!7

// for sub-bots

please include function serveRedirect.

please include function serve403.

please include function serve404.

please include function serve500.

please include function serveFile.

please include function serveFileWithName.

please include function serveFile_maxCache.

please include function serveByteArray.

please include function serveByteArray_maxCache.

sclass WebRequest {

  NanoHTTPD.IHTTPSession httpSession;

  S uri, subURI;

  SS params;

  S cookie;

  Session session;

  *(NanoHTTPD.IHTTPSession *httpSession, S *uri, SS *params) {}

  S clientIP() {

    ret unnull(getClientIPFromHeaders(httpSession.getHeaders()));

  }

  S cookie() { ret cookie; }

  S domain() { ret mapGet(httpSession.getHeaders(), "host"); }

  User loggedInUser() {

    ret session == null ? null : session.user();

  }

  S googleClientID() {

    S domain = lower(domain());

    File jsonFile = googleClientSecretFileForDomain(domain);

    if (!fileExists(jsonFile)) null;

    Map map = decodeJSONMap(loadTextFile(jsonFile));

    map = (Map) map.get("web");

    ret (S) map.get("client_id");

  }

}

concept User > ConceptWithGlobalID {

  long lastSeen;

}

concept CookieUser > User {

  S cookie;

  toString { ret "[cookieUser " + md5(cookie) + "]"; }

}

concept GoogleUser > User {

  long googleLogInDate;

  S googleEmail, googleFirstName, googleLastName;

  bool googleEmailVerified;

  toString { ret googleFirstName + " " + googleLastName; }

}

concept Session {

  S cookie;

  User user;

  User user() {

    if (user == null)

      cset(this, user := uniq CookieUser(+cookie));

    ret user;

  }

}

cmodule Eleu3 > DynPrintLogAndEnabled {

  !include #1027628 // HTTP+HTTPS servers

  switchable bool alwaysWikify;

  start {

    dbIndexing(Session, 'cookie, CookieUser, 'cookie, GoogleUser, 'googleEmail);

    dm_restartOnFieldChange enabled();

    if (!enabled) ret;

    set redirectHttpToHttps;

    start_webServers(serverSocketFactory_botCompanyEtc());

  }

  O webServe(S uri, SS params) {

    Pair<Int, Bool> spamCheck = spamBlocker.checkRequest(uri, serveHttp_clientIP());

    if (spamCheck.b) {

      sleepSeconds(60.0);

      ret print("go away");

    }

    printVars("webServe", +uri);

    // Serve Let's encrypt challenges

    if (startsWith(uri, "/.well-known/"))

      ret loadTextFile(userDir("validation.txt"));

    // make WebRequest

    WebRequest req = new(NanoHTTPD.currentSession!, uri, params);

    req.cookie = nu ServeHttp_CookieHandler(verbose := true).handle();

    // Get session

    req.session = nempty(req.cookie) ? uniq Session(cookie := req.cookie) : null;

    print(session := req.session);

    // Serve Google verification

    if (eqic(uri, "/google-verify"))

      ret serveGoogleVerify(req);

    // Serve Rewrite DB

    S uri2 = appendSlash(uri);

    new Matches m;

    if (startsWith(uri2, "/db/", m)) {

      S mod = null;

      while licensed {

        mod = dm_findModuleWithParams("#1028965/RewriteDBWebBot", enabled := true);

        if (mod == null

          && dm_moduleIsReloading(dm_findModule("#1028965/RewriteDBWebBot"))

          || dm_moduleIsStarting(mod)) {

          printWithTime("Module is starting, waiting");

          sleep(100);

        } else break;

      }

      if (mod != null) {

        dm_call(mod, 'setEleu, mc());

        req.subURI = "/" + m.rest();

        ret dm_call(mod, 'html, req);

      }

      ret "DB not loaded";

    }

    // Serve WIKIFY

    if (alwaysWikify || domainIsUnder(req.domain(), "wikify.live") || swic(dropPrefixIC("www.", req.domain()), "wikify.")) {

      S wikify = dm_findModuleWithParams("#1029430/WikifyLive", enabled := true);

      if (wikify != null) {

        dm_call(wikify, 'setEleu, mc());

        ret dm_call(wikify, 'html, req);

      }

    }

    // Serve CRUDDIE

    S cruddie = dm_findModuleWithParams("#1028961/Cruddie", enabled := true);

    if (cruddie != null) {

      dm_call(cruddie, 'setEleu, mc());

      ret dm_call(cruddie, 'html, req);

    }

    ret "hello";

  }

  O serveGoogleVerify(WebRequest req) {

    Payload payload = googleVerifyUserToken2(req.googleClientID(), req.params.get("token"));

    S email = payload == null ? null : payload.getEmail();

    if (empty(email)) ret print("google-verify", "No");

    // create/update an object for the user

    GoogleUser user = uniqCI_sync GoogleUser(googleEmail := email);

    cset(user,

      googleEmailVerified := payload.getEmailVerified(),

      googleFirstName := strOrNull(payload.get("given_name")),

      googleLastName := strOrNull(payload.get("family_name")),

      googleLogInDate := now());

    // link user to session

    cset(req.session, +user);

    ret print("google-verify", payload.getEmail() + " " + (payload.getEmailVerified() ? "(verified)" : "(not verified)"));

  }

}