable": true,
+  "editor.formatOnSave": true,
+  "deno.enablePaths":[
+    "./www"
+  ],
+  "[typescript]": {
+    "editor.defaultFormatter": "denoland.vscode-deno"
+  }
+}

start-www.sh

@@ -0,0 +1,4 @@
+#!/bin/sh
+cd "www" || exit
+mkdir -p "dist"
+wget -O "dist/zoom-platform.sh" "https://github.com/ZOOM-Platform/zoom-platform.sh/releases/latest/download/zoom-platform.sh"

www/README.md

@@ -1,10 +1,12 @@
 # zoom-platform.sh website
-no frameworks, no fancy bundlers, just a towering html monolith
+Deno server only required if you want to be able to serve specific versions of the script.
 
 ## Deploying
 1. Clone this repo
-2. `cd www && build.sh` (All this does is download the latest release .sh and copy everything to `out`)
-3. Serve `www/out/`
+2. `./dist.sh`
+3. `./start-www.sh` (saves latest stable script to www/dist)
+4. `deno task start` (optional)
+5. Serve `www/dist`
 
 We can't use GitHub/CF Pages cause they force SSL. Server is running Nginx with a simple config:
 ```nginx
@@ -17,7 +19,11 @@ server {
         server_name zoom-platform.sh;
 
         location / {
-                try_files $uri $uri/ $uri.html /index.html;
+                try_files $uri $uri/ @proxy /index.html;
+        }
+
+        location @proxy {
+                proxy_pass http://0.0.0.0:23412;
         }
 }
 ```

www/build.sh

@@ -0,0 +1,29 @@
+{
+  "compilerOptions": {
+    "allowJs": true,
+    "lib": ["deno.window"],
+    "strict": true
+  },
+  "lint": {
+    "include": ["server.ts"],
+    "rules": {
+      "tags": ["recommended"],
+      "include": ["ban-untagged-todo"],
+      "exclude": ["no-unused-vars"]
+    }
+  },
+  "fmt": {
+    "useTabs": false,
+    "lineWidth": 80,
+    "indentWidth": 2,
+    "semiColons": false,
+    "singleQuote": true,
+    "proseWrap": "always",
+    "include": ["server.ts"]
+  },
+  "tasks": {
+    "start": "deno run --allow-read='./','../zoom-platform.sh',$(which deno) --allow-env --allow-run=git,sh --allow-sys=uid,gid --allow-net server.ts",
+    "dev": "deno run --allow-read='./','../zoom-platform.sh',$(which deno) --allow-env --allow-run=git,sh --allow-sys=uid,gid --allow-net --watch server.ts"
+  },
+  "exclude": ["dist/"]
+}

www/deno.json

@@ -0,0 +1,96 @@
+import { Hono } from 'jsr:@hono/hono'
+import { crypto } from 'jsr:@std/crypto'
+import { decodeHex } from 'jsr:@std/encoding/hex'
+import { load } from 'jsr:@std/dotenv'
+import { simpleGit } from 'https://esm.sh/[email protected]'
+
+const env = await load()
+
+const buildScriptFrom = async (src: string, hash: string = '') => {
+  const command = new Deno.Command('sh', {
+    args: [
+      '../build.sh',
+      src,
+      'innoextract-upx',
+      hash,
+    ],
+  })
+  const { code, stdout } = await command.output()
+  if (code === 0) {
+    return new TextDecoder().decode(stdout)
+  }
+  return `#!/bin/sh\nprintf "error building script from ${hash}\\n"`
+}
+
+const ac = new AbortController()
+const app = new Hono()
+
+app.get('/:commithash{[a-f\\d]{7,40}}', async (ctx) => {
+  const commithash = ctx.req.param('commithash')
+  try {
+    const srcFile = await simpleGit().show(`${commithash}:src.sh`)
+    const gittag = await simpleGit().tag(['--points-at', commithash])
+    let forcedVersion = gittag.trim()
+    if (!forcedVersion) forcedVersion = commithash.substring(0, 7)
+    const script = await buildScriptFrom(srcFile, forcedVersion)
+    return ctx.text(script)
+  } catch (err) {
+    //
+  }
+  return ctx.text(commithash, 404)
+})
+
+// latest commit is always built in parent
+app.get('/latest', async (ctx) => {
+  return ctx.text(await Deno.readTextFile('../zoom-platform.sh'))
+})
+
+// hook to kill server, should only trigger on push or release
+// when the server restarts the latest changes will get pulled
+app.post('/gh-hook', async (ctx) => {
+  const rawBody = await ctx.req.raw.text()
+  const sigHeader = ctx.req.header('X-Hub-Signature-256')
+  if (!rawBody || !sigHeader) return ctx.body(null, 401)
+
+  const parts = sigHeader.split('=')
+  const sigHex = parts[1]
+
+  try {
+    const te = new TextEncoder()
+    const key = await crypto.subtle.importKey(
+      'raw',
+      te.encode(env['GH_HOOK_SECRET']),
+      { name: 'HMAC', hash: { name: 'SHA-256' } },
+      false,
+      ['sign', 'verify'],
+    )
+    const data = te.encode(rawBody)
+    const verified = await crypto.subtle.verify(
+      'HMAC',
+      key,
+      decodeHex(sigHex),
+      data,
+    )
+    if (!verified) {
+      return ctx.status(401)
+    }
+  } catch (error) {
+    return ctx.status(401)
+  }
+
+  setTimeout(() => {
+    ac.abort()
+  }, 1000)
+
+  return ctx.text('bye', 200)
+})
+
+const server = Deno.serve({
+  port: 23412,
+  hostname: '0.0.0.0',
+  signal: ac.signal,
+}, app.fetch)
+
+server.finished.then(() => {
+  console.log('server is kill')
+})