File

-- Prosody IM
-- Copyright (C) 2008-2010 Matthew Wild
-- Copyright (C) 2008-2010 Waqas Hussain
-- 
-- This project is MIT/X11 licensed. Please see the
-- COPYING file in the source package for more information.
--

module:depends("http");
local lfs = require "lfs";

local open = io.open;
local stat = lfs.attributes;

local http_base = module:get_option_string("http_path", "www_files");

local response_400 = "<h1>Bad Request</h1>Sorry, we didn't understand your request :(";
local response_403 = "<h1>Forbidden</h1>You don't have permission to view the contents of this directory :(";
local response_404 = "<h1>Page Not Found</h1>Sorry, we couldn't find what you were looking for :(";

-- TODO: Should we read this from /etc/mime.types if it exists? (startup time...?)
local mime_map = {
	html = "text/html";
	htm = "text/html";
	xml = "text/xml";
	xsl = "text/xml";
	txt = "text/plain; charset=utf-8";
	js = "text/javascript";
	css = "text/css";
};

local function preprocess_path(path)
	if path:sub(1,1) ~= "/" then
		path = "/"..path;
	end
	local level = 0;
	for component in path:gmatch("([^/]+)/") do
		if component == ".." then
			level = level - 1;
		elseif component ~= "." then
			level = level + 1;
		end
		if level < 0 then
			return nil;
		end
	end
	return path;
end

function serve_file(event, path)
	local response = event.response;
	path = path and preprocess_path(path);
	if not path then
		response.status = 400;
		return response:send(response_400);
	end
	local full_path = http_base..path;
	if stat(full_path, "mode") == "directory" then
		if stat(full_path.."/index.html", "mode") == "file" then
			return serve_file(event, path.."/index.html");
		end
		response.status = 403;
		return response:send(response_403);
	end
	local f, err = open(full_path, "rb");
	if not f then
		response.status = 404;
		return response:send(response_404.."<br/>"..tostring(err));
	end
	local data = f:read("*a");
	f:close();
	if not data then
		response.status = 403;
		return response:send(response_403);
	end
	local ext = path:match("%.([^.]*)$");
	response.headers.content_type = mime_map[ext]; -- Content-Type should be nil when not known
	return response:send(data);
end

module:provides("http", {
	route = {
		["/*"] = serve_file;
	};
});