super-graph/serv/allow.go

package serv

import (
	"bytes"
	"encoding/json"
	"fmt"
	"io/ioutil"
	"log"
	"os"
	"path"
	"sort"
	"strings"
)

const (
	AL_QUERY int = iota + 1
	AL_VARS
)

type allowItem struct {
	name string
	hash string
	uri  string
	gql  string
	vars json.RawMessage
}

var _allowList allowList

type allowList struct {
	list     []*allowItem
	index    map[string]int
	filepath string
	saveChan chan *allowItem
	active   bool
}

func initAllowList(cpath string) {
	_allowList = allowList{
		index:    make(map[string]int),
		saveChan: make(chan *allowItem),
		active:   true,
	}

	if len(cpath) != 0 {
		fp := path.Join(cpath, "allow.list")

		if _, err := os.Stat(fp); err == nil {
			_allowList.filepath = fp
		} else if !os.IsNotExist(err) {
			errlog.Fatal().Err(err).Send()
		}
	}

	if len(_allowList.filepath) == 0 {
		fp := "./allow.list"

		if _, err := os.Stat(fp); err == nil {
			_allowList.filepath = fp
		} else if !os.IsNotExist(err) {
			errlog.Fatal().Err(err).Send()
		}
	}

	if len(_allowList.filepath) == 0 {
		fp := "./config/allow.list"

		if _, err := os.Stat(fp); err == nil {
			_allowList.filepath = fp
		} else if !os.IsNotExist(err) {
			errlog.Fatal().Err(err).Send()
		}
	}

	if len(_allowList.filepath) == 0 {
		if conf.Production {
			errlog.Fatal().Msg("allow.list not found")
		}

		if len(cpath) == 0 {
			_allowList.filepath = "./config/allow.list"
		} else {
			_allowList.filepath = path.Join(cpath, "allow.list")
		}

		logger.Warn().Msg("allow.list not found")
	} else {
		_allowList.load()
	}

	go func() {
		for v := range _allowList.saveChan {
			_allowList.save(v)
		}
	}()
}

func (al *allowList) add(req *gqlReq) {
	if len(req.ref) == 0 || len(req.Query) == 0 {
		return
	}

	var query string

	for i := 0; i < len(req.Query); i++ {
		c := req.Query[i]
		if c >= 'a' && c <= 'z' || c >= 'A' && c <= 'Z' {
			query = req.Query
			break

		} else if c == '{' {
			query = "query " + req.Query
			break
		}
	}

	al.saveChan <- &allowItem{
		uri:  req.ref,
		gql:  query,
		vars: req.Vars,
	}
}

func (al *allowList) upsert(query, vars []byte, uri string) {
	q := string(query)
	hash := gqlHash(q, vars, "")
	name := gqlName(q)

	var key string

	if len(name) == 0 {
		key = hash
	} else {
		key = name
	}

	if i, ok := al.index[key]; !ok {
		al.list = append(al.list, &allowItem{
			name: name,
			hash: hash,
			uri:  uri,
			gql:  q,
			vars: vars,
		})
		al.index[key] = len(al.list) - 1
	} else {
		item := al.list[i]
		item.name = name
		item.hash = hash
		item.gql = q
		item.vars = vars

	}
}

func (al *allowList) load() {
	b, err := ioutil.ReadFile(al.filepath)
	if err != nil {
		log.Fatal(err)
	}

	if len(b) == 0 {
		return
	}

	var uri string
	var varBytes []byte

	s, e, c := 0, 0, 0
	ty := 0

	for {
		if c == 0 && b[e] == '#' {
			s = e
			for e < len(b) && b[e] != '\n' {
				e++
			}
			if (e - s) > 2 {
				uri = strings.TrimSpace(string(b[(s + 1):e]))
			}
		}

		if e >= len(b) {
			break
		}

		if matchPrefix(b, e, "query") || matchPrefix(b, e, "mutation") {
			if c == 0 {
				s = e
			}
			ty = AL_QUERY
		} else if matchPrefix(b, e, "variables") {
			if c == 0 {
				s = e + len("variables") + 1
			}
			ty = AL_VARS
		} else if b[e] == '{' {
			c++

		} else if b[e] == '}' {
			c--

			if c == 0 {
				if ty == AL_QUERY {
					al.upsert(b[s:(e+1)], varBytes, uri)
					varBytes = nil

				} else if ty == AL_VARS {
					varBytes = b[s:(e + 1)]
				}
				ty = 0
			}
		}

		e++
		if e >= len(b) {
			break
		}
	}
}

func (al *allowList) save(item *allowItem) {
	var err error

	item.hash = gqlHash(item.gql, item.vars, "")
	item.name = gqlName(item.gql)

	if len(item.name) == 0 {
		key := item.hash

		if _, ok := al.index[key]; ok {
			return
		}

		al.list = append(al.list, item)
		al.index[key] = len(al.list) - 1

	} else {
		key := item.name

		if i, ok := al.index[key]; ok {
			if al.list[i].hash == item.hash {
				return
			}
			al.list[i] = item
		} else {
			al.list = append(al.list, item)
			al.index[key] = len(al.list) - 1
		}
	}

	f, err := os.Create(al.filepath)
	if err != nil {
		logger.Warn().Err(err).Msgf("Failed to write allow list: %s", al.filepath)
		return
	}

	defer f.Close()

	keys := []string{}
	urlMap := make(map[string][]*allowItem)

	for _, v := range al.list {
		urlMap[v.uri] = append(urlMap[v.uri], v)
	}

	for k := range urlMap {
		keys = append(keys, k)
	}
	sort.Strings(keys)

	for i := range keys {
		k := keys[i]
		v := urlMap[k]

		if _, err := f.WriteString(fmt.Sprintf("# %s\n\n", k)); err != nil {
			logger.Error().Err(err).Send()
			return
		}

		for i := range v {
			if len(v[i].vars) != 0 && !bytes.Equal(v[i].vars, []byte("{}")) {
				vj, err := json.MarshalIndent(v[i].vars, "", "\t")
				if err != nil {
					logger.Warn().Err(err).Msg("Failed to write allow list 'vars' to file")
					continue
				}

				_, err = f.WriteString(fmt.Sprintf("variables %s\n\n", vj))
				if err != nil {
					logger.Error().Err(err).Send()
					return
				}
			}

			if v[i].gql[0] == '{' {
				_, err = f.WriteString(fmt.Sprintf("query %s\n\n", v[i].gql))
			} else {
				_, err = f.WriteString(fmt.Sprintf("%s\n\n", v[i].gql))
			}

			if err != nil {
				logger.Error().Err(err).Send()
				return
			}
		}
	}
}

func matchPrefix(b []byte, i int, s string) bool {
	if (len(b) - i) < len(s) {
		return false
	}
	for n := 0; n < len(s); n++ {
		if b[(i+n)] != s[n] {
			return false
		}
	}
	return true
}