/*
 *  tvheadend, HTTP interface
 *  Copyright (C) 2007 Andreas Öman
 *
 *  This program is free software: you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation, either version 3 of the License, or
 *  (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */

#include <pthread.h>
#include <assert.h>
#include <stdio.h>
#include <unistd.h>
#include <stdlib.h>
#include <string.h>
#include <stdarg.h>
#include <fcntl.h>
#include <errno.h>
#include <netinet/in.h>
#include <netinet/tcp.h>
#include <arpa/inet.h>

#include <libavutil/base64.h>

#include "tvhead.h"
#include "channels.h"
#include "subscriptions.h"
#include "epg.h"
#include "teletext.h"
#include "dispatch.h"
#include "dvb.h"
#include "rtp.h"
#include "tsmux.h"
#include "http.h"
#include "rtsp.h"

int http_port;

static LIST_HEAD(, http_path) http_paths;

static struct strtab HTTP_cmdtab[] = {
  { "GET",        HTTP_CMD_GET },
  { "POST",       HTTP_CMD_POST },
  { "DESCRIBE",   RTSP_CMD_DESCRIBE },
  { "OPTIONS",    RTSP_CMD_OPTIONS },
  { "SETUP",      RTSP_CMD_SETUP },
  { "PLAY",       RTSP_CMD_PLAY },
  { "TEARDOWN",   RTSP_CMD_TEARDOWN },
  { "PAUSE",      RTSP_CMD_PAUSE },
};



static struct strtab HTTP_versiontab[] = {
  { "HTTP/0.9",        HTTP_VERSION_0_9 },
  { "HTTP/1.0",        HTTP_VERSION_1_0 },
  { "HTTP/1.1",        HTTP_VERSION_1_1 },
  { "RTSP/1.0",        RTSP_VERSION_1_0 }, /* not enabled yet */
};

static void http_parse_get_args(http_connection_t *hc, char *args);

/**
 *
 */
static http_path_t *
http_resolve(http_connection_t *hc, char **remainp, char **argsp)
{
  http_path_t *hp;
  char *v;
  LIST_FOREACH(hp, &http_paths, hp_link) {
    if(!strncmp(hc->hc_url, hp->hp_path, hp->hp_len))
      break;
  }

  if(hp == NULL)
    return NULL;

  v = hc->hc_url + hp->hp_len;

  *remainp = NULL;
  *argsp = NULL;

  switch(*v) {
  case 0:
    break;

  case '/':
    if(v[1] == '?') {
      *argsp = v + 1;
      break;
    }

    *remainp = v + 1;
    v = strchr(v + 1, '?');
    if(v != NULL) {
      *v = 0;  /* terminate remaining url */
      *argsp = v + 1;
    }
    break;

  case '?':
    *argsp = v + 1;
    break;

  default:
    return NULL;
  }

  return hp;
}



/*
 * HTTP status code to string
 */

static const char *
http_rc2str(int code)
{
  switch(code) {
  case HTTP_STATUS_OK:              return "OK";
  case HTTP_STATUS_NOT_FOUND:       return "Not found";
  case HTTP_STATUS_UNAUTHORIZED:    return "Unauthorized";
  case HTTP_STATUS_BAD_REQUEST:     return "Bad request";
  default:
    return "Unknown returncode";
    break;
  }
}

static const char *cachedays[7] = {
  "Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat"
};

static const char *cachemonths[12] = {
  "Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov",
  "Dec"
};

/**
 * If current version mandates it, send a HTTP reply header back
 */
static void
http_output_reply_header(http_connection_t *hc, int rc, int maxage)
{
  struct tm tm0, *tm;
  time_t t;

  if(hc->hc_version < HTTP_VERSION_1_0)
    return;
  
  http_printf(hc, "%s %d %s\r\n", val2str(hc->hc_version, HTTP_versiontab),
	      rc, http_rc2str(rc));

  if(maxage == 0) {
    http_printf(hc, "Cache-Control: no-cache\r\n");
  } else {
    t = dispatch_clock;

    tm = gmtime_r(&t, &tm0);
    http_printf(hc, 
		"Last-Modified: %s, %02d %s %d %02d:%02d:%02d GMT\r\n",
		cachedays[tm->tm_wday],	tm->tm_year + 1900,
		cachemonths[tm->tm_mon], tm->tm_mday,
		tm->tm_hour, tm->tm_min, tm->tm_sec);

    t += maxage;

    tm = gmtime_r(&t, &tm0);
    http_printf(hc, 
		"Expires: %s, %02d %s %d %02d:%02d:%02d GMT\r\n",
		cachedays[tm->tm_wday],	tm->tm_year + 1900,
		cachemonths[tm->tm_mon], tm->tm_mday,
		tm->tm_hour, tm->tm_min, tm->tm_sec);

    http_printf(hc, "Cache-Control: max-age=%d\r\n", maxage);
  }

  http_printf(hc, "Server: HTS/tvheadend\r\n");
  http_printf(hc, "Connection: %s\r\n", 
	      hc->hc_keep_alive ? "Keep-Alive" : "Close");
}


/**
 * Send HTTP error back
 */
void
http_error(http_connection_t *hc, int error)
{
  char ret[300];
  const char *errtxt = http_rc2str(error);

  http_output_reply_header(hc, error, 0);

  snprintf(ret, sizeof(ret),
	   "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\r\n"
	   "<HTML><HEAD>\r\n"
	   "<TITLE>%d %s</TITLE>\r\n"
	   "</HEAD><BODY>\r\n"
	   "<H1>%d %s</H1>\r\n"
	   "</BODY></HTML>\r\n",
	   error, errtxt,
	   error, errtxt);

  if(hc->hc_version >= HTTP_VERSION_1_0) {
    if(error == HTTP_STATUS_UNAUTHORIZED)
      http_printf(hc, "WWW-Authenticate: Basic realm=\"tvheadend\"\r\n");

    http_printf(hc, "Content-Type: text/html\r\n");
    http_printf(hc, "Content-Length: %d\r\n", strlen(ret));
    http_printf(hc, "\r\n");
  }
  http_printf(hc, "%s", ret);
}

/**
 * Send an HTTP OK and post data from a tcp queue
 */
void
http_output_queue(http_connection_t *hc, tcp_queue_t *tq, const char *content,
		  int maxage)
{
  http_output_reply_header(hc, 200, maxage);

  if(hc->hc_version >= HTTP_VERSION_1_0) {
    http_printf(hc, 
		"Content-Type: %s\r\n"
		"Content-Length: %d\r\n"
		"\r\n",
		content, tq->tq_depth);
  }

  tcp_output_queue(&hc->hc_tcp_session, NULL, tq);
}

/**
 * Send an HTTP OK and post data from a tcp queue
 */
static void
http_output_queue_encoding(http_connection_t *hc, tcp_queue_t *tq,
			   const char *content, int maxage,
			   const char *encoding)
{
  http_output_reply_header(hc, 200, maxage);

  if(hc->hc_version >= HTTP_VERSION_1_0) {
    http_printf(hc, 
		"Content-Encoding: %s\r\n"
		"Content-Type: %s\r\n"
		"Content-Length: %d\r\n"
		"\r\n",
		encoding, content, tq->tq_depth);
  }

  tcp_output_queue(&hc->hc_tcp_session, NULL, tq);
}


/**
 * Send an HTTP REDIRECT
 */
int
http_redirect(http_connection_t *hc, const char *location)
{
  tcp_queue_t tq;

  http_output_reply_header(hc, 303, 0);

  if(hc->hc_version < HTTP_VERSION_1_0)
    return -1;

  tcp_init_queue(&tq, -1);

  tcp_qprintf(&tq, "Please follow <a href=\"%s\"\"></a>", location);

  http_printf(hc,
	      "Location: %s\r\n"
	      "Content-Type: text/html\r\n"
	      "Content-Length: %d\r\n"
	      "\r\n", location, tq.tq_depth);
  tcp_output_queue(&hc->hc_tcp_session, NULL, &tq);
  return 0;
}


/**
 * HTTP GET
 */
static void
http_cmd_get(http_connection_t *hc)
{
  http_path_t *hp;
  char *remain;
  char *args;
  int err;

  hp = http_resolve(hc, &remain, &args);
  if(hp == NULL) {
    http_error(hc, HTTP_STATUS_NOT_FOUND);
    return;
  }

  if(args != NULL)
    http_parse_get_args(hc, args);

  err = hp->hp_callback(hc, remain, hp->hp_opaque);
  if(err)
    http_error(hc, err);
}


/**
 * Check if a HTTP POST is fully received, and if so, continue processing
 */
static void
http_post_check(http_connection_t *hc)
{
  http_path_t *hp;
  char *remain, *args, *v, *argv[2];
  int err, n;

  if(hc->hc_post_ptr != hc->hc_post_len)
    return;

  hc->hc_state = HTTP_CON_WAIT_REQUEST;

  /* Parse content-type */
  v = http_arg_get(&hc->hc_args, "Content-Type");
  if(v == NULL) {
    http_error(hc, HTTP_STATUS_BAD_REQUEST);
    return;
  }

  n = http_tokenize(v, argv, 2, ';');
  if(n == 0) {
    http_error(hc, HTTP_STATUS_BAD_REQUEST);
    return;
  }

  if(!strcmp(argv[0], "application/x-www-form-urlencoded"))
    http_parse_get_args(hc, hc->hc_post_data);

  hp = http_resolve(hc, &remain, &args);
  if(hp == NULL) {
    http_error(hc, HTTP_STATUS_NOT_FOUND);
    return;
  }

  err = hp->hp_callback(hc, remain, hp->hp_opaque);
  if(err)
    http_error(hc, err);
}





/**
 * HTTP POST
 */
static void
http_cmd_post(http_connection_t *hc)
{
  char *v;

  /* Set keep-alive status */
  v = http_arg_get(&hc->hc_args, "Content-Length");
  if(v == NULL) {
    /* No content length in POST, make us disconnect */
    hc->hc_keep_alive = 0;
    return;
  }
  
  hc->hc_post_len = atoi(v);
  if(hc->hc_post_len > 16 * 1024 * 1024) {
    /* Bail out if POST data > 16 Mb */
    hc->hc_keep_alive = 0;
    return;
  }

  hc->hc_state = HTTP_CON_POST_DATA;

  /* Allocate space for data, we add a terminating null char to ease
     string processing on the content */

  hc->hc_post_data = malloc(hc->hc_post_len + 1);
  hc->hc_post_data[hc->hc_post_len] = 0;

  hc->hc_post_ptr  = 0;

  /* We need to drain the line parser of any excess data */

  hc->hc_post_ptr = tcp_line_drain(&hc->hc_tcp_session, hc->hc_post_data,
				   hc->hc_post_len);

  http_post_check(hc);
}


/**
 * Read POST data directly from socket
 */
static void
http_consume_post_data(http_connection_t *hc)
{
  tcp_session_t *tcp = &hc->hc_tcp_session;
  int togo = hc->hc_post_len - hc->hc_post_ptr;
  int r;

  r = read(tcp->tcp_fd, hc->hc_post_data + hc->hc_post_ptr, togo);
  if(r < 1) {
     tcp_disconnect(tcp, r == 0 ? ECONNRESET : errno);
     return;
  }

  hc->hc_post_ptr += r;
  http_post_check(hc);
}

/**
 * Process a HTTP request
 */
static void
http_process_request(http_connection_t *hc)
{
  switch(hc->hc_cmd) {
  default:
    http_error(hc, HTTP_STATUS_BAD_REQUEST);
    break;
  case HTTP_CMD_GET:
    http_cmd_get(hc); 
    break;
  case HTTP_CMD_POST:
    http_cmd_post(hc); 
    break;
  }
}

/**
 * Verify username, and if password match, set 'hc->hc_user_config'
 * to subconfig for that user
 */
static void
hc_user_resolve(http_connection_t *hc)
{
  hc->hc_user_config = user_resolve_to_config(hc->hc_username,
					      hc->hc_password);
}


/**
 * Process a request, extract info from headers, dispatch command and
 * clean up
 */
static int
process_request(http_connection_t *hc)
{
  char *v, *argv[2];
  int n;
  uint8_t authbuf[150];
  
  /* Set keep-alive status */
  v = http_arg_get(&hc->hc_args, "connection");

  switch(hc->hc_version) {
  case RTSP_VERSION_1_0:
    hc->hc_keep_alive = 1;
    break;

  case HTTP_VERSION_0_9:
    hc->hc_keep_alive = 0;
    break;

  case HTTP_VERSION_1_0:
    /* Keep-alive is default off, but can be enabled */
    hc->hc_keep_alive = v != NULL && !strcasecmp(v, "keep-alive");
    break;
    
  case HTTP_VERSION_1_1:
    /* Keep-alive is default on, but can be disabled */
    hc->hc_keep_alive = !(v != NULL && !strcasecmp(v, "close"));
    break;
  }

  free(hc->hc_username);
  hc->hc_username = NULL;

  free(hc->hc_password);
  hc->hc_password = NULL;

  /* Extract authorization */
  if((v = http_arg_get(&hc->hc_args, "Authorization")) != NULL) {
    if((n = http_tokenize(v, argv, 2, -1)) == 2) {
      n = av_base64_decode(authbuf, argv[1], sizeof(authbuf) - 1);
      authbuf[n] = 0;
      if((n = http_tokenize((char *)authbuf, argv, 2, ':')) == 2) {
	hc->hc_username = strdup(argv[0]);
	hc->hc_password = strdup(argv[1]);
	hc_user_resolve(hc);
      }
    }
  }

  

  switch(hc->hc_version) {
  case RTSP_VERSION_1_0:
    rtsp_process_request(hc);
    break;

  case HTTP_VERSION_0_9:
  case HTTP_VERSION_1_0:
  case HTTP_VERSION_1_1:
    http_process_request(hc);
    break;
  }

  return hc->hc_keep_alive == 0 ? -1 : 0;
}



/*
 * HTTP connection state machine & parser
 */
static int
http_con_parse(void *aux, char *buf)
{
  http_connection_t *hc = aux;
  int n, v;
  char *argv[3], *c;

  //printf("HTTP INPUT: %s\n", buf);

  switch(hc->hc_state) {
  case HTTP_CON_WAIT_REQUEST:
    if(hc->hc_post_data != NULL) {
      free(hc->hc_post_data);
      hc->hc_post_data = NULL;
    }

    http_arg_flush(&hc->hc_args);
    http_arg_flush(&hc->hc_req_args);
    if(hc->hc_url != NULL) {
      free(hc->hc_url);
      hc->hc_url = NULL;
    }

    n = http_tokenize(buf, argv, 3, -1);
    
    if(n < 2)
      return EBADRQC;

    hc->hc_cmd = str2val(argv[0], HTTP_cmdtab);
    hc->hc_url = strdup(argv[1]);


    if(n == 3) {
      v = str2val(argv[2], HTTP_versiontab);
      if(v == -1) 
	return EBADRQC;

      hc->hc_version = v;
      hc->hc_state = HTTP_CON_READ_HEADER;
    } else {
      hc->hc_version = HTTP_VERSION_0_9;
      return process_request(hc);
    }

    break;

  case HTTP_CON_READ_HEADER:
    if(*buf == 0) { 
      /* Empty crlf line, end of header lines */
      hc->hc_state = HTTP_CON_WAIT_REQUEST;
      return process_request(hc);
    }

    n = http_tokenize(buf, argv, 2, -1);
    if(n < 2)
      break;

    c = strrchr(argv[0], ':');
    if(c == NULL)
      break;
    *c = 0;
    http_arg_set(&hc->hc_args, argv[0], argv[1]);
    break;

  case HTTP_CON_POST_DATA:
    abort();

  case HTTP_CON_END:
    break;
  }
  return 0;
}


/*
 * disconnect
 */
static void
http_disconnect(http_connection_t *hc)
{
  free(hc->hc_post_data);
  free(hc->hc_username);
  free(hc->hc_password);

  rtsp_disconncet(hc);
  http_arg_flush(&hc->hc_args);
  http_arg_flush(&hc->hc_req_args);
  free(hc->hc_url);
}


/*
 *
 */
static void
http_tcp_callback(tcpevent_t event, void *tcpsession)
{
  http_connection_t *hc = tcpsession;

  switch(event) {
  case TCP_CONNECT:
    TAILQ_INIT(&hc->hc_args);
    TAILQ_INIT(&hc->hc_req_args);
    break;

  case TCP_DISCONNECT:
    http_disconnect(hc);
    break;

  case TCP_INPUT:

    if(hc->hc_state == HTTP_CON_POST_DATA)
      http_consume_post_data(hc);
    else
      tcp_line_read(&hc->hc_tcp_session, http_con_parse);
    break;
  }
}


/*
 *  Fire up HTTP server
 */

void
http_start(int port)
{
  rtsp_init();

  http_port = port;
  tcp_create_server(port, sizeof(http_connection_t), "http",
		    http_tcp_callback);
}









/*
 * Delete all arguments associated with a connection
 */
void
http_arg_flush(struct http_arg_list *list)
{
  http_arg_t *ra;
  while((ra = TAILQ_FIRST(list)) != NULL) {
    TAILQ_REMOVE(list, ra, link);
    free(ra->key);
    free(ra->val);
    free(ra);
  }
}


/**
 * Find an argument associated with a connection
 */
char *
http_arg_get(struct http_arg_list *list, const char *name)
{
  http_arg_t *ra;
  TAILQ_FOREACH(ra, list, link)
    if(!strcasecmp(ra->key, name))
      return ra->val;
  return NULL;
}


/**
 * Set an argument associated with a connection
 */
void
http_arg_set(struct http_arg_list *list, char *key, char *val)
{
  http_arg_t *ra;

  TAILQ_FOREACH(ra, list, link)
    if(!strcasecmp(ra->key, key))
      break;

  if(ra == NULL) {
    ra = malloc(sizeof(http_arg_t));
    TAILQ_INSERT_TAIL(list, ra, link);
    ra->key = strdup(key);
  } else {
    free(ra->val);
  }
  ra->val = strdup(val);
}


/*
 * Split a string in components delimited by 'delimiter'
 */
int
http_tokenize(char *buf, char **vec, int vecsize, int delimiter)
{
  int n = 0;

  while(1) {
    while((*buf > 0 && *buf < 33) || *buf == delimiter)
      buf++;
    if(*buf == 0)
      break;
    vec[n++] = buf;
    if(n == vecsize)
      break;
    while(*buf > 32 && *buf != delimiter)
      buf++;
    if(*buf == 0)
      break;
    *buf = 0;
    buf++;
  }
  return n;
}


/**
 * Add a callback for a given "virtual path" on our HTTP server
 */
http_path_t *
http_path_add(const char *path, void *opaque, http_callback_t *callback)
{
  http_path_t *hp = malloc(sizeof(http_path_t));

  hp->hp_len      = strlen(path);
  hp->hp_path     = strdup(path);
  hp->hp_opaque   = opaque;
  hp->hp_callback = callback;
  LIST_INSERT_HEAD(&http_paths, hp, hp_link);
  return hp;
}


/**
 * De-escape HTTP URL
 */
static void
http_deescape(char *s)
{
  char v, *d = s;

  while(*s) {
    if(*s == '+') {
      *d++ = ' ';
      s++;
    } else if(*s == '%') {
      s++;
      switch(*s) {
      case '0' ... '9':
	v = (*s - '0') << 4;
	break;
      case 'a' ... 'f':
	v = (*s - 'a' + 10) << 4;
	break;
      case 'A' ... 'F':
	v = (*s - 'A' + 10) << 4;
	break;
      default:
	*d = 0;
	return;
      }
      s++;
      switch(*s) {
      case '0' ... '9':
	v |= (*s - '0');
	break;
      case 'a' ... 'f':
	v |= (*s - 'a' + 10);
	break;
      case 'A' ... 'F':
	v |= (*s - 'A' + 10);
	break;
      default:
	*d = 0;
	return;
      }
      s++;

      *d++ = v;
    } else {
      *d++ = *s++;
    }
  }
  *d = 0;
}


/**
 * Parse arguments of a HTTP GET url, not perfect, but works for us
 */
static void
http_parse_get_args(http_connection_t *hc, char *args)
{
  char *k, *v;

  while(args) {
    k = args;
    if((args = strchr(args, '=')) == NULL)
      break;
    *args++ = 0;
    v = args;
    args = strchr(args, '&');

    if(args != NULL)
      *args++ = 0;

    http_deescape(k);
    http_deescape(v);
    printf("%s = %s\n", k, v);
    http_arg_set(&hc->hc_req_args, k, v);
  }
}

/**
 * HTTP embedded resource
 */
typedef struct http_resource {
  const void *data;
  size_t len;
  const char *content;
  const char *encoding;
} http_resource_t;

static int
deliver_resource(http_connection_t *hc, const char *remain, void *opaque)
{
  http_resource_t *hres = opaque;
  tcp_queue_t tq;

  tcp_init_queue(&tq, -1);
  tcp_qput(&tq, hres->data, hres->len);
  http_output_queue_encoding(hc, &tq, hres->content, 15, hres->encoding);
  return 0;
}

void
http_resource_add(const char *path, const void *ptr, size_t len, 
		  const char *content, const char *encoding)
{
  http_resource_t *hres = malloc(sizeof(http_resource_t));

  hres->data     = ptr;
  hres->len      = len;
  hres->content  = content;
  hres->encoding = encoding;

  http_path_add(path, hres, deliver_resource);
}