-- @@SHEBANG
-- -*- Lua -*-
-- gitano-smart-http
--
-- Git (with) Augmented network operations -- User authentication wrapper
--
-- Copyright 2014-2017 Richard Ipsum <richard.ipsum@codethink.co.uk>
-- All rights reserved.
--
-- Redistribution and use in source and binary forms, with or without
-- modification, are permitted provided that the following conditions
-- are met:
-- 1. Redistributions of source code must retain the above copyright
--    notice, this list of conditions and the following disclaimer.
-- 2. Redistributions in binary form must reproduce the above copyright
--    notice, this list of conditions and the following disclaimer in the
--    documentation and/or other materials provided with the distribution.
-- 3. Neither the name of the author nor the names of their contributors
--    may be used to endorse or promote products derived from this software
--    without specific prior written permission.
--
-- THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
-- ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
-- IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
-- ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
-- FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
-- DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
-- OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
-- HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
-- LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
-- OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
-- SUCH DAMAGE.
--
--

-- @@GITANO_LUA_PATH

local gitano = require "gitano"
local gall = require "gall"
local luxio = require "luxio"
local sio = require "luxio.simple"

-- @@GITANO_BIN_PATH
-- @@GITANO_SHARE_PATH
-- @@GITANO_I18N_PATH
-- @@GITANO_PLUGIN_PATH

local stdout = sio.stdout

function parse_get_request()
   query_string = os.getenv("QUERY_STRING")

   if query_string then
      command = string.gsub(query_string, "^service=", "")
      repo = string.match(os.getenv("PATH_INFO"), '/(.+)/info/refs')
      return command .. " '" .. repo .. "'"
   end

   return nil
end

function parse_post_request()
   path_info = os.getenv("PATH_INFO")

   if path_info then
      repo, command = string.match(path_info, "/(.+)/(.+)")
      return command .. " '" .. repo .. "'"
   end

   return nil
end

function parse_request(request_method)
   if request_method == "GET" then
      return parse_get_request()
   elseif request_method == "POST" then
      return parse_post_request()
   end
end

request_method = os.getenv("REQUEST_METHOD")

if request_method == "GET" or request_method == "POST" then
   local user = os.getenv("REMOTE_USER") or "gitano/anonymous"
   local cmdline = parse_request(request_method)

   local start_log_level = gitano.log.get_level()
   gitano.log.cap_level(gitano.log.level.INFO)
   local transactionid = gitano.log.syslog.open()

   local authorized, cmd, parsed_cmdline, config, env, repo
   if cmdline then
      authorized, cmd, parsed_cmdline, config, env, repo =
         gitano.auth.is_authorized(user, "http", cmdline,
                                   os.getenv("GITANO_ROOT"),
                                   transactionid,
                                   start_log_level)
   end
   if cmdline and authorized then
      local what, why

      what, why = repo:git_command{"http-backend"}

      if what ~= "exit" then
         stdout:write("Status: 500 Internal Server Error\r\n\r\n")
      end
   else
      stdout:write("Status: 403 Forbidden\r\n\r\n")
   end

   gitano.log.syslog.close()
else
   stdout:write("Status: 405 Method Not Allowed\r\n")
   stdout:write("Allow: GET, POST\r\n\r\n")
end