org.graylog2.web.resources.WebInterfaceAssetsResource Maven / Gradle / Ivy
/*
* Copyright (C) 2020 Graylog, Inc.
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the Server Side Public License, version 1,
* as published by MongoDB, Inc.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* Server Side Public License for more details.
*
* You should have received a copy of the Server Side Public License
* along with this program. If not, see
* .
*/
package org.graylog2.web.resources;
import com.google.common.cache.CacheBuilder;
import com.google.common.cache.CacheLoader;
import com.google.common.cache.LoadingCache;
import com.google.common.hash.HashCode;
import com.google.common.hash.Hashing;
import com.google.common.io.Resources;
import org.glassfish.jersey.server.ContainerRequest;
import org.graylog2.plugin.Plugin;
import org.graylog2.shared.rest.resources.csp.CSP;
import org.graylog2.shared.rest.resources.csp.CSPDynamicFeature;
import org.graylog2.web.IndexHtmlGenerator;
import org.graylog2.web.PluginAssets;
import javax.activation.MimetypesFileTypeMap;
import javax.annotation.Nonnull;
import javax.inject.Inject;
import javax.inject.Singleton;
import javax.ws.rs.GET;
import javax.ws.rs.NotFoundException;
import javax.ws.rs.Path;
import javax.ws.rs.PathParam;
import javax.ws.rs.core.CacheControl;
import javax.ws.rs.core.Context;
import javax.ws.rs.core.EntityTag;
import javax.ws.rs.core.HttpHeaders;
import javax.ws.rs.core.MediaType;
import javax.ws.rs.core.Request;
import javax.ws.rs.core.Response;
import java.io.FileNotFoundException;
import java.io.IOException;
import java.net.URI;
import java.net.URISyntaxException;
import java.net.URL;
import java.nio.file.FileSystem;
import java.nio.file.FileSystemAlreadyExistsException;
import java.nio.file.FileSystemNotFoundException;
import java.nio.file.FileSystems;
import java.nio.file.Files;
import java.nio.file.Paths;
import java.nio.file.attribute.FileTime;
import java.util.Collections;
import java.util.Date;
import java.util.Optional;
import java.util.Set;
import java.util.concurrent.TimeUnit;
import static com.google.common.base.MoreObjects.firstNonNull;
import static java.util.Objects.requireNonNull;
@Singleton
@Path("")
@CSP(group = CSP.DEFAULT)
public class WebInterfaceAssetsResource {
private final MimetypesFileTypeMap mimeTypes;
private final IndexHtmlGenerator indexHtmlGenerator;
private final Set plugins;
private final LoadingCache fileSystemCache;
@Inject
public WebInterfaceAssetsResource(IndexHtmlGenerator indexHtmlGenerator, Set plugins, MimetypesFileTypeMap mimeTypes) {
this.indexHtmlGenerator = indexHtmlGenerator;
this.plugins = plugins;
this.mimeTypes = requireNonNull(mimeTypes);
this.fileSystemCache = CacheBuilder.newBuilder()
.maximumSize(1024)
.build(new CacheLoader<>() {
@Override
public FileSystem load(@Nonnull URI key) throws Exception {
try {
return FileSystems.getFileSystem(key);
} catch (FileSystemNotFoundException e) {
try {
return FileSystems.newFileSystem(key, Collections.emptyMap());
} catch (FileSystemAlreadyExistsException f) {
return FileSystems.getFileSystem(key);
}
}
}
});
}
@Path("assets/plugin/{plugin}/{filename}")
@GET
public Response get(@Context Request request,
@PathParam("plugin") String pluginName,
@PathParam("filename") String filename) {
final Plugin plugin = getPluginForName(pluginName)
.orElseThrow(() -> new NotFoundException("Couldn't find plugin " + pluginName));
try {
final URL resourceUrl = getResourceUri(true, filename, plugin.metadata().getClass());
return getResponse(request, filename, resourceUrl, true);
} catch (URISyntaxException | IOException e) {
throw new NotFoundException("Couldn't find " + filename + " in plugin " + pluginName, e);
}
}
private Optional getPluginForName(String pluginName) {
return this.plugins.stream().filter(plugin -> plugin.metadata().getUniqueId().equals(pluginName)).findFirst();
}
@Path("assets/{filename: .*}")
@GET
public Response get(@Context ContainerRequest request,
@Context HttpHeaders headers,
@PathParam("filename") String filename) {
try {
final URL resourceUrl = getResourceUri(false, filename, this.getClass());
return getResponse(request, filename, resourceUrl, false);
} catch (IOException | URISyntaxException e) {
return generateIndexHtml(headers, (String) request.getProperty(CSPDynamicFeature.CSP_NONCE_PROPERTY));
}
}
@GET
@Path("{filename:.*}")
public Response getIndex(@Context ContainerRequest request, @Context HttpHeaders headers) {
final URI originalLocation = request.getRequestUri();
return get(request, headers, originalLocation.getPath());
}
private Response getResponse(Request request, String filename,
URL resourceUrl, boolean fromPlugin) throws IOException, URISyntaxException {
final URI uri = resourceUrl.toURI();
final java.nio.file.Path path;
final byte[] fileContents;
switch (resourceUrl.getProtocol()) {
case "file": {
path = Paths.get(uri);
fileContents = Files.readAllBytes(path);
break;
}
case "jar": {
final FileSystem fileSystem = fileSystemCache.getUnchecked(uri);
path = fileSystem.getPath(pluginPrefixFilename(fromPlugin, filename));
fileContents = Resources.toByteArray(resourceUrl);
break;
}
default:
throw new IllegalArgumentException("Not a JAR or local file: " + resourceUrl);
}
final FileTime lastModifiedTime = Files.getLastModifiedTime(path);
final Date lastModified = Date.from(lastModifiedTime.toInstant());
final HashCode hashCode = Hashing.sha256().hashBytes(fileContents);
final EntityTag entityTag = new EntityTag(hashCode.toString());
final Response.ResponseBuilder response = request.evaluatePreconditions(lastModified, entityTag);
if (response != null) {
return response.build();
}
final String contentType = firstNonNull(mimeTypes.getContentType(filename), MediaType.APPLICATION_OCTET_STREAM);
final CacheControl cacheControl = new CacheControl();
cacheControl.setMaxAge((int) TimeUnit.DAYS.toSeconds(365));
cacheControl.setNoCache(false);
cacheControl.setPrivate(false);
return Response
.ok(fileContents, contentType)
.tag(entityTag)
.cacheControl(cacheControl)
.lastModified(lastModified)
.build();
}
private URL getResourceUri(boolean fromPlugin, String filename,
Class aClass) throws URISyntaxException, FileNotFoundException {
final URL resourceUrl = aClass.getResource(pluginPrefixFilename(fromPlugin, filename));
if (resourceUrl == null) {
throw new FileNotFoundException("Resource file " + filename + " not found.");
}
return resourceUrl;
}
@Nonnull
private String pluginPrefixFilename(boolean fromPlugin, String filename) {
if (fromPlugin) {
return "/" + filename;
} else {
return "/" + PluginAssets.pathPrefix + "/" + filename;
}
}
private Response generateIndexHtml(HttpHeaders headers, String nonce) {
return Response
.ok(indexHtmlGenerator.get(headers.getRequestHeaders(), nonce))
.header(HttpHeaders.CONTENT_TYPE, MediaType.TEXT_HTML)
.header("X-UA-Compatible", "IE=edge")
.build();
}
}
© 2015 - 2024 Weber Informatics LLC | Privacy Policy