shithub: werc

ref: 72475062ce1be783224645cfb4f8a3e1cd62a900
dir: /bin/cgilib.rc/

# Useful functions

NEW_LINE = '
'

fn dprint { echo $* >[1=2] }

fn escape_html { sed 's/&/\&amp;/g; s/</\&lt;/g; s/>/\&gt;/g' $* }

fn perm_redirect {
    echo 'Status: 301 Moved Permanantly
Location: '^$1^'

'
    exit
}

fn get_post_args {
    if(~ $#POST_ARGS 0) {
        ifs='&
'       for(pair in `{cat}) {
            pair = `{echo -n $pair | sed 's/=/\&/'} \
            # Maybe we should urldecode on the first pass?
            POST_ARGS = ($POST_ARGS $pair)
            ifs=() \
            if(~ $pair(1) $*)
                $pair(1) = `{echo -n $pair(2) | urldecode | tr -d '
'}
        }
    }
    if not {
        pa = $POST_ARGS
        while(! ~ $#pa 0) {
            ifs=() \
            if(~ $pa(1) $*)
                $pa(1) = `{echo -n $pa(2) | urldecode | tr -d '
'}
            pa = $pa(3-)
        }
    }
}

# Is this really useful?
fn awk_buffer {
    awk '{
        buf = buf $0"\n"
        if(length(buf) > 8192) {
            printf "%s", buf
            buf = ""
        }
    }
    END{ printf "%s", buf }'
}

fn template { template.awk $* | rc $rcargs }

# .rec parsing
fn parse_rec {
    ifs='
' for(i in `{sed 's/% *//g; /^$/q' < $1}) {
        v = `{echo -n $i | sed 's/^/rec_/; s/=.*//;'} 
        $v = `{echo -n $i | sed 's/^[^=]*=//'}
    }
    ifs=() { rec_data = `{sed -n '/^[^%]./,$p' < $1} }
}


fn urldecode {
awk '
BEGIN {
    hextab ["0"] = 0; hextab ["8"] = 8;
    hextab ["1"] = 1; hextab ["9"] = 9;
    hextab ["2"] = 2; hextab ["A"] = hextab ["a"] = 10
    hextab ["3"] = 3; hextab ["B"] = hextab ["b"] = 11;
    hextab ["4"] = 4; hextab ["C"] = hextab ["c"] = 12;
    hextab ["5"] = 5; hextab ["D"] = hextab ["d"] = 13;
    hextab ["6"] = 6; hextab ["E"] = hextab ["e"] = 14;
    hextab ["7"] = 7; hextab ["F"] = hextab ["f"] = 15;
}
{
    decoded = ""
    i   = 1
    len = length ($0)
    while ( i <= len ) {
        c = substr ($0, i, 1)
        if ( c == "%" ) {
            if ( i+2 <= len ) {
                c1 = substr ($0, i+1, 1)
                c2 = substr ($0, i+2, 1)
                if ( hextab [c1] == "" || hextab [c2] == "" ) {
                    print "WARNING: invalid hex encoding: %" c1 c2 | "cat >&2"
                } else {
                    code = 0 + hextab [c1] * 16 + hextab [c2] + 0
                    c = sprintf ("%c", code)
                    i = i + 2
                }
            } else {
                print "WARNING: invalid % encoding: " substr ($0, i, len - i)
            }
        } else if ( c == "+" ) {
            c = " "
        }
        decoded = decoded c
        ++i
    }
    printf decoded
}
'
}

# Cookies
fn set_cookie {
    # TODO: should check input values more carefully
    name = $1
    val = $2
    extraHttpHeaders = ($extraHttpHeaders 'Set-cookie: '^$"name^'='^$"val^'; path=/;')
}
fn get_cookie {
    ifs=';' { co = `{ echo $HTTP_COOKIE } }

    #for(c in $co)
    #    if(~ $c $1^'='*)  # This matching doesn't work
    #        echo $c|sed 's/[^=]*=//' 

    # WARNING: we might be adding a trailing new line
    { for(c in $co) echo $c} | sed -n 's/[^=]*=//p' 
}

# Auth code
# Cookie format: WERC_USER: name:timestamp:hash(name.timestamp.password)

# login_user can't be used from a template because it sets a cookie!
fn login_user {
    get_post_args user_name user_password
    if(auth_user $user_name $user_password) {
        set_cookie werc_user $"user_name^':0:'^$"user_password        
        dprint Auth: SET COOKIE FOR USER: $user_name
    }
    if not {
        dprint Auth: failed login for $user_name $user_password
        false
    }
}

fn auth_user {
    user_name = $1
    user_pass = $2

    pfile = 'etc/users/'^$"user_name^'/password'
    if (~ $#user_name 0 || ~ $#user_password 0) {
        dprint Auth: missing user name or pass: $user_name / $user_password
        false
    }
    if not if(! test -f $pfile) {
        dprint Auth: cant find $pfile
        false
    }
    if not if (! ~ $user_pass `{cat $pfile}) {
        dprint Auth: Pass $user_pass doesnt match `{cat $pfile}
        false
    }
    if not {
        dprint Auth: success
        true
    }
}

fn user_in_group {
    if(~ $#logged_user 0)
        get_user

    if(~ $#logged_user 0) {
        dprint Auth: user_in_group: No logged in user
        false
    }
    if not if (! grep -s '^'^$logged_user^'$' etc/groups/$1) {
        dprint Auth: user_in_group: Cant find $logged_user in etc/groups/$1
        false
    }
    if not
        true
}

fn get_user {
    if(~ $REQUEST_METHOD POST)
        get_post_args user_name user_password
    if(~ $#user_name 0) { 
        ifs=':' { cu = `{get_cookie werc_user|tr -d $NEW_LINE} }
        if(! ~ $#cu 0) {
            user_name = $cu(1) 
            user_password  = $cu(3)
        }
    }
    if(! ~ $#user_name 0 && auth_user $user_name $user_password) {
        logged_user = $user_name
        logged_password = $user_password
    }
}

fn make_blog_post {
    bdir = $1
    btitle = $2
    btext = $3
    if(! ~ 0 $#1 $#2 $#3) {
        date=`{/bin/date +%F}

        n = 1
        for(f in $bdir^$date^'-'*) {
            i = `{echo -n $f | sed -n 's,^.*/'$date'-([0-9]+)_.*,\1,p'|tr -d $NEW_LINE}
            if(! ~ $#i 0 && test $i -ge $n)
                n = `{hoc -e $i'+1'}
        }
        btitle = `{echo -n $"btitle | sed 's/[ 	]+/_/g; 1q'}

        echo $btext > $bdir^'/'^$"date^'-'^$"n^_$"btitle.md 
    }
    if not {
        dprint $1 $2 $3 
        false
    }
}


# --------
#
#app_blog_methods = ( _post index.rss )
#fn app_blog__post {
#    echo
#}
#
#app_blog___default {
#    if (~ $blog)
#    call_app blogpost
#}
#
## --
#app_blogpost_methods = ( comment  _edit )
#
#fn app_blogpost_comment {
#    call_app comments
#}
#
## --
#app_comments_methods = ( _post _edit )
#
#fn app_comments___default {
#
#}