Teaspeak-Server/license/server/WebAPI.cpp

562 lines
21 KiB
C++

//
// Created by wolverindev on 04.09.18.
//
#include <csignal>
#include <misc/std_unique_ptr.h>
#include <misc/net.h>
#include <misc/endianness.h>
#include <json/json.h>
#include "StatisticManager.h"
#include "WebAPI.h"
using namespace license;
using namespace license::server;
using namespace license::web;
using namespace ts::ssl;
using namespace std;
using namespace std::chrono;
WebStatistics::WebStatistics(const shared_ptr<LicenseManager> &manager, const std::shared_ptr<stats::StatisticManager>& stats) : license_manager(manager), statistics_manager(stats) {}
WebStatistics::~WebStatistics() {}
#define SFAIL(message) \
do { \
error = message; \
this->stop(); \
return false; \
} while(0)
static int enabled = 1;
static int disabled = 0;
bool WebStatistics::start(std::string &error, uint16_t port, const std::shared_ptr<ts::ssl::SSLContext> &ssl) {
{
std::lock_guard<std::recursive_mutex> lock(this->running_lock);
if(this->_running) return false;
this->_running = true;
}
this->ssl = ssl;
{
this->socket.local_address = make_unique<sockaddr_in>();
memset(this->socket.local_address.get(), 0, sizeof(sockaddr_in));
this->socket.local_address->sin_family = AF_INET;
this->socket.local_address->sin_addr.s_addr = INADDR_ANY;
this->socket.local_address->sin_port = htons(port);
}
this->socket.file_descriptor = ::socket(AF_INET, SOCK_STREAM, 0);
if (this->socket.file_descriptor < 0) SFAIL("Could not create new socket");
if(setsockopt(this->socket.file_descriptor, SOL_SOCKET, SO_REUSEADDR, &enabled, sizeof(enabled)) < 0) SFAIL("could not set reuse address");
if(setsockopt(this->socket.file_descriptor, IPPROTO_TCP, TCP_CORK, &disabled, sizeof(disabled)) < 0) SFAIL("could not set no push");
if(bind(this->socket.file_descriptor, (struct sockaddr *) this->socket.local_address.get(), sizeof(sockaddr_in)) < 0) SFAIL("Could not bind socket on " + string(inet_ntoa(this->socket.local_address->sin_addr)));
if(listen(this->socket.file_descriptor, 32) < 0) SFAIL("Could not listen on socket");
this->socket.event_base = event_base_new();
this->socket.event_accept = event_new(this->socket.event_base, this->socket.file_descriptor, EV_READ | EV_PERSIST, WebStatistics::handleEventAccept, this);
event_add(this->socket.event_accept, nullptr);
this->socket.event_base_dispatch = make_unique<threads::Thread>(THREAD_SAVE_OPERATIONS, [&](){
signal(SIGABRT, SIG_IGN);
event_base_dispatch(this->socket.event_base);
});
return true;
}
void WebStatistics::stop() {
{
std::lock_guard<std::recursive_mutex> lock(this->running_lock);
if(!this->_running) return;
this->_running = false;
}
for(const auto& client : this->get_clients())
this->close_connection(client);
if(this->socket.event_accept) {
event_del(this->socket.event_accept);
event_free(this->socket.event_accept);
}
this->socket.event_accept = nullptr;
if(this->socket.event_base)
event_base_loopbreak(this->socket.event_base);
if(this->socket.event_base_dispatch)
this->socket.event_base_dispatch->join(seconds(5));
this->socket.event_base_dispatch = nullptr;
if(this->socket.event_base) {
event_base_free(this->socket.event_base);
this->socket.event_base = nullptr;
}
if(this->socket.file_descriptor != 0) {
shutdown(this->socket.file_descriptor, SHUT_RDWR);
close(this->socket.file_descriptor);
this->socket.file_descriptor = 0;
}
}
void WebStatistics::initialize_client(const std::shared_ptr<license::web::WebStatistics::Client> &client) {
weak_ptr<Client> weak_client = client;
auto send_message = [&](const std::shared_ptr<Client>& client, const pipes::buffer_view& message) {
{
std::lock_guard<std::recursive_mutex> lock(client->execute_lock);
client->buffer_write.push_back(message.string());
}
if(client->event_write)
event_add(client->event_write, nullptr);
};
{ //WebSocket and SSL setup
client->pipe_websocket = make_unique<pipes::WebSocket>();
client->pipe_websocket->direct_process(pipes::PROCESS_DIRECTION_IN, true);
client->pipe_websocket->direct_process(pipes::PROCESS_DIRECTION_OUT, true);
client->pipe_websocket->callback_error([&, weak_client](int code, const std::string &reason) {
auto _client = weak_client.lock();
if(!_client) return;
logError(LOG_LICENSE_WEB, "[{}][WS] Catched an error. code: {} reason: {}.", _client->client_prefix(), code, reason);
logError(LOG_LICENSE_WEB, "[{}][WS] Disconnecting client", _client->client_prefix());
if(_client->pipe_websocket && _client->pipe_websocket->getState() == pipes::CONNECTED) _client->pipe_websocket->disconnect(1100, "Catched a server sided error");
else this->close_connection(_client);
});
client->pipe_websocket->callback_write([weak_client, send_message](const pipes::buffer_view& message) {
auto _client = weak_client.lock();
if(!_client) return;
if(_client->pipe_ssl)
_client->pipe_ssl->send(message);
else send_message(_client, message);
});
client->pipe_websocket->callback_data([&, weak_client](const pipes::WSMessage& message) {
auto _client = weak_client.lock();
if(!_client) return;
this->handle_message(_client, message); //TODO if return false error handling!
});
client->pipe_websocket->on_connect = [&, weak_client] {
auto _client = weak_client.lock();
if(!_client) return;
logMessage(LOG_LICENSE_WEB, "[{}] WebSocket handshake completed!", _client->client_prefix());
};
client->pipe_websocket->on_disconnect = [&, weak_client](const std::string& reason) {
auto _client = weak_client.lock();
if(!_client) return;
logMessage(LOG_LICENSE_WEB, "[{}] Remote connection disconnected ({} | {})", _client->client_prefix(), reason.length() >= 2 ? be2le16(reason.data()) : -1, reason.length() > 2 ? reason.substr(2) : "");
this->close_connection(_client);
};
client->pipe_websocket->callback_invalid_request = [&, weak_client](const http::HttpRequest& request, http::HttpResponse& response) {
auto _client = weak_client.lock();
if(!_client) return;
auto lmethod = request.method;
transform(lmethod.begin(), lmethod.end(), lmethod.begin(), ::tolower);
if(lmethod == "get" && !request.parameters["type"].empty())
this->handle_request(_client, request, response);
};
client->pipe_websocket->initialize();
//FIXME Setup ssl
}
{
client->pipe_ssl = make_unique<pipes::SSL>();
client->pipe_ssl->direct_process(pipes::PROCESS_DIRECTION_IN, true);
client->pipe_ssl->direct_process(pipes::PROCESS_DIRECTION_OUT, true);
client->pipe_ssl->callback_error([&, weak_client](int code, const std::string &reason) {
auto _client = weak_client.lock();
if(!_client) return;
logError(LOG_LICENSE_WEB, "[{}][SSL] Catched an error. code: {} reason: {}.", _client->client_prefix(), code, reason);
logError(LOG_LICENSE_WEB, "[{}][SSL] Disconnecting client", _client->client_prefix());
if(_client->pipe_websocket && _client->pipe_websocket->getState() == pipes::CONNECTED) _client->pipe_websocket->disconnect(1100, "Catched a server sided error (SSL)");
else this->close_connection(_client);
});
client->pipe_ssl->callback_write([weak_client, send_message](const pipes::buffer_view& message) {
auto _client = weak_client.lock();
if(!_client) return;
send_message(_client, message);
});
client->pipe_ssl->callback_data([&, weak_client](const pipes::buffer_view& message) {
auto _client = weak_client.lock();
if(!_client) return;
if(_client->pipe_websocket) _client->pipe_websocket->process_incoming_data(message);
});
{
auto options = make_shared<pipes::SSL::Options>();
options->type = pipes::SSL::SERVER;
options->context_method = TLS_method();
options->free_unused_keypairs = false; /* we dont want our keys get removed */
options->default_keypair({this->ssl->privateKey, this->ssl->certificate});
if(!client->pipe_ssl->initialize(options)) {
logError(LOG_LICENSE_WEB, "[{}][SSL] Failed to setup ssl! Disconnecting client", client->client_prefix());
this->close_connection(client);
}
}
}
}
void WebStatistics::handleEventAccept(int fd, short, void *ptr_server) {
auto server = (WebStatistics*) ptr_server;
auto client = make_shared<Client>();
{ //Network accept
auto address = make_unique<sockaddr_in>();
auto address_length = (socklen_t) sizeof(*address);
client->file_descriptor = accept(fd, (struct sockaddr *) address.get(), &address_length);
if (client->file_descriptor < 0) {
logCritical(LOG_LICENSE_WEB, "Failed to accept new client. ({} | {}/{})", client->file_descriptor, errno, strerror(errno));
return;
}
if(setsockopt(client->file_descriptor, SOL_SOCKET, SO_REUSEADDR, &enabled, sizeof(enabled)) < 0);// CERR("could not set reuse addr");
if(setsockopt(client->file_descriptor, IPPROTO_TCP, TCP_CORK, &disabled, sizeof(disabled)) < 0);// CERR("could not set no push");
client->peer_address = std::move(address);
}
server->initialize_client(client);
{ //Client registration
std::lock_guard<std::recursive_mutex> lock(server->clients_lock);
server->clients.push_back(client);
}
{ //IO Init
client->event_read = event_new(server->socket.event_base, client->file_descriptor, EV_READ | EV_PERSIST, WebStatistics::handleEventRead, server);
client->event_write = event_new(server->socket.event_base, client->file_descriptor, EV_WRITE, WebStatistics::handleEventWrite, server);
event_add(client->event_read, nullptr);
}
logMessage(LOG_LICENSE_WEB, "Accepted new client from {}", net::to_string(client->peer_address->sin_addr));
}
void WebStatistics::handleEventRead(int file_descriptor, short, void* ptr_server) {
auto server = (WebStatistics*) ptr_server;
auto client = server->find_client_by_fd(file_descriptor);
if(!client || client->file_descriptor == 0) {
//TODO error
return;
}
pipes::buffer buffer(1024);
sockaddr_in remote_address{};
socklen_t remote_address_size = sizeof(remote_address);
auto read = recvfrom(file_descriptor, buffer.data_ptr(), buffer.length(), 0, reinterpret_cast<sockaddr *>(&remote_address), &remote_address_size);
if(read < 0){
if(errno == EWOULDBLOCK) return;
logError(LOG_LICENSE_WEB, "[{}] Invalid read: {}/{}. Closing connection.", client->client_prefix(), errno, strerror(errno));
if(client->event_read)
event_del_noblock(client->event_read);
server->close_connection(client);
return;
} else if(read == 0) {
debugMessage(LOG_LICENSE_WEB, "[{}] Invalid read (eof). Closing connection", client->client_prefix());
if(client->event_read)
event_del_noblock(client->event_read);
server->close_connection(client);
return;
}
buffer.resize(read);
lock_guard<recursive_mutex> lock(client->execute_lock);
if(client->file_descriptor == 0) return;
if(client->pipe_ssl) {
client->pipe_ssl->process_incoming_data(buffer);
} else if(client->pipe_websocket) {
client->pipe_websocket->process_incoming_data(buffer);
}
else; //TODO error handling
}
void WebStatistics::handleEventWrite(int file_descriptor, short, void* ptr_server) {
auto server = (WebStatistics*) ptr_server;
auto client = server->find_client_by_fd(file_descriptor);
if(!client) {
//TODO error
return;
}
std::lock_guard<std::recursive_mutex> lock(client->execute_lock);
if(client->buffer_write.empty()) return;
auto& buffer = client->buffer_write.front();
auto written = send(file_descriptor, buffer.data(), buffer.length(), MSG_DONTWAIT | MSG_NOSIGNAL);
if(written < 0){
if(errno == EWOULDBLOCK) return;
logError(LOG_LICENSE_WEB, "[{}] Invalid write: {}/{}. Closing connection.", client->client_prefix(), errno, strerror(errno));
server->close_connection(client);
return;
} else if(written == 0) {
logError(LOG_LICENSE_WEB, "[{}] Invalid write (eof). Closing connection", client->client_prefix());
server->close_connection(client);
return;
}
if(written >= buffer.length())
client->buffer_write.pop_front();
else buffer = buffer.substr(written);
if(!client->buffer_write.empty()) event_add(client->event_write, nullptr);
}
void WebStatistics::close_connection(const std::shared_ptr<license::web::WebStatistics::Client> &client) {
if(this->socket.event_base_dispatch && *this->socket.event_base_dispatch == pthread_self()) {
std::thread(bind(&WebStatistics::close_connection, this, client)).detach();
return;
}
{
std::lock_guard<std::recursive_mutex> lock(this->clients_lock);
auto entry = find(this->clients.begin(), this->clients.end(), client);
if(entry != this->clients.end())
this->clients.erase(entry);
else; //TODO Error handling?
}
std::lock_guard<std::recursive_mutex> lock(client->execute_lock);
if(client->event_read) {
event_del(client->event_read);
event_free(client->event_read);
client->event_read = nullptr;
}
if(client->event_write) {
event_del(client->event_write);
event_free(client->event_write);
client->event_write = nullptr;
}
if(client->file_descriptor > 0) {
if(shutdown(client->file_descriptor, SHUT_RDWR) < 0); //TODO error handling
if(close(client->file_descriptor) < 0); //TODO error handling
client->file_descriptor = 0;
}
if(client->pipe_websocket)
client->pipe_websocket = nullptr;
if(client->pipe_ssl) {
client->pipe_ssl->finalize();
client->pipe_ssl = nullptr;
}
logMessage(LOG_LICENSE_WEB, "[{}] Connection closed", client->client_prefix());
}
std::shared_ptr<WebStatistics::Client> WebStatistics::find_client_by_fd(int file_descriptor) {
std::lock_guard<std::recursive_mutex> lock(this->clients_lock);
for(const auto& client : this->clients)
if(client->file_descriptor == file_descriptor) return client;
return nullptr;
}
#define HERR(message, ...) \
do {\
logError(LOG_LICENSE_WEB, "[{}] " message, client->client_prefix(), ##__VA_ARGS__); \
return false; \
} while(0)
inline pipes::buffer json_dump(const Json::Value& value) {
Json::StreamWriterBuilder builder;
builder["indentation"] = ""; // If you want whitespace-less output
auto json = Json::writeString(builder, value);
return pipes::buffer((void*) json.c_str(), json.length());
}
Json::Value::Value(long value) : Value(to_string(value)) {}
Json::Value::Value(unsigned long value) : Value(to_string(value)) {}
bool WebStatistics::handle_message(const std::shared_ptr<license::web::WebStatistics::Client> &client, const pipes::WSMessage &raw_message) {
if(this->update_flood(client, 10)) {
static pipes::buffer _response;
if(_response.empty()) {
Json::Value response;
response["type"] = "error";
response["code"] = "general";
response["msg"] = "action not available due flood prevention";
_response = json_dump(response);
}
client->pipe_websocket->send({pipes::TEXT, _response});
return true;
}
logTrace(LOG_LICENSE_WEB, "[{}] Received message {}", client->client_prefix(), raw_message.data.string());
Json::Value message;
try {
istringstream ss(raw_message.data.string());
ss >> message;
} catch (std::exception& ex) {
logError(LOG_LICENSE_WEB, "[{}] Received an invalid message: {}", client->client_prefix(), raw_message.data.string());
return false;
}
try {
if(!message["type"].isString()) HERR("Missing/invalid type");
if(message["type"].asString() == "request") {
if(!message["request_type"].isString()) HERR("Missing/invalid request type");
if(message["request_type"].asString() == "general") {
this->update_flood(client, 50);
Json::Value response;
response["type"] = "response";
response["code"] = message["code"];
auto stats = this->statistics_manager->general_statistics();
response["statistics"]["instances"] = to_string(stats->instances);
response["statistics"]["servers"] = to_string(stats->servers);
response["statistics"]["clients"] = to_string(stats->clients);
response["statistics"]["music"] = to_string(stats->bots);
client->pipe_websocket->send({pipes::TEXT, json_dump(response)});
return true;
} else if(message["request_type"].asString() == "history") {
auto type = message["history_type"].asInt();
if(type < 0 || type > stats::HistoryStatistics::LAST_HALF_YEAR)
__throw_range_error("invalid range!");
if(type == stats::HistoryStatistics::LAST_DAY)
this->update_flood(client, 50);
if(type == stats::HistoryStatistics::DAY_YESTERDAY)
this->update_flood(client, 50);
if(type == stats::HistoryStatistics::LAST_HALF_YEAR)
this->update_flood(client, 100);
if(type == stats::HistoryStatistics::DAY_7DAYS_AGO)
this->update_flood(client, 60);
if(type == stats::HistoryStatistics::LAST_WEEK)
this->update_flood(client, 70);
if(type == stats::HistoryStatistics::LAST_MONTH)
this->update_flood(client, 80);
std::thread([&, client, type, message]() {
auto history = this->statistics_manager->history((stats::HistoryStatistics::HistoryType) type);
Json::Value response;
response["type"] = "response";
response["code"] = message["code"];
response["history"]["timestamp"] = duration_cast<milliseconds>(history->evaluated.time_since_epoch()).count();
response["history"]["begin"] = duration_cast<milliseconds>(history->begin.time_since_epoch()).count();
response["history"]["end"] = duration_cast<milliseconds>(history->end.time_since_epoch()).count();
response["history"]["interval"] = duration_cast<milliseconds>(history->period).count();
int index = 0;
for(auto& element : history->statistics) {
response["history"]["data"][index]["instances"] = element->instance_online;
response["history"]["data"][index]["servers"] = element->servers_online;
response["history"]["data"][index]["clients"] = element->clients_online;
response["history"]["data"][index]["music"] = element->bots_online;
index++;
}
lock_guard lock(client->execute_lock);
if(client->pipe_websocket)
client->pipe_websocket->send({pipes::TEXT, json_dump(response)});
}).detach();
return true;
}
}
} catch (const std::exception& ex) {
logError(LOG_LICENSE_WEB, "[{}] Message handling throws exception: {}", client->client_prefix(), ex.what());
Json::Value response;
response["type"] = "error";
response["code"] = message["code"];
response["message"] = "could not assign action";
client->pipe_websocket->send({pipes::TEXT, json_dump(response)});
return false;
}
{
Json::Value response;
response["type"] = "error";
response["code"] = message["code"];
response["message"] = "could not assign action";
client->pipe_websocket->send({pipes::TEXT, json_dump(response)});
}
return true;
}
bool WebStatistics::handle_request(const std::shared_ptr<license::web::WebStatistics::Client> &client, const http::HttpRequest &request, http::HttpResponse &response) {
auto type = request.parameters.at("type");
logMessage(LOG_LICENSE_WEB, "[{}] Received HTTP status request of type {}", client->client_prefix(), type);
if(type == "request" && request.parameters.at("request_type") == "general") {
Json::Value json;
json["type"] = "response";
auto stats = this->statistics_manager->general_statistics();
json["statistics"]["instances"] = to_string(stats->instances);
json["statistics"]["servers"] = to_string(stats->servers);
json["statistics"]["clients"] = to_string(stats->clients);
json["statistics"]["music"] = to_string(stats->bots);
response.setHeader("data", {json_dump(json).string()});
response.code = http::code::_200;
}
return false;
}
bool WebStatistics::update_flood(const std::shared_ptr<license::web::WebStatistics::Client> &client, int flood_points) {
if(client->flood_reset.time_since_epoch().count() == 0)
client->flood_reset = system_clock::now();
client->flood_points += flood_points;
auto diff = duration_cast<milliseconds>(system_clock::now() - client->flood_reset);
if(diff.count() > 1000) {
diff -= milliseconds(1000);
auto reduce = diff.count() / 10; //Reduce 100fp per second
if(client->flood_points > reduce)
client->flood_points = 0;
else
client->flood_points -= reduce;
client->flood_reset = system_clock::now();
}
return client->flood_points > 150;
}
void WebStatistics::broadcast_message(const Json::Value &value) {
auto raw_value = json_dump(value);
for(const auto& client : this->get_clients()) {
std::lock_guard<std::recursive_mutex> lock(client->execute_lock);
if(client->pipe_websocket && client->pipe_websocket->getState() == pipes::WebSocketState::CONNECTED)
client->pipe_websocket->send({pipes::TEXT, raw_value});
}
}
void WebStatistics::broadcast_notify_general_update() {
Json::Value message;
message["type"] = "notify";
message["target"] = "general_update";
this->broadcast_message(message);
}
void WebStatistics::async_broadcast_notify_general_update() {
this->scheduler.execute([&]{
this->broadcast_notify_general_update();
});
}