feat(nodejs): control access to forgotten page using config variable

web/documentserver-example/nodejs/app.js

@@ -37,6 +37,7 @@ const users = require('./helpers/users');
 
 const configServer = config.get('server');
 const siteUrl = configServer.get('siteUrl');
+const enableForgotten = configServer.get('enableForgotten');
 const fileChoiceUrl = configServer.has('fileChoiceUrl') ? configServer.get('fileChoiceUrl') : '';
 const cfgSignatureEnable = configServer.get('token.enable');
 const cfgSignatureUseForRequest = configServer.get('token.useforrequest');
@@ -99,6 +100,7 @@ app.get('/', (req, res) => { // define a handler for default page
       users,
       languages: configServer.get('languages'),
       serverVersion: config.get('version'),
+      enableForgotten,
     });
   } catch (ex) {
     console.log(ex); // display error message in the console
@@ -108,6 +110,15 @@ app.get('/', (req, res) => { // define a handler for default page
 });
 
 app.get('/forgotten', async (req, res) => {
+  if (!enableForgotten) {
+    res.status(403);
+    res.render(
+      'error',
+      { message: 'The forgotten page is disabled.' }
+    );
+    return;
+  }
+
   function getForgottenList() {
     return new Promise((resolve, reject) => {
       documentService.commandRequest('getForgottenList', '', (err, data, ress) => {
@@ -152,6 +163,11 @@ app.get('/forgotten', async (req, res) => {
 });
 
 app.delete('/forgotten', (req, res) => { // define a handler for removing forgotten file
+  if (!enableForgotten) {
+    res.sendStatus(403);
+    return;
+  }
+
   try {
     const fileName = req.query.filename;
     if (fileName && typeof fileName === 'string') { // if the forgotten file name is defined

web/documentserver-example/nodejs/config/default.json

@@ -26,6 +26,7 @@
     "storagePath": "/files",
     "maxFileSize": 1073741824,
     "maxNameLength": 50,
+    "enableForgotten": true,
     "mobileRegEx": "android|avantgo|playbook|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od|ad)|iris|kindle|lge |maemo|midp|mmp|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\\/|plucker|pocket|psp|symbian|treo|up\\.(browser|link)|vodafone|wap|windows (ce|phone)|xda|xiino",
     "token": {
         "enable": false,

web/documentserver-example/nodejs/helpers/wopi/wopiRouting.js

@@ -85,6 +85,7 @@ exports.registerRoutes = function registerRoutes(app) {
         editedExts,
         fillExts,
         languages: configServer.get('languages'),
+        enableForgotten: configServer.get('enableForgotten'),
       });
     } catch (ex) {
       console.log(ex); // display error message in the console

web/documentserver-example/nodejs/views/index.ejs

@@ -120,9 +120,11 @@
                                 <li>
                                     <a href="wopi">Wopi</a>
                                 </li>
-                                <li>
+                                <% if (enableForgotten) { %>
-                                    <a href="forgotten">Forgotten files</a>
+                                    <li>
-                                </li>
+                                        <a href="forgotten">Forgotten files</a>
+                                    </li>
+                                <% } %>
                             </menu>
                             <div id="portal-info" style="display: <%= storedFiles.length > 0 ? "none" : "table-cell" %>">
                                 <span class="portal-name">ONLYOFFICE Document Editors – Welcome!</span>

web/documentserver-example/nodejs/views/wopiIndex.ejs

@@ -111,9 +111,11 @@
                                 <li class="active">
                                     <a href="wopi">Wopi</a>
                                 </li>
-                                <li>
+                                <% if (enableForgotten) { %>
-                                    <a href="forgotten">Forgotten files</a>
+                                    <li>
-                                </li>
+                                        <a href="forgotten">Forgotten files</a>
+                                    </li>
+                                <% } %>
                             </menu>
                             <div id="portal-info" style="display: <%= storedFiles.length > 0 ? "none" : "table-cell" %>">
                             <% if (!wopiEnable)