| |
| /* |
| * Copyright (C) Igor Sysoev |
| * Copyright (C) Nginx, Inc. |
| */ |
| |
| |
| #include <ngx_config.h> |
| #include <ngx_core.h> |
| #include <ngx_http.h> |
| |
| |
| #define NGX_HTTP_DAV_OFF 2 |
| |
| |
| #define NGX_HTTP_DAV_NO_DEPTH -3 |
| #define NGX_HTTP_DAV_INVALID_DEPTH -2 |
| #define NGX_HTTP_DAV_INFINITY_DEPTH -1 |
| |
| |
| typedef struct { |
| ngx_uint_t methods; |
| ngx_uint_t access; |
| ngx_uint_t min_delete_depth; |
| ngx_flag_t create_full_put_path; |
| } ngx_http_dav_loc_conf_t; |
| |
| |
| typedef struct { |
| ngx_str_t path; |
| size_t len; |
| } ngx_http_dav_copy_ctx_t; |
| |
| |
| static ngx_int_t ngx_http_dav_handler(ngx_http_request_t *r); |
| |
| static void ngx_http_dav_put_handler(ngx_http_request_t *r); |
| |
| static ngx_int_t ngx_http_dav_delete_handler(ngx_http_request_t *r); |
| static ngx_int_t ngx_http_dav_delete_path(ngx_http_request_t *r, |
| ngx_str_t *path, ngx_uint_t dir); |
| static ngx_int_t ngx_http_dav_delete_dir(ngx_tree_ctx_t *ctx, ngx_str_t *path); |
| static ngx_int_t ngx_http_dav_delete_file(ngx_tree_ctx_t *ctx, ngx_str_t *path); |
| static ngx_int_t ngx_http_dav_noop(ngx_tree_ctx_t *ctx, ngx_str_t *path); |
| |
| static ngx_int_t ngx_http_dav_mkcol_handler(ngx_http_request_t *r, |
| ngx_http_dav_loc_conf_t *dlcf); |
| |
| static ngx_int_t ngx_http_dav_copy_move_handler(ngx_http_request_t *r); |
| static ngx_int_t ngx_http_dav_copy_dir(ngx_tree_ctx_t *ctx, ngx_str_t *path); |
| static ngx_int_t ngx_http_dav_copy_dir_time(ngx_tree_ctx_t *ctx, |
| ngx_str_t *path); |
| static ngx_int_t ngx_http_dav_copy_tree_file(ngx_tree_ctx_t *ctx, |
| ngx_str_t *path); |
| |
| static ngx_int_t ngx_http_dav_depth(ngx_http_request_t *r, ngx_int_t dflt); |
| static ngx_int_t ngx_http_dav_error(ngx_log_t *log, ngx_err_t err, |
| ngx_int_t not_found, char *failed, u_char *path); |
| static ngx_int_t ngx_http_dav_location(ngx_http_request_t *r); |
| static void *ngx_http_dav_create_loc_conf(ngx_conf_t *cf); |
| static char *ngx_http_dav_merge_loc_conf(ngx_conf_t *cf, |
| void *parent, void *child); |
| static ngx_int_t ngx_http_dav_init(ngx_conf_t *cf); |
| |
| |
| static ngx_conf_bitmask_t ngx_http_dav_methods_mask[] = { |
| { ngx_string("off"), NGX_HTTP_DAV_OFF }, |
| { ngx_string("put"), NGX_HTTP_PUT }, |
| { ngx_string("delete"), NGX_HTTP_DELETE }, |
| { ngx_string("mkcol"), NGX_HTTP_MKCOL }, |
| { ngx_string("copy"), NGX_HTTP_COPY }, |
| { ngx_string("move"), NGX_HTTP_MOVE }, |
| { ngx_null_string, 0 } |
| }; |
| |
| |
| static ngx_command_t ngx_http_dav_commands[] = { |
| |
| { ngx_string("dav_methods"), |
| NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_1MORE, |
| ngx_conf_set_bitmask_slot, |
| NGX_HTTP_LOC_CONF_OFFSET, |
| offsetof(ngx_http_dav_loc_conf_t, methods), |
| &ngx_http_dav_methods_mask }, |
| |
| { ngx_string("create_full_put_path"), |
| NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_FLAG, |
| ngx_conf_set_flag_slot, |
| NGX_HTTP_LOC_CONF_OFFSET, |
| offsetof(ngx_http_dav_loc_conf_t, create_full_put_path), |
| NULL }, |
| |
| { ngx_string("min_delete_depth"), |
| NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1, |
| ngx_conf_set_num_slot, |
| NGX_HTTP_LOC_CONF_OFFSET, |
| offsetof(ngx_http_dav_loc_conf_t, min_delete_depth), |
| NULL }, |
| |
| { ngx_string("dav_access"), |
| NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE123, |
| ngx_conf_set_access_slot, |
| NGX_HTTP_LOC_CONF_OFFSET, |
| offsetof(ngx_http_dav_loc_conf_t, access), |
| NULL }, |
| |
| ngx_null_command |
| }; |
| |
| |
| static ngx_http_module_t ngx_http_dav_module_ctx = { |
| NULL, /* preconfiguration */ |
| ngx_http_dav_init, /* postconfiguration */ |
| |
| NULL, /* create main configuration */ |
| NULL, /* init main configuration */ |
| |
| NULL, /* create server configuration */ |
| NULL, /* merge server configuration */ |
| |
| ngx_http_dav_create_loc_conf, /* create location configuration */ |
| ngx_http_dav_merge_loc_conf /* merge location configuration */ |
| }; |
| |
| |
| ngx_module_t ngx_http_dav_module = { |
| NGX_MODULE_V1, |
| &ngx_http_dav_module_ctx, /* module context */ |
| ngx_http_dav_commands, /* module directives */ |
| NGX_HTTP_MODULE, /* module type */ |
| NULL, /* init master */ |
| NULL, /* init module */ |
| NULL, /* init process */ |
| NULL, /* init thread */ |
| NULL, /* exit thread */ |
| NULL, /* exit process */ |
| NULL, /* exit master */ |
| NGX_MODULE_V1_PADDING |
| }; |
| |
| |
| static ngx_int_t |
| ngx_http_dav_handler(ngx_http_request_t *r) |
| { |
| ngx_int_t rc; |
| ngx_http_dav_loc_conf_t *dlcf; |
| |
| dlcf = ngx_http_get_module_loc_conf(r, ngx_http_dav_module); |
| |
| if (!(r->method & dlcf->methods)) { |
| return NGX_DECLINED; |
| } |
| |
| switch (r->method) { |
| |
| case NGX_HTTP_PUT: |
| |
| if (r->uri.data[r->uri.len - 1] == '/') { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "cannot PUT to a collection"); |
| return NGX_HTTP_CONFLICT; |
| } |
| |
| if (r->headers_in.content_range) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "PUT with range is unsupported"); |
| return NGX_HTTP_NOT_IMPLEMENTED; |
| } |
| |
| r->request_body_in_file_only = 1; |
| r->request_body_in_persistent_file = 1; |
| r->request_body_in_clean_file = 1; |
| r->request_body_file_group_access = 1; |
| r->request_body_file_log_level = 0; |
| |
| rc = ngx_http_read_client_request_body(r, ngx_http_dav_put_handler); |
| |
| if (rc >= NGX_HTTP_SPECIAL_RESPONSE) { |
| return rc; |
| } |
| |
| return NGX_DONE; |
| |
| case NGX_HTTP_DELETE: |
| |
| return ngx_http_dav_delete_handler(r); |
| |
| case NGX_HTTP_MKCOL: |
| |
| return ngx_http_dav_mkcol_handler(r, dlcf); |
| |
| case NGX_HTTP_COPY: |
| |
| return ngx_http_dav_copy_move_handler(r); |
| |
| case NGX_HTTP_MOVE: |
| |
| return ngx_http_dav_copy_move_handler(r); |
| } |
| |
| return NGX_DECLINED; |
| } |
| |
| |
| static void |
| ngx_http_dav_put_handler(ngx_http_request_t *r) |
| { |
| size_t root; |
| time_t date; |
| ngx_str_t *temp, path; |
| ngx_uint_t status; |
| ngx_file_info_t fi; |
| ngx_ext_rename_file_t ext; |
| ngx_http_dav_loc_conf_t *dlcf; |
| |
| if (r->request_body == NULL) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "PUT request body is unavailable"); |
| ngx_http_finalize_request(r, NGX_HTTP_INTERNAL_SERVER_ERROR); |
| return; |
| } |
| |
| if (r->request_body->temp_file == NULL) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "PUT request body must be in a file"); |
| ngx_http_finalize_request(r, NGX_HTTP_INTERNAL_SERVER_ERROR); |
| return; |
| } |
| |
| if (ngx_http_map_uri_to_path(r, &path, &root, 0) == NULL) { |
| ngx_http_finalize_request(r, NGX_HTTP_INTERNAL_SERVER_ERROR); |
| return; |
| } |
| |
| path.len--; |
| |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, r->connection->log, 0, |
| "http put filename: \"%s\"", path.data); |
| |
| temp = &r->request_body->temp_file->file.name; |
| |
| if (ngx_file_info(path.data, &fi) == NGX_FILE_ERROR) { |
| status = NGX_HTTP_CREATED; |
| |
| } else { |
| status = NGX_HTTP_NO_CONTENT; |
| |
| if (ngx_is_dir(&fi)) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, NGX_EISDIR, |
| "\"%s\" could not be created", path.data); |
| |
| if (ngx_delete_file(temp->data) == NGX_FILE_ERROR) { |
| ngx_log_error(NGX_LOG_CRIT, r->connection->log, ngx_errno, |
| ngx_delete_file_n " \"%s\" failed", |
| temp->data); |
| } |
| |
| ngx_http_finalize_request(r, NGX_HTTP_CONFLICT); |
| return; |
| } |
| } |
| |
| dlcf = ngx_http_get_module_loc_conf(r, ngx_http_dav_module); |
| |
| ext.access = dlcf->access; |
| ext.path_access = dlcf->access; |
| ext.time = -1; |
| ext.create_path = dlcf->create_full_put_path; |
| ext.delete_file = 1; |
| ext.log = r->connection->log; |
| |
| if (r->headers_in.date) { |
| date = ngx_parse_http_time(r->headers_in.date->value.data, |
| r->headers_in.date->value.len); |
| |
| if (date != NGX_ERROR) { |
| ext.time = date; |
| ext.fd = r->request_body->temp_file->file.fd; |
| } |
| } |
| |
| if (ngx_ext_rename_file(temp, &path, &ext) != NGX_OK) { |
| ngx_http_finalize_request(r, NGX_HTTP_INTERNAL_SERVER_ERROR); |
| return; |
| } |
| |
| if (status == NGX_HTTP_CREATED) { |
| if (ngx_http_dav_location(r) != NGX_OK) { |
| ngx_http_finalize_request(r, NGX_HTTP_INTERNAL_SERVER_ERROR); |
| return; |
| } |
| |
| r->headers_out.content_length_n = 0; |
| } |
| |
| r->headers_out.status = status; |
| r->header_only = 1; |
| |
| ngx_http_finalize_request(r, ngx_http_send_header(r)); |
| return; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_dav_delete_handler(ngx_http_request_t *r) |
| { |
| size_t root; |
| ngx_err_t err; |
| ngx_int_t rc, depth; |
| ngx_uint_t i, d, dir; |
| ngx_str_t path; |
| ngx_file_info_t fi; |
| ngx_http_dav_loc_conf_t *dlcf; |
| |
| if (r->headers_in.content_length_n > 0 || r->headers_in.chunked) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "DELETE with body is unsupported"); |
| return NGX_HTTP_UNSUPPORTED_MEDIA_TYPE; |
| } |
| |
| dlcf = ngx_http_get_module_loc_conf(r, ngx_http_dav_module); |
| |
| if (dlcf->min_delete_depth) { |
| d = 0; |
| |
| for (i = 0; i < r->uri.len; /* void */) { |
| if (r->uri.data[i++] == '/') { |
| if (++d >= dlcf->min_delete_depth && i < r->uri.len) { |
| goto ok; |
| } |
| } |
| } |
| |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "insufficient URI depth:%i to DELETE", d); |
| return NGX_HTTP_CONFLICT; |
| } |
| |
| ok: |
| |
| if (ngx_http_map_uri_to_path(r, &path, &root, 0) == NULL) { |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, r->connection->log, 0, |
| "http delete filename: \"%s\"", path.data); |
| |
| if (ngx_link_info(path.data, &fi) == NGX_FILE_ERROR) { |
| err = ngx_errno; |
| |
| rc = (err == NGX_ENOTDIR) ? NGX_HTTP_CONFLICT : NGX_HTTP_NOT_FOUND; |
| |
| return ngx_http_dav_error(r->connection->log, err, |
| rc, ngx_link_info_n, path.data); |
| } |
| |
| if (ngx_is_dir(&fi)) { |
| |
| if (r->uri.data[r->uri.len - 1] != '/') { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, NGX_EISDIR, |
| "DELETE \"%s\" failed", path.data); |
| return NGX_HTTP_CONFLICT; |
| } |
| |
| depth = ngx_http_dav_depth(r, NGX_HTTP_DAV_INFINITY_DEPTH); |
| |
| if (depth != NGX_HTTP_DAV_INFINITY_DEPTH) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "\"Depth\" header must be infinity"); |
| return NGX_HTTP_BAD_REQUEST; |
| } |
| |
| path.len -= 2; /* omit "/\0" */ |
| |
| dir = 1; |
| |
| } else { |
| |
| /* |
| * we do not need to test (r->uri.data[r->uri.len - 1] == '/') |
| * because ngx_link_info("/file/") returned NGX_ENOTDIR above |
| */ |
| |
| depth = ngx_http_dav_depth(r, 0); |
| |
| if (depth != 0 && depth != NGX_HTTP_DAV_INFINITY_DEPTH) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "\"Depth\" header must be 0 or infinity"); |
| return NGX_HTTP_BAD_REQUEST; |
| } |
| |
| dir = 0; |
| } |
| |
| rc = ngx_http_dav_delete_path(r, &path, dir); |
| |
| if (rc == NGX_OK) { |
| return NGX_HTTP_NO_CONTENT; |
| } |
| |
| return rc; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_dav_delete_path(ngx_http_request_t *r, ngx_str_t *path, ngx_uint_t dir) |
| { |
| char *failed; |
| ngx_tree_ctx_t tree; |
| |
| if (dir) { |
| |
| tree.init_handler = NULL; |
| tree.file_handler = ngx_http_dav_delete_file; |
| tree.pre_tree_handler = ngx_http_dav_noop; |
| tree.post_tree_handler = ngx_http_dav_delete_dir; |
| tree.spec_handler = ngx_http_dav_delete_file; |
| tree.data = NULL; |
| tree.alloc = 0; |
| tree.log = r->connection->log; |
| |
| /* TODO: 207 */ |
| |
| if (ngx_walk_tree(&tree, path) != NGX_OK) { |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| if (ngx_delete_dir(path->data) != NGX_FILE_ERROR) { |
| return NGX_OK; |
| } |
| |
| failed = ngx_delete_dir_n; |
| |
| } else { |
| |
| if (ngx_delete_file(path->data) != NGX_FILE_ERROR) { |
| return NGX_OK; |
| } |
| |
| failed = ngx_delete_file_n; |
| } |
| |
| return ngx_http_dav_error(r->connection->log, ngx_errno, |
| NGX_HTTP_NOT_FOUND, failed, path->data); |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_dav_delete_dir(ngx_tree_ctx_t *ctx, ngx_str_t *path) |
| { |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, ctx->log, 0, |
| "http delete dir: \"%s\"", path->data); |
| |
| if (ngx_delete_dir(path->data) == NGX_FILE_ERROR) { |
| |
| /* TODO: add to 207 */ |
| |
| (void) ngx_http_dav_error(ctx->log, ngx_errno, 0, ngx_delete_dir_n, |
| path->data); |
| } |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_dav_delete_file(ngx_tree_ctx_t *ctx, ngx_str_t *path) |
| { |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, ctx->log, 0, |
| "http delete file: \"%s\"", path->data); |
| |
| if (ngx_delete_file(path->data) == NGX_FILE_ERROR) { |
| |
| /* TODO: add to 207 */ |
| |
| (void) ngx_http_dav_error(ctx->log, ngx_errno, 0, ngx_delete_file_n, |
| path->data); |
| } |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_dav_noop(ngx_tree_ctx_t *ctx, ngx_str_t *path) |
| { |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_dav_mkcol_handler(ngx_http_request_t *r, ngx_http_dav_loc_conf_t *dlcf) |
| { |
| u_char *p; |
| size_t root; |
| ngx_str_t path; |
| |
| if (r->headers_in.content_length_n > 0 || r->headers_in.chunked) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "MKCOL with body is unsupported"); |
| return NGX_HTTP_UNSUPPORTED_MEDIA_TYPE; |
| } |
| |
| if (r->uri.data[r->uri.len - 1] != '/') { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "MKCOL can create a collection only"); |
| return NGX_HTTP_CONFLICT; |
| } |
| |
| p = ngx_http_map_uri_to_path(r, &path, &root, 0); |
| if (p == NULL) { |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| *(p - 1) = '\0'; |
| |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, r->connection->log, 0, |
| "http mkcol path: \"%s\"", path.data); |
| |
| if (ngx_create_dir(path.data, ngx_dir_access(dlcf->access)) |
| != NGX_FILE_ERROR) |
| { |
| if (ngx_http_dav_location(r) != NGX_OK) { |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| return NGX_HTTP_CREATED; |
| } |
| |
| return ngx_http_dav_error(r->connection->log, ngx_errno, |
| NGX_HTTP_CONFLICT, ngx_create_dir_n, path.data); |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_dav_copy_move_handler(ngx_http_request_t *r) |
| { |
| u_char *p, *host, *last, ch; |
| size_t len, root; |
| ngx_err_t err; |
| ngx_int_t rc, depth; |
| ngx_uint_t overwrite, slash, dir, flags; |
| ngx_str_t path, uri, duri, args; |
| ngx_tree_ctx_t tree; |
| ngx_copy_file_t cf; |
| ngx_file_info_t fi; |
| ngx_table_elt_t *dest, *over; |
| ngx_ext_rename_file_t ext; |
| ngx_http_dav_copy_ctx_t copy; |
| ngx_http_dav_loc_conf_t *dlcf; |
| |
| if (r->headers_in.content_length_n > 0 || r->headers_in.chunked) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "COPY and MOVE with body are unsupported"); |
| return NGX_HTTP_UNSUPPORTED_MEDIA_TYPE; |
| } |
| |
| dest = r->headers_in.destination; |
| |
| if (dest == NULL) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "client sent no \"Destination\" header"); |
| return NGX_HTTP_BAD_REQUEST; |
| } |
| |
| p = dest->value.data; |
| /* there is always '\0' even after empty header value */ |
| if (p[0] == '/') { |
| last = p + dest->value.len; |
| goto destination_done; |
| } |
| |
| len = r->headers_in.server.len; |
| |
| if (len == 0) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "client sent no \"Host\" header"); |
| return NGX_HTTP_BAD_REQUEST; |
| } |
| |
| #if (NGX_HTTP_SSL) |
| |
| if (r->connection->ssl) { |
| if (ngx_strncmp(dest->value.data, "https://", sizeof("https://") - 1) |
| != 0) |
| { |
| goto invalid_destination; |
| } |
| |
| host = dest->value.data + sizeof("https://") - 1; |
| |
| } else |
| #endif |
| { |
| if (ngx_strncmp(dest->value.data, "http://", sizeof("http://") - 1) |
| != 0) |
| { |
| goto invalid_destination; |
| } |
| |
| host = dest->value.data + sizeof("http://") - 1; |
| } |
| |
| if (ngx_strncmp(host, r->headers_in.server.data, len) != 0) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "\"Destination\" URI \"%V\" is handled by " |
| "different repository than the source URI", |
| &dest->value); |
| return NGX_HTTP_BAD_REQUEST; |
| } |
| |
| last = dest->value.data + dest->value.len; |
| |
| for (p = host + len; p < last; p++) { |
| if (*p == '/') { |
| goto destination_done; |
| } |
| } |
| |
| invalid_destination: |
| |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "client sent invalid \"Destination\" header: \"%V\"", |
| &dest->value); |
| return NGX_HTTP_BAD_REQUEST; |
| |
| destination_done: |
| |
| duri.len = last - p; |
| duri.data = p; |
| flags = NGX_HTTP_LOG_UNSAFE; |
| |
| if (ngx_http_parse_unsafe_uri(r, &duri, &args, &flags) != NGX_OK) { |
| goto invalid_destination; |
| } |
| |
| if ((r->uri.data[r->uri.len - 1] == '/' && *(last - 1) != '/') |
| || (r->uri.data[r->uri.len - 1] != '/' && *(last - 1) == '/')) |
| { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "both URI \"%V\" and \"Destination\" URI \"%V\" " |
| "should be either collections or non-collections", |
| &r->uri, &dest->value); |
| return NGX_HTTP_CONFLICT; |
| } |
| |
| depth = ngx_http_dav_depth(r, NGX_HTTP_DAV_INFINITY_DEPTH); |
| |
| if (depth != NGX_HTTP_DAV_INFINITY_DEPTH) { |
| |
| if (r->method == NGX_HTTP_COPY) { |
| if (depth != 0) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "\"Depth\" header must be 0 or infinity"); |
| return NGX_HTTP_BAD_REQUEST; |
| } |
| |
| } else { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "\"Depth\" header must be infinity"); |
| return NGX_HTTP_BAD_REQUEST; |
| } |
| } |
| |
| over = r->headers_in.overwrite; |
| |
| if (over) { |
| if (over->value.len == 1) { |
| ch = over->value.data[0]; |
| |
| if (ch == 'T' || ch == 't') { |
| overwrite = 1; |
| goto overwrite_done; |
| } |
| |
| if (ch == 'F' || ch == 'f') { |
| overwrite = 0; |
| goto overwrite_done; |
| } |
| |
| } |
| |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "client sent invalid \"Overwrite\" header: \"%V\"", |
| &over->value); |
| return NGX_HTTP_BAD_REQUEST; |
| } |
| |
| overwrite = 1; |
| |
| overwrite_done: |
| |
| if (ngx_http_map_uri_to_path(r, &path, &root, 0) == NULL) { |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, r->connection->log, 0, |
| "http copy from: \"%s\"", path.data); |
| |
| uri = r->uri; |
| r->uri = duri; |
| |
| if (ngx_http_map_uri_to_path(r, ©.path, &root, 0) == NULL) { |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| r->uri = uri; |
| |
| copy.path.len--; /* omit "\0" */ |
| |
| if (copy.path.data[copy.path.len - 1] == '/') { |
| slash = 1; |
| copy.path.len--; |
| copy.path.data[copy.path.len] = '\0'; |
| |
| } else { |
| slash = 0; |
| } |
| |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, r->connection->log, 0, |
| "http copy to: \"%s\"", copy.path.data); |
| |
| if (ngx_link_info(copy.path.data, &fi) == NGX_FILE_ERROR) { |
| err = ngx_errno; |
| |
| if (err != NGX_ENOENT) { |
| return ngx_http_dav_error(r->connection->log, err, |
| NGX_HTTP_NOT_FOUND, ngx_link_info_n, |
| copy.path.data); |
| } |
| |
| /* destination does not exist */ |
| |
| overwrite = 0; |
| dir = 0; |
| |
| } else { |
| |
| /* destination exists */ |
| |
| if (ngx_is_dir(&fi) && !slash) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "\"%V\" could not be %Ved to collection \"%V\"", |
| &r->uri, &r->method_name, &dest->value); |
| return NGX_HTTP_CONFLICT; |
| } |
| |
| if (!overwrite) { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, NGX_EEXIST, |
| "\"%s\" could not be created", copy.path.data); |
| return NGX_HTTP_PRECONDITION_FAILED; |
| } |
| |
| dir = ngx_is_dir(&fi); |
| } |
| |
| if (ngx_link_info(path.data, &fi) == NGX_FILE_ERROR) { |
| return ngx_http_dav_error(r->connection->log, ngx_errno, |
| NGX_HTTP_NOT_FOUND, ngx_link_info_n, |
| path.data); |
| } |
| |
| if (ngx_is_dir(&fi)) { |
| |
| if (r->uri.data[r->uri.len - 1] != '/') { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "\"%V\" is collection", &r->uri); |
| return NGX_HTTP_BAD_REQUEST; |
| } |
| |
| if (overwrite) { |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, r->connection->log, 0, |
| "http delete: \"%s\"", copy.path.data); |
| |
| rc = ngx_http_dav_delete_path(r, ©.path, dir); |
| |
| if (rc != NGX_OK) { |
| return rc; |
| } |
| } |
| } |
| |
| if (ngx_is_dir(&fi)) { |
| |
| path.len -= 2; /* omit "/\0" */ |
| |
| if (r->method == NGX_HTTP_MOVE) { |
| if (ngx_rename_file(path.data, copy.path.data) != NGX_FILE_ERROR) { |
| return NGX_HTTP_CREATED; |
| } |
| } |
| |
| if (ngx_create_dir(copy.path.data, ngx_file_access(&fi)) |
| == NGX_FILE_ERROR) |
| { |
| return ngx_http_dav_error(r->connection->log, ngx_errno, |
| NGX_HTTP_NOT_FOUND, |
| ngx_create_dir_n, copy.path.data); |
| } |
| |
| copy.len = path.len; |
| |
| tree.init_handler = NULL; |
| tree.file_handler = ngx_http_dav_copy_tree_file; |
| tree.pre_tree_handler = ngx_http_dav_copy_dir; |
| tree.post_tree_handler = ngx_http_dav_copy_dir_time; |
| tree.spec_handler = ngx_http_dav_noop; |
| tree.data = © |
| tree.alloc = 0; |
| tree.log = r->connection->log; |
| |
| if (ngx_walk_tree(&tree, &path) == NGX_OK) { |
| |
| if (r->method == NGX_HTTP_MOVE) { |
| rc = ngx_http_dav_delete_path(r, &path, 1); |
| |
| if (rc != NGX_OK) { |
| return rc; |
| } |
| } |
| |
| return NGX_HTTP_CREATED; |
| } |
| |
| } else { |
| |
| if (r->method == NGX_HTTP_MOVE) { |
| |
| dlcf = ngx_http_get_module_loc_conf(r, ngx_http_dav_module); |
| |
| ext.access = 0; |
| ext.path_access = dlcf->access; |
| ext.time = -1; |
| ext.create_path = 1; |
| ext.delete_file = 0; |
| ext.log = r->connection->log; |
| |
| if (ngx_ext_rename_file(&path, ©.path, &ext) == NGX_OK) { |
| return NGX_HTTP_NO_CONTENT; |
| } |
| |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| cf.size = ngx_file_size(&fi); |
| cf.buf_size = 0; |
| cf.access = ngx_file_access(&fi); |
| cf.time = ngx_file_mtime(&fi); |
| cf.log = r->connection->log; |
| |
| if (ngx_copy_file(path.data, copy.path.data, &cf) == NGX_OK) { |
| return NGX_HTTP_NO_CONTENT; |
| } |
| } |
| |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_dav_copy_dir(ngx_tree_ctx_t *ctx, ngx_str_t *path) |
| { |
| u_char *p, *dir; |
| size_t len; |
| ngx_http_dav_copy_ctx_t *copy; |
| |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, ctx->log, 0, |
| "http copy dir: \"%s\"", path->data); |
| |
| copy = ctx->data; |
| |
| len = copy->path.len + path->len; |
| |
| dir = ngx_alloc(len + 1, ctx->log); |
| if (dir == NULL) { |
| return NGX_ABORT; |
| } |
| |
| p = ngx_cpymem(dir, copy->path.data, copy->path.len); |
| (void) ngx_cpystrn(p, path->data + copy->len, path->len - copy->len + 1); |
| |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, ctx->log, 0, |
| "http copy dir to: \"%s\"", dir); |
| |
| if (ngx_create_dir(dir, ngx_dir_access(ctx->access)) == NGX_FILE_ERROR) { |
| (void) ngx_http_dav_error(ctx->log, ngx_errno, 0, ngx_create_dir_n, |
| dir); |
| } |
| |
| ngx_free(dir); |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_dav_copy_dir_time(ngx_tree_ctx_t *ctx, ngx_str_t *path) |
| { |
| u_char *p, *dir; |
| size_t len; |
| ngx_http_dav_copy_ctx_t *copy; |
| |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, ctx->log, 0, |
| "http copy dir time: \"%s\"", path->data); |
| |
| copy = ctx->data; |
| |
| len = copy->path.len + path->len; |
| |
| dir = ngx_alloc(len + 1, ctx->log); |
| if (dir == NULL) { |
| return NGX_ABORT; |
| } |
| |
| p = ngx_cpymem(dir, copy->path.data, copy->path.len); |
| (void) ngx_cpystrn(p, path->data + copy->len, path->len - copy->len + 1); |
| |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, ctx->log, 0, |
| "http copy dir time to: \"%s\"", dir); |
| |
| #if (NGX_WIN32) |
| { |
| ngx_fd_t fd; |
| |
| fd = ngx_open_file(dir, NGX_FILE_RDWR, NGX_FILE_OPEN, 0); |
| |
| if (fd == NGX_INVALID_FILE) { |
| (void) ngx_http_dav_error(ctx->log, ngx_errno, 0, ngx_open_file_n, dir); |
| goto failed; |
| } |
| |
| if (ngx_set_file_time(NULL, fd, ctx->mtime) != NGX_OK) { |
| ngx_log_error(NGX_LOG_ALERT, ctx->log, ngx_errno, |
| ngx_set_file_time_n " \"%s\" failed", dir); |
| } |
| |
| if (ngx_close_file(fd) == NGX_FILE_ERROR) { |
| ngx_log_error(NGX_LOG_ALERT, ctx->log, ngx_errno, |
| ngx_close_file_n " \"%s\" failed", dir); |
| } |
| } |
| |
| failed: |
| |
| #else |
| |
| if (ngx_set_file_time(dir, 0, ctx->mtime) != NGX_OK) { |
| ngx_log_error(NGX_LOG_ALERT, ctx->log, ngx_errno, |
| ngx_set_file_time_n " \"%s\" failed", dir); |
| } |
| |
| #endif |
| |
| ngx_free(dir); |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_dav_copy_tree_file(ngx_tree_ctx_t *ctx, ngx_str_t *path) |
| { |
| u_char *p, *file; |
| size_t len; |
| ngx_copy_file_t cf; |
| ngx_http_dav_copy_ctx_t *copy; |
| |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, ctx->log, 0, |
| "http copy file: \"%s\"", path->data); |
| |
| copy = ctx->data; |
| |
| len = copy->path.len + path->len; |
| |
| file = ngx_alloc(len + 1, ctx->log); |
| if (file == NULL) { |
| return NGX_ABORT; |
| } |
| |
| p = ngx_cpymem(file, copy->path.data, copy->path.len); |
| (void) ngx_cpystrn(p, path->data + copy->len, path->len - copy->len + 1); |
| |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, ctx->log, 0, |
| "http copy file to: \"%s\"", file); |
| |
| cf.size = ctx->size; |
| cf.buf_size = 0; |
| cf.access = ctx->access; |
| cf.time = ctx->mtime; |
| cf.log = ctx->log; |
| |
| (void) ngx_copy_file(path->data, file, &cf); |
| |
| ngx_free(file); |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_dav_depth(ngx_http_request_t *r, ngx_int_t dflt) |
| { |
| ngx_table_elt_t *depth; |
| |
| depth = r->headers_in.depth; |
| |
| if (depth == NULL) { |
| return dflt; |
| } |
| |
| if (depth->value.len == 1) { |
| |
| if (depth->value.data[0] == '0') { |
| return 0; |
| } |
| |
| if (depth->value.data[0] == '1') { |
| return 1; |
| } |
| |
| } else { |
| |
| if (depth->value.len == sizeof("infinity") - 1 |
| && ngx_strcmp(depth->value.data, "infinity") == 0) |
| { |
| return NGX_HTTP_DAV_INFINITY_DEPTH; |
| } |
| } |
| |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "client sent invalid \"Depth\" header: \"%V\"", |
| &depth->value); |
| |
| return NGX_HTTP_DAV_INVALID_DEPTH; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_dav_error(ngx_log_t *log, ngx_err_t err, ngx_int_t not_found, |
| char *failed, u_char *path) |
| { |
| ngx_int_t rc; |
| ngx_uint_t level; |
| |
| if (err == NGX_ENOENT || err == NGX_ENOTDIR || err == NGX_ENAMETOOLONG) { |
| level = NGX_LOG_ERR; |
| rc = not_found; |
| |
| } else if (err == NGX_EACCES || err == NGX_EPERM) { |
| level = NGX_LOG_ERR; |
| rc = NGX_HTTP_FORBIDDEN; |
| |
| } else if (err == NGX_EEXIST) { |
| level = NGX_LOG_ERR; |
| rc = NGX_HTTP_NOT_ALLOWED; |
| |
| } else if (err == NGX_ENOSPC) { |
| level = NGX_LOG_CRIT; |
| rc = NGX_HTTP_INSUFFICIENT_STORAGE; |
| |
| } else { |
| level = NGX_LOG_CRIT; |
| rc = NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| ngx_log_error(level, log, err, "%s \"%s\" failed", failed, path); |
| |
| return rc; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_dav_location(ngx_http_request_t *r) |
| { |
| u_char *p; |
| size_t len; |
| uintptr_t escape; |
| |
| r->headers_out.location = ngx_list_push(&r->headers_out.headers); |
| if (r->headers_out.location == NULL) { |
| return NGX_ERROR; |
| } |
| |
| r->headers_out.location->hash = 1; |
| ngx_str_set(&r->headers_out.location->key, "Location"); |
| |
| escape = 2 * ngx_escape_uri(NULL, r->uri.data, r->uri.len, NGX_ESCAPE_URI); |
| |
| if (escape) { |
| len = r->uri.len + escape; |
| |
| p = ngx_pnalloc(r->pool, len); |
| if (p == NULL) { |
| ngx_http_clear_location(r); |
| return NGX_ERROR; |
| } |
| |
| r->headers_out.location->value.len = len; |
| r->headers_out.location->value.data = p; |
| |
| ngx_escape_uri(p, r->uri.data, r->uri.len, NGX_ESCAPE_URI); |
| |
| } else { |
| r->headers_out.location->value = r->uri; |
| } |
| |
| return NGX_OK; |
| } |
| |
| |
| static void * |
| ngx_http_dav_create_loc_conf(ngx_conf_t *cf) |
| { |
| ngx_http_dav_loc_conf_t *conf; |
| |
| conf = ngx_pcalloc(cf->pool, sizeof(ngx_http_dav_loc_conf_t)); |
| if (conf == NULL) { |
| return NULL; |
| } |
| |
| /* |
| * set by ngx_pcalloc(): |
| * |
| * conf->methods = 0; |
| */ |
| |
| conf->min_delete_depth = NGX_CONF_UNSET_UINT; |
| conf->access = NGX_CONF_UNSET_UINT; |
| conf->create_full_put_path = NGX_CONF_UNSET; |
| |
| return conf; |
| } |
| |
| |
| static char * |
| ngx_http_dav_merge_loc_conf(ngx_conf_t *cf, void *parent, void *child) |
| { |
| ngx_http_dav_loc_conf_t *prev = parent; |
| ngx_http_dav_loc_conf_t *conf = child; |
| |
| ngx_conf_merge_bitmask_value(conf->methods, prev->methods, |
| (NGX_CONF_BITMASK_SET|NGX_HTTP_DAV_OFF)); |
| |
| ngx_conf_merge_uint_value(conf->min_delete_depth, |
| prev->min_delete_depth, 0); |
| |
| ngx_conf_merge_uint_value(conf->access, prev->access, 0600); |
| |
| ngx_conf_merge_value(conf->create_full_put_path, |
| prev->create_full_put_path, 0); |
| |
| return NGX_CONF_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_dav_init(ngx_conf_t *cf) |
| { |
| ngx_http_handler_pt *h; |
| ngx_http_core_main_conf_t *cmcf; |
| |
| cmcf = ngx_http_conf_get_module_main_conf(cf, ngx_http_core_module); |
| |
| h = ngx_array_push(&cmcf->phases[NGX_HTTP_CONTENT_PHASE].handlers); |
| if (h == NULL) { |
| return NGX_ERROR; |
| } |
| |
| *h = ngx_http_dav_handler; |
| |
| return NGX_OK; |
| } |