-
Notifications
You must be signed in to change notification settings - Fork 34
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
acaf658
commit 5068cc7
Showing
24 changed files
with
431 additions
and
64 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
202 changes: 202 additions & 0 deletions
202
...tal/portal-impl/src/main/java/com/enonic/xp/portal/impl/handler/api/PortalApiHandler.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,202 @@ | ||
| package com.enonic.xp.portal.impl.handler.api; | ||
|
|
||
| import java.util.Arrays; | ||
| import java.util.Collection; | ||
| import java.util.EnumSet; | ||
| import java.util.List; | ||
| import java.util.concurrent.Callable; | ||
| import java.util.regex.Matcher; | ||
| import java.util.regex.Pattern; | ||
| import java.util.stream.Collectors; | ||
|
|
||
| import org.osgi.service.component.annotations.Activate; | ||
| import org.osgi.service.component.annotations.Component; | ||
| import org.osgi.service.component.annotations.Modified; | ||
| import org.osgi.service.component.annotations.Reference; | ||
|
|
||
| import com.enonic.xp.branch.Branch; | ||
| import com.enonic.xp.content.ContentConstants; | ||
| import com.enonic.xp.content.ContentId; | ||
| import com.enonic.xp.content.ContentService; | ||
| import com.enonic.xp.context.ContextAccessor; | ||
| import com.enonic.xp.context.ContextBuilder; | ||
| import com.enonic.xp.image.ImageService; | ||
| import com.enonic.xp.image.ScaleParamsParser; | ||
| import com.enonic.xp.media.MediaInfoService; | ||
| import com.enonic.xp.portal.PortalRequest; | ||
| import com.enonic.xp.portal.PortalResponse; | ||
| import com.enonic.xp.portal.impl.PortalConfig; | ||
| import com.enonic.xp.portal.impl.handler.attachment.AttachmentHandlerWorker; | ||
| import com.enonic.xp.portal.impl.handler.image.ImageHandlerWorker; | ||
| import com.enonic.xp.project.ProjectConstants; | ||
| import com.enonic.xp.repository.RepositoryId; | ||
| import com.enonic.xp.security.PrincipalKey; | ||
| import com.enonic.xp.security.RoleKeys; | ||
| import com.enonic.xp.security.auth.AuthenticationInfo; | ||
| import com.enonic.xp.web.HttpMethod; | ||
| import com.enonic.xp.web.WebException; | ||
| import com.enonic.xp.web.WebRequest; | ||
| import com.enonic.xp.web.WebResponse; | ||
| import com.enonic.xp.web.handler.BaseWebHandler; | ||
| import com.enonic.xp.web.handler.WebHandler; | ||
| import com.enonic.xp.web.handler.WebHandlerChain; | ||
|
|
||
| import static com.google.common.base.Strings.nullToEmpty; | ||
|
|
||
| @Component(immediate = true, service = WebHandler.class, configurationPid = "com.enonic.xp.portal") | ||
| public class PortalApiHandler | ||
| extends BaseWebHandler | ||
| { | ||
| private static final Pattern PATTERN = | ||
| Pattern.compile( "^/api/media/(?<mediaType>image|attachment)/(?<repo>[^/]+)/(?<branch>[^/]+)/(?<restPath>.*)$" ); | ||
|
|
||
| private static final Pattern ATTACHMENT_REST_PATH_PATTERN = Pattern.compile( "([^/]+)/([^/^:]+)(?::([^/]+))?/([^/]+)" ); | ||
|
|
||
| private static final Pattern IMAGE_REST_PATH_PATTERN = Pattern.compile( "([^/^:]+)(?::([^/]+))?/([^/]+)/([^/]+)" ); | ||
|
|
||
| private final ContentService contentService; | ||
|
|
||
| private final ImageService imageService; | ||
|
|
||
| private final MediaInfoService mediaInfoService; | ||
|
|
||
| private volatile String privateCacheControlHeaderConfig; | ||
|
|
||
| private volatile String publicCacheControlHeaderConfig; | ||
|
|
||
| private volatile String contentSecurityPolicy; | ||
|
|
||
| private volatile String contentSecurityPolicySvg; | ||
|
|
||
| private volatile List<PrincipalKey> draftBranchAllowedFor; | ||
|
|
||
| @Activate | ||
| public PortalApiHandler( @Reference final ContentService contentService, @Reference final ImageService imageService, | ||
| @Reference final MediaInfoService mediaInfoService ) | ||
| { | ||
| super( -2, EnumSet.of( HttpMethod.GET, HttpMethod.OPTIONS ) ); | ||
|
|
||
| this.contentService = contentService; | ||
| this.imageService = imageService; | ||
| this.mediaInfoService = mediaInfoService; | ||
| } | ||
|
|
||
| @Activate | ||
| @Modified | ||
| public void activate( final PortalConfig config ) | ||
| { | ||
| this.privateCacheControlHeaderConfig = config.media_private_cacheControl(); | ||
| this.publicCacheControlHeaderConfig = config.media_public_cacheControl(); | ||
| this.contentSecurityPolicy = config.media_contentSecurityPolicy(); | ||
| this.contentSecurityPolicySvg = config.media_contentSecurityPolicy_svg(); | ||
| this.draftBranchAllowedFor = Arrays.stream( nullToEmpty( config.draftBranchAllowedFor() ).split( ",", -1 ) ) | ||
| .map( String::trim ) | ||
| .map( PrincipalKey::from ) | ||
| .collect( Collectors.toList() ); | ||
| } | ||
|
|
||
| @Override | ||
| protected boolean canHandle( final WebRequest webRequest ) | ||
| { | ||
| return PATTERN.matcher( webRequest.getRawPath() ).matches(); | ||
| } | ||
|
|
||
| @Override | ||
| protected WebResponse doHandle( final WebRequest webRequest, final WebResponse webResponse, final WebHandlerChain webHandlerChain ) | ||
| throws Exception | ||
| { | ||
| Matcher matcher = PATTERN.matcher( webRequest.getRawPath() ); | ||
| matcher.matches(); | ||
|
|
||
| String repo = matcher.group( "repo" ); | ||
| String branch = matcher.group( "branch" ); | ||
| String type = matcher.group( "mediaType" ); | ||
| String restPath = matcher.group( "restPath" ); | ||
|
|
||
| RepositoryId repositoryId = RepositoryId.from( ProjectConstants.PROJECT_REPO_ID_PREFIX + repo ); | ||
|
|
||
| PortalRequest portalRequest = createPortalRequest( webRequest, repositoryId, Branch.from( branch ) ); | ||
|
|
||
| return executeInContext( repositoryId, branch, () -> type.equals( "attachment" ) | ||
| ? doHandleAttachment( portalRequest, restPath ) | ||
| : doHandleImage( portalRequest, restPath ) ); | ||
| } | ||
|
|
||
| private PortalRequest createPortalRequest( final WebRequest webRequest, final RepositoryId repositoryId, final Branch branch ) | ||
| { | ||
| if ( ContentConstants.BRANCH_DRAFT.equals( branch ) ) | ||
| { | ||
| final AuthenticationInfo authInfo = ContextAccessor.current().getAuthInfo(); | ||
| if ( !authInfo.hasRole( RoleKeys.ADMIN ) && authInfo.getPrincipals().stream().noneMatch( draftBranchAllowedFor::contains ) ) | ||
| { | ||
| throw WebException.forbidden( "You don't have permission to access this resource" ); | ||
| } | ||
| } | ||
|
|
||
| PortalRequest portalRequest = webRequest instanceof PortalRequest ? (PortalRequest) webRequest : new PortalRequest( webRequest ); | ||
| portalRequest.setRepositoryId( repositoryId ); | ||
| portalRequest.setBranch( branch ); | ||
| return portalRequest; | ||
| } | ||
|
|
||
| private PortalResponse executeInContext( final RepositoryId repositoryId, final String branch, final Callable<PortalResponse> callable ) | ||
| { | ||
| return ContextBuilder.copyOf( ContextAccessor.current() ) | ||
| .repositoryId( repositoryId ) | ||
| .branch( branch ) | ||
| .build() | ||
| .callWith( callable ); | ||
| } | ||
|
|
||
| private PortalResponse doHandleImage( final PortalRequest portalRequest, final String restPath ) | ||
| throws Exception | ||
| { | ||
| Matcher matcher = IMAGE_REST_PATH_PATTERN.matcher( restPath ); | ||
| if ( !matcher.find() ) | ||
| { | ||
| throw WebException.notFound( "Not a valid image url pattern" ); | ||
| } | ||
|
|
||
| final ImageHandlerWorker worker = | ||
| new ImageHandlerWorker( portalRequest, this.contentService, this.imageService, this.mediaInfoService ); | ||
| worker.id = ContentId.from( matcher.group( 1 ) ); | ||
| worker.fingerprint = matcher.group( 2 ); | ||
| worker.scaleParams = new ScaleParamsParser().parse( matcher.group( 3 ) ); | ||
| worker.name = matcher.group( 4 ); | ||
| worker.filterParam = getParameter( portalRequest, "filter" ); | ||
| worker.qualityParam = getParameter( portalRequest, "quality" ); | ||
| worker.backgroundParam = getParameter( portalRequest, "background" ); | ||
| worker.privateCacheControlHeaderConfig = this.privateCacheControlHeaderConfig; | ||
| worker.publicCacheControlHeaderConfig = this.publicCacheControlHeaderConfig; | ||
| worker.contentSecurityPolicy = this.contentSecurityPolicy; | ||
| worker.contentSecurityPolicySvg = this.contentSecurityPolicySvg; | ||
| return worker.execute(); | ||
| } | ||
|
|
||
| private PortalResponse doHandleAttachment( final PortalRequest portalRequest, final String restPath ) | ||
| throws Exception | ||
| { | ||
| Matcher matcher = ATTACHMENT_REST_PATH_PATTERN.matcher( restPath ); | ||
| if ( !matcher.find() ) | ||
| { | ||
| throw WebException.notFound( "Not a valid attachment url pattern" ); | ||
| } | ||
|
|
||
| final AttachmentHandlerWorker worker = new AttachmentHandlerWorker( portalRequest, this.contentService ); | ||
| worker.download = "download".equals( matcher.group( 1 ) ); | ||
| worker.id = ContentId.from( matcher.group( 2 ) ); | ||
| worker.fingerprint = matcher.group( 3 ); | ||
| worker.name = matcher.group( 4 ); | ||
| worker.privateCacheControlHeaderConfig = this.privateCacheControlHeaderConfig; | ||
| worker.publicCacheControlHeaderConfig = this.publicCacheControlHeaderConfig; | ||
| worker.contentSecurityPolicy = this.contentSecurityPolicy; | ||
| worker.contentSecurityPolicySvg = this.contentSecurityPolicySvg; | ||
| return worker.execute(); | ||
| } | ||
|
|
||
| private String getParameter( final WebRequest req, final String name ) | ||
| { | ||
| final Collection<String> values = req.getParams().get( name ); | ||
| return values.isEmpty() ? null : values.iterator().next(); | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.