feat(logs): fixes #38 - logs via websocket

Author: RustyRory

vps-monitor-app/api/server.js

@@ -119,20 +119,31 @@ app.post('/api/container/start', requireAuth, async (req, res) => {
 
 // --- WebSocket : logs en temps réel ---
 
+const wsTokens = new Map();
+
+app.get('/api/ws-token', requireAuth, (_req, res) => {
+  const token = Math.random().toString(36).slice(2) + Math.random().toString(36).slice(2);
+  wsTokens.set(token, Date.now() + 30_000);
+  res.json({ token });
+});
+
 const server = createServer(app);
 const wss = new WebSocketServer({ noServer: true });
 
 server.on('upgrade', (req, socket, head) => {
-  const mockRes = { writeHead: () => {}, end: () => {}, getHeader: () => null, setHeader: () => {} };
-  sessionMiddleware(req, mockRes, () => {
-    if (!req.session.authenticated) {
-      socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
-      socket.destroy();
-      return;
-    }
-    wss.handleUpgrade(req, socket, head, (ws) => {
-      wss.emit('connection', ws, req);
-    });
+  const url = new URL(req.url, 'http://localhost');
+  const token = url.searchParams.get('token');
+  const expiry = token && wsTokens.get(token);
+
+  if (!expiry || Date.now() > expiry) {
+    socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
+    socket.destroy();
+    return;
+  }
+  wsTokens.delete(token);
+
+  wss.handleUpgrade(req, socket, head, (ws) => {
+    wss.emit('connection', ws, req);
   });
 });
 

vps-monitor-app/public/app.js

@@ -27,7 +27,7 @@ async function containerAction(action, name) {
 
 let activeLogSocket = null;
 
-function showLogs(name) {
+async function showLogs(name) {
   if (activeLogSocket) {
     activeLogSocket.close();
     activeLogSocket = null;
@@ -37,12 +37,20 @@ function showLogs(name) {
   const title = document.getElementById('logs-title');
   const content = document.getElementById('logs-content');
   title.textContent = `Logs — ${name}`;
-  content.textContent = '';
+  content.textContent = 'Connexion…';
   modal.classList.remove('hidden');
 
+  const tokenRes = await fetch('/api/ws-token');
+  if (!tokenRes.ok) {
+    content.textContent = 'Erreur: impossible d\'obtenir un token';
+    return;
+  }
+  const { token } = await tokenRes.json();
+
   const proto = location.protocol === 'https:' ? 'wss:' : 'ws:';
-  const ws = new WebSocket(`${proto}//${location.host}/ws/logs?name=${encodeURIComponent(name)}&tail=200`);
+  const ws = new WebSocket(`${proto}//${location.host}/ws/logs?name=${encodeURIComponent(name)}&tail=200&token=${token}`);
   activeLogSocket = ws;
+  content.textContent = '';
 
   ws.onmessage = (e) => {
     content.textContent += e.data;