inabox/InABox.Server/Rest/RestListener.cs

using System.Collections.Generic;
using System.Diagnostics.CodeAnalysis;
using System.Net;
using System.Reflection;
using System.Security.Cryptography.X509Certificates;
using GenHTTP.Api.Content;
using GenHTTP.Api.Infrastructure;
using GenHTTP.Api.Protocol;
using GenHTTP.Engine;
using GenHTTP.Modules.IO;
using GenHTTP.Modules.IO.FileSystem;
using GenHTTP.Modules.IO.Streaming;
using GenHTTP.Modules.Practices;
using InABox.Clients;
using InABox.Core;
using InABox.Database;
using InABox.Server.WebSocket;
using InABox.WebSocket.Shared;
using NPOI.SS.Formula.Functions;
using NPOI.XSSF.Streaming.Values;
using RequestMethod = GenHTTP.Api.Protocol.RequestMethod;
using StreamContent = GenHTTP.Modules.IO.Streaming.StreamContent;

namespace InABox.API
{
    public class RestHandler : IHandler
    {
        private readonly List<string> endpoints;
        private readonly List<string> operations;

        private int? WebSocketPort;

        public RestHandler(IHandler parent, int? webSocketPort)
        {
            WebSocketPort = webSocketPort;

            Parent = parent;

            endpoints = new();
            operations = new();

            var types = CoreUtils.TypeList(
                x => x.IsSubclassOf(typeof(Entity))
                     && x.GetInterfaces().Contains(typeof(IRemotable))
            );
            var DBTypes = DbFactory.SupportedTypes();

            foreach (var t in types)
                if (DBTypes.Contains(t.EntityName().Replace(".", "_")))
                {
                    operations.Add(t.EntityName().Replace(".", "_"));

                    endpoints.Add(string.Format("List{0}", t.Name));
                    endpoints.Add(string.Format("Load{0}", t.Name));
                    endpoints.Add(string.Format("Save{0}", t.Name));
                    endpoints.Add(string.Format("MultiSave{0}", t.Name));
                    endpoints.Add(string.Format("Delete{0}", t.Name));
                    endpoints.Add(string.Format("MultiDelete{0}", t.Name));
                }

            endpoints.Add("QueryMultiple");
        }
        
        /// <summary>
        /// The main handler for the server; an HTTP request comes in, an HTTP response goes out.
        /// </summary>
        /// <param name="request"></param>
        /// <returns></returns>
        public ValueTask<IResponse?> HandleAsync(IRequest request)
        {
            try
            {
                switch (request.Method.KnownMethod)
                {
                    case RequestMethod.GET:
                    case RequestMethod.HEAD:
                        var current = request.Target.Current?.Value;
                        if (String.Equals(current,"update"))
                        {
                            request.Target.Advance();
                            current = request.Target.Current?.Value;
                        }
                        switch (current)
                        {
                            case "operations" or "supported_operations":
                                return new ValueTask<IResponse?>(GetSupportedOperations(request).Build());
                            case "classes" or "supported_classes":
                                return new ValueTask<IResponse?>(GetSupportedClasses(request).Build());
                            case "version" or "releasenotes" or "release_notes" or "install" or "install_desktop":
                                return new ValueTask<IResponse?>(GetUpdateFile(request).Build());
                            case "info":
                                return new ValueTask<IResponse?>(GetServerInfo(request).Build());

                        }

                        Logger.Send(LogType.Error, request.Client.IPAddress.ToString(),
                            string.Format("GET/HEAD request to endpoint '{0}' is unresolved, because it does not exist", current));
                        return new ValueTask<IResponse?>(request.Respond().Status(ResponseStatus.NotFound).Build());
                    case RequestMethod.POST:
                        var target = request.Target.Current;
                        if (target is not null)
                        {
                            return target.Value switch
                            {
                                "validate" => new ValueTask<IResponse?>(Validate(request).Build()),
                                "check_2fa" => new ValueTask<IResponse?>(Check2FA(request).Build()),
                                "notify" => new ValueTask<IResponse?>(GetNotify(request).Build()),
                                _ => HandleDatabaseRequest(request),
                            };
                        }
                        return new ValueTask<IResponse?>(request.Respond().Status(ResponseStatus.NotFound).Build());
                }

                return new ValueTask<IResponse?>(request.Respond().Status(ResponseStatus.MethodNotAllowed).Header("Allow", "GET, POST, HEAD").Build());
            }
            catch(Exception e)
            {
                Logger.Send(LogType.Error, "", CoreUtils.FormatException(e));
                return new ValueTask<IResponse?>(request.Respond().Status(ResponseStatus.InternalServerError).Build());
            }
        }
        
        /// <summary>
        /// Returns a JSON list of operation names; used for checking support of operations client side
        /// </summary>
        /// <param name="request"></param>
        /// <returns></returns>
        private IResponseBuilder GetSupportedOperations(IRequest request)
        {
            var serialized = Core.Serialization.Serialize(endpoints, true) ?? "";
            return request.Respond()
                .Type(new FlexibleContentType(ContentType.ApplicationJson))
                .Content(new ResourceContent(Resource.FromString(serialized).Build()));
        }

        /// <summary>
        /// Returns a JSON list of class names; used for checking support of operations client side
        /// </summary>
        /// <param name="request"></param>
        /// <returns></returns>
        private IResponseBuilder GetSupportedClasses(IRequest request)
        {
            var serialized = Serialization.Serialize(operations) ?? "";
            return request.Respond()
                .Type(new FlexibleContentType(ContentType.ApplicationJson))
                .Content(new ResourceContent(Resource.FromString(serialized).Build()));
        }
        
        /// <summary>
        /// Returns the Splash Logo and Color Scheme for this Database
        /// </summary>
        /// <param name="request"></param>
        /// <returns></returns>
        private IResponseBuilder GetServerInfo(IRequest request)
        {
            InfoResponse response = RestService.Info(new InfoRequest());
            var serialized = Core.Serialization.Serialize(response, true) ?? "";
            return request.Respond()
                .Type(new FlexibleContentType(ContentType.ApplicationJson))
                .Content(new ResourceContent(Resource.FromString(serialized).Build()));
        }
        
        /// <summary>
        /// Gets port for web socket
        /// </summary>
        /// <param name="request"></param>
        /// <returns></returns>
        private IResponseBuilder GetNotify(IRequest request)
        {
            var requestObj = Deserialize<NotifyRequest>(request.Content, true);
            if (!CredentialsCache.SessionExists(requestObj.Credentials.Session))
            {
                return request.Respond().Status(ResponseStatus.NotFound);
            }
            var response = new NotifyResponse
            {
                Status = StatusCode.OK,
                SocketPort = WebSocketPort
            };
            var serialized = Serialization.Serialize(response);
            return request.Respond()
                .Type(new FlexibleContentType(ContentType.ApplicationJson))
                .Content(new ResourceContent(Resource.FromString(serialized).Build()));
        }

        #region Authentication

        private IResponseBuilder Validate(IRequest request)
        {
            var requestObj = Deserialize<ValidateRequest>(request.Content, true);
            var response = RestService.Validate(requestObj);

            var serialized = Serialization.Serialize(response);
            return request.Respond()
                .Type(FlexibleContentType.Get(ContentType.ApplicationJson))
                .Content(new ResourceContent(Resource.FromString(serialized).Build()));
        }

        private IResponseBuilder Check2FA(IRequest request)
        {
            var requestObj = Deserialize<Check2FARequest>(request.Content, true);
            var response = RestService.Check2FA(requestObj);

            var serialized = Serialization.Serialize(response);
            return request.Respond()
                .Type(FlexibleContentType.Get(ContentType.ApplicationJson))
                .Content(new ResourceContent(Resource.FromString(serialized).Build()));
        }

        #endregion

        #region Database

        private static MethodInfo GetMethod(string name) =>
            typeof(RestHandler).GetMethod(name, BindingFlags.NonPublic | BindingFlags.Static)
            ?? throw new Exception($"Invalid method '{name}'");

        private static readonly List<Tuple<string, MethodInfo>> methodMap = new()
        {
            new("List", GetMethod(nameof(List))),
            new("Save", GetMethod(nameof(Save))),
            new("Delete", GetMethod(nameof(Delete))),
            new("MultiSave", GetMethod(nameof(MultiSave))),
            new("MultiDelete", GetMethod(nameof(MultiDelete)))
        };

        private static QueryResponse<T> List<T>(IRequest request) where T : Entity, new()
        {
            var requestObject = Deserialize<QueryRequest<T>>(request.Content, true);
            return RestService<T>.List(requestObject);
        }
        private static SaveResponse<T> Save<T>(IRequest request) where T : Entity, new()
        {
            var requestObject = Deserialize<SaveRequest<T>>(request.Content, true);
            return RestService<T>.Save(requestObject);
        }
        private static DeleteResponse<T> Delete<T>(IRequest request) where T : Entity, new()
        {
            var requestObject = Deserialize<DeleteRequest<T>>(request.Content, true);
            return RestService<T>.Delete(requestObject);
        }
        private static MultiSaveResponse<T> MultiSave<T>(IRequest request) where T : Entity, new()
        {
            var requestObject = Deserialize<MultiSaveRequest<T>>(request.Content, true);
            return RestService<T>.MultiSave(requestObject);
        }
        private static MultiDeleteResponse<T> MultiDelete<T>(IRequest request) where T : Entity, new()
        {
            var requestObject = Deserialize<MultiDeleteRequest<T>>(request.Content, true);
            return RestService<T>.MultiDelete(requestObject);
        }

        private static T Deserialize<T>(Stream? stream, bool strict = false)
        {
            if (stream is null)
                throw new Exception("Stream is null");
            var str = new StreamReader(stream).ReadToEnd();
            return Serialization.Deserialize<T>(str, strict)
                ?? throw new Exception("Deserialization failed");
        }

        /// <summary>
        /// Handler for all database requests
        /// </summary>
        /// <param name="request"></param>
        /// <returns></returns>
        private ValueTask<IResponse?> HandleDatabaseRequest(IRequest request)
        {
            var endpoint = request.Target.Current.Value;
            if (endpoint.StartsWith("QueryMultiple"))
            {
                var requestObject = Deserialize<MultiQueryRequest>(request.Content, true);

                var result = RestService.QueryMultiple(requestObject, false);
                var serialized = Serialization.Serialize(result);

                var response = request.Respond()
                    .Type(new FlexibleContentType(ContentType.ApplicationJson))
                    .Content(new ResourceContent(Resource.FromString(serialized).Build()));
                return new ValueTask<IResponse?>(response.Build());
            }

            foreach (var (name, method) in methodMap)
                if (endpoint.Length > name.Length && endpoint.StartsWith(name))
                {
                    var entityName = endpoint[name.Length..];

                    var entityType = GetEntity(entityName);
                    if (entityType != null)
                    {
                        if (entityType.IsAssignableTo(typeof(ISecure)))
                        {
                            Logger.Send(LogType.Error, "", $"{entityType} is a secure entity. Request failed from IP {request.Client.IPAddress}");
                            return new ValueTask<IResponse?>(request.Respond().Status(ResponseStatus.NotFound).Build());
                        }

                        var resolvedMethod = method.MakeGenericMethod(entityType);
                        var result = resolvedMethod.Invoke(null, new object[] { request }) as Response;

                        var serialized = Serialization.Serialize(result);

                        var response = request.Respond()
                            .Type(new FlexibleContentType(ContentType.ApplicationJson))
                            .Content(new ResourceContent(Resource.FromString(serialized).Build()));
                        return new ValueTask<IResponse?>(response.Build());
                    }

                    Logger.Send(LogType.Error, request.Client.IPAddress.ToString(),
                        $"Request to endpoint '{endpoint}' unresolved, because '{entityName}' is not a valid entity");
                    return new ValueTask<IResponse?>(request.Respond().Status(ResponseStatus.NotFound).Build());
                }

            Logger.Send(LogType.Error, request.Client.IPAddress.ToString(), $"Request to endpoint '{endpoint}' unresolved, because the method does not exist");
            return new ValueTask<IResponse?>(request.Respond().Status(ResponseStatus.NotFound).Build());
        }

        private Dictionary<string, Type>? _persistentRemotable;

        private Type? GetEntity(string entityName)
        {
            _persistentRemotable ??= CoreUtils.TypeList(
                e => e.IsSubclassOf(typeof(Entity)) &&
                     e.GetInterfaces().Contains(typeof(IRemotable)) &&
                     e.GetInterfaces().Contains(typeof(IPersistent))).ToDictionary(x => x.Name, x => x);
            return _persistentRemotable.GetValueOrDefault(entityName);
        }

        #endregion

        #region Installer

        
        private IResponseBuilder GetUpdateFile(IRequest request)
        {
            var endpoint = request.Target.Current;
            string? filename = null;
            switch (endpoint?.Value)
            {
                case "version":
                    filename = Path.Combine(CoreUtils.GetCommonAppData(), "update/version.txt");
                    break;
                case "releasenotes" or "release_notes":
                    filename = Path.Combine(CoreUtils.GetCommonAppData(), "update/Release Notes.txt");
                    break;
                case "install" or "install_desktop":
                    filename = Path.Combine(CoreUtils.GetCommonAppData(), "update/PRSDesktopSetup.exe");
                    break;
            }

            if (filename is null) return request.Respond().Status(ResponseStatus.NotFound);

            if (File.Exists(filename))
            {
                return request.Respond()
                    .Header("Content-Disposition", $"attachment; filename={Path.GetFileName(filename)}")
                    .Content(new ResourceContent(
                        new FileResource(new FileInfo(filename), null, null)));
            }
            return request.Respond().Status(ResponseStatus.NotFound);
        }

        #endregion

        #region GenHTTP stuff
        public IHandler Parent { get; }

        public ValueTask PrepareAsync()
        {
            return new ValueTask();
        }

        public IEnumerable<ContentElement> GetContent(IRequest request)
        {
            return Enumerable.Empty<ContentElement>();
        }

        #endregion
    }

    public class RestHandlerBuilder : IHandlerBuilder<RestHandlerBuilder>
    {
        private readonly List<IConcernBuilder> _Concerns = new();

        private int? WebSocketPort;

        public RestHandlerBuilder(int? webSocketPort)
        {
            WebSocketPort = webSocketPort;
        }

        public RestHandlerBuilder Add(IConcernBuilder concern)
        {
            _Concerns.Add(concern);
            return this;
        }

        public IHandler Build(IHandler parent)
        {
            return Concerns.Chain(parent, _Concerns, p => new RestHandler(p, WebSocketPort));
        }
    }

    class RestNotifier : Notifier
    {
        private WebSocketServer SocketServer;

        public int Port => SocketServer.Port;

        public RestNotifier(int port)
        {
            SocketServer = new WebSocketServer(port);
            SocketServer.Poll += SocketServer_Poll;
        }

        private void SocketServer_Poll(NotifyState.Session session)
        {
            Poll(session.SessionID);
        }

        public void Start()
        {
            SocketServer.Start();
        }

        public void Stop()
        {
            SocketServer.Stop();
        }

        protected override void NotifyAll<TNotification>(TNotification notification)
        {
            SocketServer.Push(notification);
        }

        protected override void NotifySession(Guid session, Type TNotification, object? notification)
        {
            SocketServer.Push(session, TNotification, notification);
        }

        protected override void NotifySession<TNotification>(Guid session, TNotification notification)
        {
            SocketServer.Push(session, notification);
        }

        protected override IEnumerable<Guid> GetUserSessions(Guid userID)
        {
            return CredentialsCache.GetUserSessions(userID);
        }

        protected override IEnumerable<Guid> GetSessions(Platform platform)
        {
            return SocketServer.GetSessions(platform);
        }
    }

    public static class RestListener
    {
        private static IServerHost? host;
        private static X509Certificate2? certificate;
        private static RestNotifier? notifier;

        public static X509Certificate2? Certificate { get => certificate; }

        public static void Start()
        {
            host?.Start();
            notifier?.Start();
        }

        public static void Stop()
        {
            host?.Stop();
            notifier?.Stop();
        }

        public static void InitCertificate(ushort port, X509Certificate2 certificate)
        {
            RestListener.certificate = certificate;
            host?.Bind(IPAddress.Any, port, certificate);
        }
        public static void InitCertificate(ushort port, string certificateFile)
        {
            InitCertificate(port, new X509Certificate2(certificateFile));
        }

        public static void InitPort(ushort port)
        {
            host?.Bind(IPAddress.Any, port);
        }

        /// <summary>
        /// Clears certificate and host information, and stops the listener.
        /// </summary>
        public static void Clear()
        {
            host?.Stop();
            host = null;

            notifier?.Stop();
            notifier = null;

            certificate = null;
        }

        public static void Init(int webSocketPort)
        {
            if(webSocketPort != 0)
            {
                notifier = new RestNotifier(webSocketPort);
                Notify.Notifier = notifier;
            }

            host = Host.Create();

            host.Handler(new RestHandlerBuilder(notifier?.Port))
                .Defaults();
        }
    }
}