fix(repository): Move backend code into subdirectory

Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>

backend/src/config/note.config.ts

@@ -0,0 +1,116 @@
+/*
+ * SPDX-FileCopyrightText: 2022 The HedgeDoc developers (see AUTHORS file)
+ *
+ * SPDX-License-Identifier: AGPL-3.0-only
+ */
+import { registerAs } from '@nestjs/config';
+import * as Joi from 'joi';
+
+import {
+  DefaultAccessPermission,
+  getDefaultAccessPermissionOrdinal,
+} from './default-access-permission.enum';
+import { GuestAccess } from './guest_access.enum';
+import { buildErrorMessage, parseOptionalNumber, toArrayConfig } from './utils';
+
+export interface NoteConfig {
+  forbiddenNoteIds: string[];
+  maxDocumentLength: number;
+  guestAccess: GuestAccess;
+  permissions: {
+    default: {
+      everyone: DefaultAccessPermission;
+      loggedIn: DefaultAccessPermission;
+    };
+  };
+}
+
+const schema = Joi.object<NoteConfig>({
+  forbiddenNoteIds: Joi.array()
+    .items(Joi.string())
+    .optional()
+    .default([])
+    .label('HD_FORBIDDEN_NOTE_IDS'),
+  maxDocumentLength: Joi.number()
+    .default(100000)
+    .positive()
+    .integer()
+    .optional()
+    .label('HD_MAX_DOCUMENT_LENGTH'),
+  guestAccess: Joi.string()
+    .valid(...Object.values(GuestAccess))
+    .optional()
+    .default(GuestAccess.WRITE)
+    .label('HD_GUEST_ACCESS'),
+  permissions: {
+    default: {
+      everyone: Joi.string()
+        .valid(...Object.values(DefaultAccessPermission))
+        .optional()
+        .default(DefaultAccessPermission.READ)
+        .label('HD_PERMISSION_DEFAULT_EVERYONE'),
+      loggedIn: Joi.string()
+        .valid(...Object.values(DefaultAccessPermission))
+        .optional()
+        .default(DefaultAccessPermission.WRITE)
+        .label('HD_PERMISSION_DEFAULT_LOGGED_IN'),
+    },
+  },
+});
+
+function checkEveryoneConfigIsConsistent(config: NoteConfig): void {
+  const everyoneDefaultSet =
+    process.env.HD_PERMISSION_DEFAULT_EVERYONE !== undefined;
+  if (config.guestAccess === GuestAccess.DENY && everyoneDefaultSet) {
+    throw new Error(
+      `'HD_GUEST_ACCESS' is set to '${config.guestAccess}', but 'HD_PERMISSION_DEFAULT_EVERYONE' is also configured. Please remove 'HD_PERMISSION_DEFAULT_EVERYONE'.`,
+    );
+  }
+}
+
+function checkLoggedInUsersHaveHigherDefaultPermissionsThanGuests(
+  config: NoteConfig,
+): void {
+  const everyone = config.permissions.default.everyone;
+  const loggedIn = config.permissions.default.loggedIn;
+  if (
+    getDefaultAccessPermissionOrdinal(everyone) >
+    getDefaultAccessPermissionOrdinal(loggedIn)
+  ) {
+    throw new Error(
+      `'HD_PERMISSION_DEFAULT_EVERYONE' is set to '${everyone}', but 'HD_PERMISSION_DEFAULT_LOGGED_IN' is set to '${loggedIn}'. This gives everyone greater permissions than logged-in users which is not allowed.`,
+    );
+  }
+}
+
+export default registerAs('noteConfig', () => {
+  const noteConfig = schema.validate(
+    {
+      forbiddenNoteIds: toArrayConfig(process.env.HD_FORBIDDEN_NOTE_IDS, ','),
+      maxDocumentLength: parseOptionalNumber(
+        process.env.HD_MAX_DOCUMENT_LENGTH,
+      ),
+      guestAccess: process.env.HD_GUEST_ACCESS,
+      permissions: {
+        default: {
+          everyone: process.env.HD_PERMISSION_DEFAULT_EVERYONE,
+          loggedIn: process.env.HD_PERMISSION_DEFAULT_LOGGED_IN,
+        },
+      },
+    } as NoteConfig,
+    {
+      abortEarly: false,
+      presence: 'required',
+    },
+  );
+  if (noteConfig.error) {
+    const errorMessages = noteConfig.error.details.map(
+      (detail) => detail.message,
+    );
+    throw new Error(buildErrorMessage(errorMessages));
+  }
+  const config = noteConfig.value;
+  checkEveryoneConfigIsConsistent(config);
+  checkLoggedInUsersHaveHigherDefaultPermissionsThanGuests(config);
+  return config;
+});