386 lines
12 KiB
Rust
386 lines
12 KiB
Rust
use hyper::{Body, Method, Request, Response};
|
|
use serde::{Deserialize, Serialize};
|
|
|
|
use std::convert::Infallible;
|
|
use std::future::Future;
|
|
use std::net;
|
|
use std::str::FromStr;
|
|
use std::sync;
|
|
|
|
use crate::origin::Origin;
|
|
use crate::{domain, origin};
|
|
|
|
pub mod http_tpl;
|
|
mod util;
|
|
|
|
type SvcResponse = Result<Response<hyper::body::Body>, String>;
|
|
|
|
#[derive(Clone)]
|
|
pub struct Service<'svc, DomainManager>
|
|
where
|
|
DomainManager: domain::manager::BoxedManager,
|
|
{
|
|
domain_manager: DomainManager,
|
|
target_a: net::Ipv4Addr,
|
|
passphrase: String,
|
|
http_domain: String,
|
|
handlebars: handlebars::Handlebars<'svc>,
|
|
}
|
|
|
|
pub fn new<'svc, DomainManager>(
|
|
domain_manager: DomainManager,
|
|
target_a: net::Ipv4Addr,
|
|
passphrase: String,
|
|
http_domain: String,
|
|
) -> Service<'svc, DomainManager>
|
|
where
|
|
DomainManager: domain::manager::BoxedManager,
|
|
{
|
|
Service {
|
|
domain_manager,
|
|
target_a,
|
|
passphrase,
|
|
http_domain,
|
|
handlebars: self::http_tpl::get(),
|
|
}
|
|
}
|
|
|
|
#[derive(Serialize)]
|
|
struct BasePresenter<'a, T> {
|
|
page_name: &'a str,
|
|
data: T,
|
|
}
|
|
|
|
#[derive(Deserialize)]
|
|
struct DomainGetArgs {
|
|
domain: domain::Name,
|
|
}
|
|
|
|
#[derive(Deserialize)]
|
|
struct DomainInitArgs {
|
|
domain: domain::Name,
|
|
}
|
|
|
|
#[derive(Deserialize)]
|
|
struct DomainSyncArgs {
|
|
domain: domain::Name,
|
|
passphrase: String,
|
|
}
|
|
|
|
impl<'svc, DomainManager> Service<'svc, DomainManager>
|
|
where
|
|
DomainManager: domain::manager::BoxedManager,
|
|
{
|
|
fn serve_string(&self, status_code: u16, path: &'_ str, body: Vec<u8>) -> SvcResponse {
|
|
let content_type = mime_guess::from_path(path)
|
|
.first_or_octet_stream()
|
|
.to_string();
|
|
|
|
match Response::builder()
|
|
.status(status_code)
|
|
.header("Content-Type", content_type)
|
|
.body(body.into())
|
|
{
|
|
Ok(res) => Ok(res),
|
|
Err(err) => Err(format!("failed to build {}: {}", path, err)),
|
|
}
|
|
}
|
|
|
|
//// TODO make this use an io::Write, rather than SvcResponse
|
|
fn render<T>(&self, status_code: u16, name: &'_ str, value: T) -> SvcResponse
|
|
where
|
|
T: Serialize,
|
|
{
|
|
let rendered = match self.handlebars.render(name, &value) {
|
|
Ok(res) => res,
|
|
Err(handlebars::RenderError {
|
|
template_name: None,
|
|
..
|
|
}) => return self.render_error_page(404, "Static asset not found"),
|
|
Err(err) => {
|
|
return self.render_error_page(500, format!("template error: {err}").as_str())
|
|
}
|
|
};
|
|
|
|
self.serve_string(status_code, name, rendered.into())
|
|
}
|
|
|
|
fn render_error_page(&'svc self, status_code: u16, e: &'_ str) -> SvcResponse {
|
|
#[derive(Serialize)]
|
|
struct Response<'a> {
|
|
error_msg: &'a str,
|
|
}
|
|
|
|
self.render(
|
|
status_code,
|
|
"/base.html",
|
|
BasePresenter {
|
|
page_name: "/error.html",
|
|
data: &Response { error_msg: e },
|
|
},
|
|
)
|
|
}
|
|
|
|
fn render_page<T>(&self, name: &'_ str, data: T) -> SvcResponse
|
|
where
|
|
T: Serialize,
|
|
{
|
|
self.render(
|
|
200,
|
|
"/base.html",
|
|
BasePresenter {
|
|
page_name: name,
|
|
data,
|
|
},
|
|
)
|
|
}
|
|
|
|
fn serve_origin(&self, domain: domain::Name, path: &'_ str) -> SvcResponse {
|
|
let mut path_owned;
|
|
|
|
let path = match path.ends_with('/') {
|
|
true => {
|
|
path_owned = String::from(path);
|
|
path_owned.push_str("index.html");
|
|
path_owned.as_str()
|
|
}
|
|
false => path,
|
|
};
|
|
|
|
let origin = match self.domain_manager.get_origin(&domain) {
|
|
Ok(o) => o,
|
|
Err(domain::manager::GetOriginError::NotFound) => {
|
|
return self.render_error_page(404, "Domain not found")
|
|
}
|
|
Err(domain::manager::GetOriginError::Unexpected(e)) => {
|
|
return self.render_error_page(500, format!("failed to fetch origin: {e}").as_str())
|
|
}
|
|
};
|
|
|
|
let mut buf = Vec::<u8>::new();
|
|
match origin.read_file_into(path, &mut buf) {
|
|
Ok(_) => self.serve_string(200, path, buf),
|
|
Err(origin::ReadFileIntoError::FileNotFound) => {
|
|
self.render_error_page(404, "File not found")
|
|
}
|
|
Err(origin::ReadFileIntoError::Unexpected(e)) => {
|
|
self.render_error_page(500, format!("failed to fetch file {path}: {e}").as_str())
|
|
}
|
|
}
|
|
}
|
|
|
|
async fn with_query_req<'a, F, In, Out>(&self, req: &'a Request<Body>, f: F) -> SvcResponse
|
|
where
|
|
In: Deserialize<'a>,
|
|
F: FnOnce(In) -> Out,
|
|
Out: Future<Output = SvcResponse>,
|
|
{
|
|
let query = req.uri().query().unwrap_or("");
|
|
match serde_urlencoded::from_str::<In>(query) {
|
|
Ok(args) => f(args).await,
|
|
Err(err) => Err(format!("failed to parse query args: {}", err)),
|
|
}
|
|
}
|
|
|
|
fn domain_get(&self, args: DomainGetArgs) -> SvcResponse {
|
|
#[derive(Serialize)]
|
|
struct Response {
|
|
domain: domain::Name,
|
|
config: Option<domain::config::Config>,
|
|
}
|
|
|
|
let config = match self.domain_manager.get_config(&args.domain) {
|
|
Ok(config) => Some(config),
|
|
Err(domain::manager::GetConfigError::NotFound) => None,
|
|
Err(domain::manager::GetConfigError::Unexpected(e)) => {
|
|
return self
|
|
.render_error_page(500, format!("retrieving configuration: {}", e).as_str());
|
|
}
|
|
};
|
|
|
|
self.render_page(
|
|
"/domain.html",
|
|
Response {
|
|
domain: args.domain,
|
|
config,
|
|
},
|
|
)
|
|
}
|
|
|
|
fn domain_init(&self, args: DomainInitArgs, domain_config: util::FlatConfig) -> SvcResponse {
|
|
#[derive(Serialize)]
|
|
struct Response {
|
|
domain: domain::Name,
|
|
flat_config: util::FlatConfig,
|
|
target_a: net::Ipv4Addr,
|
|
challenge_token: String,
|
|
}
|
|
|
|
let config: domain::config::Config = match domain_config.try_into() {
|
|
Ok(Some(config)) => config,
|
|
Ok(None) => return self.render_error_page(400, "domain config is required"),
|
|
Err(e) => {
|
|
return self.render_error_page(400, format!("invalid domain config: {e}").as_str())
|
|
}
|
|
};
|
|
|
|
let config_hash = match config.hash() {
|
|
Ok(hash) => hash,
|
|
Err(e) => {
|
|
return self
|
|
.render_error_page(500, format!("failed to hash domain config: {e}").as_str())
|
|
}
|
|
};
|
|
|
|
self.render_page(
|
|
"/domain_init.html",
|
|
Response {
|
|
domain: args.domain,
|
|
flat_config: config.into(),
|
|
target_a: self.target_a,
|
|
challenge_token: config_hash,
|
|
},
|
|
)
|
|
}
|
|
|
|
async fn domain_sync(
|
|
&self,
|
|
args: DomainSyncArgs,
|
|
domain_config: util::FlatConfig,
|
|
) -> SvcResponse {
|
|
if args.passphrase != self.passphrase.as_str() {
|
|
return self.render_error_page(401, "Incorrect passphrase");
|
|
}
|
|
|
|
let config: domain::config::Config = match domain_config.try_into() {
|
|
Ok(Some(config)) => config,
|
|
Ok(None) => return self.render_error_page(400, "domain config is required"),
|
|
Err(e) => {
|
|
return self.render_error_page(400, format!("invalid domain config: {e}").as_str())
|
|
}
|
|
};
|
|
|
|
let sync_result = self
|
|
.domain_manager
|
|
.sync_with_config(args.domain.clone(), config)
|
|
.await;
|
|
|
|
#[derive(Serialize)]
|
|
struct Response {
|
|
domain: domain::Name,
|
|
error_msg: Option<String>,
|
|
}
|
|
|
|
let error_msg = match sync_result {
|
|
Ok(_) => None,
|
|
Err(domain::manager::SyncWithConfigError::InvalidURL) => Some("Fetching the git repository failed, please double check that you input the correct URL.".to_string()),
|
|
Err(domain::manager::SyncWithConfigError::InvalidBranchName) => Some("The git repository does not have a branch of the given name, please double check that you input the correct name.".to_string()),
|
|
Err(domain::manager::SyncWithConfigError::AlreadyInProgress) => Some("The configuration of your domain is still in progress, please refresh in a few minutes.".to_string()),
|
|
Err(domain::manager::SyncWithConfigError::TargetANotSet) => Some("The A record is not set correctly on the domain. Please double check that you put the correct value on the record. If the value is correct, then most likely the updated records have not yet propagated. In this case you can refresh in a few minutes to try again.".to_string()),
|
|
Err(domain::manager::SyncWithConfigError::ChallengeTokenNotSet) => Some("The TXT record is not set correctly on the domain. Please double check that you put the correct value on the record. If the value is correct, then most likely the updated records have not yet propagated. In this case you can refresh in a few minutes to try again.".to_string()),
|
|
Err(domain::manager::SyncWithConfigError::Unexpected(e)) => Some(format!("An unexpected error occurred: {e}")),
|
|
};
|
|
|
|
let response = Response {
|
|
domain: args.domain,
|
|
error_msg,
|
|
};
|
|
|
|
self.render_page("/domain_sync.html", response)
|
|
}
|
|
}
|
|
|
|
pub async fn handle_request<DomainManager>(
|
|
svc: sync::Arc<Service<'_, DomainManager>>,
|
|
req: Request<Body>,
|
|
) -> Result<Response<Body>, Infallible>
|
|
where
|
|
DomainManager: domain::manager::BoxedManager,
|
|
{
|
|
match handle_request_inner(svc, req).await {
|
|
Ok(res) => Ok(res),
|
|
Err(err) => panic!("unexpected error {err}"),
|
|
}
|
|
}
|
|
|
|
fn strip_port(host: &str) -> &str {
|
|
match host.rfind(':') {
|
|
None => host,
|
|
Some(i) => &host[..i],
|
|
}
|
|
}
|
|
|
|
pub async fn handle_request_inner<DomainManager>(
|
|
svc: sync::Arc<Service<'_, DomainManager>>,
|
|
req: Request<Body>,
|
|
) -> SvcResponse
|
|
where
|
|
DomainManager: domain::manager::BoxedManager,
|
|
{
|
|
let maybe_host = match (
|
|
req.headers()
|
|
.get("Host")
|
|
.and_then(|v| v.to_str().ok())
|
|
.map(strip_port),
|
|
req.uri().host().map(strip_port),
|
|
) {
|
|
(Some(h), _) if h != svc.http_domain => Some(h),
|
|
(_, Some(h)) if h != svc.http_domain => Some(h),
|
|
_ => None,
|
|
}
|
|
.and_then(|h| domain::Name::from_str(h).ok());
|
|
|
|
if let Some(domain) = maybe_host {
|
|
return svc.serve_origin(domain, req.uri().path());
|
|
}
|
|
|
|
let method = req.method();
|
|
let path = req.uri().path();
|
|
|
|
if method == Method::GET && path.starts_with("/static/") {
|
|
return svc.render(200, path, ());
|
|
}
|
|
|
|
if method == Method::GET && path.starts_with("/.well-known/") {
|
|
let token = path.trim_start_matches("/.well-known/");
|
|
|
|
if let Ok(key) = svc.domain_manager.get_acme_http01_challenge_key(token) {
|
|
let body: hyper::Body = key.into();
|
|
return match Response::builder().status(200).body(body) {
|
|
Ok(res) => Ok(res),
|
|
Err(err) => Err(format!(
|
|
"failed to write acme http-01 challenge key: {}",
|
|
err
|
|
)),
|
|
};
|
|
}
|
|
}
|
|
|
|
match (method, path) {
|
|
(&Method::GET, "/") | (&Method::GET, "/index.html") => svc.render_page("/index.html", ()),
|
|
(&Method::GET, "/domain.html") => {
|
|
svc.with_query_req(&req, |args: DomainGetArgs| async { svc.domain_get(args) })
|
|
.await
|
|
}
|
|
(&Method::GET, "/domain_init.html") => {
|
|
svc.with_query_req(&req, |args: DomainInitArgs| async {
|
|
svc.with_query_req(&req, |config: util::FlatConfig| async {
|
|
svc.domain_init(args, config)
|
|
})
|
|
.await
|
|
})
|
|
.await
|
|
}
|
|
(&Method::GET, "/domain_sync.html") => {
|
|
svc.with_query_req(&req, |args: DomainSyncArgs| async {
|
|
svc.with_query_req(&req, |config: util::FlatConfig| async {
|
|
svc.domain_sync(args, config).await
|
|
})
|
|
.await
|
|
})
|
|
.await
|
|
}
|
|
_ => svc.render_error_page(404, "Page not found!"),
|
|
}
|
|
}
|