Method constructor

lib/server.ts:694–847

* Initialize the WebThingServer. * * For documentation on the additional route handlers, see: * http://expressjs.com/en/4x/api.html#app.use * * @param {Object} things Things managed by this server -- should be of type * SingleThing or MultipleThings * @par

(
    things: SingleThing|MultipleThings,
    port: number|null = null,
    hostname: string|null = null,
    sslOptions: https.ServerOptions|null = null,
    additionalRoutes: any[]|null = null,
    basePath = '/',
    disableHostValidation = false
  )

   *                                        lead to DNS rebinding attacks
   */
  constructor(
    things: SingleThing|MultipleThings,
    port: number|null = null,
    hostname: string|null = null,
    sslOptions: https.ServerOptions|null = null,
    additionalRoutes: any[]|null = null,
    basePath = '/',
    disableHostValidation = false
  ) {
    this.things = things;
    this.name = things.getName();
    this.port = Number(port) || (sslOptions ? 443 : 80);
    this.hostname = hostname;
    this.basePath = basePath.replace(/\/$/, '');
    this.disableHostValidation = !!disableHostValidation;

    const systemHostname = os.hostname().toLowerCase();
    this.hosts = [
      'localhost',
      `localhost:${port}`,
      `${systemHostname}.local`,
      `${systemHostname}.local:${port}`,
    ];

    utils.getAddresses().forEach((address) => {
      this.hosts.push(address, `${address}:${port}`);
    });

    if (hostname) {
      hostname = hostname.toLowerCase();
      this.hosts.push(hostname, `${hostname}:${port}`);
    }

    if (things instanceof MultipleThings) {
      const list = things.getThings();
      for (let i = 0; i < list.length; i++) {
        const thing = list[i];
        thing.setHrefPrefix(`${this.basePath}/${i}`);
      }
    } else {
      things.getThing().setHrefPrefix(this.basePath);
    }

    this.app = express();
    this.app.use(bodyParser.json());

    // Validate Host header
    this.app.use((request, response, next: () => unknown) => {
      const host = request.headers.host;
      if (this.disableHostValidation ||
          (host && this.hosts.includes(host.toLowerCase()))) {
        next();
      } else {
        response.status(403).send('Forbidden');
      }
    });

    // Set CORS headers