Move querying AI data from the client side to the server side (so we …

…won't pass the apiKey in the request)

client/src/data-sources/plugins/ApplicationInsights/Query.ts

@@ -5,6 +5,7 @@ import { appInsightsUri } from './common';
 import ApplicationInsightsConnection from '../../connections/application-insights';
 import { DataSourceConnector, IDataSource } from '../../DataSourceConnector';
 import * as formats from '../../../utils/data-formats';
+import ConfigurationsStore from '../../../stores/ConfigurationsStore';
 
 let connectionType = new ApplicationInsightsConnection();
 
@@ -98,19 +99,19 @@ export default class ApplicationInsightsQuery extends DataSourcePlugin<IQueryPar
       });
     }
 
-    var url = `${appInsightsUri}/${appId}/query?timespan=${queryTimespan}`;
+    var dashboardId = ConfigurationsStore.getState().dashboard.id;
 
     return (dispatch) => {
       request(
-        url, 
+        '/applicationInsights/query', 
         {
           method: 'POST',
           json: true,
-          headers: {
-            'x-api-key': apiKey
-          },
           body: {
-            query
+            query,
+            queryTimespan,
+            appId,
+            dashboardId
           }
         }, 
         (error, json) => {

server/app.js

@@ -11,6 +11,7 @@ const apiRouter = require('./routes/api');
 const graphQLRouter = require('./routes/graphql');
 const cosmosDBRouter = require('./routes/cosmos-db');
 const azureRouter = require('./routes/azure');
+const applicationInsightsRouter = require('./routes/applicationInsights');
 
 const app = express();
 
@@ -34,6 +35,7 @@ app.use('/api', apiRouter.router);
 app.use('/cosmosdb', cosmosDBRouter.router);
 app.use('/azure', azureRouter.router);
 app.use('/graphql', graphQLRouter.router);
+app.use('/applicationinsights', applicationInsightsRouter.router);
 
 app.use(express.static(path.resolve(__dirname, '..', 'build')));
 

server/common/paths.js

@@ -0,0 +1,12 @@
+const path = require('path');
+
+const resourcesPaths = () => ({
+  persistentFolder: path.join(__dirname, '..', 'dashboards', 'persistent'),
+  privateDashboard: path.join(__dirname, '..', 'dashboards','persistent','private'),
+  preconfDashboard: path.join(__dirname, '..', 'dashboards', 'preconfigured'),
+  privateTemplate: path.join(__dirname, '..', 'dashboards','persistent', 'customTemplates')
+});
+
+module.exports = {
+  resourcesPaths
+}

server/helpers/filesHelpers.js

@@ -0,0 +1,55 @@
+const fs = require('fs');
+const path = require('path');
+const resourceFieldProvider = require('./resourceFieldProvider');
+
+function getResourceFileNameById(dir, id, overwrite) {
+  let files = fs.readdirSync(dir) || [];
+
+  // Make sure the array only contains files
+  files = files.filter(fileName => fs.statSync(path.join(dir, fileName)).isFile());
+  if (!files || files.length === 0) {
+    return null;
+  }
+
+  let dashboardFile = null;
+  files.every(fileName => {
+    const filePath = path.join(dir, fileName);
+    if (isValidFile(filePath)) {
+      let dashboardId = undefined;
+      if (overwrite === true) {
+        dashboardId = path.parse(fileName).name;
+        if (dashboardId.endsWith('.private')) {
+          dashboardId = path.parse(dashboardId).name;
+        }
+      } else {
+        const fileContents = getFileContents(filePath);
+        dashboardId = resourceFieldProvider.getField('id', fileContents);
+      }
+      if (dashboardId && dashboardId === id) {
+        dashboardFile = fileName;
+        return false;
+      }
+    }
+    return true;
+  });
+
+  return dashboardFile;
+}
+
+function isValidFile(filePath) {
+  const stats = fs.statSync(filePath);
+  return stats.isFile() && (filePath.endsWith('.js') || filePath.endsWith('.ts'));
+}
+
+function getFileContents(filePath) {
+  let contents = fs.readFileSync(filePath, 'utf8');
+  return filePath.endsWith(".ts")
+    ? "return " + contents.slice(contents.indexOf("/*return*/ {") + 10)
+    : contents;
+}
+
+module.exports = {
+  getResourceFileNameById,
+  isValidFile,
+  getFileContents
+}

server/helpers/resourceFieldProvider.js

@@ -0,0 +1,46 @@
+// Template/Dashboard metadata is stored inside the files
+// To read the metadata we could eval() the files, but that's dangerous.
+// Instead, we use regular expressions to pull them out
+// Assumes that:
+// * the metadata comes before config information
+// * fields in the file look like fieldname: "string" or fieldname: 'string'
+// * or, special case, html: `string`
+
+const fields = {
+  id: /\s*id:\s*("|')(.*)("|')/,
+  name: /\s*name:\s*("|')(.*)("|')/,
+  description: /\s*description:\s*("|')(.*)("|')/,
+  icon: /\s*icon:\s*("|')(.*)("|')/,
+  logo: /\s*logo:\s*("|')(.*)("|')/,
+  url: /\s*url:\s*("|')(.*)("|')/,
+  preview: /\s*preview:\s*("|')(.*)("|')/,
+  category: /\s*category:\s*("|')(.*)("|')/,
+  html: /\s*html:\s*(`)([\s\S]*?)(`)/gm,
+  featured: /\s*featured:\s*(true|false)/,
+  connections: /\s*connections:( )([\S\s]*)(,)\s*layout:/
+}
+
+const getField = (fieldName, text) => {
+  regExp = fields[fieldName];
+  regExp.lastIndex = 0;
+
+  const matches = regExp.exec(text);
+  let match = matches && matches.length >= 3 && matches[2];
+  if (!match) {
+    match = matches && matches.length > 0 && matches[0];
+  }
+  return match;
+}
+
+const getMetadata = (text) => {
+  const metadata = {}
+  for (key in fields) {
+    metadata[key] = getField(key, text);
+  }
+  return metadata;
+}
+
+module.exports = {
+  getField,
+  getMetadata
+}