oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Added WebGUI::Middleware::WGAccess for .wgaccess-aware static serving on dev servers

Browse source
This commit is contained in:
Patrick Donelan 2010-04-13 19:33:35 -04:00
parent 82ce3331b7
commit b1ab8287ca
3 changed files with 72 additions and 92 deletions
Download patch file Download diff file Expand all files Collapse all files

92
lib/Plack/Middleware/WGAccess.pm
View file

@ -1,92 +0,0 @@
package Plack::Middleware::WGAccess;
use strict;
use warnings;
use base qw/Plack::Middleware::Static/;
use Path::Class 'dir';
=head1 NAME
Plack::Middleware::WGAccess
=head1 DESCRIPTION
Plack Middleware that delivers static files with .wgaccess awareness
=cut
sub _handle_static {
my($self, $env) = @_;
#######################################
# Copied from Plack::Middleware::Static::_handle_static
my $path_match = $self->path or return;
if ($env->{PATH_INFO} =~ m!\.\.[/\\]!) {
return $self->return_403;
}
my $path = do {
my $matched;
local $_ = $env->{PATH_INFO};
if (ref $path_match eq 'CODE') {
$matched = $path_match->($_);
} else {
$matched = $_ =~ $path_match;
}
return unless $matched;
$_;
} or return;
my $docroot = dir($self->root || ".");
my $file = $docroot->file(File::Spec::Unix->splitpath($path));
my $realpath = Cwd::realpath($file->absolute->stringify);
# Is the requested path within the root?
if ($realpath && !$docroot->subsumes($realpath)) {
return $self->return_403;
}
# Does the file actually exist?
if (!$realpath || !-f $file) {
return $self->return_404;
}
# If the requested file present but lacking the permission to read it?
if (!-r $file) {
return $self->return_403;
}
###############################
# Copied from WebGUI::URL::Uploads
my $wgaccess = File::Spec::Unix->catfile($file->dir, '.wgaccess');
if (-e $wgaccess) {
my $fileContents;
open(my $FILE, "<", $wgaccess);
while (my $line = <$FILE>) {
$fileContents .= $line;
}
close($FILE);
my @privs = split("\n", $fileContents);
unless ($privs[1] eq "7" || $privs[1] eq "1") {
my $request = Plack::Request->new( $env );
# my $session = $request->pnotes('wgSession');
unless (defined $session) {
# $session = WebGUI::Session->open($env->{dir_config('WebguiRoot'), $request->dir_config('WebguiConfig'), $request );
}
my $hasPrivs = ($session->var->get("userId") eq $privs[0] || $session->user->isInGroup($privs[1]) || $session->user->isInGroup($privs[2]));
$session->close();
if ($hasPrivs) {
return $self->SUPER::_handle_static($env); # serve statically
}
else {
return $self->return_403;
}
}
} else {
return $self->SUPER::_handle_static($env); # serve statically
}
}
1;