path: root/app/acf_www-controller.lua

--[[ Code for the Alpine Configuration WEB framework 
      see http://wiki.alpinelinux.org
      Copyright (C) 2007  Nathan Angelacos
      Licensed under the terms of GPL2
   ]]--
-- Required global libraries

module(..., package.seeall)

-- This is not in the global namespace, but future
-- require statements shouldn't need to go to the disk lib
require "posix"


-- We use the parent exception handler in a last-case situation
local parent_exception_handler

function build_menus(self)
	--Build the menu
	m=require("menubuilder")
	roll = require ("roles")
	form = require ("format")
	sessiondata.menu = {}
	sessiondata.menu.mainmenu = m.get_menuitems(self.conf.appdir)
	sessiondata.menu.submenu = m.get_submenuitems(self.conf.appdir)

if sessiondata.userinfo == nil then
	--we are dealing with an unknown user
p = {"ALL"}
	--this will be whatever the "UNKNOWN" role is ... right now it is ALL
	--temp should be the 
local temp = format.string_to_table(roll.get_roles_perm(self,p),",")
	--lets apply permissions
	for a,b in pairs(sessiondata.menu.mainmenu) do
		for k,v in pairs(temp) do
		local control,acti = string.match(v,"(%a+):(%a+)")
			if sessiondata.menu.mainmenu[a].controller == control then
				if sessiondata.menu.mainmenu[a].action == acti then
				sessiondata.menu.mainmenu[a].match = "yes"
				break
				else
				sessiondata.menu.mainmenu[a].match = "no"
				end
			else
			sessiondata.menu.mainmenu[a].match = "no"
			end
			if sessiondata.menu.mainmenu[a].controller == "menuhints" then
			sessiondata.menu.mainmenu[a].match = "yes" 
			end
		end
	end
	--also need to do the submenu tabs... this is only for appearence
	--will have to make sure somewhere else they can't run them :)
	for a,b in pairs(sessiondata.menu.submenu) do
	 for c,d in pairs(sessiondata.menu.submenu[a]) do
	 	for k,v in pairs(temp) do 
	 	local control,acti = string.match(v,"(%a+):(%a+)")
			if sessiondata.menu.submenu[a][c].action == acti then
			  sessiondata.menu.submenu[a][c].match = "yes"
			  break
			else
			  sessiondata.menu.submenu[a][c].match = "no"
			  end
	 	end	
	 end	
	end	
else
	--we don't need to figure out what permission have it is in sessiondata
	local temp = format.string_to_table(sessiondata.userinfo.perm,",")
	for a,b in pairs(sessiondata.menu.mainmenu) do
		for e,f in pairs(temp) do
		local control,acti = string.match(f,"(%a+):(%a+)")
			if sessiondata.menu.mainmenu[a].controller == control then
				if sessiondata.menu.mainmenu[a].action == acti then
				sessiondata.menu.mainmenu[a].match = "yes"
				break
				else
				sessiondata.menu.mainmenu[a].match = "no"
				end
			else
			sessiondata.menu.mainmenu[a].match = "no"
			end
			if sessiondata.menu.mainmenu[a].controller == "menuhints" then 
			sessiondata.menu.mainmenu[a].match = "yes"
			end
		end
	end

end
	local temptab = {}
	for a,b in pairs(sessiondata.menu.mainmenu) do
		if sessiondata.menu.mainmenu[a].match ~= "no" then
		temptab[#temptab +1 ] = sessiondata.menu.mainmenu[a]
		end
	end
	
	sessiondata.menu.mainmenu = temptab
	local tempsub = {}
	for c,d in pairs(sessiondata.menu.submenu) do
	 for e,f in pairs(sessiondata.menu.submenu[c]) do
	 	if sessiondata.menu.submenu[c][e].match ~= "no" then
		tempsub[#tempsub +1] = sessiondata.menu.submenu[c][e]
		--may need this to be c
		end
	 end
	end
	sessiondata.menu.submenu = tempsub
	-- Debug: Timestamp on menu creation
	sessiondata.menu.timestamp = {tab="Menu_created: " .. os.date(),action="Menu_created: " .. os.date(),}
end

mvc = {}
mvc.on_load = function (self, parent)
	-- open the log file
	self.conf.logfile = io.open ("/var/log/acf.log", "a+")

	-- Make sure we have some kind of sane defaults for libdir and sessiondir
	self.conf.libdir = self.conf.libdir or ( self.conf.appdir .. "/lib/" )
	self.conf.sessiondir = self.conf.sessiondir or "/tmp/"
	self.conf.appuri = "https://" .. ENV.HTTP_HOST .. ENV.SCRIPT_NAME
	self.conf.default_controller = "welcome"	
	self.clientdata = FORM
	self.conf.clientip = ENV.REMOTE_ADDR

	parent_exception_handler = parent.exception_handler
	
	-- this sets the package path for us and our children
	package.path=  self.conf.libdir .. "?.lua;" .. package.path
	
	sessionlib=require ("session")


	self.sessiondata = {}
	
	local tempid = ""
	if self.clientdata.sessionid == nil then
		self.sessiondata.id  = sessionlib.random_hash(512) 
		tempid = self.sessiondata.id
		if not (self.sessiondata.menu) then
			build_menus(self)
		end
		
	else
		local timestamp
		tempid = self.clientdata.sessionid
		timestamp, self.sessiondata = 
			sessionlib.load_session(self.conf.sessiondir,
				self.clientdata.sessionid)
				build_menus(self)
		if timestamp == nil then 
			self.sessiondata.id = tempid
			sessionlib.record_event(self.conf.sessiondir,
				sessionlib.hash_ip_addr(self.conf.clientip))
				build_menus(self)
		else

		-- FIXME: This is probably wrong place to generate the menus

		local now = os.time()
		local minutes_ago = now - (sessionlib.minutes_expired_events * 60)
			if timestamp < minutes_ago then
			sessionlib.unlink_session(self.conf.sessiondir, self.clientdata.sessionid)
			sessiondata.id = sessionlib.random_hash(512)
			sessionlib.count_events(self.conf.sessiondir,self.conf.userid or "", sessionlib.hash_ip_addr(self.conf.clientip),sessionlib.limit_count_events)
			--[[
			FIXME --- need to write this function
			if too many bad events for this ip invaidate the session
		
			if (timestamp is > 10 minutes old)	
			sessionlib.unlink.session (self.conf.sessiondir,
				self.sessiondata.id)
			self.sessiondata = {}
			self.sessiondata.id = sessionlib.random_hash(512)
			generate flash message "Inactivity logout"
			end
			]]--
			sessionlib.expired_events(self.conf.sessiondir,sessionlib.minutes_expired_events)
			build_menus(self)
			end
		end
	end
end


mvc.post_exec = function (self)
	sessionlib=require ("session")
	-- sessionlib.serialize("s", sessiondata))
	if sessiondata.id then
		sessionlib.save_session(conf.sessiondir, 
        			sessiondata.id, sessiondata)     
        end
	-- Close the logfile
        conf.logfile:close()
end


-- look for a template
-- ctlr-action-view, then  ctlr-view, then action-view, then view

find_template = function ( appdir, prefix, controller, action, viewtype )
	local targets = {
			appdir .. prefix .. "template-" .. controller .. "-" .. 
				action .. "-" .. viewtype .. ".lsp",
			appdir .. prefix .. "template-" .. controller .. "-" .. 
				viewtype .. ".lsp",
			appdir .. prefix .. "template-" .. action .. "-" ..
				viewtype .. ".lsp",
			appdir .. prefix .. "template-" .. viewtype .. ".lsp"
			}
	local file
	for k,v in pairs(targets) do
		file = io.open (v)
		if file then 
			io.close (file)
			return v
		end
	end
	-- not found, so try one level higher
	if prefix == "" then -- already at the top level - fail
		return false
	end
	prefix = dirname (prefix) 
	return find_template ( appdir, prefix, controller, action, viewtype )
end



-- Overload the MVC's view resolver with our own

view_resolver = function(self)
	local file
	local viewname
	local viewtype = self.conf.viewtype or "html"
	local names = { self.conf.appdir .. self.conf.prefix .. self.conf.controller ..
				"-" .. self.conf.action .. "-" .. viewtype .. ".lsp",
			self.conf.appdir .. self.conf.prefix .. self.conf.controller ..
				"-" .. viewtype .. ".lsp" }


	-- search for template
	local template = find_template ( self.conf.appdir, self.conf.prefix,
		self.conf.controller, self.conf.action, "html") 
	
	-- search for view
	for i,filename in ipairs (names) do
		file = io.open(filename)
		if file then
			file:close()
			viewname = filename
			break
		end
	end

	-- We have a template
	if template then
		-- ***************************************************
		-- This is how to call another controller (APP or self
		-- can be used... m will contain worker and model,
		-- with conf, and other "missing" parts pointing back
		-- to APP or self
		-- ***************************************************
		
		local m,worker_loaded,model_loaded  = self:new("alpine-baselayout/hostname")
		local alpineversion  = self:new("alpine-baselayout/alpineversion")
		
		-- FIXME - this is ugly, but it puts the hostname the expected
		-- format if the controller doesn't load correctly 
		local h = {}
		
		-- If the worker and model loaded correctly, then
		-- use the sub-controller
		if worker_loaded and model_loaded then
			h = m.worker.read(m)
		else
			h.hostname = { value = "unknown" }
		end
		
		local pageinfo =  { viewfile = viewname,
					controller = m.conf.controller,
					--          ^^^ see.. m.conf doesnt exist - but it works
					-- the inheritance means self.conf is used instead
					action = self.conf.action,
					hostname = h.hostname.value,
					-- alpineversion = alpineversion.worker.read(alpineversion),
					prefix = self.conf.prefix,
					script = self.conf.appuri, 
					skin = self.conf.skin or ""
					}

		-- Fetch the menu's from sessiondata (filter out what's needed)
		local menu = self.sessiondata.menu.mainmenu
		local submenu = self.sessiondata.menu.submenu[pageinfo.controller]

--[[		-- DEBUG: Next row's is to display when the menu was created (see function build_menus(self) in BOF)
		if (submenu) then
			submenu[99] = sessiondata.menu.timestamp
		end
--]]
		return function (viewtable)
			local template = haserl.loadfile (template)
			return template ( pageinfo, menu, submenu, viewtable, self.sessiondata )
		end
	end

	-- No template, but have a view
	if viewname then
		return haserl.loadfile (viewname)
	else
		return function() end 
	end
end

exception_handler = function (self, message )
	local html = require ("html")
	mvc.post_exec (self)
	if type(message) == "table" then
		if message.type == "redir" then
			io.write ("Status: 302 Moved\n")
			io.write ("Location: " .. ENV["SCRIPT_NAME"] ..
				  	message.prefix .. message.controller ..
					"/" .. message.action .. 
					(message.extra or "" ) .. "\n")
				if self.sessiondata.id then
					io.write (html.cookie.set("sessionid", self.sessiondata.id))
				else
					io.write (html.cookie.unset("sessionid"))
				end
			io.write ( "Content-Type: text/html\n\n" )
		elseif message.type == "dispatch" then
			parent_exception_handler(self, message)
		end
		else
		parent_exception_handler( self, message)
	end
end

-- create a Configuration Framework Entity (cfe) 
-- returns a table with at least "value", "type", "option" and "errtxt"
cfe = function ( optiontable )
	optiontable = optiontable or {}
	me = { 	value="",
		type="text",
		option="",
		errtxt="",
		name="", 
		label="" }
	for key,value in pairs(optiontable) do
		me[key] = value
	end
	return me
end

-- FIXME - need to think more about this..
logevent = function ( message )
	conf.logfile:write (string.format("%s: %s\n", os.date(), message)) 
end