259 lines
7.7 KiB
Go
259 lines
7.7 KiB
Go
package webcontroller
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"net/http"
|
|
"os"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/google/uuid"
|
|
|
|
"fornaxian.com/pixeldrain-web/pixelapi"
|
|
"github.com/Fornaxian/log"
|
|
"github.com/julienschmidt/httprouter"
|
|
)
|
|
|
|
// WebController controls how requests are handled and makes sure they have
|
|
// proper context when running
|
|
type WebController struct {
|
|
templates *TemplateManager
|
|
|
|
resourceDir string
|
|
|
|
hostname string
|
|
|
|
apiURLInternal string
|
|
apiURLExternal string
|
|
|
|
sessionCookieDomain string
|
|
|
|
// page-specific variables
|
|
captchaSiteKey string
|
|
|
|
httpClient *http.Client
|
|
}
|
|
|
|
// New initializes a new WebController by registering all the request handlers
|
|
// and parsing all templates in the resource directory
|
|
func New(
|
|
r *httprouter.Router,
|
|
prefix string,
|
|
resourceDir string,
|
|
apiURLInternal string,
|
|
apiURLExternal string,
|
|
sessionCookieDomain string,
|
|
maintenanceMode bool,
|
|
debugMode bool,
|
|
) (wc *WebController) {
|
|
var err error
|
|
wc = &WebController{
|
|
resourceDir: resourceDir,
|
|
apiURLInternal: apiURLInternal,
|
|
apiURLExternal: apiURLExternal,
|
|
sessionCookieDomain: sessionCookieDomain,
|
|
httpClient: &http.Client{Timeout: time.Minute * 10},
|
|
}
|
|
wc.templates = NewTemplateManager(resourceDir, apiURLExternal, debugMode)
|
|
wc.templates.ParseTemplates(false)
|
|
|
|
if wc.hostname, err = os.Hostname(); err != nil {
|
|
panic(fmt.Errorf("Could not get hostname: %s", err))
|
|
}
|
|
|
|
var p = prefix
|
|
|
|
// Serve static files
|
|
var fs = http.FileServer(http.Dir(resourceDir + "/static"))
|
|
r.GET(p+"/res/*filepath", func(w http.ResponseWriter, r *http.Request, p httprouter.Params) {
|
|
// Cache resources for 4 weeks
|
|
w.Header().Set("Cache-Control", "public, max-age=2419200")
|
|
r.URL.Path = p.ByName("filepath")
|
|
fs.ServeHTTP(w, r)
|
|
})
|
|
|
|
// Static assets
|
|
r.GET(p+"/favicon.ico" /* */, wc.serveFile("/favicon.ico"))
|
|
r.GET(p+"/robots.txt" /* */, wc.serveFile("/robots.txt"))
|
|
|
|
if maintenanceMode {
|
|
r.NotFound = http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
w.WriteHeader(http.StatusServiceUnavailable)
|
|
wc.templates.Get().ExecuteTemplate(w, "maintenance", wc.newTemplateData(w, r))
|
|
})
|
|
return wc
|
|
}
|
|
|
|
// General navigation
|
|
r.GET(p+"/" /* */, wc.serveTemplate("home", false))
|
|
r.GET(p+"/api" /* */, wc.serveTemplate("apidoc", false))
|
|
r.GET(p+"/history" /* */, wc.serveTemplate("history_cookies", false))
|
|
r.GET(p+"/u/:id" /* */, wc.serveFileViewer)
|
|
r.GET(p+"/u/:id/preview" /**/, wc.serveFilePreview)
|
|
r.GET(p+"/l/:id" /* */, wc.serveListViewer)
|
|
r.GET(p+"/s/:id" /* */, wc.serveSkynetViewer)
|
|
r.GET(p+"/t" /* */, wc.serveTemplate("paste", false))
|
|
r.GET(p+"/donation" /* */, wc.serveTemplate("donation", false))
|
|
r.GET(p+"/widgets" /* */, wc.serveTemplate("widgets", false))
|
|
r.GET(p+"/about" /* */, wc.serveTemplate("about", false))
|
|
r.GET(p+"/appearance" /* */, wc.serveTemplate("appearance", false))
|
|
r.GET(p+"/click/:id" /* */, wc.serveAdClick)
|
|
|
|
// User account pages
|
|
r.GET(p+"/register" /* */, wc.serveForm(wc.registerForm, false))
|
|
r.POST(p+"/register" /* */, wc.serveForm(wc.registerForm, false))
|
|
r.GET(p+"/login" /* */, wc.serveForm(wc.loginForm, false))
|
|
r.POST(p+"/login" /* */, wc.serveForm(wc.loginForm, false))
|
|
r.GET(p+"/password_reset" /* */, wc.serveForm(wc.passwordResetForm, false))
|
|
r.POST(p+"/password_reset" /* */, wc.serveForm(wc.passwordResetForm, false))
|
|
r.GET(p+"/logout" /* */, wc.serveTemplate("logout", true))
|
|
r.POST(p+"/logout" /* */, wc.serveLogout)
|
|
r.GET(p+"/user" /* */, wc.serveTemplate("user_home", true))
|
|
r.GET(p+"/user/files" /* */, wc.serveTemplate("user_files", true))
|
|
r.GET(p+"/user/lists" /* */, wc.serveTemplate("user_lists", true))
|
|
r.GET(p+"/user/filemanager" /**/, wc.serveTemplate("file_manager", true))
|
|
|
|
// User account settings
|
|
r.GET(p+"/user/settings" /* */, wc.serveUserSettings)
|
|
r.POST(p+"/user/settings" /* */, wc.serveUserSettings)
|
|
r.GET(p+"/user/confirm_email" /* */, wc.serveEmailConfirm)
|
|
r.GET(p+"/user/password_reset_confirm" /* */, wc.serveForm(wc.passwordResetConfirmForm, false))
|
|
r.POST(p+"/user/password_reset_confirm" /**/, wc.serveForm(wc.passwordResetConfirmForm, false))
|
|
|
|
// Admin settings
|
|
r.GET(p+"/admin" /* */, wc.serveTemplate("admin_panel", true))
|
|
r.GET(p+"/admin/globals" /* */, wc.serveForm(wc.adminGlobalsForm, true))
|
|
r.POST(p+"/admin/globals" /**/, wc.serveForm(wc.adminGlobalsForm, true))
|
|
|
|
r.NotFound = http.HandlerFunc(wc.serveNotFound)
|
|
|
|
return wc
|
|
}
|
|
|
|
func (wc *WebController) serveTemplate(
|
|
tpl string,
|
|
requireAuth bool,
|
|
) httprouter.Handle {
|
|
return func(
|
|
w http.ResponseWriter,
|
|
r *http.Request,
|
|
p httprouter.Params,
|
|
) {
|
|
var tpld = wc.newTemplateData(w, r)
|
|
if requireAuth && !tpld.Authenticated {
|
|
http.Redirect(w, r, "/login", http.StatusSeeOther)
|
|
return
|
|
}
|
|
err := wc.templates.Get().ExecuteTemplate(w, tpl, tpld)
|
|
if err != nil && !strings.Contains(err.Error(), "broken pipe") {
|
|
log.Error("Error executing template '%s': %s", tpl, err)
|
|
}
|
|
}
|
|
}
|
|
|
|
func (wc *WebController) serveFile(path string) httprouter.Handle {
|
|
return func(
|
|
w http.ResponseWriter,
|
|
r *http.Request,
|
|
p httprouter.Params,
|
|
) {
|
|
http.ServeFile(w, r, wc.resourceDir+"/static"+path)
|
|
}
|
|
}
|
|
|
|
func (wc *WebController) serveForm(
|
|
handler func(*TemplateData, *http.Request) Form,
|
|
requireAuth bool,
|
|
) httprouter.Handle {
|
|
return func(
|
|
w http.ResponseWriter,
|
|
r *http.Request,
|
|
p httprouter.Params,
|
|
) {
|
|
var td = wc.newTemplateData(w, r)
|
|
if requireAuth && !td.Authenticated {
|
|
http.Redirect(w, r, "/login", http.StatusSeeOther)
|
|
return
|
|
}
|
|
|
|
// The handler retuns the form which will be rendered
|
|
td.Form = handler(td, r)
|
|
|
|
td.Form.Username = td.Username
|
|
|
|
// Execute the extra actions if any
|
|
if td.Form.Extra.SetCookie != nil {
|
|
w.Header().Del("Set-Cookie")
|
|
http.SetCookie(w, td.Form.Extra.SetCookie)
|
|
}
|
|
if td.Form.Extra.RedirectTo != "" {
|
|
http.Redirect(w, r, td.Form.Extra.RedirectTo, http.StatusSeeOther)
|
|
log.Debug("redirect: %s", td.Form.Extra.RedirectTo)
|
|
return // Don't need to render a form if the user is redirected
|
|
}
|
|
|
|
// Remove the recaptcha field if captcha is disabled
|
|
if wc.captchaKey() == "none" {
|
|
for i, field := range td.Form.Fields {
|
|
if field.Type == FieldTypeCaptcha {
|
|
td.Form.Fields = append(
|
|
td.Form.Fields[:i],
|
|
td.Form.Fields[i+1:]...,
|
|
)
|
|
}
|
|
}
|
|
}
|
|
|
|
// Clear the entered values if the request was successful
|
|
if td.Form.SubmitSuccess {
|
|
w.WriteHeader(http.StatusOK)
|
|
for i, field := range td.Form.Fields {
|
|
field.EnteredValue = ""
|
|
td.Form.Fields[i] = field
|
|
}
|
|
} else if td.Form.Submitted {
|
|
w.WriteHeader(http.StatusBadRequest)
|
|
}
|
|
|
|
err := wc.templates.Get().ExecuteTemplate(w, "form_page", td)
|
|
if err != nil && !strings.Contains(err.Error(), "broken pipe") {
|
|
log.Error("Error executing form page: %s", err)
|
|
}
|
|
}
|
|
}
|
|
|
|
func (wc *WebController) serveNotFound(w http.ResponseWriter, r *http.Request) {
|
|
log.Debug("Not Found: %s", r.URL)
|
|
w.WriteHeader(http.StatusNotFound)
|
|
wc.templates.Get().ExecuteTemplate(w, "404", wc.newTemplateData(w, r))
|
|
}
|
|
|
|
func (wc *WebController) getAPIKey(r *http.Request) (key string, err error) {
|
|
if cookie, err := r.Cookie("pd_auth_key"); err == nil {
|
|
if _, err := uuid.Parse(cookie.Value); err == nil {
|
|
return cookie.Value, nil
|
|
}
|
|
}
|
|
return "", errors.New("not a valid pixeldrain authentication cookie")
|
|
}
|
|
|
|
func (wc *WebController) captchaKey() string {
|
|
// This only runs on the first request
|
|
if wc.captchaSiteKey == "" {
|
|
var api = pixelapi.New(wc.apiURLInternal, "")
|
|
capt, err := api.GetRecaptcha()
|
|
if err != nil {
|
|
log.Error("Error getting recaptcha key: %s", err)
|
|
return ""
|
|
}
|
|
if capt.SiteKey == "" {
|
|
wc.captchaSiteKey = "none"
|
|
} else {
|
|
wc.captchaSiteKey = capt.SiteKey
|
|
}
|
|
}
|
|
|
|
return wc.captchaSiteKey
|
|
}
|