webmcp

annotate framework/env/request/handler.lua @ 460:ffdfd54ba881

find changesets by author, revision, files, or words in the commit message
Bugfix in method check
author jbe
date Tue Jul 26 16:00:02 2016 +0200 (2016-07-26)
parents dc6d3719f2e7
children c72f4cde498b
rev   line source
jbe@215 1 --[[--
jbe@327 2 success = -- false if an error occurred, true otherwise
jbe@215 3 request.handler(
jbe@349 4 http_request -- HTTP request object
jbe@215 5 )
jbe@215 6
jbe@358 7 Called by mcp.lua to process an HTTP request. Calls request.router() and handles the request. Note: request initializers (see request.initialize()) are to be executed by mcp.lua before this function is invoked by mcp.lua.
jbe@215 8
jbe@215 9 --]]--
jbe@210 10
jbe@347 11 function request.handler(http_request)
jbe@459 12
jbe@212 13 request._http_request = http_request
jbe@215 14 local path = http_request.path
jbe@215 15 if path then
jbe@221 16 local relative_baseurl_elements = {}
jbe@215 17 for match in string.gmatch(path, "/") do
jbe@221 18 relative_baseurl_elements[#relative_baseurl_elements+1] = "../"
jbe@215 19 end
jbe@280 20 if #relative_baseurl_elements > 0 then
jbe@280 21 request._relative_baseurl = table.concat(relative_baseurl_elements)
jbe@280 22 else
jbe@280 23 request._relative_baseurl = "./"
jbe@280 24 end
jbe@215 25 else
jbe@215 26 request._relative_baseurl = nil
jbe@215 27 end
jbe@255 28
jbe@255 29 local success, error_info = xpcall(
jbe@255 30 function()
jbe@255 31
jbe@459 32 local function require_method(errmsg, ...)
jbe@460 33 for i = 2, 1 + select("#", ...) do
jbe@459 34 if http_request.method == select(i, ...) then return end
jbe@459 35 end
jbe@459 36 request.set_status("405 Method Not Allowed")
jbe@459 37 request.add_header("Allow", table.concat({...}, ", "))
jbe@459 38 error(errmsg)
jbe@459 39 end
jbe@459 40
jbe@459 41 request._route = request.router()
jbe@459 42 do
jbe@459 43 local post_id = http_request.post_params["_webmcp_id"]
jbe@459 44 if post_id then
jbe@459 45 request._route.id = post_id
jbe@459 46 end
jbe@459 47 end
jbe@459 48 local options_handler = loadcached(encode.file_path(
jbe@459 49 WEBMCP_BASE_PATH, 'app', WEBMCP_APP_NAME, 'http_options.lua'
jbe@459 50 ))
jbe@459 51 if options_handler then
jbe@459 52 options_handler()
jbe@459 53 end
jbe@459 54 if http_request.method == "OPTIONS" then
jbe@459 55 return
jbe@459 56 end
jbe@459 57
jbe@329 58 if not request._route then
jbe@329 59 request._route = {}
jbe@329 60 if request.get_404_route() then
jbe@329 61 request.set_status("404 Not Found")
jbe@329 62 request.forward(request.get_404_route())
jbe@329 63 else
jbe@329 64 error("Could not route request URL")
jbe@329 65 end
jbe@329 66 end
jbe@329 67
jbe@255 68 if request._route.static then
jbe@358 69 local subpath = request._route.static
jbe@358 70 for element in string.gmatch(subpath, "[^/]+") do
jbe@358 71 if element == "." or element == ".." then
jbe@358 72 subpath = nil
jbe@358 73 break
jbe@358 74 end
jbe@358 75 end
jbe@347 76 local fstat, f, errmsg
jbe@358 77 if subpath then
jbe@358 78 local filename = WEBMCP_BASE_PATH .. "static/" .. subpath
jbe@358 79 fstat, errmsg = extos.stat(filename)
jbe@358 80 if fstat then
jbe@358 81 if fstat.isdir then
jbe@358 82 errmsg = "Is a directory"
jbe@358 83 elseif not fstat.isreg then
jbe@358 84 errmsg = "Not a regular file"
jbe@358 85 else
jbe@358 86 f, errmsg = io.open(filename, "r")
jbe@358 87 end
jbe@347 88 end
jbe@347 89 end
jbe@270 90 if not f then
jbe@270 91 if request.get_404_route() then
jbe@329 92 request.set_status("404 Not Found")
jbe@270 93 request.forward(request.get_404_route())
jbe@270 94 else
jbe@358 95 error('Could not open static file "' .. subpath .. '": ' .. errmsg)
jbe@270 96 end
jbe@327 97 else
jbe@459 98 require_method(
jbe@459 99 "Invalid HTTP method for static file",
jbe@459 100 "HEAD", "GET", "POST"
jbe@459 101 )
jbe@327 102 local d = assert(f:read("*a"))
jbe@327 103 f:close()
jbe@327 104 slot.put_into("data", d)
jbe@358 105 local filename_extension = string.match(subpath, "%.([^.]+)$")
jbe@327 106 slot.set_layout(nil, request._mime_types[filename_extension] or "application/octet-stream")
jbe@327 107 request.allow_caching()
jbe@327 108 return
jbe@270 109 end
jbe@255 110 end
jbe@255 111
jbe@255 112 -- restore slots if coming from http redirect
jbe@327 113 do
jbe@327 114 local tempstore_value = http_request.get_params["_tempstore"]
jbe@327 115 if tempstore_value then
jbe@327 116 trace.restore_slots{}
jbe@327 117 local blob = tempstore.pop(tempstore_value)
jbe@327 118 if blob then slot.restore_all(blob) end
jbe@327 119 end
jbe@255 120 end
jbe@255 121
jbe@255 122 if request.get_action() then
jbe@255 123 trace.request{
jbe@255 124 module = request.get_module(),
jbe@255 125 action = request.get_action()
jbe@255 126 }
jbe@255 127 if
jbe@352 128 not execute.action{
jbe@352 129 module = request.get_module(),
jbe@352 130 action = request.get_action(),
jbe@352 131 test_existence = true
jbe@358 132 } and
jbe@358 133 request.get_404_route()
jbe@255 134 then
jbe@255 135 request.set_status("404 Not Found")
jbe@255 136 request.forward(request.get_404_route())
jbe@255 137 else
jbe@459 138 require_method(
jbe@459 139 "Invalid HTTP method for action (POST request required)",
jbe@459 140 "POST"
jbe@459 141 )
jbe@255 142 local action_status = execute.filtered_action{
jbe@255 143 module = request.get_module(),
jbe@255 144 action = request.get_action(),
jbe@255 145 }
jbe@255 146 if not request.is_rerouted() then
jbe@255 147 local routing_mode, routing_module, routing_view, routing_anchor
jbe@255 148 routing_mode = http_request.post_params["_webmcp_routing." .. action_status .. ".mode"]
jbe@255 149 routing_module = http_request.post_params["_webmcp_routing." .. action_status .. ".module"]
jbe@255 150 routing_view = http_request.post_params["_webmcp_routing." .. action_status .. ".view"]
jbe@255 151 routing_anchor = http_request.post_params["_webmcp_routing." .. action_status .. ".anchor"]
jbe@255 152 if not (routing_mode or routing_module or routing_view) then
jbe@255 153 action_status = "default"
jbe@255 154 routing_mode = http_request.post_params["_webmcp_routing.default.mode"]
jbe@255 155 routing_module = http_request.post_params["_webmcp_routing.default.module"]
jbe@255 156 routing_view = http_request.post_params["_webmcp_routing.default.view"]
jbe@255 157 routing_anchor = http_request.post_params["_webmcp_routing.default.anchor"]
jbe@255 158 end
jbe@255 159 assert(routing_module, "Routing information has no module.")
jbe@255 160 assert(routing_view, "Routing information has no view.")
jbe@255 161 if routing_mode == "redirect" then
jbe@255 162 local routing_params = {}
jbe@255 163 for key, value in pairs(request.get_param_strings{ method="POST", include_internal=true }) do
jbe@255 164 local status, stripped_key = string.match(
jbe@255 165 key, "^_webmcp_routing%.([^%.]*)%.params%.(.*)$"
jbe@255 166 )
jbe@255 167 if status == action_status then
jbe@255 168 routing_params[stripped_key] = value
jbe@255 169 end
jbe@255 170 end
jbe@255 171 request.redirect{
jbe@255 172 module = routing_module,
jbe@255 173 view = routing_view,
jbe@255 174 id = http_request.post_params["_webmcp_routing." .. action_status .. ".id"],
jbe@255 175 params = routing_params,
jbe@255 176 anchor = routing_anchor
jbe@255 177 }
jbe@255 178 elseif routing_mode == "forward" then
jbe@255 179 request.forward{ module = routing_module, view = routing_view }
jbe@255 180 else
jbe@255 181 error("Missing or unknown routing mode in request parameters.")
jbe@255 182 end
jbe@255 183 end
jbe@255 184 end
jbe@255 185 else
jbe@255 186 -- no action
jbe@255 187 trace.request{
jbe@255 188 module = request.get_module(),
jbe@255 189 view = request.get_view()
jbe@255 190 }
jbe@255 191 if
jbe@352 192 not execute.view{
jbe@352 193 module = request.get_module(),
jbe@352 194 view = request.get_view(),
jbe@352 195 test_existence = true
jbe@358 196 } and request.get_404_route()
jbe@255 197 then
jbe@255 198 request.set_status("404 Not Found")
jbe@255 199 request.forward(request.get_404_route())
jbe@255 200 end
jbe@255 201 end
jbe@255 202
jbe@255 203 if not request.get_redirect_data() then
jbe@255 204 request.process_forward()
jbe@255 205 local view = request.get_view()
jbe@255 206 if string.find(view, "^_") then
jbe@255 207 error("Tried to call a private view (prefixed with underscore).")
jbe@255 208 end
jbe@459 209 require_method(
jbe@459 210 "Invalid HTTP method",
jbe@459 211 "HEAD", "GET", "POST"
jbe@459 212 )
jbe@255 213 execute.filtered_view{
jbe@255 214 module = request.get_module(),
jbe@255 215 view = view,
jbe@255 216 }
jbe@255 217 end
jbe@255 218
jbe@255 219 end,
jbe@255 220
jbe@255 221 function(errobj)
jbe@255 222 return {
jbe@255 223 errobj = errobj,
jbe@255 224 stacktrace = string.gsub(
jbe@255 225 debug.traceback('', 2),
jbe@255 226 "^\r?\n?stack traceback:\r?\n?", ""
jbe@255 227 )
jbe@255 228 }
jbe@255 229 end
jbe@255 230 )
jbe@255 231
jbe@255 232 if not success then trace.error{} end
jbe@255 233
jbe@255 234 slot.select('trace', trace.render) -- render trace information
jbe@255 235
jbe@255 236 local redirect_data = request.get_redirect_data()
jbe@255 237
jbe@255 238 -- log error and switch to error layout, unless success
jbe@255 239 if not success then
jbe@255 240 local errobj = error_info.errobj
jbe@255 241 local stacktrace = error_info.stacktrace
jbe@255 242 if not request._status then
jbe@255 243 request._status = "500 Internal Server Error"
jbe@255 244 end
jbe@328 245 http_request:close_after_finish()
jbe@255 246 slot.set_layout('system_error')
jbe@255 247 slot.select('system_error', function()
jbe@255 248 if getmetatable(errobj) == mondelefant.errorobject_metatable then
jbe@255 249 slot.put(
jbe@255 250 "<p>Database error of class <b>",
jbe@255 251 encode.html(errobj.code),
jbe@255 252 "</b> occured:<br/><b>",
jbe@255 253 encode.html(errobj.message),
jbe@255 254 "</b></p>"
jbe@255 255 )
jbe@255 256 else
jbe@255 257 slot.put("<p><b>", encode.html(tostring(errobj)), "</b></p>")
jbe@255 258 end
jbe@255 259 slot.put("<p>Stack trace follows:<br/>")
jbe@255 260 slot.put(encode.html_newlines(encode.html(stacktrace)))
jbe@255 261 slot.put("</p>")
jbe@255 262 end)
jbe@255 263 elseif redirect_data then
jbe@455 264 if
jbe@455 265 redirect_data.include_tempstore == true or (
jbe@455 266 redirect_data.include_tempstore ~= false and
jbe@455 267 not redirect_data.external
jbe@455 268 )
jbe@455 269 then
jbe@455 270 redirect_data = table.new(redirect_data)
jbe@454 271 redirect_data.params = table.new(redirect_data.params)
jbe@454 272 local slot_dump = slot.dump_all()
jbe@454 273 if slot_dump ~= "" then
jbe@454 274 redirect_data.params._tempstore = tempstore.save(slot_dump)
jbe@454 275 end
jbe@255 276 end
jbe@255 277 http_request:send_status("303 See Other")
jbe@264 278 for i, header in ipairs(request._response_headers) do
jbe@264 279 http_request:send_header(header[1], header[2])
jbe@264 280 end
jbe@267 281 http_request:send_header("Location", encode.url(redirect_data))
jbe@255 282 http_request:finish()
jbe@255 283 end
jbe@255 284
jbe@255 285 if not success or not redirect_data then
jbe@255 286
jbe@255 287 http_request:send_status(request._status or "200 OK")
jbe@255 288 for i, header in ipairs(request._response_headers) do
jbe@255 289 http_request:send_header(header[1], header[2])
jbe@255 290 end
jbe@291 291 if not request._cache_manual then
jbe@291 292 local cache_time = request._cache_time
jbe@291 293 if request._cache and cache_time and cache_time > 0 then
jbe@291 294 http_request:send_header("Cache-Control", "max-age=" .. cache_time)
jbe@291 295 else
jbe@291 296 http_request:send_header("Cache-Control", "no-cache")
jbe@291 297 end
jbe@291 298 end
jbe@255 299 http_request:send_header("Content-Type", slot.get_content_type())
jbe@255 300 http_request:send_data(slot.render_layout())
jbe@255 301 http_request:finish()
jbe@255 302 end
jbe@255 303
jbe@327 304 return success
jbe@327 305
jbe@215 306 end

Impressum / About Us