# This file is part of NIT ( http://www.nitlanguage.org ). # # Copyright 2013 Jean-Philippe Caissy # Copyright 2014 Alexis Laferrière # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # Provides the `FileServer` action, which is a standard and minimal file server module file_server import reactor import sessions import media_types import http_errors redef class String # Returns a `String` copy of `self` without any of the prefixed '/'s # # Examples: # # assert "/home/".strip_start_slashes == "home/" # assert "////home/".strip_start_slashes == "home/" # assert "../home/".strip_start_slashes == "../home/" fun strip_start_slashes: String do for i in chars.length.times do if chars[i] != '/' then return substring_from(i) return "" end end # A simple file server class FileServer super Action # Root folder of `self` file system var root: String init do var root = self.root # Simplify the root path as each file requested will also be simplified root = root.simplify_path # Make sure the root ends with '/', this makes a difference in the security # check on each file access. root = root + "/" self.root = root end # Error page template for a given `code` fun error_page(code: Int): Writable do return new ErrorTemplate(code) # Header of each directory page var header: nullable Writable = null is writable redef fun answer(request, turi) do var response var local_file = root.join_path(turi.strip_start_slashes) local_file = local_file.simplify_path # Is it reachable? # # This make sure that the requested file is within the root folder. if (local_file + "/").has_prefix(root) then # Does it exists? if local_file.file_exists then if local_file.file_stat.is_dir then # If we target a directory without an ending `/`, # redirect to the directory ending with `/`. if not request.uri.is_empty and request.uri.chars.last != '/' then response = new HttpResponse(303) response.header["Location"] = request.uri + "/" return response end # Show index file instead of the directory listing # only if `index.html` or `index.htm` is available var index_file = local_file.join_path("index.html") if index_file.file_exists then local_file = index_file else index_file = local_file.join_path("index.htm") if index_file.file_exists then local_file = index_file end end response = new HttpResponse(200) if local_file.file_stat.is_dir then # Show the directory listing var title = turi var files = local_file.files var links = new Array[String] if turi.length > 1 then var path = (request.uri + "/..").simplify_path links.add ".." end for file in files do var local_path = local_file.join_path(file).simplify_path var web_path = file.simplify_path if local_path.file_stat.is_dir then web_path = web_path + "/" links.add "{file}" end var header = self.header var header_code if header != null then header_code = header.write_to_string else header_code = "" response.body = """ {{{title}}} {{{header_code}}}

{{{title}}}

{{{links.join("
")}}}

""" response.header["Content-Type"] = media_types["html"].as(not null) else # It's a single file var file = new FileReader.open(local_file) response.body = file.read_all var ext = local_file.file_extension if ext != null then var media_type = media_types[ext] if media_type != null then response.header["Content-Type"] = media_type else response.header["Content-Type"] = "application/octet-stream" end file.close end else response = new HttpResponse(404) else response = new HttpResponse(403) if response.status_code != 200 then var tmpl = error_page(response.status_code) if header != null and tmpl isa ErrorTemplate then tmpl.header = header response.body = tmpl.to_s end return response end end