hurl.rb

require 'libraries'

module Hurl
  class App < Sinatra::Base
    register Mustache::Sinatra
    helpers Hurl::Helpers

    dir = File.dirname(File.expand_path(__FILE__))

    set :public,    "#{dir}/public"
    set :static,    true
    set :mustache, {
      :namespace => Object,
      :views     => 'views/',
      :templates => 'templates/'
    }

    enable :sessions

    set :github_options, { :client_id    => ENV['HURL_CLIENT_ID'],
                           :secret       => ENV['HURL_SECRET'],
                           :scopes       => '',
                           :callback_url => '/login/callback/' }

    register ::Sinatra::Auth::Github

    def initialize(*args)
      super
      @debug = ENV['DEBUG']
      setup_default_hurls
    end


    #
    # routes
    #

    before do
      check_for_dependencies

      if authenticated?
        @user = User.new(github_user)
      end

      @flash = session.delete('flash')
    end

    get '/' do
      @hurl = {}
      mustache :index
    end

    get '/hurls/?' do
      redirect('/') and return unless logged_in?
      @hurls = @user.hurls
      mustache :hurls
    end

    get '/hurls/:id/?' do
      @hurl = find_hurl_or_view(params[:id])
      @hurl ? mustache(:index) : not_found
    end

    delete '/hurls/:id/?' do
      redirect('/') and return unless logged_in?

      if @hurl = find_hurl_or_view(params[:id])
        @user.remove_hurl(@hurl['id'])
      end
      request.xhr? ? "ok" : redirect('/')
    end

    get '/hurls/:id/:view_id/?' do
      @hurl = find_hurl_or_view(params[:id])
      @view = find_hurl_or_view(params[:view_id])
      @view_id = params[:view_id]
      @hurl && @view ? mustache(:index) : not_found
    end

    get '/views/:id/?' do
      @view = find_hurl_or_view(params[:id])
      @view ? mustache(:view, :layout => false) : not_found
    end

    get '/test.json' do
      content_type 'application/json'
      File.read('test/json')
    end

    get '/test.xml' do
      content_type 'application/xml'
      File.read('test/xml')
    end

    get '/install/?' do
      mustache :install
    end

    get '/about/?' do
      mustache :about
    end

    get '/stats/?' do
      mustache :stats
    end

    get '/login/?' do
      authenticate!
      redirect '/'
    end

    get '/login/callback/?' do
      authenticate!
      redirect '/'
    end

    get '/logout/?' do
      logout!
      session['flash'] = 'see you later!'
      redirect '/'
    end

    post '/' do
      return json(:error => "Calm down and try my margarita!") if rate_limited?

      url, method, auth = params.values_at(:url, :method, :auth)

      return json(:error => "That's... wait.. what?!") if invalid_url?(url)

      curl = Curl::Easy.new(url)

      sent_headers = []
      curl.on_debug do |type, data|
        # track request headers
        sent_headers << data if type == Curl::CURLINFO_HEADER_OUT
      end

      curl.follow_location = true if params[:follow_redirects]

      # ensure a method is set
      method = (method.to_s.empty? ? 'GET' : method).upcase

      # update auth
      add_auth(auth, curl, params)

      # arbitrary headers
      add_headers_from_arrays(curl, params["header-keys"], params["header-vals"])

      # arbitrary post params
      if params['post-body'] && ['POST', 'PUT'].index(method)
        post_data = [params['post-body']]
      else
        post_data = make_fields(method, params["param-keys"], params["param-vals"])
      end

      begin
        debug { puts "#{method} #{url}" }

        curl.send("http_#{method.downcase}", *post_data)

        debug do
          puts sent_headers.join("\n")
          puts post_data.join('&') if post_data.any?
          puts curl.header_str
        end

        header  = pretty_print_headers(curl.header_str)
        type    = url =~ /(\.js)/ ? 'js' : curl.content_type
        body    = pretty_print(type, curl.body_str)
        request = pretty_print_requests(sent_headers, post_data)

        json :header    => header,
             :body      => body,
             :request   => request,
             :hurl_id   => save_hurl(params),
             :prev_hurl => @user ? @user.second_to_last_hurl_id : nil,
             :view_id   => save_view(header, body, request)
      rescue => e
        json :error => e.to_s
      end
    end


    #
    # error handlers
    #

    not_found do
      mustache :"404"
    end

    error do
      mustache :"500"
    end


    #
    # route helpers
    #

    # is this a url hurl can handle. basically a spam check.
    def invalid_url?(url)
      url.include? 'hurl.it'
    end

    # update auth based on auth type
    def add_auth(auth, curl, params)
      if auth == 'basic'
        username, password = params.values_at(:username, :password)
        encoded = Base64.encode64("#{username}:#{password}").gsub("\n",'')
        curl.headers['Authorization'] = "Basic #{encoded}"
      end
    end

    # headers from non-empty keys and values
    def add_headers_from_arrays(curl, keys, values)
      keys, values = Array(keys), Array(values)

      keys.each_with_index do |key, i|
        next if values[i].to_s.empty?
        curl.headers[key] = values[i]
      end
    end

    # post params from non-empty keys and values
    def make_fields(method, keys, values)
      return [] unless method == 'POST'

      fields = []
      keys, values = Array(keys), Array(values)
      keys.each_with_index do |name, i|
        value = values[i]
        next if name.to_s.empty? || value.to_s.empty?
        fields << Curl::PostField.content(name, value)
      end
      fields
    end

    def save_view(header, body, request)
      hash = { 'header' => header, 'body' => body, 'request' => request }
      id = sha(hash.to_s)
      DB.save(:views, id, hash)
      id
    end

    def save_hurl(params)
      id = sha(params.to_s)
      DB.save(:hurls, id, params.merge(:id => id))
      @user.add_hurl(id) if @user
      id
    end

    def find_hurl_or_view(id)
      DB.find(:hurls, id) || DB.find(:views, id)
    end

    # has this person made too many requests?
    def rate_limited?
      false
    end
  end
end