wisski-cloud-distillery/internal/dis/component/server/server.go

package server

import (
	"context"
	"fmt"
	"io"
	"net/http"

	"github.com/FAU-CDI/wisski-distillery/internal/dis/component"
	"github.com/FAU-CDI/wisski-distillery/internal/dis/component/server/templating"
	"github.com/FAU-CDI/wisski-distillery/internal/models"
	"github.com/tkw1536/pkglib/contextx"
	"github.com/tkw1536/pkglib/httpx"
	"github.com/tkw1536/pkglib/mux"

	"github.com/gorilla/csrf"
	"github.com/rs/zerolog"
)

// Server represents the running control server.
type Server struct {
	component.Base
	dependencies struct {
		Routeables []component.Routeable
		Cronables  []component.Cronable

		Templating *templating.Templating
	}
}

var (
	_ component.Installable = (*Server)(nil)
)

// Server returns an http.Mux that implements the main server instance.
// The server may spawn background tasks, but these should be terminated once context closes.
//
// Logging messages are directed to progress
func (server *Server) Server(ctx context.Context, progress io.Writer) (public http.Handler, internal http.Handler, err error) {
	logger := zerolog.Ctx(ctx)

	var publicM, internalM mux.Mux[component.RouteContext]
	publicM.Context = func(r *http.Request) component.RouteContext {
		slug, ok := server.Still.Config.HTTP.SlugFromHost(r.Host)
		return component.RouteContext{
			DefaultDomain: slug == "" && ok,
		}
	}
	publicM.Panic = func(p any, stack []byte, w http.ResponseWriter, r *http.Request) {
		// log the panic
		logger.Error().
			Str("panic", fmt.Sprint(p)).
			Str("stack", string(stack)).
			Str("path", r.URL.Path).
			Msg("panic serving handler")

		// and send an internal server error
		httpx.TextInterceptor.Fallback.ServeHTTP(w, r)
	}

	// setup the internal server identically
	internalM.Panic = publicM.Panic
	internalM.Context = publicM.Context

	// create a csrf protector
	csrfProtector := server.csrf()

	// iterate over all the handler
	for _, s := range server.dependencies.Routeables {
		routes := s.Routes()
		zerolog.Ctx(ctx).Info().
			Str("Name", s.Name()).
			Str("Prefix", routes.Prefix).
			Strs("Aliases", routes.Aliases).
			Bool("Exact", routes.Exact).
			Bool("CSRF", routes.CSRF).
			Bool("Decorator", routes.Decorator != nil).
			Bool("Internal", routes.Internal).
			Bool("MatchAllDomains", routes.MatchAllDomains).
			Msg("mounting route")

		// call the handler for the route
		handler, err := s.HandleRoute(ctx, routes.Prefix)
		if err != nil {
			zerolog.Ctx(ctx).Err(err).
				Str("Component", s.Name()).
				Str("Prefix", routes.Prefix).
				Msg("error mounting route")
			continue
		}

		// decorate the handler
		handler = routes.Decorate(handler, csrfProtector)

		// determine the predicate
		predicate := routes.Predicate(publicM.ContextOf)

		// and add all the prefixes
		for _, prefix := range append([]string{routes.Prefix}, routes.Aliases...) {
			if routes.Internal {
				internalM.Add(prefix, predicate, routes.Exact, handler)
			} else {
				publicM.Add(prefix, predicate, routes.Exact, handler)
			}
		}
	}

	// apply the given context function
	public = httpx.WithContextWrapper(&publicM, func(rcontext context.Context) context.Context { return contextx.WithValuesOf(rcontext, ctx) })
	internal = httpx.WithContextWrapper(&internalM, func(rcontext context.Context) context.Context { return contextx.WithValuesOf(rcontext, ctx) })

	// Add Content-Security-Policy
	public = WithCSP(public, models.ContentSecurityPolicyDistilery)
	internal = WithCSP(internal, models.ContentSecurityPolicyNothing)

	err = nil
	return
}

// CSRF returns a CSRF handler for the given function
func (server *Server) csrf() func(http.Handler) http.Handler {
	var opts []csrf.Option
	if !server.Config.HTTP.HTTPSEnabled() {
		opts = append(opts, csrf.Secure(false))
	}
	opts = append(opts, csrf.SameSite(csrf.SameSiteStrictMode))
	opts = append(opts, csrf.CookieName(CSRFCookie))
	opts = append(opts, csrf.FieldName(CSRFCookieField))
	return csrf.Protect(server.Config.CSRFSecret(), opts...)
}

// WithCSP adds a Content-Security-Policy header to every response
func WithCSP(handler http.Handler, policy string) http.Handler {
	if policy == "" {
		return handler
	}
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		w.Header().Set("Content-Security-Policy", policy)
		handler.ServeHTTP(w, r)
	})
}

func init() {
	httpx.InterceptorOnFallback = func(req *http.Request, err error) {
		zerolog.Ctx(req.Context()).Err(err).Msg("unknown error intercepted")
	}
}