/*
 *  Baltisot
 *  Copyright (C) 1999-2007 Nicolas "Pixel" Noble
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program; if not, write to the Free Software
 *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */

/* $Id: HttpServ.cc,v 1.56 2007-09-28 09:05:34 pixel Exp $ */

#include "sha1.h"
#ifdef HAVE_CONFIG_H
#include "config.h"
#endif
#include "Socket.h"
#include "Action.h"
#include "HttpServ.h"
#include "Buffer.h"
#include "ReadJob.h"
#include "CopyJob.h"
#include "ChainTasks.h"
#include "Task.h"
#include "Base64.h"
#include "Domain.h"
#include "gettext.h"

String endhl = "\r\n", endnl = "\n";

class ProcessRequest : public Task {
  public:
      ProcessRequest(Action * action, const Socket & out, const String & server_name, int server_port, const String & root = "/bin/start");
      virtual ~ProcessRequest() {}
    virtual String GetName();
  protected:
    virtual int Do() throw (GeneralException);
  private:
    String GetMime(const String &);
    String UnMangle(const String &, int p = 0);
    bool ParseUri(String &, String &, String &, Handle *);
    void ParseVars(Handle *, int);
    void ShowError(Handle *);
    void SendHeads(Handle *, const String &, const String & = "", time_t = -1);
    void SendRedirect(Handle *);

    String file, domain, t, Method, Uri;
    Buffer b;
    Task * c, * a;
    Action * f;
    int len, localport;
    Action * p;
    Socket s;
    Domain * d;

    String name, host, gvars, login, password, root;
    Variables * Vars, * Heads;
    bool bad, hasvars, post;
    
    HttpResponse response;
};

ProcessRequest::ProcessRequest(Action * ap, const Socket & as, const String & aname, int aport, const String & aroot) : localport(aport), p(ap), s(as), name(aname), root(aroot) {
    SetBurst();
}

String ProcessRequest::GetName() {
    return _("Processing HTTP request");
}

int ProcessRequest::Do() throw(GeneralException) {
    switch (current) {
    case 0:
        if (!s.IsConnected()) return TASK_DONE;

        c = new ReadJob(&s, &b);
        WaitFor(c);
	current = 1;
        Suspend(TASK_ON_HOLD);

    case 1:
        delete c;

        bad = false;

//	std::cerr << "---- Got a request from handle " << s.GetHandle() << " \n";
    
        post = ParseUri(file, domain, gvars, &b);
	
	Heads = new Variables();
	Vars = new Variables();

        len = -1;
        do {
	    int p;
    	    b >> t;
//	    std::cerr << "Read Request (n): " << t << std::endl;
	    if ((t.strstr("Content-Length: ") == 0) || (t.strstr("Content-length: ") == 0)) {
//		std::cerr << "Saw 'Content-Lenght:', reading length from '" << t.extract(16) << "'\n";
	        len = t.extract(16).to_int();
	    }
	    if (t.strstr("Host: ") == 0) {
		host = t.extract(6);
	    }
            if (t.strstr("Authorization: Basic ") == 0) {
                int l;
                char * credentials = (char *) Base64::decode(t.extract(21), &l);
                credentials[l] = 0;
                char * p = strchr(credentials, ':');

                if (p) {
                    *p = 0;
                    login = credentials;
                    password = p + 1;
                }
                
                free(credentials);
            }
	    
	    if ((p = t.strchr(':')) >= 0) {
		String s = t.extract(0, p - 1);
		s += '=';
		s += t.extract(p + 2);
		Heads->Add(s);
	    }
	} while (t.strlen());
	
//	std::cerr << "---- Processing it.\n";

        hasvars = false;

	if (post) {
	    // On a pas eu de ligne 'Content-Length' mais on a eu une méthode POST.
	    // Cela est une erreur.
	    if (len == -1) {
//		std::cerr << "Error: method POST but no Content-Length\n";
		bad = true;
	    } else {
//		std::cerr << "Got a POST request. Parsing variables. (len = " << len << ")\n";
	        // Les variables seront initialisées ici.
		hasvars = true;
	    }
	}

	current = 2;
	if (hasvars && (len)) {
	    c = new CopyJob(&s, &b, len);
	    WaitFor(c);
	    Suspend();
	} else {
	    c = 0;
	}

    case 2:
	if (gvars != "") {
	    Buffer b2;
	    b2 << gvars;
	    ParseVars(&b2, gvars.strlen());
	}
	if (hasvars) {
	    if (c) delete c;
	    ParseVars(&b, len);
	}
    
	std::cerr << " Domain = '" << domain << "' - File = '" << file << "'\n";

        if (file == "favicon.ico") {
            domain = "/image";
        }
	
        if (!bad) {
	    // Nous vérifions le domaine.
	    bad = true;
	    // Les domaines par défaut valides sont '/', '/bin' et '/image'.
	    if (domain == "/image") bad = false;
	    if (domain == "/bin") bad = false;
	    if (domain == "/") bad = false;
    	    // L'url sans domaine ni fichier est valide. (cela arrive sur certains navigateurs...)
            if (domain == "") bad = (file != "");
            if ((d = Domain::find_domain(Uri))) bad = false;
	    if (bad) {
	        std::cerr << _("Error: bad domain.\n");
	    }
	}

        a = 0;

	if (bad) {
	    ShowError(&b);
	} else {
	    if (d) {
                HttpRequest request;
                request.vars = Vars;
                request.headers = Heads;
                request.uri = Uri;
                request.login = login;
                request.password = password;
		request.lip = s.GetAddr();
		request.dip = s.GetDistantAddr();
		request.lport = s.GetPort();
		request.dport = s.GetDistantPort();
                request.method = Method;
                d->Do(request, &response);
                a = response.BuildResponse(&s);
	    } else if (((domain == "") || (domain == "/")) && (file == "")) {
		// Si le navigateur a demandé l'URL '/', alors on renvoie une notification
		// de redirection.
		SendRedirect(&b);
	    } else if (domain == "/bin") {
		// Le domaine 'bin' est réservé aux actions. On cherche donc l'action à effectuer.
	        if ((f = p->Look4URL(file))) {
    		    SendHeads(&b, "text/html");
		    a = f->Do(Vars, Heads, &s);
		} else {
		    ShowError(&b);
	        }
	    } else if (domain == "/image") {
		// Dans tous les autres cas de domaine, on cherche le fichier dans le répertoire data.
	        // On utilise try au cas où le fichier n'existe pas et donc que le constructeur
	        // d'input renvoie une erreur.
	        try {
	    	    Handle * i = new Input(String("data/") + file);
	    	    SendHeads(&b, GetMime(file), String("Accept-Ranges: bytes") + endhl + "Content-Length: " + (unsigned long long int) i->GetSize() + endhl, i->GetModif());
		    i->SetNonBlock();
		    a = new CopyJob(i, &s);
		    std::cerr << _("File found, dumping.\n");
		}
	        catch (IOGeneral e) {
		    ShowError(&b);
		    std::cerr << _("File not found, error shown.\n");
		}
            } else {
                ShowError(&b);
            }
	}
    
	if (a) a->Stop();
    
//	std::cerr << "---- Sending header buffer.\n";
        if (!d) {
    	    c = new CopyJob(&b, &s, -1, false);
            WaitFor(c);
	    current = 3;
	    Suspend();
        }

    case 3:
        if (!d)
    	    delete c;
    
	if (a) {
//	    std::cerr << "---- Sending contents.\n";
	    a->Restart();
	    WaitFor(a);
	    current = 4;
	    Suspend();
	}

    case 4:
	if (a) delete a;
	delete Vars;
	delete Heads;
//	std::cerr << "---- End of Request.\n";
    }
    return TASK_DONE;
}

void ProcessRequest::ParseVars(Handle * s, int len) {
    String t, v;
    char conv[3], l;
    int hconv, nbvars;
    ssize_t pos = 0, next;
    
    t = "";
    for (int i = 0; i < len; i++) {
	s->read(&l, 1);
	t += l;
    }
//  std::cerr << "Post variables line: '" << t << "'\n";
    
    
    // Les variables sont sous la forme 'var1=val1&var2=val2&val3=var3'. Donc le nombre d'occurences
    // du caractère '=' indique le nombre de variables.
    nbvars = t.strchrcnt('=');
    
    for (int i = 0; i < nbvars; i++) {
	// Les variables sont sous la forme 'var1=val1&var2=val2&val3=var3'. Donc on cherche le caractère
	// & dans la chaine POST.
	next = t.strchr('&', pos);
	if (next < 0) next = t.strlen();
	v = "";
	while (pos != next) {
	    switch (t[pos]) {
	    // Le navigateur encode les caractères spéciaux à l'aide du format %XX où XX indique
	    // la valeur hexadécimale du caractère. Nous encodons surtout les caractères
	    // ' ', '=', '%', et '/' avec cette technique.
	    case '%':
		pos++;
		conv[0] = t[pos++];
		conv[1] = t[pos++];
		conv[2] = '\0';
		sscanf(conv, "%x", &hconv);
		v += ((char) hconv);
		break;
	    // Certains navigateurs utilisent '+' pour indiquer ' ' (qui est illégal) au lieu
	    // d'utiliser %20.
	    case '+':
		v += ' ';
		pos++;
		break;
	    default:
    		v += t[pos++];
	    }
	}
//	std::cerr << "Pushing HTTP variable: " << v << std::endl;
	Vars->Add(v);
	pos++;
    }
}

/*
 * Cette fonction renverra true si la méthode est une méthode POST.
 * Les Strings domain et file seront modifiées afin de renvoyer le domaine
 * et le fichier lut. La string s doit donner la première ligne de la requète,
 * c'est à dire la méthode demandée par le client.
 */

bool ProcessRequest::ParseUri(String & file, String & domain, String & gvars, Handle * s) {
    String t;
    bool post = false;
    const char * p = 0;
    ssize_t sppos;

    *s >> t;
    std::cerr << _("Read Request (1): ") << t << std::endl;

    int IPos = t.strchr('?');
    
    gvars = "";
    
    if (IPos >= 0) {
	int HPos = t.strchr(' ', IPos);
	char * sdup = t.strdup(0, IPos - 1);
	gvars = t.extract(IPos + 1, HPos - 1);
	t = sdup;
	free(sdup);
    }
    
//  std::cerr << "New request: " << t << ", gvars = " << gvars << std::endl;
    
    bad = false;
    
    // p nous indiquera la position de la chaîne URL.
    switch (t[0]) {
    case 'P': /* POST? */
	if (t.extract(1, 4) == "OST ") {
    	    p = t.to_charp(5);
	    post = true;
	} else {
//	    std::cerr << "Error: unknow request.\n";
	    bad = true;
	}
        Method = "POST";
	break;
    case 'G': /* GET? */
	if (t.extract(1, 3) == "ET ") {
	    p = t.to_charp(4);
	} else {
//	    std::cerr << "Error: unknow request.\n";
	    bad = true;
	}
        Method = "GET";
	break;
    default:
//	std::cerr << "Error: unknow request.\n";
	bad = true;
        Method = "Unknown";
    }
    
    if (!bad) {
	ssize_t poshttp, posslash;
        Uri = p;
	sppos = Uri.strrchr(' ');
	p = Uri.to_charp(0, sppos - 1);
	Uri = p;
	// On enlève tout le host spécifié éventuellement dans la requete.
	if ((poshttp = Uri.strstr("http://")) > 0) {
	    Uri = Uri.to_charp(poshttp + 7);
	    posslash = Uri.strchr('/');
	    // Certains navigateurs indiqueront uniquement http://host comme URL.
	    if (posslash >= 0) {
		host = Uri.extract(0, posslash - 1);
		Uri = Uri.to_charp(posslash);
	    } else {
		host = Uri;
		Uri = "";
	    }
	}
        Uri = UnMangle(Uri);
	posslash = Uri.strrchr('/');
	file = Uri.to_charp(posslash + 1);
	if (posslash > 0) {
	    domain = Uri.to_charp(0, posslash - 1);
	} else {
	    domain = "";
	}
    }
    return post;
}

/*
 * Ceci sert à rediriger le navigateur vers l'url de démarrage.
 */
void ProcessRequest::SendRedirect(Handle * s) {
    *s << "HTTP/1.1 301 Moved Permanently" << endhl << 
	 "Server: " << name << endhl <<
	 "Location: http://" << host << root << endhl <<
	 "Cache-Control: no-cache" << endhl <<
	 "Connection: closed" << endhl <<
	 "Content-Type: text/html" << endhl << endhl <<
         p->GetSkinner()->Redirect("http://" + host + root);
}

/*
 * Nous envoyons les entetes de réponse HTTP.
 */

void ProcessRequest::SendHeads(Handle * s, const String & mime, const String & extra, time_t lm) {
    time_t t = time(NULL);
    struct tm * ft = gmtime(&t);
    char buf[1025];
    strftime(buf, 1024, "%a, %d %b %Y %H:%M:%S GMT", ft);
    *s << "HTTP/1.1 200 OK" << endhl <<
	  "Date: " << buf << endhl <<
	  "Server: " << name << endhl;
    if (lm >=0) {
	ft = gmtime(&lm);
	strftime(buf, 1024, "%a, %d %b %Y %H:%M:%S GMT", ft);
    }
    *s << "Last-Modified: " << buf << endhl << extra <<
	  "Connection: closed" << endhl << 
	  "Content-Type: " << mime << endhl << endhl;
}

/*
 * Affichage d'une erreur 404.
 */

void ProcessRequest::ShowError(Handle * s) {
    *s << "HTTP/1.1 404 Not Found" << endhl <<
          "Server: " << name << endhl <<    
          "Cache-Control: no-cache" << endhl <<   
          "Connection: closed" << endhl <<      
          "Content-Type: text/html" << endhl << endhl <<
          p->GetSkinner()->Error("");
}

/*
 * Sert à déterminer le type mime à partir de l'extension du fichier.
 * Par défaut, nous mettons "text/plain".
 */

String ProcessRequest::GetMime(const String & f) {
    String ext;
    size_t ppos;
    
    ppos = f.strrchr('.');
    
    if (ppos >= 0) {
	ext = f.extract(ppos + 1);
	if (ext == "jpg") return "image/jpeg";
	if (ext == "jpeg") return "image/jpeg";
	if (ext == "htm") return "text/html";
	if (ext == "html") return "text/html";
	if (ext == "gif") return "image/gif";
	if (ext == "png") return "image/png";
	if (ext == "class") return "application/octet-stream";
    }
    
    return "text/plain";
}

String ProcessRequest::UnMangle(const String & s, int p) {
    String r;
    char c1, c2, c[2] = "x";
    
    if (s.strlen() <= p)
        return "";
    
    switch (s[p]) {
    case '%':
        c1 = s[p + 1];
        c2 = s[p + 2];
        
        if ((((c1 >= '0') && (c1 <= '9')) || ((c1 >= 'A') && (c1 <= 'F')) || ((c1 >= 'a') && (c1 <= 'f'))) &&
            (((c2 >= '0') && (c2 <= '9')) || ((c2 >= 'A') && (c2 <= 'F')) || ((c2 >= 'a') && (c2 <= 'f')))) {
            if ((c1 >= '0') && (c1 <= '9')) c1 -= '0';
            if ((c2 >= '0') && (c2 <= '9')) c2 -= '0';
            if ((c1 >= 'A') && (c1 <= 'F')) c1 -= 'A' - 10;
            if ((c2 >= 'A') && (c2 <= 'F')) c2 -= 'A' - 10;
            if ((c1 >= 'a') && (c1 <= 'f')) c1 -= 'a' - 10;
            if ((c2 >= 'a') && (c2 <= 'f')) c2 -= 'a' - 10;
            c[0] = c1 * 16 + c2;
            r = c;
            p += 3;
        } else {
            r = "%";
            p++;
        }
        break;
    case '+':
        r = " ";
        p++;
        break;
    default:
        r = s[p];
        p++;
        break;
    }
    
    return r + UnMangle(s, p);
}

HttpServ::HttpServ(Action * ap, int port, const String & nname) throw (GeneralException) : root("/bin/start") {
    bool r = true;
    
    p = ap;
    name = nname;
    localport = port;
    
//  std::cerr << "Initialising Mini HTTP-Server on port " << localport << std::endl;
    
    r = Listener.SetLocal("", port);
    if (!r) {
	throw GeneralException(_("Initialisation of the Mini HTTP-Server failed: can't bind"));
    }
    
    r = Listener.Listen();
    
    if (!r) {
	throw GeneralException(_("Initialisation of the Mini HTTP-Server failed: can't listen"));
    }
    
    Listener.SetNonBlock();
    WaitFor(&Listener, W4_STICKY | W4_READING);
    
//  std::cerr << "Mini HTTP-Server '" << name << "' ready and listening for port " << port << std::endl;
}

HttpServ::~HttpServ(void) {
    Listener.close();
}

void HttpServ::SetRoot(const String & _root) {
    root = _root;
}

int HttpServ::Do() throw (GeneralException) {
    try {
	Socket s = Listener.Accept();
	s.SetNonBlock();
	new ProcessRequest(p, s, name, localport, root);
    }
    catch (GeneralException) {
    }
    return TASK_ON_HOLD;
}

String HttpServ::GetName() {
    return String("Mini HTTP-Server '") + name + "'";
}

class BuildHttpResponse : public Task {
  public:
      BuildHttpResponse(HttpResponse * _hr, Handle * _out) : hr(_hr), out(_out) { SetBurst(); }
      virtual ~BuildHttpResponse() { }
    virtual String GetName() { return "BuildHttpResponse"; }
    virtual int Do() throw (GeneralException) {
        Buffer * b;
        
        switch (current) {
        case 0:
            if (hr->Prepared()) {
                b = &hr->contents;
            } else {
                b = new Buffer();
                hr->PrepareResponse(b);
                t = new CopyJob(&hr->contents, b);
                t->DryRun();
                delete t;
            }

            t = new CopyJob(b, out, -1, b != &hr->contents);
            current = 1;
            WaitFor(t);
            Suspend(TASK_ON_HOLD);
        
        case 1:
            delete t;
        }

        return TASK_DONE;
    }
  private:
    HttpResponse * hr;
    Handle * out;
    Task * t;
};

HttpResponse::HttpResponse() : mime_type("text/html; charset=iso-8859-1"), location(""), server_name("GruiK Server v0.2"), return_code(HTTP_200_OK), last_modified(time(NULL)), cache(true), already_prepared(false), builder(0) {
}

HttpResponse::~HttpResponse() {
}

Task * HttpResponse::BuildResponse(Handle * out) {
    ChainTasks::tasklist_t l;
    Task * t;
    
    t = new BuildHttpResponse(this, out);

    if (builder) {
        l.push_back(builder);
        l.push_back(t);
        t = new ChainTasks(l);
    }
    
    return t;
}

void HttpResponse::PrepareResponse(Handle * b) {
    if (already_prepared)
        return;
    
    if (!b)
        b = &contents;
    
    already_prepared = true;

    char buf[1025];

    time_t cur_time = time(NULL);
    struct tm * ft = gmtime(&cur_time);

    strftime(buf, 1024, "%a, %d %b %Y %H:%M:%S GMT", ft);
    
    (*b) << "HTTP/1.1 " << return_code << " " << code_to_string() << "\r\n"
         << "Server: " << server_name << "\r\n"
         << "Date: " << buf << "\r\n";
         
    if (!cache)
        (*b) << "Cache-Control: no-cache\r\n";
         
    (*b) << "Connection: closed\r\n"
         << "Content-Type: " << mime_type << "\r\n";
    
    
    if (location != "") {
        switch (return_code) {
        case HTTP_301_PERM_MOVED:
        case HTTP_302_FOUND:
            (*b) << "Location: " << location << "\r\n";
            break;
        case HTTP_401_UNAUTHORIZED:
            if (domain != "") {
                String to_digest;
                sha1_context sha1;
                static const char hconv[] = "0123456789ABCDEF";
                Uint8 sha1sum[20];
                char sha1sum_r[41];
                int i;
                
                to_digest = location + ":" + ((Uint64) time(0)) + ":" + domain + ":" + rand();
                sha1_starts(&sha1);
                sha1_update(&sha1, (const unsigned char *) to_digest.to_charp(), to_digest.strlen());
                sha1_finish(&sha1, sha1sum);
                
                for (i = 0; i < 20; i++) {
                    sha1sum_r[i * 2 + 0] = hconv[sha1sum[i] >> 4];
                    sha1sum_r[i * 2 + 1] = hconv[sha1sum[i] % 16];
                }
                sha1sum_r[40] = 0;
                (*b) << "WWW-Authenticate: Digest realm=\"" << location << "\", domain=\"" << domain << "\", nonce=\"" << sha1sum_r << "\", algorithm=\"MD5\", qop=\"auth\"\r\n";
            } else {
                (*b) << "WWW-Authenticate: Basic realm=\"" << location << "\"\r\n";
            }
            break;
        }
    }
    if (last_modified >= 0) {
	ft = gmtime(&last_modified);
	strftime(buf, 1024, "%a, %d %b %Y %H:%M:%S GMT", ft);
        (*b) << "Last-Modified: " << buf << "\r\n";
    }
    
    (*b) << "\r\n";
}

bool HttpResponse::Prepared() {
    return already_prepared;
}

String HttpResponse::code_to_string() {
    switch (return_code) {
    case HTTP_200_OK:
        return "OK";
    case HTTP_301_PERM_MOVED:
        return "Moved Permanently";
    case HTTP_302_FOUND:
        return "Found";
    case HTTP_400_BAD_REQUEST:
        return "Bad Request";
    case HTTP_401_UNAUTHORIZED:
        return "Authorization Required";
    case HTTP_403_FORBIDDEN:
        return "Forbidden";
    case HTTP_404_NOT_FOUND:
        return "Not Found";
    case HTTP_500_INTERNAL_ERROR:
        return "Internal Error";
    case HTTP_503_SERVICE_UNAVAILABLE:
        return "Service Unavailable";
    }
}