1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
|
//
// rhimportd
//
// The Radio Helsinki Rivendell Import Daemon
//
//
// Copyright (C) 2015-2016 Christian Pointner <equinox@helsinki.at>
//
// This file is part of rhimportd.
//
// rhimportd is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// any later version.
//
// rhimportd is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with rhimportd. If not, see <http://www.gnu.org/licenses/>.
//
package main
import (
"code.helsinki.at/rhrd-go/rddb"
"code.helsinki.at/rhrd-go/rhimport"
"encoding/json"
"io"
"io/ioutil"
"net/http"
"os"
"strings"
)
type webUploadResponseData struct {
ResponseCode int `json:"RESPONSE_CODE"`
ErrorString string `json:"ERROR_STRING"`
SourceFile string `json:"SOURCE_FILE"`
}
func webUploadErrorResponse(w http.ResponseWriter, code int, errStr string) {
w.Header().Set("Content-Type", "application/json")
w.WriteHeader(code)
encoder := json.NewEncoder(w)
respdata := webUploadResponseData{code, errStr, ""}
encoder.Encode(respdata)
}
func webUploadResponse(w http.ResponseWriter, file string) {
w.Header().Set("Content-Type", "application/json")
w.WriteHeader(http.StatusOK)
encoder := json.NewEncoder(w)
respdata := webUploadResponseData{http.StatusOK, "success", file}
encoder.Encode(respdata)
}
func webUploadHandler(conf *rhimport.Config, db *rddb.DBChan, sessions *rhimport.SessionStoreChan, trusted bool, w http.ResponseWriter, r *http.Request) {
if r.Method == "GET" {
http.ServeFile(w, r, "./html/upload-form.html")
return
}
if r.Method != "POST" {
rhl.Printf("WebUploadHandler: got invalid request method")
webUploadErrorResponse(w, http.StatusMethodNotAllowed, "only POST and GET method are allowed")
return
}
if err := r.ParseMultipartForm(2 << 30); err != nil { // TODO: howto limit max file size???
rhl.Printf("WebUploadHandler: error while parsing multi-part-form: %v", err)
webUploadErrorResponse(w, http.StatusBadRequest, err.Error())
return
}
username := r.FormValue("LOGIN_NAME")
password := r.FormValue("PASSWORD")
if username == "" {
webUploadErrorResponse(w, http.StatusBadRequest, "missing field LOGIN_NAME")
return
}
if password == "" {
webUploadErrorResponse(w, http.StatusBadRequest, "missing field LOGIN_NAME")
return
}
if authenticated, err := db.CheckPassword(username, password); err != nil {
rhl.Printf("WebUploadHandler: error checking username/password: %v", err)
webUploadErrorResponse(w, http.StatusUnauthorized, err.Error())
return
} else if !authenticated {
rhl.Printf("WebUploadHandler: invalid username/password")
webUploadErrorResponse(w, http.StatusUnauthorized, "invalid username/password")
return
}
src, hdr, err := r.FormFile("FILENAME")
if err != nil {
rhdl.Printf("WebUploadHandler: error looking for upload file in form: %s", err)
webUploadErrorResponse(w, http.StatusBadRequest, err.Error())
return
}
defer src.Close()
rhl.Printf("WebUploadHandler: got request from user '%s', filename='%s'", username, hdr.Filename)
dstpath, err := ioutil.TempDir(conf.TempDir, "rhimportd-")
if err != nil {
rhl.Printf("WebUploadHandler: error creating temporary directory: %v", err)
webUploadErrorResponse(w, http.StatusInternalServerError, err.Error())
return
}
dstfile := dstpath + "/" + hdr.Filename
dst, err := os.OpenFile(dstfile, os.O_WRONLY|os.O_CREATE|os.O_EXCL, 0600)
if err != nil {
rhl.Printf("WebUploadHandler: Unable to create file '%s': %v", dstfile, err)
webUploadErrorResponse(w, http.StatusInternalServerError, err.Error())
return
}
defer dst.Close()
io.Copy(dst, src)
webUploadResponse(w, "tmp://"+strings.TrimPrefix(dstfile, conf.TempDir))
}
|
