mod deleter; mod file_kind; mod multipart; use actix_files::{Files, NamedFile}; use actix_multipart::Multipart; use actix_web::{ error, http::header::{ContentDisposition, DispositionParam, DispositionType}, middleware, web::{self, Bytes}, App, Error, FromRequest, HttpRequest, HttpResponse, HttpServer, }; use async_std::{ fs, path::PathBuf, sync::{channel, Sender}, task, }; use file_kind::FileKind; use sqlx::{ postgres::{PgPool, PgRow}, Cursor, Row, }; use std::env; const UPLOAD_HTML: &str = include_str!("../template/upload.html"); const VIEW_HTML: &str = include_str!("../template/view.html"); async fn index() -> Result { Ok(NamedFile::open("./static/index.html") .map_err(|_| error::ErrorNotFound(""))? .disable_content_disposition()) } async fn upload( payload: Multipart, db: web::Data, sender: web::Data>, config: web::Data, ) -> Result { let file_id = format!("{:x?}", rand::random::()); let mut filename = config.files_dir.clone(); filename.push(&file_id); let (original_name, valid_till, kind) = match multipart::parse_multipart(payload, &file_id, &filename).await { Ok(data) => data, Err(err) => { if filename.exists().await { fs::remove_file(filename) .await .map_err(|_| error::ErrorInternalServerError("could not remove file"))?; } return Err(err); } }; sqlx::query("INSERT INTO Files (file_id, file_name, valid_till, kind) VALUES ($1, $2, $3, $4)") .bind(&file_id) .bind(original_name.as_ref().unwrap_or_else(|| &file_id)) .bind(valid_till.naive_local()) .bind(kind.to_string()) .execute(db.as_ref()) .await .map_err(|_| error::ErrorInternalServerError("could not insert file into database"))?; log::info!( "create new file {} (valid_till: {}, kind: {})", file_id, valid_till, kind ); sender.send(()).await; let redirect = if kind == FileKind::BINARY && original_name.is_some() { format!("/upload/{}/{}", file_id, original_name.unwrap()) } else { format!("/upload/{}", file_id) }; Ok(HttpResponse::SeeOther() .header("location", redirect) .finish()) } async fn uploaded(req: web::HttpRequest) -> Result { let id = req.match_info().query("id"); let name = req.match_info().get("name"); let conn = req.connection_info(); let url = if let Some(name) = name { format!("{}://{}/file/{}/{}", conn.scheme(), conn.host(), id, name) } else { format!("{}://{}/file/{}", conn.scheme(), conn.host(), id) }; let upload_html = UPLOAD_HTML.replace("{url}", url.as_str()); Ok(HttpResponse::Ok() .content_type("text/html") .body(upload_html)) } async fn download( req: HttpRequest, db: web::Data, config: web::Data, ) -> Result { let id = req.match_info().query("id"); let mut cursor = sqlx::query("SELECT file_id, file_name, kind from files WHERE file_id = $1") .bind(id) .fetch(db.as_ref()); let row: PgRow = cursor .next() .await .map_err(|_| error::ErrorInternalServerError("could not run select statement"))? .ok_or_else(|| error::ErrorNotFound("file does not exist or has expired"))?; let file_id: String = row.get("file_id"); let file_name: String = row.get("file_name"); let kind: String = row.get("kind"); let mut path = config.files_dir.clone(); path.push(&file_id); if kind == FileKind::TEXT.to_string() && !req.query_string().contains("raw") { let content = fs::read_to_string(path).await.map_err(|_| { error::ErrorInternalServerError("this file should be here but could not be found") })?; let encoded = htmlescape::encode_minimal(&content); let view_html = VIEW_HTML.replace("{text}", &encoded); let response = HttpResponse::Ok().content_type("text/html").body(view_html); Ok(response) } else { let file = NamedFile::open(path) .map_err(|_| { error::ErrorInternalServerError("this file should be here but could not be found") })? .set_content_disposition(ContentDisposition { disposition: DispositionType::Attachment, parameters: vec![DispositionParam::Filename(file_name)], }); file.into_response(&req) } } async fn not_found() -> Result { Ok(HttpResponse::NotFound() .content_type("text/plain") .body("not found")) } fn get_db_url() -> String { if let Ok(database_url) = env::var("DATABASE_URL") { return database_url; } let auth = if let Ok(user) = env::var("DATABASE_USER") { if let Ok(pass) = env::var("DATABASE_PASS") { format!("{}:{}@", user, pass) } else { format!("{}@", user) } } else { String::new() }; format!( "postgresql://{auth}{host}/{name}", auth = auth, host = env::var("DATABASE_HOST").unwrap_or_else(|_| "localhost".to_string()), name = env::var("DATABASE_NAME").unwrap_or_else(|_| "datatrash".to_string()) ) } async fn setup_db() -> PgPool { let conn_url = &get_db_url(); log::info!("Using Connection string {}", conn_url); let pool = PgPool::builder() .max_size(5) .connect_timeout(std::time::Duration::from_secs(5)) .build(conn_url) .await .expect("could not create db pool"); sqlx::query(include_str!("../init-db.sql")) .execute(&pool) .await .expect("could not create table Files"); pool } #[derive(Clone)] struct Config { files_dir: PathBuf, } #[actix_rt::main] async fn main() -> std::io::Result<()> { if env::var("RUST_LOG").is_err() { env::set_var("RUST_LOG", "info"); } env_logger::init(); let pool: PgPool = setup_db().await; let config = Config { files_dir: PathBuf::from(env::var("FILES_DIR").unwrap_or_else(|_| "./files".to_owned())), }; fs::create_dir_all(&config.files_dir) .await .expect("could not create directory for storing files"); let (sender, receiver) = channel(8); log::info!("omnomnom"); task::spawn(deleter::delete_old_files( receiver, pool.clone(), config.files_dir.clone(), )); let db = web::Data::new(pool); let sender = web::Data::new(sender); let upload_max_bytes: usize = env::var("UPLOAD_MAX_BYTES") .ok() .and_then(|variable| variable.parse().ok()) .unwrap_or(8 * 1024 * 1024); let bind_address = env::var("BIND_ADDRESS").unwrap_or_else(|_| "0.0.0.0:8000".to_owned()); HttpServer::new({ move || { App::new() .wrap(middleware::Logger::default()) .app_data(db.clone()) .app_data(sender.clone()) .app_data(Bytes::configure(|cfg| cfg.limit(upload_max_bytes))) .data(config.clone()) .service(web::resource("/").route(web::get().to(index))) .service(web::resource("/upload").route(web::post().to(upload))) .service( web::resource(["/upload/{id}", "/upload/{id}/{name}"]) .route(web::get().to(uploaded)), ) .service( web::resource(["/file/{id}", "/file/{id}/{name}"]) .route(web::get().to(download)), ) .service(Files::new("/static", "static").disable_content_disposition()) .default_service(web::route().to(not_found)) } }) .bind(bind_address)? .run() .await }