/* GoToSocial Copyright (C) 2021-2022 GoToSocial Authors admin@gotosocial.org This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details. You should have received a copy of the GNU Affero General Public License along with this program. If not, see . */ package web import ( "errors" "fmt" "io/ioutil" "net/http" "path/filepath" "strings" "time" "codeberg.org/gruf/go-cache/v2" "github.com/gin-gonic/gin" "github.com/superseriousbusiness/gotosocial/internal/api" "github.com/superseriousbusiness/gotosocial/internal/config" "github.com/superseriousbusiness/gotosocial/internal/gtserror" "github.com/superseriousbusiness/gotosocial/internal/processing" "github.com/superseriousbusiness/gotosocial/internal/router" "github.com/superseriousbusiness/gotosocial/internal/uris" ) const ( confirmEmailPath = "/" + uris.ConfirmEmailPath profilePath = "/@:" + usernameKey statusPath = profilePath + "/statuses/:" + statusIDKey adminPanelPath = "/admin" userPanelpath = "/user" assetsPath = "/assets" tokenParam = "token" usernameKey = "username" statusIDKey = "status" ) // Module implements the api.ClientModule interface for web pages. type Module struct { processor processing.Processor webAssetsAbsFilePath string assetsETagCache cache.Cache[string, eTagCacheEntry] defaultAvatars []string } // New returns a new api.ClientModule for web pages. func New(processor processing.Processor) (api.ClientModule, error) { webAssetsBaseDir := config.GetWebAssetBaseDir() if webAssetsBaseDir == "" { return nil, fmt.Errorf("%s cannot be empty and must be a relative or absolute path", config.WebAssetBaseDirFlag()) } webAssetsAbsFilePath, err := filepath.Abs(webAssetsBaseDir) if err != nil { return nil, fmt.Errorf("error getting absolute path of %s: %s", webAssetsBaseDir, err) } defaultAvatarsAbsFilePath := filepath.Join(webAssetsAbsFilePath, "default_avatars") defaultAvatarFiles, err := ioutil.ReadDir(defaultAvatarsAbsFilePath) if err != nil { return nil, fmt.Errorf("error reading default avatars at %s: %s", defaultAvatarsAbsFilePath, err) } defaultAvatars := []string{} for _, f := range defaultAvatarFiles { // ignore directories if f.IsDir() { continue } // ignore files bigger than 50kb if f.Size() > 50000 { continue } // get the name of the file, eg avatar.jpeg fileName := f.Name() // get just the .jpeg, for example, from avatar.jpeg extensionWithDot := filepath.Ext(fileName) // remove the leading . to just get, eg, jpeg extension := strings.TrimPrefix(extensionWithDot, ".") // take only files with simple extensions // that we know will work OK as avatars switch strings.ToLower(extension) { case "svg", "jpeg", "jpg", "gif", "png": avatar := fmt.Sprintf("%s/default_avatars/%s", assetsPath, f.Name()) defaultAvatars = append(defaultAvatars, avatar) default: continue } } assetsETagCache := cache.New[string, eTagCacheEntry]() assetsETagCache.SetTTL(time.Hour, false) assetsETagCache.Start(time.Minute) return &Module{ processor: processor, webAssetsAbsFilePath: webAssetsAbsFilePath, assetsETagCache: assetsETagCache, defaultAvatars: defaultAvatars, }, nil } // Route satisfies the RESTAPIModule interface func (m *Module) Route(s router.Router) error { // serve static files from assets dir at /assets assetsGroup := s.AttachGroup(assetsPath) m.mountAssetsFilesystem(assetsGroup) s.AttachHandler(http.MethodGet, adminPanelPath, m.AdminPanelHandler) // redirect /admin/ to /admin s.AttachHandler(http.MethodGet, adminPanelPath+"/", func(c *gin.Context) { c.Redirect(http.StatusMovedPermanently, adminPanelPath) }) s.AttachHandler(http.MethodGet, userPanelpath, m.UserPanelHandler) // redirect /user/ to /user s.AttachHandler(http.MethodGet, userPanelpath+"/", func(c *gin.Context) { c.Redirect(http.StatusMovedPermanently, userPanelpath) }) // redirect /auth/edit to /user s.AttachHandler(http.MethodGet, "/auth/edit", func(c *gin.Context) { c.Redirect(http.StatusMovedPermanently, userPanelpath) }) // serve front-page s.AttachHandler(http.MethodGet, "/", m.baseHandler) // serve profile pages at /@username s.AttachHandler(http.MethodGet, profilePath, m.profileGETHandler) // serve statuses s.AttachHandler(http.MethodGet, statusPath, m.threadGETHandler) // serve email confirmation page at /confirm_email?token=whatever s.AttachHandler(http.MethodGet, confirmEmailPath, m.confirmEmailGETHandler) // 404 handler s.AttachNoRouteHandler(func(c *gin.Context) { api.ErrorHandler(c, gtserror.NewErrorNotFound(errors.New(http.StatusText(http.StatusNotFound))), m.processor.InstanceGet) }) return nil }