arozos/mod/agi/external.agi.go

package agi

import (
	"encoding/json"
	"io/ioutil"
	"log"
	"net/http"
	"path/filepath"
	"strings"
	"time"

	"github.com/google/uuid"
	"imuslab.com/arozos/mod/common"
)

type endpointFormat struct {
	Username string `json:"username"`
	Path     string `json:"path"`
}

//Handle request from EXTERNAL RESTFUL API
func (g *Gateway) ExtAPIHandler(w http.ResponseWriter, r *http.Request) {
	// get db
	sysdb := g.Option.UserHandler.GetDatabase()

	if !sysdb.TableExists("external_agi") {
		common.SendErrorResponse(w, "Bad Request, invaild database")
		return
	}

	// get the request URI from the r.URL
	requestURI := filepath.ToSlash(filepath.Clean(r.URL.Path))
	subpathElements := strings.Split(requestURI[1:], "/")

	// check if it contains only two part, [rexec uuid]
	if len(subpathElements) != 3 {
		common.SendErrorResponse(w, "Bad Request, invaild request sent")
		return
	}

	// check if UUID exists in the database
	// get the info from the database
	data, isExist := g.checkIfExternalEndpointExist(subpathElements[2])
	if !isExist {
		common.SendErrorResponse(w, "Bad Request, invaild UUID entered")
		return
	}

	usernameFromDb := data.Username
	pathFromDb := data.Path

	// get the userinfo and the realPath
	userInfo, err := g.Option.UserHandler.GetUserInfoFromUsername(usernameFromDb)
	if err != nil {
		common.SendErrorResponse(w, "Bad username")
		return
	}
	_, realPath, err := virtualPathToRealPath(pathFromDb, userInfo)
	if err != nil {
		common.SendErrorResponse(w, "Bad filepath")
		return
	}

	// read the file and store it into scriptContent
	scriptContentByte, err := ioutil.ReadFile(realPath)
	if err != nil {
		common.SendErrorResponse(w, "Bad file I/O")
		return
	}
	scriptContent := string(scriptContentByte)

	// execute!
	start := time.Now()
	g.ExecuteAGIScript(scriptContent, "", "", w, r, userInfo)
	duration := time.Since(start)

	log.Println("[Remote AGI] IP:", r.RemoteAddr, " executed the script ", pathFromDb, "(", realPath, ")", " on behalf of", userInfo.Username, "with total duration: ", duration)

}

func (g *Gateway) AddExternalEndPoint(w http.ResponseWriter, r *http.Request) {
	userInfo, err := g.Option.UserHandler.GetUserInfoFromRequest(w, r)
	if err != nil {
		common.SendErrorResponse(w, "Bad user!")
		return
	}
	// get db
	sysdb := g.Option.UserHandler.GetDatabase()
	if !sysdb.TableExists("external_agi") {
		sysdb.NewTable("external_agi")
	}
	var dat endpointFormat

	// uuid: [path, id]
	path, err := common.Mv(r, "path", false)
	if err != nil {
		common.SendErrorResponse(w, "Bad parameter")
		return
	}
	id := uuid.New().String()

	dat.Path = path
	dat.Username = userInfo.Username

	jsonStr, err := json.Marshal(dat)
	if err != nil {
		common.SendErrorResponse(w, "Bad JSON")
		return
	}
	sysdb.Write("external_agi", id, string(jsonStr))

	common.SendJSONResponse(w, "\""+id+"\"")
}

func (g *Gateway) RemoveExternalEndPoint(w http.ResponseWriter, r *http.Request) {
	userInfo, err := g.Option.UserHandler.GetUserInfoFromRequest(w, r)
	if err != nil {
		common.SendErrorResponse(w, "Bad User")
		return
	}

	// get db
	sysdb := g.Option.UserHandler.GetDatabase()
	if !sysdb.TableExists("external_agi") {
		sysdb.NewTable("external_agi")
	}
	// get path
	uuid, err := common.Mv(r, "uuid", false)
	if err != nil {
		common.SendErrorResponse(w, "Bad parameter")
		return
	}
	data, isExist := g.checkIfExternalEndpointExist(uuid)
	if !isExist {
		common.SendErrorResponse(w, "UUID does not exists in the database!")
		return
	}

	if data.Username != userInfo.Username {
		common.SendErrorResponse(w, "Bad Request, you have no permission to access this UUID entry!")
		return
	}

	sysdb.Delete("external_agi", uuid)

	common.SendOK(w)
}

func (g *Gateway) ListExternalEndpoint(w http.ResponseWriter, r *http.Request) {
	userInfo, err := g.Option.UserHandler.GetUserInfoFromRequest(w, r)
	if err != nil {
		common.SendErrorResponse(w, "Bad User")
		return
	}

	// get db
	sysdb := g.Option.UserHandler.GetDatabase()
	if !sysdb.TableExists("external_agi") {
		sysdb.NewTable("external_agi")
	}

	// declare variable for return
	dataFromDB := make(map[string]endpointFormat)

	// O(n) method to do the lookup
	entries, err := sysdb.ListTable("external_agi")
	if err != nil {
		common.SendErrorResponse(w, "Bad table")
		return
	}
	for _, keypairs := range entries {
		//Decode the string
		var dataFromResult endpointFormat
		result := ""
		uuid := string(keypairs[0])
		json.Unmarshal(keypairs[1], &result)
		//fmt.Println(result)
		json.Unmarshal([]byte(result), &dataFromResult)
		if dataFromResult.Username == userInfo.Username {
			dataFromDB[uuid] = dataFromResult
		}
	}

	returnJson, err := json.Marshal(dataFromDB)
	if err != nil {
		common.SendErrorResponse(w, "Bad JSON")
		return
	}
	sendJSONResponse(w, string(returnJson))
}

func (g *Gateway) checkIfExternalEndpointExist(uuid string) (endpointFormat, bool) {
	// get db
	sysdb := g.Option.UserHandler.GetDatabase()
	if !sysdb.TableExists("external_agi") {
		sysdb.NewTable("external_agi")
	}
	var dat endpointFormat

	if !sysdb.KeyExists("external_agi", uuid) {
		return dat, false
	}

	jsonData := ""
	sysdb.Read("external_agi", uuid, &jsonData)
	json.Unmarshal([]byte(jsonData), &dat)

	return dat, true
}