gitoria

3.8 KB

1. // lib/api-helpers.hl — the plumbing of the function routes (lib/api.hl): JSON / Markdown / plain answers, redirects,
2. // the guard of the internal ssh routes, the repo of a request's host, where a login may return to. Statics only.
3. import { Response } from 'hl:http1'
4. import { NL, scheme, hostPort, slugOfHost } from './util.hl'
5. import { slugError } from './repos-helpers.hl'
6. import { repoBySlug } from './repos.hl'
7. import { sshSecret, sshEnabled } from './sshkeys.hl'
9. static jsonHeaders = { 'Content-Type' = 'application/json; charset=utf-8' }
11. static reply = (status, value) => {
12. return new Response(JSON.stringify(value), { status = status headers = jsonHeaders })
13. }
15. static fail = (status, message) => { return reply(status, { error = message }) }
17. // THE MARKDOWN READ VIEW: `Accept: text/markdown` (for LLM readers)
18. static wantsMarkdown = (req) => {
19. a = req.headers['accept']
20. return a != null && hlTypeName(a) == 'String' && a.includes('text/markdown')
21. }
23. static markdownReply = (text) => {
24. return new Response(text, { status = 200 headers = { 'Content-Type' = 'text/markdown; charset=utf-8' } })
25. }
27. // a plain-text answer of the internal ssh routes
28. static textReply = (status, text) => {
29. return new Response(text, { status = status headers = { 'Content-Type' = 'text/plain; charset=utf-8' 'Cache-Control' = 'no-store' } })
30. }
32. static goTo = (where) => {
33. return new Response('redirect', { status = 302 headers = { 'Location' = where 'Cache-Control' = 'no-store' 'Content-Type' = 'text/plain; charset=utf-8' } })
34. }
36. // THE INTERNAL SSH ROUTES' GUARD (docker/sshd asks them): null when the caller may ask, else the refusing answer. Without
37. // GITORIA_SSH_SECRET they do not exist (404); every call needs `X-Gitoria-Secret` = that secret, and a request that came
38. // through the public proxy (it carries X-Forwarded-For / X-Real-IP) is refused.
39. static sshGuard = (req) => {
40. if (!sshEnabled) { return textReply(404, 'not found' + NL) }
41. if (req.method != 'GET') { return textReply(405, 'GET only' + NL) }
42. if (req.headers['x-forwarded-for'] != null || req.headers['x-real-ip'] != null) { return textReply(403, 'internal only' + NL) }
43. given = req.headers['x-gitoria-secret']
44. if (given == null || hlTypeName(given) != 'String' || given != sshSecret) { return textReply(403, 'wrong secret' + NL) }
45. return null
46. }
48. // the repo of a request's host (a repo address), or null
49. static repoOfRequest = (req) => {
50. h = req.headers['host']
51. slug = slugOfHost(h == null ? '' : h.split(':')[0])
52. return slug == '' || slugError(slug) != null ? null : repoBySlug(slug)
53. }
55. // BACK TO THE PAGE after a login: /login.js puts `?next=` into the button's return URL at the click. Only a same-origin PATH
56. // goes (one `/`, URL-safe characters, ≤ 500) — or a full URL of THIS system: <scheme>://<label>.<host>
57. // with a valid, non-reserved repo label and such a path. Anything else → `/`.
58. static nextChars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~/?&=%+,;@!$()*:'
59. static nextPath = (want) => {
60. if (want == null || hlTypeName(want) != 'String' || want == '' || want.length > 500) { return '/' }
61. if (want.slice(0, 1) != '/' || want.slice(0, 2) == '//' || want.slice(0, 7) == '/login/') { return '/' }
62. let i = 0
63. while (i < want.length) {
64. if (!nextChars.includes(want[i])) { return '/' }
65. i = i + 1
66. }
67. return want
68. }
70. static safeNext = (want) => {
71. if (want == null || hlTypeName(want) != 'String' || want.length > 500) { return '/' }
72. prefix = scheme + '://'
73. if (!want.startsWith(prefix)) { return nextPath(want) }
74. rest = want.slice(prefix.length)
75. slash = rest.indexOf('/')
76. hp = slash < 0 ? rest : rest.slice(0, slash)
77. path = slash < 0 ? '/' : rest.slice(slash)
78. dot = hp.indexOf('.')
79. if (dot < 1 || hp.slice(dot + 1) != hostPort || slugError(hp.slice(0, dot)) != null) { return '/' }
80. p = nextPath(path)
81. if (p == '/' && path != '/') { return '/' }
82. return prefix + hp + p
83. }