feat: add web dashboard

This commit is contained in:
Anton Voylenko 2026-07-13 19:53:15 +03:00
commit 9033e09ac1
9 changed files with 966 additions and 1 deletions

View file

@ -46,6 +46,8 @@ AUTO_START_SESSIONS=TRUE
SESSIONS_PATH=./sessions
# OPTIONAL, ENABLE SWAGGER ENDPOINT FOR API DOCUMENTATION
ENABLE_SWAGGER_ENDPOINT=TRUE
# OPTIONAL, ENABLE SIMPLE WEB UI FOR SESSION MANAGEMENT AT /dashboard (FALSE BY DEFAULT)
ENABLE_WEB_UI=FALSE
## Reverse Proxy / Load Balancer ##
# OPTIONAL, BASE PATH FOR MOUNTING ROUTES (e.g., /api/v1/whatsapp)

View file

@ -44,6 +44,7 @@ COPY server.js ./
COPY LICENSE ./
COPY swagger.json ./
COPY src/ ./src/
COPY public/ ./public/
EXPOSE 3000

View file

@ -159,6 +159,10 @@ By setting the `DISABLED_CALLBACKS` environment variable you can specify what ev
By setting the `ENABLE_WEBHOOK` environment to `FALSE` you can disable webhook dispatching. This will help you if you want to switch to websocket method(see below).
### Web dashboard
The service ships with a simple web UI for session management. It is disabled by default — set the `ENABLE_WEB_UI` environment variable to `TRUE`, restart the service and go to the `/dashboard` endpoint. The dashboard lets you start, stop, restart and terminate sessions, scan the pairing QR code (or request a pairing code for a phone number) and inspect connected session details. If the `API_KEY` environment variable is set, enter the key in the dashboard header — it is stored in your browser's localStorage and sent as the `x-api-key` header with every request.
### Scanning QR code
In order to validate a new WhatsApp Web instance you need to scan the QR code using your mobile phone. Official documentation can be found at (https://faq.whatsapp.com/1079327266110265/?cms_platform=android) page. The service itself delivers the QR code content as a webhook event or you can use the REST endpoints (`/session/qr/:sessionId` or `/session/qr/:sessionId/image` to get the QR code as a png image).

397
public/dashboard/app.js Normal file
View file

@ -0,0 +1,397 @@
(function () {
const API_BASE = window.location.pathname.slice(0, window.location.pathname.lastIndexOf('/dashboard'))
const STORAGE_KEY = 'wwebjsApiKey'
// must match sessionNameValidation in src/middleware.js
const SESSION_ID_PATTERN = /^[\w-]+$/
const POLL_INTERVAL_MS = 5000
const QR_POLL_INTERVAL_MS = 3000
const $ = (id) => document.getElementById(id)
let pollTimer = null
let qrTimer = null
let qrSessionId = null
let qrObjectUrl = null
let authFailed = false
async function apiFetch (path, options = {}) {
const headers = Object.assign({}, options.headers)
const apiKey = window.localStorage.getItem(STORAGE_KEY)
if (apiKey) {
headers['x-api-key'] = apiKey
}
const response = await window.fetch(API_BASE + path, Object.assign({}, options, { headers, cache: 'no-store' }))
if (response.status === 403) {
authFailed = true
$('apiKeyBanner').classList.remove('hidden')
throw new Error('Invalid or missing API key')
}
return response
}
async function apiJson (path, options) {
const response = await apiFetch(path, options)
return response.json()
}
function showToast (message, isError) {
const toast = document.createElement('div')
toast.className = 'toast' + (isError ? ' toast-error' : '')
toast.textContent = message
$('toasts').appendChild(toast)
setTimeout(() => toast.remove(), 4000)
}
/*
* Sessions list
*/
async function refreshSessions () {
const body = await apiJson('/session/getSessions')
if (!body.success) {
throw new Error(body.error || 'Failed to fetch sessions')
}
const ids = body.result.sort()
const statuses = await Promise.all(
ids.map((id) => apiJson('/session/status/' + encodeURIComponent(id)).catch(() => null))
)
renderSessions(ids, statuses)
}
function renderSessions (ids, statuses) {
const tbody = $('sessionsBody')
tbody.textContent = ''
$('emptyState').classList.toggle('hidden', ids.length > 0)
ids.forEach((id, index) => {
const status = statuses[index]
const connected = Boolean(status && status.success && status.state === 'CONNECTED')
const row = document.createElement('tr')
const idCell = document.createElement('td')
idCell.className = 'session-id'
idCell.textContent = id
row.appendChild(idCell)
const statusCell = document.createElement('td')
const badge = document.createElement('span')
badge.className = 'badge ' + (connected ? 'badge-connected' : 'badge-pending')
badge.textContent = (status && status.state) || 'STARTING'
statusCell.appendChild(badge)
row.appendChild(statusCell)
const actionsCell = document.createElement('td')
actionsCell.className = 'actions-cell'
const actions = document.createElement('div')
actions.className = 'actions'
if (connected) {
actions.appendChild(actionButton('Details', () => openDetailsModal(id)))
} else {
actions.appendChild(actionButton('Show QR', () => openQrModal(id)))
}
actions.appendChild(actionButton('Restart', () => sessionAction(id, 'restart')))
actions.appendChild(actionButton('Stop', () => sessionAction(id, 'stop')))
actions.appendChild(actionButton('Terminate', () => sessionAction(id, 'terminate', 'Terminate session "' + id + '"? This logs out the linked device.'), 'danger'))
actionsCell.appendChild(actions)
row.appendChild(actionsCell)
tbody.appendChild(row)
})
}
function actionButton (label, onClick, extraClass) {
const button = document.createElement('button')
button.type = 'button'
button.className = 'secondary' + (extraClass ? ' ' + extraClass : '')
button.textContent = label
button.addEventListener('click', onClick)
return button
}
async function sessionAction (id, action, confirmMessage) {
if (confirmMessage && !window.confirm(confirmMessage)) {
return
}
try {
const body = await apiJson('/session/' + action + '/' + encodeURIComponent(id))
if (body.success) {
showToast(id + ': ' + (body.message || action + ' completed'))
} else {
showToast(id + ': ' + (body.error || body.message || action + ' failed'), true)
}
} catch (error) {
showToast(error.message, true)
}
refreshNow()
}
async function globalAction (path, confirmMessage) {
if (confirmMessage && !window.confirm(confirmMessage)) {
return
}
try {
const body = await apiJson(path)
showToast(body.message || body.error || 'Done', !body.success)
} catch (error) {
showToast(error.message, true)
}
refreshNow()
}
/*
* Polling
*/
function refreshNow () {
clearTimeout(pollTimer)
pollLoop()
}
async function pollLoop () {
if (!document.hidden && !authFailed) {
try {
await refreshSessions()
} catch {
// errors surface through the API key banner or action toasts
}
}
pollTimer = setTimeout(pollLoop, POLL_INTERVAL_MS)
}
/*
* Add session
*/
function openStartModal () {
$('newSessionId').value = ''
$('addSessionError').classList.add('hidden')
$('startModal').classList.remove('hidden')
$('newSessionId').focus()
}
function closeStartModal () {
$('startModal').classList.add('hidden')
}
async function startNewSession (event) {
event.preventDefault()
const input = $('newSessionId')
const errorEl = $('addSessionError')
const id = input.value.trim()
if (!SESSION_ID_PATTERN.test(id)) {
errorEl.textContent = 'Session id should be alphanumerical or -'
errorEl.classList.remove('hidden')
return
}
errorEl.classList.add('hidden')
const button = $('startSubmitBtn')
button.disabled = true
button.textContent = 'Starting…'
try {
const body = await apiJson('/session/start/' + encodeURIComponent(id))
if (body.success) {
showToast(id + ': ' + body.message)
closeStartModal()
openQrModal(id)
} else {
showToast(id + ': ' + (body.error || body.message), true)
}
} catch (error) {
showToast(error.message, true)
}
button.disabled = false
button.textContent = 'Start'
refreshNow()
}
/*
* QR modal
*/
function openQrModal (id) {
clearTimeout(qrTimer)
qrSessionId = id
$('qrSessionName').textContent = id
$('qrImage').classList.add('hidden')
$('qrConnected').classList.add('hidden')
$('qrWaiting').textContent = 'Waiting for QR code…'
$('qrWaiting').classList.remove('hidden')
$('pairingCode').classList.add('hidden')
$('pairingPhone').value = ''
$('qrModal').classList.remove('hidden')
qrTick()
}
async function qrTick () {
try {
const status = await apiJson('/session/status/' + encodeURIComponent(qrSessionId))
if (status.message === 'session_not_found') {
$('qrImage').classList.add('hidden')
$('qrWaiting').classList.remove('hidden')
$('qrWaiting').textContent = 'Session no longer exists'
refreshNow()
return
}
if (status.success && status.state === 'CONNECTED') {
$('qrWaiting').classList.add('hidden')
$('qrImage').classList.add('hidden')
$('qrConnected').classList.remove('hidden')
refreshNow()
return
}
const response = await apiFetch('/session/qr/' + encodeURIComponent(qrSessionId) + '/image')
const contentType = response.headers.get('content-type') || ''
// the endpoint responds 200 with a JSON body when the QR is not ready
if (contentType.startsWith('image/png')) {
const blob = await response.blob()
if (qrObjectUrl) {
URL.revokeObjectURL(qrObjectUrl)
}
qrObjectUrl = URL.createObjectURL(blob)
const image = $('qrImage')
image.src = qrObjectUrl
image.classList.remove('hidden')
$('qrWaiting').classList.add('hidden')
}
} catch {
// keep polling; auth errors surface through the API key banner
}
qrTimer = setTimeout(qrTick, QR_POLL_INTERVAL_MS)
}
function closeQrModal () {
clearTimeout(qrTimer)
if (qrObjectUrl) {
URL.revokeObjectURL(qrObjectUrl)
qrObjectUrl = null
}
$('qrModal').classList.add('hidden')
refreshNow()
}
async function requestPairingCode () {
const phoneNumber = $('pairingPhone').value.replace(/\D/g, '')
if (!phoneNumber) {
showToast('Enter the phone number in international format, digits only', true)
return
}
const button = $('pairingBtn')
button.disabled = true
try {
const body = await apiJson('/session/requestPairingCode/' + encodeURIComponent(qrSessionId), {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ phoneNumber, showNotification: true })
})
if (body.success) {
const codeEl = $('pairingCode')
codeEl.textContent = body.result
codeEl.classList.remove('hidden')
} else {
showToast(body.error || body.message || 'Failed to request pairing code', true)
}
} catch (error) {
showToast(error.message, true)
}
button.disabled = false
}
/*
* Details modal
*/
async function openDetailsModal (id) {
$('detailsSessionName').textContent = id
const list = $('detailsList')
list.textContent = ''
$('detailsModal').classList.remove('hidden')
try {
const status = await apiJson('/session/status/' + encodeURIComponent(id))
addDetail(list, 'State', status.state || status.message)
if (status.success && status.state === 'CONNECTED') {
const body = await apiJson('/client/getClassInfo/' + encodeURIComponent(id))
const info = body.sessionInfo || {}
addDetail(list, 'Phone number', info.wid && info.wid.user)
addDetail(list, 'Push name', info.pushname)
addDetail(list, 'Platform', info.platform)
}
} catch (error) {
showToast(error.message, true)
}
}
function addDetail (list, label, value) {
const dt = document.createElement('dt')
dt.textContent = label
const dd = document.createElement('dd')
dd.textContent = value || '—'
list.appendChild(dt)
list.appendChild(dd)
}
/*
* API key
*/
function saveApiKey () {
const value = $('apiKeyInput').value.trim()
if (value) {
window.localStorage.setItem(STORAGE_KEY, value)
} else {
window.localStorage.removeItem(STORAGE_KEY)
}
authFailed = false
$('apiKeyBanner').classList.add('hidden')
showToast('API key saved')
refreshNow()
}
// the swagger endpoint is optional (ENABLE_SWAGGER_ENDPOINT); only show the link when it responds
async function checkApiDocs () {
try {
const response = await window.fetch(API_BASE + '/api-docs', { method: 'HEAD', cache: 'no-store' })
if (response.ok) {
$('apiDocsLink').classList.remove('hidden')
}
} catch {
// endpoint unavailable; keep the link hidden
}
}
function init () {
$('apiKeyInput').value = window.localStorage.getItem(STORAGE_KEY) || ''
checkApiDocs()
$('apiKeySaveBtn').addEventListener('click', saveApiKey)
$('addSessionBtn').addEventListener('click', openStartModal)
$('addSessionForm').addEventListener('submit', startNewSession)
$('startCloseBtn').addEventListener('click', closeStartModal)
$('refreshBtn').addEventListener('click', () => refreshNow())
$('terminateInactiveBtn').addEventListener('click', () => globalAction('/session/terminateInactive', 'Terminate all inactive sessions?'))
$('terminateAllBtn').addEventListener('click', () => globalAction('/session/terminateAll', 'Terminate ALL sessions? This logs out every linked device.'))
$('qrCloseBtn').addEventListener('click', closeQrModal)
$('pairingBtn').addEventListener('click', requestPairingCode)
$('detailsCloseBtn').addEventListener('click', () => $('detailsModal').classList.add('hidden'))
$('startModal').addEventListener('click', (event) => {
if (event.target === $('startModal')) {
closeStartModal()
}
})
$('qrModal').addEventListener('click', (event) => {
if (event.target === $('qrModal')) {
closeQrModal()
}
})
$('detailsModal').addEventListener('click', (event) => {
if (event.target === $('detailsModal')) {
$('detailsModal').classList.add('hidden')
}
})
document.addEventListener('visibilitychange', () => {
if (!document.hidden) {
refreshNow()
}
})
pollLoop()
}
init()
})()

103
public/dashboard/index.html Normal file
View file

@ -0,0 +1,103 @@
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>WWebJS API Dashboard</title>
<link rel="stylesheet" href="style.css">
</head>
<body>
<header>
<h1>WWebJS API Dashboard</h1>
<div class="header-actions">
<a id="apiDocsLink" class="header-link hidden" href="../api-docs" target="_blank" rel="noopener">API docs</a>
<div class="api-key-controls">
<input type="password" id="apiKeyInput" placeholder="API key (leave empty if not set)" autocomplete="off">
<button type="button" id="apiKeySaveBtn">Save</button>
</div>
</div>
</header>
<div id="apiKeyBanner" class="banner hidden">Invalid or missing API key &mdash; enter it above and press Save.</div>
<main>
<section class="toolbar">
<button type="button" id="addSessionBtn">Start session</button>
<div class="global-actions">
<button type="button" id="refreshBtn" class="secondary">Refresh</button>
<button type="button" id="terminateInactiveBtn" class="secondary danger">Terminate inactive</button>
<button type="button" id="terminateAllBtn" class="secondary danger">Terminate all</button>
</div>
</section>
<section>
<table>
<thead>
<tr>
<th>Session</th>
<th>Status</th>
<th class="actions-col">Actions</th>
</tr>
</thead>
<tbody id="sessionsBody"></tbody>
</table>
<p id="emptyState" class="empty hidden">No active sessions. Start one above.</p>
</section>
</main>
<div id="startModal" class="modal-overlay hidden">
<div class="modal">
<div class="modal-header">
<h2>Start new session</h2>
<button type="button" class="close-btn" id="startCloseBtn">&times;</button>
</div>
<div class="modal-body">
<form id="addSessionForm" class="start-form">
<input type="text" id="newSessionId" placeholder="Session id" autocomplete="off">
<button type="submit" id="startSubmitBtn">Start</button>
</form>
<p id="addSessionError" class="field-error hidden"></p>
</div>
</div>
</div>
<div id="qrModal" class="modal-overlay hidden">
<div class="modal">
<div class="modal-header">
<h2>Link device &mdash; <span id="qrSessionName"></span></h2>
<button type="button" class="close-btn" id="qrCloseBtn">&times;</button>
</div>
<div class="modal-body">
<div id="qrWaiting" class="qr-placeholder">Waiting for QR code&hellip;</div>
<img id="qrImage" class="hidden" alt="WhatsApp QR code">
<div id="qrConnected" class="qr-success hidden">&#10003; Connected</div>
<p class="hint">Scan with WhatsApp on your phone: Settings &rarr; Linked devices &rarr; Link a device.</p>
<details>
<summary>Pair with phone number instead</summary>
<div class="pairing-form">
<input type="text" id="pairingPhone" placeholder="e.g. 12025550108" autocomplete="off">
<button type="button" id="pairingBtn">Get pairing code</button>
</div>
<div id="pairingCode" class="pairing-code hidden"></div>
</details>
</div>
</div>
</div>
<div id="detailsModal" class="modal-overlay hidden">
<div class="modal">
<div class="modal-header">
<h2>Session details &mdash; <span id="detailsSessionName"></span></h2>
<button type="button" class="close-btn" id="detailsCloseBtn">&times;</button>
</div>
<div class="modal-body">
<dl id="detailsList"></dl>
</div>
</div>
</div>
<div id="toasts"></div>
<script src="app.js"></script>
</body>
</html>

396
public/dashboard/style.css Normal file
View file

@ -0,0 +1,396 @@
:root {
--accent: #00a884;
--accent-dark: #008f72;
--danger: #dc3545;
--bg: #f0f2f5;
--surface: #ffffff;
--text: #111b21;
--muted: #667781;
--border: #e9edef;
}
* {
box-sizing: border-box;
}
body {
margin: 0;
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;
background: var(--bg);
color: var(--text);
}
header {
display: flex;
align-items: center;
justify-content: space-between;
gap: 16px;
flex-wrap: wrap;
padding: 14px 24px;
background: var(--accent);
color: #fff;
}
header h1 {
font-size: 18px;
margin: 0;
}
.header-actions {
display: flex;
gap: 8px;
align-items: center;
flex-wrap: wrap;
}
.header-link {
color: #fff;
border: 1px solid rgba(255, 255, 255, 0.6);
border-radius: 6px;
padding: 7px 14px;
font-size: 14px;
text-decoration: none;
}
.header-link:hover {
background: rgba(255, 255, 255, 0.12);
}
.api-key-controls {
display: flex;
gap: 8px;
}
.api-key-controls input {
border: none;
border-radius: 6px;
padding: 8px 10px;
min-width: 260px;
}
.api-key-controls button {
background: #fff;
color: var(--accent-dark);
font-weight: 600;
}
.banner {
background: #fff3cd;
color: #8a6d1a;
padding: 10px 24px;
font-size: 14px;
}
main {
max-width: 960px;
margin: 24px auto;
padding: 0 16px;
display: grid;
gap: 16px;
}
.toolbar {
display: flex;
justify-content: space-between;
align-items: center;
gap: 12px;
flex-wrap: wrap;
}
.start-form {
display: flex;
gap: 8px;
width: 100%;
}
.start-form input {
flex: 1;
padding: 8px 10px;
border: 1px solid var(--border);
border-radius: 6px;
font-size: 14px;
}
.global-actions {
display: flex;
gap: 8px;
flex-wrap: wrap;
}
.field-error {
color: var(--danger);
font-size: 13px;
margin: 0;
}
button {
border: none;
border-radius: 6px;
padding: 8px 14px;
background: var(--accent);
color: #fff;
font-size: 14px;
cursor: pointer;
}
button:hover {
background: var(--accent-dark);
}
button:disabled {
opacity: 0.6;
cursor: default;
}
button.secondary {
background: var(--surface);
color: var(--text);
border: 1px solid var(--border);
}
button.secondary:hover {
background: var(--bg);
}
button.secondary.danger {
color: var(--danger);
}
table {
width: 100%;
border-collapse: collapse;
background: var(--surface);
border-radius: 10px;
overflow: hidden;
box-shadow: 0 1px 2px rgba(0, 0, 0, 0.06);
}
th,
td {
text-align: left;
padding: 12px 16px;
border-bottom: 1px solid var(--border);
font-size: 14px;
}
thead th {
color: var(--muted);
text-transform: uppercase;
font-size: 12px;
letter-spacing: 0.04em;
}
tbody tr:last-child td {
border-bottom: none;
}
.session-id {
font-weight: 600;
overflow-wrap: anywhere;
}
.actions-col,
td.actions-cell {
text-align: right;
}
.actions {
display: flex;
gap: 6px;
flex-wrap: wrap;
justify-content: flex-end;
}
.badge {
display: inline-block;
padding: 3px 10px;
border-radius: 999px;
font-size: 12px;
font-weight: 600;
}
.badge-connected {
background: #d9fdd3;
color: #0b6b48;
}
.badge-pending {
background: #fff3cd;
color: #8a6d1a;
}
.empty {
color: var(--muted);
text-align: center;
padding: 24px;
background: var(--surface);
border-radius: 10px;
margin: 0;
}
.modal-overlay {
position: fixed;
inset: 0;
background: rgba(17, 27, 33, 0.55);
display: flex;
align-items: center;
justify-content: center;
padding: 16px;
z-index: 100;
}
.modal {
background: var(--surface);
border-radius: 12px;
max-width: 420px;
width: 100%;
box-shadow: 0 12px 40px rgba(0, 0, 0, 0.25);
}
.modal-header {
display: flex;
justify-content: space-between;
align-items: center;
gap: 12px;
padding: 14px 18px;
border-bottom: 1px solid var(--border);
}
.modal-header h2 {
font-size: 16px;
margin: 0;
overflow-wrap: anywhere;
}
.close-btn {
background: none;
color: var(--muted);
font-size: 22px;
line-height: 1;
padding: 0 4px;
}
.close-btn:hover {
background: none;
color: var(--text);
}
.modal-body {
padding: 18px;
display: grid;
gap: 12px;
justify-items: center;
}
#qrImage {
width: 264px;
height: 264px;
image-rendering: pixelated;
}
.qr-placeholder {
width: 264px;
height: 264px;
display: flex;
align-items: center;
justify-content: center;
background: var(--bg);
border-radius: 8px;
color: var(--muted);
font-size: 14px;
}
.qr-success {
font-size: 20px;
color: #0b6b48;
font-weight: 700;
padding: 40px 0;
}
.hint {
font-size: 12px;
color: var(--muted);
margin: 0;
text-align: center;
}
details {
width: 100%;
font-size: 14px;
}
summary {
cursor: pointer;
color: var(--accent-dark);
}
.pairing-form {
display: flex;
gap: 8px;
margin-top: 10px;
}
.pairing-form input {
flex: 1;
padding: 8px 10px;
border: 1px solid var(--border);
border-radius: 6px;
font-size: 14px;
}
.pairing-code {
font-size: 26px;
font-weight: 700;
letter-spacing: 0.2em;
text-align: center;
margin-top: 12px;
}
#detailsList {
width: 100%;
margin: 0;
display: grid;
grid-template-columns: auto 1fr;
gap: 6px 16px;
font-size: 14px;
}
#detailsList dt {
color: var(--muted);
}
#detailsList dd {
margin: 0;
font-weight: 600;
overflow-wrap: anywhere;
}
#toasts {
position: fixed;
top: 16px;
left: 50%;
transform: translateX(-50%);
display: grid;
gap: 8px;
justify-items: center;
z-index: 200;
}
.toast {
background: #111b21;
color: #fff;
padding: 10px 16px;
border-radius: 8px;
font-size: 14px;
box-shadow: 0 4px 14px rgba(0, 0, 0, 0.25);
max-width: 340px;
overflow-wrap: anywhere;
}
.toast-error {
background: var(--danger);
}
.hidden {
display: none !important;
}

View file

@ -11,6 +11,7 @@ const maxAttachmentSize = parseInt(process.env.MAX_ATTACHMENT_SIZE) || 10000000
const setMessagesAsSeen = (process.env.SET_MESSAGES_AS_SEEN || '').toLowerCase() === 'true'
const disabledCallbacks = process.env.DISABLED_CALLBACKS ? process.env.DISABLED_CALLBACKS.split('|') : []
const enableSwaggerEndpoint = (process.env.ENABLE_SWAGGER_ENDPOINT || '').toLowerCase() === 'true'
const enableWebUI = (process.env.ENABLE_WEB_UI || '').toLowerCase() === 'true'
const webVersion = process.env.WEB_VERSION
const webVersionCacheType = process.env.WEB_VERSION_CACHE_TYPE || 'none'
const rateLimitMax = parseInt(process.env.RATE_LIMIT_MAX) || 1000
@ -39,6 +40,7 @@ module.exports = {
setMessagesAsSeen,
disabledCallbacks,
enableSwaggerEndpoint,
enableWebUI,
webVersion,
webVersionCacheType,
rateLimitMax,

View file

@ -1,8 +1,9 @@
const express = require('express')
const path = require('path')
const routes = express.Router()
const swaggerUi = require('swagger-ui-express')
const swaggerDocument = require('../swagger.json')
const { enableLocalCallbackExample, enableSwaggerEndpoint } = require('./config')
const { enableLocalCallbackExample, enableSwaggerEndpoint, enableWebUI } = require('./config')
const middleware = require('./middleware')
const healthController = require('./controllers/healthController')
@ -262,4 +263,22 @@ if (enableSwaggerEndpoint) {
routes.get('/api-docs', swaggerUi.setup(swaggerDocument) /* #swagger.ignore = true */)
}
/**
* ================
* WEB UI ENDPOINTS
* ================
*/
if (enableWebUI) {
routes.get('/dashboard', (req, res, next) => {
// #swagger.ignore = true
// redirect to the trailing-slash URL so relative asset paths resolve correctly
const urlPath = req.originalUrl.split('?')[0]
if (!urlPath.endsWith('/')) {
return res.redirect(301, urlPath + '/')
}
next()
})
routes.use('/dashboard', express.static(path.join(__dirname, '../public/dashboard')))
}
module.exports = { routes }

41
tests/dashboard.test.js Normal file
View file

@ -0,0 +1,41 @@
const request = require('supertest')
// Mock your application's environment variables
process.env.API_KEY = 'test_api_key'
process.env.SESSIONS_PATH = './sessions_test'
process.env.ENABLE_WEB_UI = 'TRUE'
const app = require('../src/app')
jest.mock('qrcode-terminal')
describe('Web UI dashboard', () => {
it('should serve the dashboard page', async () => {
const response = await request(app).get('/dashboard/')
expect(response.status).toBe(200)
expect(response.headers['content-type']).toMatch(/html/)
expect(response.text).toContain('<title>WWebJS API Dashboard</title>')
})
it('should redirect /dashboard to /dashboard/', async () => {
const response = await request(app).get('/dashboard')
expect(response.status).toBe(301)
expect(response.headers.location).toBe('/dashboard/')
})
it('should serve the dashboard assets', async () => {
const response = await request(app).get('/dashboard/app.js')
expect(response.status).toBe(200)
expect(response.headers['content-type']).toMatch(/javascript/)
})
it('should not serve the dashboard when disabled', async () => {
process.env.ENABLE_WEB_UI = 'FALSE'
let disabledApp
jest.isolateModules(() => {
disabledApp = require('../src/app')
})
const response = await request(disabledApp).get('/dashboard/')
expect(response.status).toBe(404)
process.env.ENABLE_WEB_UI = 'TRUE'
})
})