Finish authenticated API endpoints on cgi_blerg

[blerg.git] / cgi / cgi_blerg.c

diff --git a/cgi/cgi_blerg.c b/cgi/cgi_blerg.c
index 6469289..5cd59a8 100644 (file)
--- a/cgi/cgi_blerg.c
+++ b/cgi/cgi_blerg.c
@@ -42,7 +42,6 @@ void respond_JSON_Success() {
 
 void respond_for_range(struct blerg *b, uint64_t from, uint64_t to) {
        const unsigned char *ybuf;
-       char number[21];
        unsigned int len;
        uint64_t i;
        yajl_gen g;
@@ -71,6 +70,38 @@ void respond_for_range(struct blerg *b, uint64_t from, uint64_t to) {
        yajl_gen_free(g);
 }
 
+void respond_taglist(struct tag *results, int i) {
+       const unsigned char *ybuf;
+       unsigned int len;
+       struct blerg *b;
+       yajl_gen g;
+
+       i--;
+
+       printf("Content-type: application/json\r\n\r\n");
+       g = yajl_gen_alloc(&yajl_c, NULL);
+
+       yajl_gen_array_open(g);
+
+       while (i >= 0) {
+               b = blerg_open(results[i].author);
+               if (b != NULL) {
+                       json_generate_one_record(g, results[i].author, b, results[i].record);
+                       blerg_close(b);
+               }
+               yajl_gen_get_buf(g, &ybuf, &len);
+               write(0, ybuf, len);
+               yajl_gen_clear(g);
+
+               i--;
+       }
+
+       yajl_gen_array_close(g);
+       yajl_gen_get_buf(g, &ybuf, &len);
+       write(0, ybuf, len);
+       yajl_gen_free(g);
+}
+
 int main(int argc, char *argv[]) {
        char *path;
        char *request_method;
@@ -135,6 +166,184 @@ int main(int argc, char *argv[]) {
                }
 
                blerg_close(b);
+       } else if (strncmp(path, "/tag", 4) == 0 && strlen(path) > 4) {
+               if (strcmp(request_method, "GET") != 0) {
+                       respond_405();
+                       exit(0);
+               }
+
+               if (path[4] != '/') {
+                       respond_404();
+                       exit(0);
+               }
+
+               ret = parse_url_info(path + 5, &info);
+               if ((ret & URL_INFO_AUTHOR) == 0) {
+                       respond_404();
+                       exit(0);
+               }
+
+               if (!tag_exists(info.author)) {
+                       respond_404();
+                       exit(0);
+               }
+
+               int recs = 50;
+               struct tag *taglist = tag_list(info.author, 0, &recs, -1);
+
+               if (recs == 0) {
+                       respond_simple_data("[]", 2);
+               } else {
+                       respond_taglist(taglist, recs);
+               }
+       } else if (strncmp(path, "/put", 4) == 0) {
+               if (strcmp(request_method, "POST") != 0) {
+                       respond_405();
+                       exit(0);
+               }
+
+               if (path[4] == '/') {
+                       respond_404();
+                       exit(0);
+               }
+
+               const char *username = cgi_getentrystr("username");
+               const char *data = cgi_getentrystr("data");
+               if (username == NULL || username[0] == 0 ||
+                   data == NULL || data[0] == 0) {
+                       respond_JSON_Failure();
+                       exit(0);
+               }
+
+               const char *given_token = cgi_getcookie("auth");
+               if (!auth_check_token(username, given_token)) {
+                       respond_JSON_Failure();
+                       exit(0);
+               }
+
+               struct blerg *b = blerg_open(username);
+               if (b == NULL) {
+                       respond_JSON_Failure();
+                       exit(0);
+               }
+               ret = blerg_store(b, data, strlen(data));
+               blerg_close(b);
+               if (ret == -1) {
+                       respond_JSON_Failure();
+                       exit(0);
+               }
+
+               respond_JSON_Success();
+       } else if (strncmp(path, "/info", 5) == 0) {
+               if (strcmp(request_method, "GET") != 0) {
+                       respond_405();
+                       exit(0);
+               }
+
+               if (path[5] != '/') {
+                       respond_404();
+                       exit(0);
+               }
+
+               ret = parse_url_info(path + 6, &info);
+               if ((ret & URL_INFO_AUTHOR) == 0) {
+                       respond_404();
+                       exit(0);
+               }
+
+               if (!blerg_exists(info.author)) {
+                       respond_404();
+                       exit(0);
+               }
+
+               struct blerg *b = blerg_open(info.author);
+               uint64_t record_count = blerg_get_record_count(b);
+               blerg_close(b);
+
+               char number[21];
+               yajl_gen g = yajl_gen_alloc(&yajl_c, NULL);
+               yajl_gen_map_open(g);
+               yajl_gen_string(g, "record_count", 12);
+               snprintf(number, 21, "%llu", record_count);
+               yajl_gen_string(g, number, strlen(number));
+               yajl_gen_map_close(g);
+
+               const unsigned char *ybuf;
+               yajl_gen_get_buf(g, &ybuf, &len);
+
+               printf("Content-type: application/json\r\n");
+               printf("Content-length: %d\r\n\r\n", len);
+               write(0, ybuf, len);
+
+               yajl_gen_free(g);
+       } else if (strncmp(path, "/create", 8) == 0) {
+               if (strcmp(request_method, "POST") != 0) {
+                       respond_405();
+                       exit(0);
+               }
+
+               const char *username = cgi_getentrystr("username");
+               const char *password = cgi_getentrystr("password");
+               if (username == NULL || username[0] == 0 ||
+                   password == NULL || password[0] == 0) {
+                       respond_JSON_Failure();
+                       exit(0);
+               }
+
+               if (blerg_exists(username)) {
+                       respond_JSON_Failure();
+                       exit(0);
+               }
+
+               struct blerg *b = blerg_open(username);
+               blerg_close(b);
+               auth_set_password(username, password);
+               
+               respond_JSON_Success();
+       } else if (strncmp(path, "/login", 7) == 0) {
+               if (strcmp(request_method, "POST") != 0) {
+                       respond_405();
+                       exit(0);
+               }
+
+               const char *username = cgi_getentrystr("username");
+               const char *password = cgi_getentrystr("password");
+               if (username == NULL || username[0] == 0 ||
+                   password == NULL || password[0] == 0) {
+                       respond_JSON_Failure();
+                       exit(0);
+               }
+
+               if (!auth_login(username, password)) {
+                       respond_JSON_Failure();
+                       exit(0);
+               }
+
+               char *token = auth_get_token(username);
+               printf("Set-Cookie: auth=%s\r\n", token);
+               free(token);
+
+               respond_JSON_Success();
+       } else if (strncmp(path, "/logout", 8) == 0) {
+               if (strcmp(request_method, "POST") != 0) {
+                       respond_405();
+                       exit(0);
+               }
+
+               const char *username = cgi_getentrystr("username");
+               if (username == NULL || username[0] == 0) {
+                       respond_JSON_Failure();
+                       exit(0);
+               }
+
+
+               const char *given_token = cgi_getcookie("auth");
+               if (auth_check_token(username, given_token)) {
+                       auth_logout(username);
+                       respond_JSON_Success();
+               } else {
+                       respond_JSON_Failure();
+               }
        } else {
                respond_404();
                exit(0);