i2pd/client/HTTPServer.cpp

#include <boost/bind.hpp>
#include <boost/lexical_cast.hpp>
#include <boost/date_time/posix_time/posix_time.hpp>
#include <ctime>
#include <fstream>
#include "util/base64.h"
#include "util/Log.h"
#include "util/util.h"
#include "tunnel/Tunnel.h"
#include "tunnel/TransitTunnel.h"
#include "transport/Transports.h"
#include "NetworkDatabase.h"
#include "util/I2PEndian.h"
#include "Streaming.h"
#include "Destination.h"
#include "RouterContext.h"
#include "ClientContext.h"
#include "HTTPServer.h"

// For image and info
#include "version.h"

namespace i2p {
namespace util {

const char HTTP_COMMAND_TUNNELS[] = "tunnels";
const char HTTP_COMMAND_TRANSIT_TUNNELS[] = "transit_tunnels";
const char HTTP_COMMAND_TRANSPORTS[] = "transports";    
const char HTTP_COMMAND_START_ACCEPTING_TUNNELS[] = "start_accepting_tunnels";  
const char HTTP_COMMAND_STOP_ACCEPTING_TUNNELS[] = "stop_accepting_tunnels";        
const char HTTP_COMMAND_LOCAL_DESTINATIONS[] = "local_destinations";
const char HTTP_COMMAND_LOCAL_DESTINATION[] = "local_destination";
const char HTTP_PARAM_BASE32_ADDRESS[] = "b32";
const char HTTP_COMMAND_SAM_SESSIONS[] = "sam_sessions";
const char HTTP_COMMAND_SAM_SESSION[] = "sam_session";
const char HTTP_PARAM_SAM_SESSION_ID[] = "id";

void HTTPConnection::Terminate()
{
    m_Socket->close();
}

void HTTPConnection::Receive()
{
    m_Socket->async_read_some(
        boost::asio::buffer(m_Buffer, HTTP_CONNECTION_BUFFER_SIZE), std::bind(
            &HTTPConnection::HandleReceive, shared_from_this(),
            std::placeholders::_1, std::placeholders::_2
        )
    );
}

void HTTPConnection::HandleReceive(const boost::system::error_code& e, std::size_t nb_bytes)
{
    if(!e) {
        m_Buffer[nb_bytes] = 0;
        m_BufferLen = nb_bytes;
        RunRequest();
    } else if(e != boost::asio::error::operation_aborted)
        Terminate();
}

void HTTPConnection::RunRequest()
{
    m_Request = i2p::util::http::Request(std::string(m_Buffer, m_Buffer + m_BufferLen));
    HandleRequest();
}

void HTTPConnection::ExtractParams(const std::string& str, std::map<std::string, std::string>& params)
{
    if(str[0] != '&') return;
    size_t pos = 1, end;
    do
    {
        end = str.find('&', pos);
        std::string param = str.substr(pos, end - pos);
        LogPrint(param);
        size_t e = param.find('=');
        if(e != std::string::npos)
            params[param.substr(0, e)] = param.substr(e+1);
        pos = end + 1;
    }   
    while(end != std::string::npos);
}

void HTTPConnection::HandleWriteReply(const boost::system::error_code& e)
{
    if(e != boost::asio::error::operation_aborted) {
        boost::system::error_code ignored_ec;
        m_Socket->shutdown(boost::asio::ip::tcp::socket::shutdown_both, ignored_ec);
        Terminate();
    }
}

void HTTPConnection::HandleRequest()
{
    boost::system::error_code e;

    std::string uri = m_Request.getUri();
    if(uri == "/")
        uri = "index.html";

    // Use cannonical to avoid .. or . in path
    const std::string address = boost::filesystem::canonical(
        i2p::util::filesystem::GetWebuiDataDir() / uri, e
    ).string();
    
    std::ifstream ifs(address);
    if(e || !ifs || !isAllowed(address)) {
        m_Reply = i2p::util::http::Response(404, "");
        return SendReply();
    }

    std::string str;
    ifs.seekg(0, ifs.end);
    str.resize(ifs.tellg());
    ifs.seekg(0, ifs.beg);
    ifs.read(&str[0], str.size());
    ifs.close();
    
    m_Reply = i2p::util::http::Response(200, str);
    SendReply();
}

bool HTTPConnection::isAllowed(const std::string& address)
{
    const std::size_t pos_dot = address.find_last_of('.');
    const std::size_t pos_slash = address.find_last_of('/');
    if(pos_dot == std::string::npos || pos_dot == address.size() - 1)
        return false;
    if(pos_slash != std::string::npos && pos_dot < pos_slash)
        return false;
    return true;
}

void HTTPConnection::SendReply()
{
    // we need the date header to be compliant with HTTP 1.1
    std::time_t time_now = std::time(nullptr);
    char time_buff[128];
    if(std::strftime(time_buff, sizeof(time_buff), "%a, %d %b %Y %H:%M:%S GMT", std::gmtime(&time_now)) ) {
        m_Reply.setHeader("Date", std::string(time_buff));
        m_Reply.setContentLength();
        m_Reply.setHeader("Content-Type", "text/html");
    }
    boost::asio::async_write(
        *m_Socket, boost::asio::buffer(m_Reply.toString()),
        std::bind(&HTTPConnection::HandleWriteReply, shared_from_this(), std::placeholders::_1)
    );
}

HTTPServer::HTTPServer(const std::string& address, int port):
    m_Thread(nullptr), m_Work(m_Service),
    m_Acceptor(m_Service, boost::asio::ip::tcp::endpoint(
        boost::asio::ip::address::from_string(address), port)
    ), m_NewSocket(nullptr)
{

}

HTTPServer::~HTTPServer()
{
    Stop();
}

void HTTPServer::Start()
{
    m_Thread = new std::thread(std::bind(&HTTPServer::Run, this));
    m_Acceptor.listen();
    Accept();
}

void HTTPServer::Stop()
{
    m_Acceptor.close();
    m_Service.stop();
    if(m_Thread)
    {
        m_Thread->join();
        delete m_Thread;
        m_Thread = nullptr;
    }
}

void HTTPServer::Run()
{
    m_Service.run();
}

void HTTPServer::Accept()
{
    m_NewSocket = new boost::asio::ip::tcp::socket(m_Service);
    m_Acceptor.async_accept(*m_NewSocket, boost::bind(&HTTPServer::HandleAccept, this,
        boost::asio::placeholders::error));
}

void HTTPServer::HandleAccept(const boost::system::error_code& ecode)
{
    if(!ecode)
    {
        CreateConnection(m_NewSocket);
        Accept();
    }
}

void HTTPServer::CreateConnection(boost::asio::ip::tcp::socket * m_NewSocket)
{
    auto conn = std::make_shared<HTTPConnection>(m_NewSocket);
    conn->Receive();
}
}
}