This repository provides a simple api wrapper for puppeteer (the nodejs way to interact with google chrome headless). It also provides some functions to include it into a given application landscape (like creating the pdf and sending it back to a given endpoint of choice).
The CHANGELOG gives you information about the latest changes.
Install all the requirements for the application.
npm iDefine the required environment keys:
JWT_SECRET=2VRxS0s15nV2BnyVYcgBvKJwoaPeQdVXsaJylt96Jb9iypXOGylcTCTo8rS1E7Mk
JWT_ISSUER=http://localhost:8000/api/auth/login
PORT=3000
PERMISSION_BROWSE_CREATE=print
PERMISSION_BROWSE_READ=print
PERMISSION_BROWSE_DELETE=print
PERMISSION_BROWSE_UPDATE=print
npm run start Currently there are 3 ways of using this application:
- with JWT
- with Basic Auth
- without any authentication
Please be aware that we do not recommend the last implementations for server available from within the internet.
If you want to use the JWT Authentication the JWT must contain custom claims with:
- roles (Array)
- permissions (Array)
[POST]: If the claim contains a "" or the given PERMISSION_BROWSE_CREATE key it will proceed. [GET]: If the claim contains a "" or the given PERMISSION_BROWSE_READ key it will proceed. [DELETE]: If the claim contains a "" or the given PERMISSION_BROWSE_DELETE key it will proceed. [PUT]: If the claim contains a "" or the given PERMISSION_BROWSE_UPDATE key it will proceed.
Default: true This will be the default setting. Set this to false if you do not want to use JWT at all.
Provide a valid JWT Secret for the application. This application will not check if the user exists if the key is valid.
An addtional security check is the check of the given issuer. Please provide a valid url for the check -> otherwise the API will return a 403.
Default: true Please be aware that this setup will only be effective if you have set JWT_ACTIVE to false
Default: null You will need to set this to an appropiate name
Default: null Define a password in clear text.
The APP_KEY will be required if you do not provide a valid postBackUrl in the request body. In those cases the application will return you a signed download url.
The port is required if you want to start the application on a differnt port.
{
"url": "http://orf.at",
"filename": "my-wished-filename",
"postBackWait": true,
"postBackUrl": "http://where-should-it-be-posted",
"postBackBody": "{}",
"token": "CUSTOM AUTH-TOKEN",
"autodelete": false
}Provide the url of the page you want to be tranformed to a pdf document.
If you do not provide a filename (without the extension) a uuid will be used as filename. Please choose a unique string otherwise you potentially overwrite documents (name conflicts).
If you provide a postBackUrl the api will try to post the document to the given url. If this is not possible the endpoint will return a download url.
Provide a string of data you wanna send back to the url. Please be aware that only string (NOT json) is supported.
Default: true
Provide a boolean value if you want to wait for the complete answer of the postBackProcess.
Default: false
Provide a boolean value if you want to delete the file on the first download attempt.
If set to false the return value "uploaded" will always be false.
This endpoint will return a list of exsiting files in this container plus a signed url to access them without using credentials.
Example:
[
{
"file": "1f422c9b-a03c-4ea6-92cb-a47a3d842839.pdf",
"path": "http://localhost:3000/api/browse/1f422c9b-a03c-4ea6-92cb-a47a3d842839?signed=r:7322595290;5d10a8acc4810c24ea9e3bf03a8868e1",
"created_at": "2020-06-27T22:27:09.876Z",
"updated_at": "2020-06-27T22:27:09.876Z"
},
]This endpoint will return the file. Please be aware that there will be a query string required query string param signed.
Without this query string param the request will fail and you will get an 403.
To delete an file use this endpoint. The id-param can contain the .pdf file extension.
This repository provides a docker image and a docker-compose file as an example.
version: "3.1"
services:
app:
image: ambersive/print-api:latest
environment:
- JWT_ACTIVE=false
- BASIC_ACTIVE=true
- BASIC_USER=test
- BASIC_SECRET=test
restart: always
ports:
- "9005:3000"If you discover a security vulnerability within this application, please send an e-mail to Manuel Pirker-Ihl via [email protected]. All security vulnerabilities will be promptly addressed.