src/web_client.c

   1 #ifdef HAVE_CONFIG_H
   2 #include <config.h>
   3 #endif
   4 #include <unistd.h>
   5 #include <stdlib.h>
   6 #include <sys/types.h>
   7 #include <sys/socket.h>
   8 #include <netinet/in.h>
   9 #include <arpa/inet.h>
  10 #include <errno.h>
  11 #include <pthread.h>
  12 #include <sys/stat.h>
  13 #include <fcntl.h>
  14 #include <malloc.h>
  15 #include <pwd.h>
  16 #include <grp.h>
  17 #include <ctype.h>
  18 #include <poll.h>
  19
  20 // TCP_CORK
  21 #include <netinet/tcp.h>
  22
  23 #include "common.h"
  24 #include "log.h"
  25 #include "appconfig.h"
  26 #include "url.h"
  27 #include "web_buffer.h"
  28 #include "web_server.h"
  29 #include "global_statistics.h"
  30 #include "rrd.h"
  31 #include "rrd2json.h"
  32 #include "registry.h"
  33 #include "web_buffer_svg.h"
  34 #include "web_client.h"
  35
  36 #define INITIAL_WEB_DATA_LENGTH 16384
  37 #define WEB_REQUEST_LENGTH 16384
  38 #define TOO_BIG_REQUEST 16384
  39
  40 int web_client_timeout = DEFAULT_DISCONNECT_IDLE_WEB_CLIENTS_AFTER_SECONDS;
  41 int web_donotrack_comply = 0;
  42
  43 #ifdef NETDATA_WITH_ZLIB
  44 int web_enable_gzip = 1, web_gzip_level = 3, web_gzip_strategy = Z_DEFAULT_STRATEGY;
  45 #endif /* NETDATA_WITH_ZLIB */
  46
  47 extern int netdata_exit;
  48
  49 struct web_client *web_clients = NULL;
  50 unsigned long long web_clients_count = 0;
  51
  52 inline int web_client_crock_socket(struct web_client *w) {
  53 #ifdef TCP_CORK
  54         if(likely(!w->tcp_cork && w->ofd != -1)) {
  55                 w->tcp_cork = 1;
  56                 if(unlikely(setsockopt(w->ofd, IPPROTO_TCP, TCP_CORK, (char *) &w->tcp_cork, sizeof(int)) != 0)) {
  57                         error("%llu: failed to enable TCP_CORK on socket.", w->id);
  58                         w->tcp_cork = 0;
  59                         return -1;
  60                 }
  61         }
  62 #endif /* TCP_CORK */
  63
  64         return 0;
  65 }
  66
  67 inline int web_client_uncrock_socket(struct web_client *w) {
  68 #ifdef TCP_CORK
  69         if(likely(w->tcp_cork && w->ofd != -1)) {
  70                 w->tcp_cork = 0;
  71                 if(unlikely(setsockopt(w->ofd, IPPROTO_TCP, TCP_CORK, (char *) &w->tcp_cork, sizeof(int)) != 0)) {
  72                         error("%llu: failed to disable TCP_CORK on socket.", w->id);
  73                         w->tcp_cork = 1;
  74                         return -1;
  75                 }
  76         }
  77 #endif /* TCP_CORK */
  78
  79         return 0;
  80 }
  81
  82 struct web_client *web_client_create(int listener)
  83 {
  84         struct web_client *w;
  85
  86         w = calloc(1, sizeof(struct web_client));
  87         if(!w) {
  88                 error("Cannot allocate new web_client memory.");
  89                 return NULL;
  90         }
  91
  92         w->id = ++web_clients_count;
  93         w->mode = WEB_CLIENT_MODE_NORMAL;
  94
  95         {
  96                 struct sockaddr *sadr;
  97                 socklen_t addrlen;
  98
  99                 sadr = (struct sockaddr*) &w->clientaddr;
 100                 addrlen = sizeof(w->clientaddr);
 101
 102                 w->ifd = accept(listener, sadr, &addrlen);
 103                 if (w->ifd == -1) {
 104                         error("%llu: Cannot accept new incoming connection.", w->id);
 105                         free(w);
 106                         return NULL;
 107                 }
 108                 w->ofd = w->ifd;
 109
 110                 if(getnameinfo(sadr, addrlen, w->client_ip, NI_MAXHOST, w->client_port, NI_MAXSERV, NI_NUMERICHOST | NI_NUMERICSERV) != 0) {
 111                         error("Cannot getnameinfo() on received client connection.");
 112                         strncpyz(w->client_ip,   "UNKNOWN", NI_MAXHOST);
 113                         strncpyz(w->client_port, "UNKNOWN", NI_MAXSERV);
 114                 }
 115                 w->client_ip[NI_MAXHOST]   = '\0';
 116                 w->client_port[NI_MAXSERV] = '\0';
 117
 118                 switch(sadr->sa_family) {
 119                 case AF_INET:
 120                         debug(D_WEB_CLIENT_ACCESS, "%llu: New IPv4 web client from %s port %s on socket %d.", w->id, w->client_ip, w->client_port, w->ifd);
 121                         break;
 122
 123                 case AF_INET6:
 124                         if(strncmp(w->client_ip, "::ffff:", 7) == 0) {
 125                                 strcpy(w->client_ip, &w->client_ip[7]);
 126                                 debug(D_WEB_CLIENT_ACCESS, "%llu: New IPv4 web client from %s port %s on socket %d.", w->id, w->client_ip, w->client_port, w->ifd);
 127                         }
 128                         else
 129                                 debug(D_WEB_CLIENT_ACCESS, "%llu: New IPv6 web client from %s port %s on socket %d.", w->id, w->client_ip, w->client_port, w->ifd);
 130                         break;
 131
 132                 default:
 133                         debug(D_WEB_CLIENT_ACCESS, "%llu: New UNKNOWN web client from %s port %s on socket %d.", w->id, w->client_ip, w->client_port, w->ifd);
 134                         break;
 135                 }
 136
 137                 int flag = 1;
 138                 if(setsockopt(w->ofd, IPPROTO_TCP, TCP_NODELAY, (char *) &flag, sizeof(int)) != 0)
 139                         error("%llu: failed to enable TCP_NODELAY on socket.", w->id);
 140
 141                 flag = 1;
 142                 if(setsockopt(w->ifd, SOL_SOCKET, SO_KEEPALIVE, (char *) &flag, sizeof(int)) != 0)
 143                         error("%llu: Cannot set SO_KEEPALIVE on socket.", w->id);
 144
 145
 146         }
 147
 148         w->response.data = buffer_create(INITIAL_WEB_DATA_LENGTH);
 149         if(unlikely(!w->response.data)) {
 150                 // no need for error log - web_buffer_create already logged the error
 151                 close(w->ifd);
 152                 free(w);
 153                 return NULL;
 154         }
 155
 156         w->response.header = buffer_create(HTTP_RESPONSE_HEADER_SIZE);
 157         if(unlikely(!w->response.header)) {
 158                 // no need for error log - web_buffer_create already logged the error
 159                 buffer_free(w->response.data);
 160                 close(w->ifd);
 161                 free(w);
 162                 return NULL;
 163         }
 164
 165         w->response.header_output = buffer_create(HTTP_RESPONSE_HEADER_SIZE);
 166         if(unlikely(!w->response.header_output)) {
 167                 // no need for error log - web_buffer_create already logged the error
 168                 buffer_free(w->response.header);
 169                 buffer_free(w->response.data);
 170                 close(w->ifd);
 171                 free(w);
 172                 return NULL;
 173         }
 174
 175         w->origin[0] = '*';
 176         w->wait_receive = 1;
 177
 178         if(web_clients) web_clients->prev = w;
 179         w->next = web_clients;
 180         web_clients = w;
 181
 182         global_statistics.connected_clients++;
 183
 184         return(w);
 185 }
 186
 187 void web_client_reset(struct web_client *w) {
 188         web_client_uncrock_socket(w);
 189
 190         debug(D_WEB_CLIENT, "%llu: Reseting client.", w->id);
 191
 192         if(likely(w->last_url[0])) {
 193                 struct timeval tv;
 194                 gettimeofday(&tv, NULL);
 195
 196                 size_t size = (w->mode == WEB_CLIENT_MODE_FILECOPY)?w->response.rlen:w->response.data->len;
 197                 size_t sent = size;
 198 #ifdef NETDATA_WITH_ZLIB
 199                 if(likely(w->response.zoutput)) sent = (size_t)w->response.zstream.total_out;
 200 #endif
 201
 202                 // --------------------------------------------------------------------
 203                 // global statistics
 204
 205                 if(web_server_mode == WEB_SERVER_MODE_MULTI_THREADED)
 206                         global_statistics_lock();
 207
 208                 global_statistics.web_requests++;
 209                 global_statistics.web_usec += usecdiff(&tv, &w->tv_in);
 210                 global_statistics.bytes_received += w->stats_received_bytes;
 211                 global_statistics.bytes_sent += w->stats_sent_bytes;
 212                 global_statistics.content_size += size;
 213                 global_statistics.compressed_content_size += sent;
 214
 215                 if(web_server_mode == WEB_SERVER_MODE_MULTI_THREADED)
 216                         global_statistics_unlock();
 217
 218                 w->stats_received_bytes = 0;
 219                 w->stats_sent_bytes = 0;
 220
 221
 222                 // --------------------------------------------------------------------
 223                 // access log
 224
 225                 log_access("%llu: (sent/all = %zu/%zu bytes %0.0f%%, prep/sent/total = %0.2f/%0.2f/%0.2f ms) %s: %d '%s'",
 226                                    w->id,
 227                                    sent, size, -((size > 0) ? ((float) (size - sent) / (float) size * 100.0) : 0.0),
 228                                    (float) usecdiff(&w->tv_ready, &w->tv_in) / 1000.0,
 229                                    (float) usecdiff(&tv, &w->tv_ready) / 1000.0,
 230                                    (float) usecdiff(&tv, &w->tv_in) / 1000.0,
 231                                    (w->mode == WEB_CLIENT_MODE_FILECOPY) ? "filecopy" : ((w->mode == WEB_CLIENT_MODE_OPTIONS)
 232                                                                                                                                                  ? "options" : "data"),
 233                                    w->response.code,
 234                                    w->last_url
 235                 );
 236         }
 237
 238         if(unlikely(w->mode == WEB_CLIENT_MODE_FILECOPY)) {
 239                 if(w->ifd != w->ofd) {
 240                         debug(D_WEB_CLIENT, "%llu: Closing filecopy input file descriptor %d.", w->id, w->ifd);
 241                         if(w->ifd != -1) close(w->ifd);
 242                         w->ifd = w->ofd;
 243                 }
 244         }
 245
 246         w->last_url[0] = '\0';
 247         w->cookie1[0] = '\0';
 248         w->cookie2[0] = '\0';
 249         w->origin[0] = '*';
 250         w->origin[1] = '\0';
 251
 252         w->mode = WEB_CLIENT_MODE_NORMAL;
 253
 254         w->tcp_cork = 0;
 255         w->donottrack = 0;
 256         w->tracking_required = 0;
 257         w->keepalive = 0;
 258         w->decoded_url[0] = '\0';
 259
 260         buffer_reset(w->response.header_output);
 261         buffer_reset(w->response.header);
 262         buffer_reset(w->response.data);
 263         w->response.rlen = 0;
 264         w->response.sent = 0;
 265         w->response.code = 0;
 266
 267         w->wait_receive = 1;
 268         w->wait_send = 0;
 269
 270         w->response.zoutput = 0;
 271
 272         // if we had enabled compression, release it
 273 #ifdef NETDATA_WITH_ZLIB
 274         if(w->response.zinitialized) {
 275                 debug(D_DEFLATE, "%llu: Freeing compression resources.", w->id);
 276                 deflateEnd(&w->response.zstream);
 277                 w->response.zsent = 0;
 278                 w->response.zhave = 0;
 279                 w->response.zstream.avail_in = 0;
 280                 w->response.zstream.avail_out = 0;
 281                 w->response.zstream.total_in = 0;
 282                 w->response.zstream.total_out = 0;
 283                 w->response.zinitialized = 0;
 284         }
 285 #endif // NETDATA_WITH_ZLIB
 286 }
 287
 288 struct web_client *web_client_free(struct web_client *w) {
 289         web_client_reset(w);
 290
 291         struct web_client *n = w->next;
 292         if(w == web_clients) web_clients = n;
 293
 294         debug(D_WEB_CLIENT_ACCESS, "%llu: Closing web client from %s port %s.", w->id, w->client_ip, w->client_port);
 295
 296         if(w->prev)     w->prev->next = w->next;
 297         if(w->next) w->next->prev = w->prev;
 298         if(w->response.header_output) buffer_free(w->response.header_output);
 299         if(w->response.header) buffer_free(w->response.header);
 300         if(w->response.data) buffer_free(w->response.data);
 301         if(w->ifd != -1) close(w->ifd);
 302         if(w->ofd != -1 && w->ofd != w->ifd) close(w->ofd);
 303         free(w);
 304
 305         global_statistics.connected_clients--;
 306
 307         return(n);
 308 }
 309
 310 uid_t web_files_uid(void) {
 311         static char *web_owner = NULL;
 312         static uid_t owner_uid = 0;
 313
 314         if(unlikely(!web_owner)) {
 315                 web_owner = config_get("global", "web files owner", config_get("global", "run as user", ""));
 316                 if(!web_owner || !*web_owner)
 317                         owner_uid = geteuid();
 318                 else {
 319                         // getpwnam() is not thread safe,
 320                         // but we have called this function once
 321                         // while single threaded
 322                         struct passwd *pw = getpwnam(web_owner);
 323                         if(!pw) {
 324                                 error("User '%s' is not present. Ignoring option.", web_owner);
 325                                 owner_uid = geteuid();
 326                         }
 327                         else {
 328                                 debug(D_WEB_CLIENT, "Web files owner set to %s.", web_owner);
 329                                 owner_uid = pw->pw_uid;
 330                         }
 331                 }
 332         }
 333
 334         return(owner_uid);
 335 }
 336
 337 gid_t web_files_gid(void) {
 338         static char *web_group = NULL;
 339         static gid_t owner_gid = 0;
 340
 341         if(unlikely(!web_group)) {
 342                 web_group = config_get("global", "web files group", config_get("global", "web files owner", ""));
 343                 if(!web_group || !*web_group)
 344                         owner_gid = getegid();
 345                 else {
 346                         // getgrnam() is not thread safe,
 347                         // but we have called this function once
 348                         // while single threaded
 349                         struct group *gr = getgrnam(web_group);
 350                         if(!gr) {
 351                                 error("Group '%s' is not present. Ignoring option.", web_group);
 352                                 owner_gid = getegid();
 353                         }
 354                         else {
 355                                 debug(D_WEB_CLIENT, "Web files group set to %s.", web_group);
 356                                 owner_gid = gr->gr_gid;
 357                         }
 358                 }
 359         }
 360
 361         return(owner_gid);
 362 }
 363
 364 int mysendfile(struct web_client *w, char *filename)
 365 {
 366         static char *web_dir = NULL;
 367
 368         // initialize our static data
 369         if(unlikely(!web_dir)) web_dir = config_get("global", "web files directory", WEB_DIR);
 370
 371         debug(D_WEB_CLIENT, "%llu: Looking for file '%s/%s'", w->id, web_dir, filename);
 372
 373         // skip leading slashes
 374         while (*filename == '/') filename++;
 375
 376         // if the filename contain known paths, skip them
 377         if(strncmp(filename, WEB_PATH_FILE "/", strlen(WEB_PATH_FILE) + 1) == 0) filename = &filename[strlen(WEB_PATH_FILE) + 1];
 378
 379         char *s;
 380         for(s = filename; *s ;s++) {
 381                 if( !isalnum(*s) && *s != '/' && *s != '.' && *s != '-' && *s != '_') {
 382                         debug(D_WEB_CLIENT_ACCESS, "%llu: File '%s' is not acceptable.", w->id, filename);
 383                         buffer_sprintf(w->response.data, "File '%s' cannot be served. Filename contains invalid character '%c'", filename, *s);
 384                         return 400;
 385                 }
 386         }
 387
 388         // if the filename contains a .. refuse to serve it
 389         if(strstr(filename, "..") != 0) {
 390                 debug(D_WEB_CLIENT_ACCESS, "%llu: File '%s' is not acceptable.", w->id, filename);
 391                 buffer_sprintf(w->response.data, "File '%s' cannot be served. Relative filenames with '..' in them are not supported.", filename);
 392                 return 400;
 393         }
 394
 395         // access the file
 396         char webfilename[FILENAME_MAX + 1];
 397         snprintfz(webfilename, FILENAME_MAX, "%s/%s", web_dir, filename);
 398
 399         // check if the file exists
 400         struct stat stat;
 401         if(lstat(webfilename, &stat) != 0) {
 402                 debug(D_WEB_CLIENT_ACCESS, "%llu: File '%s' is not found.", w->id, webfilename);
 403                 buffer_sprintf(w->response.data, "File '%s' does not exist, or is not accessible.", webfilename);
 404                 return 404;
 405         }
 406
 407         // check if the file is owned by expected user
 408         if(stat.st_uid != web_files_uid()) {
 409                 error("%llu: File '%s' is owned by user %d (expected user %d). Access Denied.", w->id, webfilename, stat.st_uid, web_files_uid());
 410                 buffer_sprintf(w->response.data, "Access to file '%s' is not permitted.", webfilename);
 411                 return 403;
 412         }
 413
 414         // check if the file is owned by expected group
 415         if(stat.st_gid != web_files_gid()) {
 416                 error("%llu: File '%s' is owned by group %d (expected group %d). Access Denied.", w->id, webfilename, stat.st_gid, web_files_gid());
 417                 buffer_sprintf(w->response.data, "Access to file '%s' is not permitted.", webfilename);
 418                 return 403;
 419         }
 420
 421         if((stat.st_mode & S_IFMT) == S_IFDIR) {
 422                 snprintfz(webfilename, FILENAME_MAX, "%s/index.html", filename);
 423                 return mysendfile(w, webfilename);
 424         }
 425
 426         if((stat.st_mode & S_IFMT) != S_IFREG) {
 427                 error("%llu: File '%s' is not a regular file. Access Denied.", w->id, webfilename);
 428                 buffer_sprintf(w->response.data, "Access to file '%s' is not permitted.", webfilename);
 429                 return 403;
 430         }
 431
 432         // open the file
 433         w->ifd = open(webfilename, O_NONBLOCK, O_RDONLY);
 434         if(w->ifd == -1) {
 435                 w->ifd = w->ofd;
 436
 437                 if(errno == EBUSY || errno == EAGAIN) {
 438                         error("%llu: File '%s' is busy, sending 307 Moved Temporarily to force retry.", w->id, webfilename);
 439                         buffer_sprintf(w->response.header, "Location: /" WEB_PATH_FILE "/%s\r\n", filename);
 440                         buffer_sprintf(w->response.data, "The file '%s' is currently busy. Please try again later.", webfilename);
 441                         return 307;
 442                 }
 443                 else {
 444                         error("%llu: Cannot open file '%s'.", w->id, webfilename);
 445                         buffer_sprintf(w->response.data, "Cannot open file '%s'.", webfilename);
 446                         return 404;
 447                 }
 448         }
 449
 450         // pick a Content-Type for the file
 451                  if(strstr(filename, ".html") != NULL)  w->response.data->contenttype = CT_TEXT_HTML;
 452         else if(strstr(filename, ".js")   != NULL)      w->response.data->contenttype = CT_APPLICATION_X_JAVASCRIPT;
 453         else if(strstr(filename, ".css")  != NULL)      w->response.data->contenttype = CT_TEXT_CSS;
 454         else if(strstr(filename, ".xml")  != NULL)      w->response.data->contenttype = CT_TEXT_XML;
 455         else if(strstr(filename, ".xsl")  != NULL)      w->response.data->contenttype = CT_TEXT_XSL;
 456         else if(strstr(filename, ".txt")  != NULL)  w->response.data->contenttype = CT_TEXT_PLAIN;
 457         else if(strstr(filename, ".svg")  != NULL)  w->response.data->contenttype = CT_IMAGE_SVG_XML;
 458         else if(strstr(filename, ".ttf")  != NULL)  w->response.data->contenttype = CT_APPLICATION_X_FONT_TRUETYPE;
 459         else if(strstr(filename, ".otf")  != NULL)  w->response.data->contenttype = CT_APPLICATION_X_FONT_OPENTYPE;
 460         else if(strstr(filename, ".woff2")!= NULL)  w->response.data->contenttype = CT_APPLICATION_FONT_WOFF2;
 461         else if(strstr(filename, ".woff") != NULL)  w->response.data->contenttype = CT_APPLICATION_FONT_WOFF;
 462         else if(strstr(filename, ".eot")  != NULL)  w->response.data->contenttype = CT_APPLICATION_VND_MS_FONTOBJ;
 463         else if(strstr(filename, ".png")  != NULL)  w->response.data->contenttype = CT_IMAGE_PNG;
 464         else if(strstr(filename, ".jpg")  != NULL)  w->response.data->contenttype = CT_IMAGE_JPG;
 465         else if(strstr(filename, ".jpeg") != NULL)  w->response.data->contenttype = CT_IMAGE_JPG;
 466         else if(strstr(filename, ".gif")  != NULL)  w->response.data->contenttype = CT_IMAGE_GIF;
 467         else if(strstr(filename, ".bmp")  != NULL)  w->response.data->contenttype = CT_IMAGE_BMP;
 468         else if(strstr(filename, ".ico")  != NULL)  w->response.data->contenttype = CT_IMAGE_XICON;
 469         else if(strstr(filename, ".icns") != NULL)  w->response.data->contenttype = CT_IMAGE_ICNS;
 470         else w->response.data->contenttype = CT_APPLICATION_OCTET_STREAM;
 471
 472         debug(D_WEB_CLIENT_ACCESS, "%llu: Sending file '%s' (%ld bytes, ifd %d, ofd %d).", w->id, webfilename, stat.st_size, w->ifd, w->ofd);
 473
 474         w->mode = WEB_CLIENT_MODE_FILECOPY;
 475         w->wait_receive = 1;
 476         w->wait_send = 0;
 477         buffer_flush(w->response.data);
 478         w->response.rlen = stat.st_size;
 479         w->response.data->date = stat.st_mtim.tv_sec;
 480
 481         return 200;
 482 }
 483
 484
 485 #ifdef NETDATA_WITH_ZLIB
 486 void web_client_enable_deflate(struct web_client *w, int gzip) {
 487         if(unlikely(w->response.zinitialized)) {
 488                 error("%llu: Compression has already be initialized for this client.", w->id);
 489                 return;
 490         }
 491
 492         if(unlikely(w->response.sent)) {
 493                 error("%llu: Cannot enable compression in the middle of a conversation.", w->id);
 494                 return;
 495         }
 496
 497         w->response.zstream.zalloc = Z_NULL;
 498         w->response.zstream.zfree = Z_NULL;
 499         w->response.zstream.opaque = Z_NULL;
 500
 501         w->response.zstream.next_in = (Bytef *)w->response.data->buffer;
 502         w->response.zstream.avail_in = 0;
 503         w->response.zstream.total_in = 0;
 504
 505         w->response.zstream.next_out = w->response.zbuffer;
 506         w->response.zstream.avail_out = 0;
 507         w->response.zstream.total_out = 0;
 508
 509         w->response.zstream.zalloc = Z_NULL;
 510         w->response.zstream.zfree = Z_NULL;
 511         w->response.zstream.opaque = Z_NULL;
 512
 513 //      if(deflateInit(&w->response.zstream, Z_DEFAULT_COMPRESSION) != Z_OK) {
 514 //              error("%llu: Failed to initialize zlib. Proceeding without compression.", w->id);
 515 //              return;
 516 //      }
 517
 518         // Select GZIP compression: windowbits = 15 + 16 = 31
 519         if(deflateInit2(&w->response.zstream, web_gzip_level, Z_DEFLATED, 15 + ((gzip)?16:0), 8, web_gzip_strategy) != Z_OK) {
 520                 error("%llu: Failed to initialize zlib. Proceeding without compression.", w->id);
 521                 return;
 522         }
 523
 524         w->response.zsent = 0;
 525         w->response.zoutput = 1;
 526         w->response.zinitialized = 1;
 527
 528         debug(D_DEFLATE, "%llu: Initialized compression.", w->id);
 529 }
 530 #endif // NETDATA_WITH_ZLIB
 531
 532 uint32_t web_client_api_request_v1_data_options(char *o)
 533 {
 534         uint32_t ret = 0x00000000;
 535         char *tok;
 536
 537         while(o && *o && (tok = mystrsep(&o, ", |"))) {
 538                 if(!*tok) continue;
 539
 540                 if(!strcmp(tok, "nonzero"))
 541                         ret |= RRDR_OPTION_NONZERO;
 542                 else if(!strcmp(tok, "flip") || !strcmp(tok, "reversed") || !strcmp(tok, "reverse"))
 543                         ret |= RRDR_OPTION_REVERSED;
 544                 else if(!strcmp(tok, "jsonwrap"))
 545                         ret |= RRDR_OPTION_JSON_WRAP;
 546                 else if(!strcmp(tok, "min2max"))
 547                         ret |= RRDR_OPTION_MIN2MAX;
 548                 else if(!strcmp(tok, "ms") || !strcmp(tok, "milliseconds"))
 549                         ret |= RRDR_OPTION_MILLISECONDS;
 550                 else if(!strcmp(tok, "abs") || !strcmp(tok, "absolute") || !strcmp(tok, "absolute_sum") || !strcmp(tok, "absolute-sum"))
 551                         ret |= RRDR_OPTION_ABSOLUTE;
 552                 else if(!strcmp(tok, "seconds"))
 553                         ret |= RRDR_OPTION_SECONDS;
 554                 else if(!strcmp(tok, "null2zero"))
 555                         ret |= RRDR_OPTION_NULL2ZERO;
 556                 else if(!strcmp(tok, "objectrows"))
 557                         ret |= RRDR_OPTION_OBJECTSROWS;
 558                 else if(!strcmp(tok, "google_json"))
 559                         ret |= RRDR_OPTION_GOOGLE_JSON;
 560                 else if(!strcmp(tok, "percentage"))
 561                         ret |= RRDR_OPTION_PERCENTAGE;
 562                 else if(!strcmp(tok, "unaligned"))
 563                         ret |= RRDR_OPTION_NOT_ALIGNED;
 564         }
 565
 566         return ret;
 567 }
 568
 569 uint32_t web_client_api_request_v1_data_format(char *name)
 570 {
 571         if(!strcmp(name, DATASOURCE_FORMAT_DATATABLE_JSON)) // datatable
 572                 return DATASOURCE_DATATABLE_JSON;
 573
 574         else if(!strcmp(name, DATASOURCE_FORMAT_DATATABLE_JSONP)) // datasource
 575                 return DATASOURCE_DATATABLE_JSONP;
 576
 577         else if(!strcmp(name, DATASOURCE_FORMAT_JSON)) // json
 578                 return DATASOURCE_JSON;
 579
 580         else if(!strcmp(name, DATASOURCE_FORMAT_JSONP)) // jsonp
 581                 return DATASOURCE_JSONP;
 582
 583         else if(!strcmp(name, DATASOURCE_FORMAT_SSV)) // ssv
 584                 return DATASOURCE_SSV;
 585
 586         else if(!strcmp(name, DATASOURCE_FORMAT_CSV)) // csv
 587                 return DATASOURCE_CSV;
 588
 589         else if(!strcmp(name, DATASOURCE_FORMAT_TSV) || !strcmp(name, "tsv-excel")) // tsv
 590                 return DATASOURCE_TSV;
 591
 592         else if(!strcmp(name, DATASOURCE_FORMAT_HTML)) // html
 593                 return DATASOURCE_HTML;
 594
 595         else if(!strcmp(name, DATASOURCE_FORMAT_JS_ARRAY)) // array
 596                 return DATASOURCE_JS_ARRAY;
 597
 598         else if(!strcmp(name, DATASOURCE_FORMAT_SSV_COMMA)) // ssvcomma
 599                 return DATASOURCE_SSV_COMMA;
 600
 601         else if(!strcmp(name, DATASOURCE_FORMAT_CSV_JSON_ARRAY)) // csvjsonarray
 602                 return DATASOURCE_CSV_JSON_ARRAY;
 603
 604         return DATASOURCE_JSON;
 605 }
 606
 607 uint32_t web_client_api_request_v1_data_google_format(char *name)
 608 {
 609         if(!strcmp(name, "json"))
 610                 return DATASOURCE_DATATABLE_JSONP;
 611
 612         else if(!strcmp(name, "html"))
 613                 return DATASOURCE_HTML;
 614
 615         else if(!strcmp(name, "csv"))
 616                 return DATASOURCE_CSV;
 617
 618         else if(!strcmp(name, "tsv-excel"))
 619                 return DATASOURCE_TSV;
 620
 621         return DATASOURCE_JSON;
 622 }
 623
 624 int web_client_api_request_v1_data_group(char *name)
 625 {
 626         if(!strcmp(name, "max"))
 627                 return GROUP_MAX;
 628
 629         else if(!strcmp(name, "average"))
 630                 return GROUP_AVERAGE;
 631
 632         else if(!strcmp(name, "sum"))
 633                 return GROUP_SUM;
 634
 635         else if(!strcmp(name, "incremental-sum"))
 636                 return GROUP_INCREMENTAL_SUM;
 637
 638         return GROUP_AVERAGE;
 639 }
 640
 641 int web_client_api_request_v1_charts(struct web_client *w, char *url)
 642 {
 643         if(url) { ; }
 644
 645         buffer_flush(w->response.data);
 646         w->response.data->contenttype = CT_APPLICATION_JSON;
 647         rrd_stats_api_v1_charts(w->response.data);
 648         return 200;
 649 }
 650
 651 int web_client_api_request_v1_chart(struct web_client *w, char *url)
 652 {
 653         int ret = 400;
 654         char *chart = NULL;
 655
 656         buffer_flush(w->response.data);
 657
 658         while(url) {
 659                 char *value = mystrsep(&url, "?&[]");
 660                 if(!value || !*value) continue;
 661
 662                 char *name = mystrsep(&value, "=");
 663                 if(!name || !*name) continue;
 664                 if(!value || !*value) continue;
 665
 666                 // name and value are now the parameters
 667                 // they are not null and not empty
 668
 669                 if(!strcmp(name, "chart")) chart = value;
 670                 //else {
 671                 ///     buffer_sprintf(w->response.data, "Unknown parameter '%s' in request.", name);
 672                 //      goto cleanup;
 673                 //}
 674         }
 675
 676         if(!chart || !*chart) {
 677                 buffer_sprintf(w->response.data, "No chart id is given at the request.");
 678                 goto cleanup;
 679         }
 680
 681         RRDSET *st = rrdset_find(chart);
 682         if(!st) st = rrdset_find_byname(chart);
 683         if(!st) {
 684                 buffer_sprintf(w->response.data, "Chart '%s' is not found.", chart);
 685                 ret = 404;
 686                 goto cleanup;
 687         }
 688
 689         w->response.data->contenttype = CT_APPLICATION_JSON;
 690         rrd_stats_api_v1_chart(st, w->response.data);
 691         return 200;
 692
 693 cleanup:
 694         return ret;
 695 }
 696
 697 int web_client_api_v1_badge(struct web_client *w, char *url) {
 698         // chart
 699         // dimensions
 700         // before
 701         // after
 702         // points
 703
 704         int ret = 400;
 705         buffer_flush(w->response.data);
 706
 707         BUFFER *dimensions = NULL;
 708
 709         const char *chart = NULL
 710                         , *before_str = NULL
 711                         , *after_str = NULL
 712                         , *points_str = NULL
 713                         , *multiply_str = NULL
 714                         , *divide_str = NULL
 715                         , *label = NULL
 716                         , *units = NULL
 717                         , *label_color = NULL
 718                         , *value_color = NULL
 719                         , *refresh_str = NULL
 720                         , *precision_str = NULL;
 721
 722         int group = GROUP_AVERAGE;
 723         uint32_t options = 0x00000000;
 724
 725         while(url) {
 726                 char *value = mystrsep(&url, "/?&[]");
 727                 if(!value || !*value) continue;
 728
 729                 char *name = mystrsep(&value, "=");
 730                 if(!name || !*name) continue;
 731                 if(!value || !*value) continue;
 732
 733                 debug(D_WEB_CLIENT, "%llu: API v1 badge.svg query param '%s' with value '%s'", w->id, name, value);
 734
 735                 // name and value are now the parameters
 736                 // they are not null and not empty
 737
 738                 if(!strcmp(name, "chart")) chart = value;
 739                 else if(!strcmp(name, "dimension") || !strcmp(name, "dim") || !strcmp(name, "dimensions") || !strcmp(name, "dims")) {
 740                         if(!dimensions)
 741                                 dimensions = buffer_create(strlen(value));
 742
 743                         if(dimensions) {
 744                                 buffer_strcat(dimensions, "|");
 745                                 buffer_strcat(dimensions, value);
 746                         }
 747                 }
 748                 else if(!strcmp(name, "after")) after_str = value;
 749                 else if(!strcmp(name, "before")) before_str = value;
 750                 else if(!strcmp(name, "points")) points_str = value;
 751                 else if(!strcmp(name, "group")) {
 752                         group = web_client_api_request_v1_data_group(value);
 753                 }
 754                 else if(!strcmp(name, "options")) {
 755                         options |= web_client_api_request_v1_data_options(value);
 756                 }
 757                 else if(!strcmp(name, "label")) label = value;
 758                 else if(!strcmp(name, "units")) units = value;
 759                 else if(!strcmp(name, "label_color")) label_color = value;
 760                 else if(!strcmp(name, "value_color")) value_color = value;
 761                 else if(!strcmp(name, "multiply")) multiply_str = value;
 762                 else if(!strcmp(name, "divide")) divide_str = value;
 763                 else if(!strcmp(name, "refresh")) refresh_str = value;
 764                 else if(!strcmp(name, "precision")) precision_str = value;
 765         }
 766
 767         if(!chart || !*chart) {
 768                 buffer_sprintf(w->response.data, "No chart id is given at the request.");
 769                 goto cleanup;
 770         }
 771
 772         RRDSET *st = rrdset_find(chart);
 773         if(!st) st = rrdset_find_byname(chart);
 774         if(!st) {
 775                 buffer_svg(w->response.data, "chart not found", 0, "", NULL, NULL, 1, -1);
 776                 ret = 200;
 777                 goto cleanup;
 778         }
 779
 780         long long multiply  = (multiply_str  && *multiply_str )?atol(multiply_str):1;
 781         long long divide    = (divide_str    && *divide_str   )?atol(divide_str):1;
 782         long long before    = (before_str    && *before_str   )?atol(before_str):0;
 783         long long after     = (after_str     && *after_str    )?atol(after_str):-st->update_every;
 784         int       points    = (points_str    && *points_str   )?atoi(points_str):1;
 785         int       precision = (precision_str && *precision_str)?atoi(precision_str):-1;
 786
 787         int refresh = 0;
 788         if(refresh_str && *refresh_str) {
 789                 if(!strcmp(refresh_str, "auto")) {
 790                         if(options & RRDR_OPTION_NOT_ALIGNED)
 791                                 refresh = st->update_every;
 792                         else {
 793                                 refresh = (before - after);
 794                                 if(refresh < 0) refresh = -refresh;
 795                         }
 796                 }
 797                 else {
 798                         refresh = atoi(refresh_str);
 799                         if(refresh < 0) refresh = -refresh;
 800                 }
 801         }
 802
 803         if(!label) {
 804                 if(dimensions) {
 805                         const char *dim = buffer_tostring(dimensions);
 806                         if(*dim == '|') dim++;
 807                         label = dim;
 808                 }
 809                 else
 810                         label = st->name;
 811         }
 812         if(!units) {
 813                 if(options & RRDR_OPTION_PERCENTAGE)
 814                         units="%";
 815                 else
 816                         units = st->units;
 817         }
 818
 819         debug(D_WEB_CLIENT, "%llu: API command 'badge.svg' for chart '%s', dimensions '%s', after '%lld', before '%lld', points '%d', group '%u', options '0x%08x'"
 820                         , w->id
 821                         , chart
 822                         , (dimensions)?buffer_tostring(dimensions):""
 823                         , after
 824                         , before
 825                         , points
 826                         , group
 827                         , options
 828                         );
 829
 830         time_t latest_timestamp = 0;
 831         int value_is_null = 1;
 832         calculated_number n = 0;
 833         ret = 500;
 834
 835         // if the collected value is too old, don't calculate its value
 836         if(rrdset_last_entry_t(st) >= (time(NULL) - (st->update_every * st->gap_when_lost_iterations_above)))
 837                 ret = rrd2value(st, w->response.data, &n, dimensions, points, after, before, group, options, &latest_timestamp, &value_is_null);
 838
 839         // if the value cannot be calculated, show empty badge
 840         if(ret != 200) {
 841                 value_is_null = 1;
 842                 n = 0;
 843                 ret = 200;
 844         }
 845         else if(refresh > 0)
 846                 buffer_sprintf(w->response.header, "Refresh: %d\r\n", refresh);
 847
 848         // render the badge
 849         buffer_svg(w->response.data, label, n * multiply / divide, units, label_color, value_color, value_is_null, precision);
 850
 851 cleanup:
 852         if(dimensions)
 853                 buffer_free(dimensions);
 854         return ret;
 855 }
 856
 857 // returns the HTTP code
 858 int web_client_api_request_v1_data(struct web_client *w, char *url)
 859 {
 860         debug(D_WEB_CLIENT, "%llu: API v1 data with URL '%s'", w->id, url);
 861
 862         int ret = 400;
 863         BUFFER *dimensions = NULL;
 864
 865         buffer_flush(w->response.data);
 866
 867         char    *google_version = "0.6",
 868                         *google_reqId = "0",
 869                         *google_sig = "0",
 870                         *google_out = "json",
 871                         *responseHandler = NULL,
 872                         *outFileName = NULL;
 873
 874         time_t last_timestamp_in_data = 0, google_timestamp = 0;
 875
 876         char *chart = NULL
 877                         , *before_str = NULL
 878                         , *after_str = NULL
 879                         , *points_str = NULL;
 880
 881         int group = GROUP_AVERAGE;
 882         uint32_t format = DATASOURCE_JSON;
 883         uint32_t options = 0x00000000;
 884
 885         while(url) {
 886                 char *value = mystrsep(&url, "?&[]");
 887                 if(!value || !*value) continue;
 888
 889                 char *name = mystrsep(&value, "=");
 890                 if(!name || !*name) continue;
 891                 if(!value || !*value) continue;
 892
 893                 debug(D_WEB_CLIENT, "%llu: API v1 data query param '%s' with value '%s'", w->id, name, value);
 894
 895                 // name and value are now the parameters
 896                 // they are not null and not empty
 897
 898                 if(!strcmp(name, "chart")) chart = value;
 899                 else if(!strcmp(name, "dimension") || !strcmp(name, "dim") || !strcmp(name, "dimensions") || !strcmp(name, "dims")) {
 900                         if(!dimensions) dimensions = buffer_create(strlen(value));
 901                         if(dimensions) {
 902                                 buffer_strcat(dimensions, "|");
 903                                 buffer_strcat(dimensions, value);
 904                         }
 905                 }
 906                 else if(!strcmp(name, "after")) after_str = value;
 907                 else if(!strcmp(name, "before")) before_str = value;
 908                 else if(!strcmp(name, "points")) points_str = value;
 909                 else if(!strcmp(name, "group")) {
 910                         group = web_client_api_request_v1_data_group(value);
 911                 }
 912                 else if(!strcmp(name, "format")) {
 913                         format = web_client_api_request_v1_data_format(value);
 914                 }
 915                 else if(!strcmp(name, "options")) {
 916                         options |= web_client_api_request_v1_data_options(value);
 917                 }
 918                 else if(!strcmp(name, "callback")) {
 919                         responseHandler = value;
 920                 }
 921                 else if(!strcmp(name, "filename")) {
 922                         outFileName = value;
 923                 }
 924                 else if(!strcmp(name, "tqx")) {
 925                         // parse Google Visualization API options
 926                         // https://developers.google.com/chart/interactive/docs/dev/implementing_data_source
 927                         char *tqx_name, *tqx_value;
 928
 929                         while(value) {
 930                                 tqx_value = mystrsep(&value, ";");
 931                                 if(!tqx_value || !*tqx_value) continue;
 932
 933                                 tqx_name = mystrsep(&tqx_value, ":");
 934                                 if(!tqx_name || !*tqx_name) continue;
 935                                 if(!tqx_value || !*tqx_value) continue;
 936
 937                                 if(!strcmp(tqx_name, "version"))
 938                                         google_version = tqx_value;
 939                                 else if(!strcmp(tqx_name, "reqId"))
 940                                         google_reqId = tqx_value;
 941                                 else if(!strcmp(tqx_name, "sig")) {
 942                                         google_sig = tqx_value;
 943                                         google_timestamp = strtoul(google_sig, NULL, 0);
 944                                 }
 945                                 else if(!strcmp(tqx_name, "out")) {
 946                                         google_out = tqx_value;
 947                                         format = web_client_api_request_v1_data_google_format(google_out);
 948                                 }
 949                                 else if(!strcmp(tqx_name, "responseHandler"))
 950                                         responseHandler = tqx_value;
 951                                 else if(!strcmp(tqx_name, "outFileName"))
 952                                         outFileName = tqx_value;
 953                         }
 954                 }
 955         }
 956
 957         if(!chart || !*chart) {
 958                 buffer_sprintf(w->response.data, "No chart id is given at the request.");
 959                 goto cleanup;
 960         }
 961
 962         RRDSET *st = rrdset_find(chart);
 963         if(!st) st = rrdset_find_byname(chart);
 964         if(!st) {
 965                 buffer_sprintf(w->response.data, "Chart '%s' is not found.", chart);
 966                 ret = 404;
 967                 goto cleanup;
 968         }
 969
 970         long long before = (before_str && *before_str)?atol(before_str):0;
 971         long long after  = (after_str  && *after_str) ?atol(after_str):0;
 972         int       points = (points_str && *points_str)?atoi(points_str):0;
 973
 974         debug(D_WEB_CLIENT, "%llu: API command 'data' for chart '%s', dimensions '%s', after '%lld', before '%lld', points '%d', group '%u', format '%u', options '0x%08x'"
 975                         , w->id
 976                         , chart
 977                         , (dimensions)?buffer_tostring(dimensions):""
 978                         , after
 979                         , before
 980                         , points
 981                         , group
 982                         , format
 983                         , options
 984                         );
 985
 986         if(outFileName && *outFileName) {
 987                 buffer_sprintf(w->response.header, "Content-Disposition: attachment; filename=\"%s\"\r\n", outFileName);
 988                 debug(D_WEB_CLIENT, "%llu: generating outfilename header: '%s'", w->id, outFileName);
 989         }
 990
 991         if(format == DATASOURCE_DATATABLE_JSONP) {
 992                 if(responseHandler == NULL)
 993                         responseHandler = "google.visualization.Query.setResponse";
 994
 995                 debug(D_WEB_CLIENT_ACCESS, "%llu: GOOGLE JSON/JSONP: version = '%s', reqId = '%s', sig = '%s', out = '%s', responseHandler = '%s', outFileName = '%s'",
 996                                 w->id, google_version, google_reqId, google_sig, google_out, responseHandler, outFileName
 997                         );
 998
 999                 buffer_sprintf(w->response.data,
1000                         "%s({version:'%s',reqId:'%s',status:'ok',sig:'%lu',table:",
1001                         responseHandler, google_version, google_reqId, st->last_updated.tv_sec);
1002         }
1003         else if(format == DATASOURCE_JSONP) {
1004                 if(responseHandler == NULL)
1005                         responseHandler = "callback";
1006
1007                 buffer_strcat(w->response.data, responseHandler);
1008                 buffer_strcat(w->response.data, "(");
1009         }
1010
1011         ret = rrd2format(st, w->response.data, dimensions, format, points, after, before, group, options, &last_timestamp_in_data);
1012
1013         if(format == DATASOURCE_DATATABLE_JSONP) {
1014                 if(google_timestamp < last_timestamp_in_data)
1015                         buffer_strcat(w->response.data, "});");
1016
1017                 else {
1018                         // the client already has the latest data
1019                         buffer_flush(w->response.data);
1020                         buffer_sprintf(w->response.data,
1021                                 "%s({version:'%s',reqId:'%s',status:'error',errors:[{reason:'not_modified',message:'Data not modified'}]});",
1022                                 responseHandler, google_version, google_reqId);
1023                 }
1024         }
1025         else if(format == DATASOURCE_JSONP)
1026                 buffer_strcat(w->response.data, ");");
1027
1028 cleanup:
1029         if(dimensions) buffer_free(dimensions);
1030         return ret;
1031 }
1032
1033 int web_client_api_request_v1_registry(struct web_client *w, char *url)
1034 {
1035         static uint32_t hash_action = 0, hash_access = 0, hash_hello = 0, hash_delete = 0, hash_search = 0,
1036                         hash_switch = 0, hash_machine = 0, hash_url = 0, hash_name = 0, hash_delete_url = 0, hash_for = 0,
1037                         hash_to = 0 /*, hash_redirects = 0 */;
1038
1039         if(unlikely(!hash_action)) {
1040                 hash_action = simple_hash("action");
1041                 hash_access = simple_hash("access");
1042                 hash_hello = simple_hash("hello");
1043                 hash_delete = simple_hash("delete");
1044                 hash_search = simple_hash("search");
1045                 hash_switch = simple_hash("switch");
1046                 hash_machine = simple_hash("machine");
1047                 hash_url = simple_hash("url");
1048                 hash_name = simple_hash("name");
1049                 hash_delete_url = simple_hash("delete_url");
1050                 hash_for = simple_hash("for");
1051                 hash_to = simple_hash("to");
1052 /*
1053                 hash_redirects = simple_hash("redirects");
1054 */
1055         }
1056
1057         char person_guid[36 + 1] = "";
1058
1059         debug(D_WEB_CLIENT, "%llu: API v1 registry with URL '%s'", w->id, url);
1060
1061         // FIXME
1062         // The browser may send multiple cookies with our id
1063
1064         char *cookie = strstr(w->response.data->buffer, NETDATA_REGISTRY_COOKIE_NAME "=");
1065         if(cookie)
1066                 strncpyz(person_guid, &cookie[sizeof(NETDATA_REGISTRY_COOKIE_NAME)], 36);
1067
1068         char action = '\0';
1069         char *machine_guid = NULL,
1070                         *machine_url = NULL,
1071                         *url_name = NULL,
1072                         *search_machine_guid = NULL,
1073                         *delete_url = NULL,
1074                         *to_person_guid = NULL;
1075 /*
1076         int redirects = 0;
1077 */
1078
1079         while(url) {
1080                 char *value = mystrsep(&url, "?&[]");
1081                 if (!value || !*value) continue;
1082
1083                 char *name = mystrsep(&value, "=");
1084                 if (!name || !*name) continue;
1085                 if (!value || !*value) continue;
1086
1087                 debug(D_WEB_CLIENT, "%llu: API v1 registry query param '%s' with value '%s'", w->id, name, value);
1088
1089                 uint32_t hash = simple_hash(name);
1090
1091                 if(hash == hash_action && !strcmp(name, "action")) {
1092                         uint32_t vhash = simple_hash(value);
1093
1094                         if(vhash == hash_access && !strcmp(value, "access")) action = 'A';
1095                         else if(vhash == hash_hello && !strcmp(value, "hello")) action = 'H';
1096                         else if(vhash == hash_delete && !strcmp(value, "delete")) action = 'D';
1097                         else if(vhash == hash_search && !strcmp(value, "search")) action = 'S';
1098                         else if(vhash == hash_switch && !strcmp(value, "switch")) action = 'W';
1099 #ifdef NETDATA_INTERNAL_CHECKS
1100             else error("unknown registry action '%s'", value);
1101 #endif /* NETDATA_INTERNAL_CHECKS */
1102                 }
1103 /*
1104                 else if(hash == hash_redirects && !strcmp(name, "redirects"))
1105                         redirects = atoi(value);
1106 */
1107                 else if(hash == hash_machine && !strcmp(name, "machine"))
1108                         machine_guid = value;
1109
1110                 else if(hash == hash_url && !strcmp(name, "url"))
1111                         machine_url = value;
1112
1113                 else if(action == 'A') {
1114                         if(hash == hash_name && !strcmp(name, "name"))
1115                                 url_name = value;
1116                 }
1117                 else if(action == 'D') {
1118                         if(hash == hash_delete_url && !strcmp(name, "delete_url"))
1119                                 delete_url = value;
1120                 }
1121                 else if(action == 'S') {
1122                         if(hash == hash_for && !strcmp(name, "for"))
1123                                 search_machine_guid = value;
1124                 }
1125                 else if(action == 'W') {
1126                         if(hash == hash_to && !strcmp(name, "to"))
1127                                 to_person_guid = value;
1128                 }
1129 #ifdef NETDATA_INTERNAL_CHECKS
1130                 else error("unused registry URL parameter '%s' with value '%s'", name, value);
1131 #endif /* NETDATA_INTERNAL_CHECKS */
1132         }
1133
1134         if(web_donotrack_comply && w->donottrack) {
1135                 buffer_flush(w->response.data);
1136                 buffer_sprintf(w->response.data, "Your web browser is sending 'DNT: 1' (Do Not Track). The registry requires persistent cookies on your browser to work.");
1137                 return 400;
1138         }
1139
1140         if(action == 'A' && (!machine_guid || !machine_url || !url_name)) {
1141                 buffer_flush(w->response.data);
1142                 buffer_sprintf(w->response.data, "Invalid registry request - access requires these parameters: machine ('%s'), url ('%s'), name ('%s')",
1143                                            machine_guid?machine_guid:"UNSET", machine_url?machine_url:"UNSET", url_name?url_name:"UNSET");
1144                 return 400;
1145         }
1146         else if(action == 'D' && (!machine_guid || !machine_url || !delete_url)) {
1147                 buffer_flush(w->response.data);
1148                 buffer_sprintf(w->response.data, "Invalid registry request - delete requires these parameters: machine ('%s'), url ('%s'), delete_url ('%s')",
1149                                            machine_guid?machine_guid:"UNSET", machine_url?machine_url:"UNSET", delete_url?delete_url:"UNSET");
1150                 return 400;
1151         }
1152         else if(action == 'S' && (!machine_guid || !machine_url || !search_machine_guid)) {
1153                 buffer_flush(w->response.data);
1154                 buffer_sprintf(w->response.data, "Invalid registry request - search requires these parameters: machine ('%s'), url ('%s'), for ('%s')",
1155                                            machine_guid?machine_guid:"UNSET", machine_url?machine_url:"UNSET", search_machine_guid?search_machine_guid:"UNSET");
1156                 return 400;
1157         }
1158         else if(action == 'W' && (!machine_guid || !machine_url || !to_person_guid)) {
1159                 buffer_flush(w->response.data);
1160                 buffer_sprintf(w->response.data, "Invalid registry request - switching identity requires these parameters: machine ('%s'), url ('%s'), to ('%s')",
1161                                            machine_guid?machine_guid:"UNSET", machine_url?machine_url:"UNSET", to_person_guid?to_person_guid:"UNSET");
1162                 return 400;
1163         }
1164
1165         switch(action) {
1166                 case 'A':
1167                         w->tracking_required = 1;
1168                         if(registry_verify_cookies_redirects() > 0 && (!cookie || !person_guid[0])) {
1169                                 buffer_flush(w->response.data);
1170
1171                                 registry_set_cookie(w, "give-me-back-this-cookie-please");
1172                                 w->response.data->contenttype = CT_APPLICATION_JSON;
1173                                 buffer_sprintf(w->response.data, "{ \"status\": \"redirect\", \"registry\": \"%s\" }", registry_to_announce());
1174                                 return 200;
1175
1176 /*
1177  * it seems that web browsers are ignoring 307 (Moved Temporarily)
1178  * under certain conditions, when using CORS
1179  * so this is commented and we use application level redirects instead
1180  *
1181                                 redirects++;
1182
1183                                 if(redirects > registry_verify_cookies_redirects()) {
1184                                         buffer_flush(w->response.data);
1185                                         buffer_sprintf(w->response.data, "Your browser does not support cookies");
1186                                         return 400;
1187                                 }
1188
1189                                 char *encoded_url = url_encode(machine_url);
1190                                 if(!encoded_url) {
1191                                         error("%llu: Cannot URL encode string '%s'", w->id, machine_url);
1192                                         return 500;
1193                                 }
1194
1195                                 char *encoded_name = url_encode(url_name);
1196                                 if(!encoded_name) {
1197                                         free(encoded_url);
1198                                         error("%llu: Cannot URL encode string '%s'", w->id, url_name);
1199                                         return 500;
1200                                 }
1201
1202                                 char *encoded_guid = url_encode(machine_guid);
1203                                 if(!encoded_guid) {
1204                                         free(encoded_url);
1205                                         free(encoded_name);
1206                                         error("%llu: Cannot URL encode string '%s'", w->id, machine_guid);
1207                                         return 500;
1208                                 }
1209
1210                                 buffer_sprintf(w->response.header, "Location: %s/api/v1/registry?action=access&machine=%s&name=%s&url=%s&redirects=%d\r\n",
1211                                                            registry_to_announce(), encoded_guid, encoded_name, encoded_url, redirects);
1212
1213                                 free(encoded_guid);
1214                                 free(encoded_name);
1215                                 free(encoded_url);
1216                                 return 307
1217 */
1218                         }
1219                         return registry_request_access_json(w, person_guid, machine_guid, machine_url, url_name, time(NULL));
1220
1221                 case 'D':
1222                         w->tracking_required = 1;
1223                         return registry_request_delete_json(w, person_guid, machine_guid, machine_url, delete_url, time(NULL));
1224
1225                 case 'S':
1226                         w->tracking_required = 1;
1227                         return registry_request_search_json(w, person_guid, machine_guid, machine_url, search_machine_guid, time(NULL));
1228
1229                 case 'W':
1230                         w->tracking_required = 1;
1231                         return registry_request_switch_json(w, person_guid, machine_guid, machine_url, to_person_guid, time(NULL));
1232
1233                 case 'H':
1234                         return registry_request_hello_json(w);
1235
1236                 default:
1237                         buffer_flush(w->response.data);
1238                         buffer_sprintf(w->response.data, "Invalid registry request - you need to set an action: hello, access, delete, search");
1239                         return 400;
1240         }
1241
1242         buffer_flush(w->response.data);
1243         buffer_sprintf(w->response.data, "Invalid or no registry action.");
1244         return 400;
1245 }
1246
1247 int web_client_api_request_v1(struct web_client *w, char *url) {
1248         static uint32_t hash_data = 0, hash_chart = 0, hash_charts = 0, hash_registry = 0, hash_badge = 0;
1249
1250         if(unlikely(hash_data == 0)) {
1251                 hash_data = simple_hash("data");
1252                 hash_chart = simple_hash("chart");
1253                 hash_charts = simple_hash("charts");
1254                 hash_registry = simple_hash("registry");
1255                 hash_badge = simple_hash("badge.svg");
1256         }
1257
1258         // get the command
1259         char *tok = mystrsep(&url, "/?&");
1260         if(tok && *tok) {
1261                 debug(D_WEB_CLIENT, "%llu: Searching for API v1 command '%s'.", w->id, tok);
1262                 uint32_t hash = simple_hash(tok);
1263
1264                 if(hash == hash_data && !strcmp(tok, "data"))
1265                         return web_client_api_request_v1_data(w, url);
1266
1267                 else if(hash == hash_chart && !strcmp(tok, "chart"))
1268                         return web_client_api_request_v1_chart(w, url);
1269
1270                 else if(hash == hash_charts && !strcmp(tok, "charts"))
1271                         return web_client_api_request_v1_charts(w, url);
1272
1273                 else if(hash == hash_registry && !strcmp(tok, "registry"))
1274                         return web_client_api_request_v1_registry(w, url);
1275
1276                 else if(hash == hash_badge && !strcmp(tok, "badge.svg"))
1277                         return web_client_api_v1_badge(w, url);
1278
1279                 else {
1280                         buffer_flush(w->response.data);
1281                         buffer_sprintf(w->response.data, "Unsupported v1 API command: %s", tok);
1282                         return 404;
1283                 }
1284         }
1285         else {
1286                 buffer_flush(w->response.data);
1287                 buffer_sprintf(w->response.data, "API v1 command?");
1288                 return 400;
1289         }
1290 }
1291
1292 int web_client_api_request(struct web_client *w, char *url)
1293 {
1294         // get the api version
1295         char *tok = mystrsep(&url, "/?&");
1296         if(tok && *tok) {
1297                 debug(D_WEB_CLIENT, "%llu: Searching for API version '%s'.", w->id, tok);
1298                 if(strcmp(tok, "v1") == 0)
1299                         return web_client_api_request_v1(w, url);
1300                 else {
1301                         buffer_flush(w->response.data);
1302                         buffer_sprintf(w->response.data, "Unsupported API version: %s", tok);
1303                         return 404;
1304                 }
1305         }
1306         else {
1307                 buffer_flush(w->response.data);
1308                 buffer_sprintf(w->response.data, "Which API version?");
1309                 return 400;
1310         }
1311 }
1312
1313 int web_client_api_old_data_request(struct web_client *w, char *url, int datasource_type)
1314 {
1315         RRDSET *st = NULL;
1316
1317         char *args = strchr(url, '?');
1318         if(args) {
1319                 *args='\0';
1320                 args = &args[1];
1321         }
1322
1323         // get the name of the data to show
1324         char *tok = mystrsep(&url, "/");
1325
1326         // do we have such a data set?
1327         if(tok && *tok) {
1328                 debug(D_WEB_CLIENT, "%llu: Searching for RRD data with name '%s'.", w->id, tok);
1329                 st = rrdset_find_byname(tok);
1330                 if(!st) st = rrdset_find(tok);
1331         }
1332
1333         if(!st) {
1334                 // we don't have it
1335                 // try to send a file with that name
1336                 buffer_flush(w->response.data);
1337                 return(mysendfile(w, tok));
1338         }
1339
1340         // we have it
1341         debug(D_WEB_CLIENT, "%llu: Found RRD data with name '%s'.", w->id, tok);
1342
1343         // how many entries does the client want?
1344         long lines = rrd_default_history_entries;
1345         long group_count = 1;
1346         time_t after = 0, before = 0;
1347         int group_method = GROUP_AVERAGE;
1348         int nonzero = 0;
1349
1350         if(url) {
1351                 // parse the lines required
1352                 tok = mystrsep(&url, "/");
1353                 if(tok) lines = atoi(tok);
1354                 if(lines < 1) lines = 1;
1355         }
1356         if(url) {
1357                 // parse the group count required
1358                 tok = mystrsep(&url, "/");
1359                 if(tok && *tok) group_count = atoi(tok);
1360                 if(group_count < 1) group_count = 1;
1361                 //if(group_count > save_history / 20) group_count = save_history / 20;
1362         }
1363         if(url) {
1364                 // parse the grouping method required
1365                 tok = mystrsep(&url, "/");
1366                 if(tok && *tok) {
1367                         if(strcmp(tok, "max") == 0) group_method = GROUP_MAX;
1368                         else if(strcmp(tok, "average") == 0) group_method = GROUP_AVERAGE;
1369                         else if(strcmp(tok, "sum") == 0) group_method = GROUP_SUM;
1370                         else debug(D_WEB_CLIENT, "%llu: Unknown group method '%s'", w->id, tok);
1371                 }
1372         }
1373         if(url) {
1374                 // parse after time
1375                 tok = mystrsep(&url, "/");
1376                 if(tok && *tok) after = strtoul(tok, NULL, 10);
1377                 if(after < 0) after = 0;
1378         }
1379         if(url) {
1380                 // parse before time
1381                 tok = mystrsep(&url, "/");
1382                 if(tok && *tok) before = strtoul(tok, NULL, 10);
1383                 if(before < 0) before = 0;
1384         }
1385         if(url) {
1386                 // parse nonzero
1387                 tok = mystrsep(&url, "/");
1388                 if(tok && *tok && strcmp(tok, "nonzero") == 0) nonzero = 1;
1389         }
1390
1391         w->response.data->contenttype = CT_APPLICATION_JSON;
1392         buffer_flush(w->response.data);
1393
1394         char *google_version = "0.6";
1395         char *google_reqId = "0";
1396         char *google_sig = "0";
1397         char *google_out = "json";
1398         char *google_responseHandler = "google.visualization.Query.setResponse";
1399         char *google_outFileName = NULL;
1400         time_t last_timestamp_in_data = 0;
1401         if(datasource_type == DATASOURCE_DATATABLE_JSON || datasource_type == DATASOURCE_DATATABLE_JSONP) {
1402
1403                 w->response.data->contenttype = CT_APPLICATION_X_JAVASCRIPT;
1404
1405                 while(args) {
1406                         tok = mystrsep(&args, "&");
1407                         if(tok && *tok) {
1408                                 char *name = mystrsep(&tok, "=");
1409                                 if(name && *name && strcmp(name, "tqx") == 0) {
1410                                         char *key = mystrsep(&tok, ":");
1411                                         char *value = mystrsep(&tok, ";");
1412                                         if(key && value && *key && *value) {
1413                                                 if(strcmp(key, "version") == 0)
1414                                                         google_version = value;
1415
1416                                                 else if(strcmp(key, "reqId") == 0)
1417                                                         google_reqId = value;
1418
1419                                                 else if(strcmp(key, "sig") == 0)
1420                                                         google_sig = value;
1421
1422                                                 else if(strcmp(key, "out") == 0)
1423                                                         google_out = value;
1424
1425                                                 else if(strcmp(key, "responseHandler") == 0)
1426                                                         google_responseHandler = value;
1427
1428                                                 else if(strcmp(key, "outFileName") == 0)
1429                                                         google_outFileName = value;
1430                                         }
1431                                 }
1432                         }
1433                 }
1434
1435                 debug(D_WEB_CLIENT_ACCESS, "%llu: GOOGLE JSONP: version = '%s', reqId = '%s', sig = '%s', out = '%s', responseHandler = '%s', outFileName = '%s'",
1436                         w->id, google_version, google_reqId, google_sig, google_out, google_responseHandler, google_outFileName
1437                         );
1438
1439                 if(datasource_type == DATASOURCE_DATATABLE_JSONP) {
1440                         last_timestamp_in_data = strtoul(google_sig, NULL, 0);
1441
1442                         // check the client wants json
1443                         if(strcmp(google_out, "json") != 0) {
1444                                 buffer_sprintf(w->response.data,
1445                                         "%s({version:'%s',reqId:'%s',status:'error',errors:[{reason:'invalid_query',message:'output format is not supported',detailed_message:'the format %s requested is not supported by netdata.'}]});",
1446                                         google_responseHandler, google_version, google_reqId, google_out);
1447                                         return 200;
1448                         }
1449                 }
1450         }
1451
1452         if(datasource_type == DATASOURCE_DATATABLE_JSONP) {
1453                 buffer_sprintf(w->response.data,
1454                         "%s({version:'%s',reqId:'%s',status:'ok',sig:'%lu',table:",
1455                         google_responseHandler, google_version, google_reqId, st->last_updated.tv_sec);
1456         }
1457
1458         debug(D_WEB_CLIENT_ACCESS, "%llu: Sending RRD data '%s' (id %s, %d lines, %d group, %d group_method, %lu after, %lu before).", w->id, st->name, st->id, lines, group_count, group_method, after, before);
1459         time_t timestamp_in_data = rrd_stats_json(datasource_type, st, w->response.data, lines, group_count, group_method, after, before, nonzero);
1460
1461         if(datasource_type == DATASOURCE_DATATABLE_JSONP) {
1462                 if(timestamp_in_data > last_timestamp_in_data)
1463                         buffer_strcat(w->response.data, "});");
1464
1465                 else {
1466                         // the client already has the latest data
1467                         buffer_flush(w->response.data);
1468                         buffer_sprintf(w->response.data,
1469                                 "%s({version:'%s',reqId:'%s',status:'error',errors:[{reason:'not_modified',message:'Data not modified'}]});",
1470                                 google_responseHandler, google_version, google_reqId);
1471                 }
1472         }
1473
1474         return 200;
1475 }
1476
1477 const char *web_content_type_to_string(uint8_t contenttype) {
1478         switch(contenttype) {
1479                 case CT_TEXT_HTML:
1480                         return "text/html; charset=utf-8";
1481
1482                 case CT_APPLICATION_XML:
1483                         return "application/xml; charset=utf-8";
1484
1485                 case CT_APPLICATION_JSON:
1486                         return "application/json; charset=utf-8";
1487
1488                 case CT_APPLICATION_X_JAVASCRIPT:
1489                         return "application/x-javascript; charset=utf-8";
1490
1491                 case CT_TEXT_CSS:
1492                         return "text/css; charset=utf-8";
1493
1494                 case CT_TEXT_XML:
1495                         return "text/xml; charset=utf-8";
1496
1497                 case CT_TEXT_XSL:
1498                         return "text/xsl; charset=utf-8";
1499
1500                 case CT_APPLICATION_OCTET_STREAM:
1501                         return "application/octet-stream";
1502
1503                 case CT_IMAGE_SVG_XML:
1504                         return "image/svg+xml";
1505
1506                 case CT_APPLICATION_X_FONT_TRUETYPE:
1507                         return "application/x-font-truetype";
1508
1509                 case CT_APPLICATION_X_FONT_OPENTYPE:
1510                         return "application/x-font-opentype";
1511
1512                 case CT_APPLICATION_FONT_WOFF:
1513                         return "application/font-woff";
1514
1515                 case CT_APPLICATION_FONT_WOFF2:
1516                         return "application/font-woff2";
1517
1518                 case CT_APPLICATION_VND_MS_FONTOBJ:
1519                         return "application/vnd.ms-fontobject";
1520
1521                 case CT_IMAGE_PNG:
1522                         return "image/png";
1523
1524                 case CT_IMAGE_JPG:
1525                         return "image/jpeg";
1526
1527                 case CT_IMAGE_GIF:
1528                         return "image/gif";
1529
1530                 case CT_IMAGE_XICON:
1531                         return "image/x-icon";
1532
1533                 case CT_IMAGE_BMP:
1534                         return "image/bmp";
1535
1536                 case CT_IMAGE_ICNS:
1537                         return "image/icns";
1538
1539                 default:
1540                 case CT_TEXT_PLAIN:
1541                         return "text/plain; charset=utf-8";
1542         }
1543 }
1544
1545
1546 const char *web_response_code_to_string(int code) {
1547         switch(code) {
1548                 case 200:
1549                         return "OK";
1550
1551                 case 307:
1552                         return "Temporary Redirect";
1553
1554                 case 400:
1555                         return "Bad Request";
1556
1557                 case 403:
1558                         return "Forbidden";
1559
1560                 case 404:
1561                         return "Not Found";
1562
1563                 case 412:
1564                         return "Preconditions Failed";
1565
1566                 default:
1567                         if(code >= 100 && code < 200)
1568                                 return "Informational";
1569
1570                         if(code >= 200 && code < 300)
1571                                 return "Successful";
1572
1573                         if(code >= 300 && code < 400)
1574                                 return "Redirection";
1575
1576                         if(code >= 400 && code < 500)
1577                                 return "Bad Request";
1578
1579                         if(code >= 500 && code < 600)
1580                                 return "Server Error";
1581
1582                         return "Undefined Error";
1583         }
1584 }
1585
1586 static inline char *http_header_parse(struct web_client *w, char *s) {
1587         static uint32_t hash_origin = 0, hash_connection = 0, hash_accept_encoding = 0, hash_donottrack = 0;
1588
1589         if(unlikely(!hash_origin)) {
1590                 hash_origin = simple_uhash("Origin");
1591                 hash_connection = simple_uhash("Connection");
1592                 hash_accept_encoding = simple_uhash("Accept-Encoding");
1593                 hash_donottrack = simple_uhash("DNT");
1594         }
1595
1596         char *e = s;
1597
1598         // find the :
1599         while(*e && *e != ':') e++;
1600         if(!*e) return e;
1601
1602         // get the name
1603         *e = '\0';
1604
1605         // find the value
1606         char *v = e + 1, *ve;
1607
1608         // skip leading spaces from value
1609         while(*v == ' ') v++;
1610         ve = v;
1611
1612         // find the \r
1613         while(*ve && *ve != '\r') ve++;
1614         if(!*ve || ve[1] != '\n') {
1615                 *e = ':';
1616                 return ve;
1617         }
1618
1619         // terminate the value
1620         *ve = '\0';
1621
1622         // fprintf(stderr, "HEADER: '%s' = '%s'\n", s, v);
1623         uint32_t hash = simple_uhash(s);
1624
1625         if(hash == hash_origin && !strcasecmp(s, "Origin"))
1626                 strncpyz(w->origin, v, ORIGIN_MAX);
1627
1628         else if(hash == hash_connection && !strcasecmp(s, "Connection")) {
1629                 if(strcasestr(v, "keep-alive"))
1630                         w->keepalive = 1;
1631         }
1632         else if(web_donotrack_comply && hash == hash_donottrack && !strcasecmp(s, "DNT")) {
1633                 if(*v == '0') w->donottrack = 0;
1634                 else if(*v == '1') w->donottrack = 1;
1635         }
1636 #ifdef NETDATA_WITH_ZLIB
1637         else if(hash == hash_accept_encoding && !strcasecmp(s, "Accept-Encoding")) {
1638                 if(web_enable_gzip) {
1639                         if(strcasestr(v, "gzip"))
1640                                 web_client_enable_deflate(w, 1);
1641                         //
1642                         // does not seem to work
1643                         // else if(strcasestr(v, "deflate"))
1644                         //      web_client_enable_deflate(w, 0);
1645                 }
1646         }
1647 #endif /* NETDATA_WITH_ZLIB */
1648
1649         *e = ':';
1650         *ve = '\r';
1651         return ve;
1652 }
1653
1654 // http_request_validate()
1655 // returns:
1656 // = 0 : all good, process the request
1657 // > 0 : request is not supported
1658 // < 0 : request is incomplete - wait for more data
1659
1660 static inline int http_request_validate(struct web_client *w) {
1661         char *s = w->response.data->buffer, *encoded_url = NULL;
1662
1663         // is is a valid request?
1664         if(!strncmp(s, "GET ", 4)) {
1665                 encoded_url = s = &s[4];
1666                 w->mode = WEB_CLIENT_MODE_NORMAL;
1667         }
1668         else if(!strncmp(s, "OPTIONS ", 8)) {
1669                 encoded_url = s = &s[8];
1670                 w->mode = WEB_CLIENT_MODE_OPTIONS;
1671         }
1672         else {
1673                 w->wait_receive = 0;
1674                 return 1;
1675         }
1676
1677         // find the SPACE + "HTTP/"
1678         while(*s) {
1679                 // find the next space
1680                 while (*s && *s != ' ') s++;
1681
1682                 // is it SPACE + "HTTP/" ?
1683                 if(*s && !strncmp(s, " HTTP/", 6)) break;
1684                 else s++;
1685         }
1686
1687         // incomplete requests
1688         if(unlikely(!*s)) {
1689                 w->wait_receive = 1;
1690                 return -2;
1691         }
1692
1693         // we have the end of encoded_url - remember it
1694         char *ue = s;
1695
1696         // make sure we have complete request
1697         // complete requests contain: \r\n\r\n
1698         while(*s) {
1699                 // find a line feed
1700                 while(*s && *s++ != '\r');
1701
1702                 // did we reach the end?
1703                 if(unlikely(!*s)) break;
1704
1705                 // is it \r\n ?
1706                 if(likely(*s++ == '\n')) {
1707
1708                         // is it again \r\n ? (header end)
1709                         if(unlikely(*s == '\r' && s[1] == '\n')) {
1710                                 // a valid complete HTTP request found
1711
1712                                 *ue = '\0';
1713                                 url_decode_r(w->decoded_url, encoded_url, URL_MAX + 1);
1714                                 *ue = ' ';
1715
1716                                 // copy the URL - we are going to overwrite parts of it
1717                                 // FIXME -- we should avoid it
1718                                 strncpyz(w->last_url, w->decoded_url, URL_MAX);
1719
1720                                 w->wait_receive = 0;
1721                                 return 0;
1722                         }
1723
1724                         // another header line
1725                         s = http_header_parse(w, s);
1726                 }
1727         }
1728
1729         // incomplete request
1730         w->wait_receive = 1;
1731         return -3;
1732 }
1733
1734 void web_client_process(struct web_client *w) {
1735         static uint32_t hash_api = 0, hash_netdata_conf = 0, hash_data = 0, hash_datasource = 0, hash_graph = 0,
1736                         hash_list = 0, hash_all_json = 0, hash_exit = 0, hash_debug = 0, hash_mirror = 0;
1737
1738         if(unlikely(!hash_api)) {
1739                 hash_api = simple_hash("api");
1740                 hash_netdata_conf = simple_hash("netdata.conf");
1741                 hash_data = simple_hash(WEB_PATH_DATA);
1742                 hash_datasource = simple_hash(WEB_PATH_DATASOURCE);
1743                 hash_graph = simple_hash(WEB_PATH_GRAPH);
1744                 hash_list = simple_hash("list");
1745                 hash_all_json = simple_hash("all.json");
1746                 hash_exit = simple_hash("exit");
1747                 hash_debug = simple_hash("debug");
1748                 hash_mirror = simple_hash("mirror");
1749         }
1750
1751         int code = 500;
1752         ssize_t bytes;
1753
1754         int what_to_do = http_request_validate(w);
1755
1756         // wait for more data
1757         if(what_to_do < 0) {
1758                 if(w->response.data->len > TOO_BIG_REQUEST) {
1759                         strcpy(w->last_url, "too big request");
1760
1761                         debug(D_WEB_CLIENT_ACCESS, "%llu: Received request is too big (%zd bytes).", w->id, w->response.data->len);
1762
1763                         code = 400;
1764                         buffer_flush(w->response.data);
1765                         buffer_sprintf(w->response.data, "Received request is too big  (%zd bytes).\r\n", w->response.data->len);
1766                 }
1767                 else {
1768                         // wait for more data
1769                         return;
1770                 }
1771         }
1772         else if(what_to_do > 0) {
1773                 strcpy(w->last_url, "not a valid request");
1774
1775                 debug(D_WEB_CLIENT_ACCESS, "%llu: Cannot understand '%s'.", w->id, w->response.data->buffer);
1776
1777                 code = 500;
1778                 buffer_flush(w->response.data);
1779                 buffer_strcat(w->response.data, "I don't understand you...\r\n");
1780         }
1781         else { // what_to_do == 0
1782                 gettimeofday(&w->tv_in, NULL);
1783
1784                 if(w->mode == WEB_CLIENT_MODE_OPTIONS) {
1785                         code = 200;
1786                         w->response.data->contenttype = CT_TEXT_PLAIN;
1787                         buffer_flush(w->response.data);
1788                         buffer_strcat(w->response.data, "OK");
1789                 }
1790                 else {
1791                         char *url = w->decoded_url;
1792                         char *tok = mystrsep(&url, "/?");
1793                         if(tok && *tok) {
1794                                 uint32_t hash = simple_hash(tok);
1795                                 debug(D_WEB_CLIENT, "%llu: Processing command '%s'.", w->id, tok);
1796
1797                                 if(hash == hash_api && strcmp(tok, "api") == 0) {
1798                                         // the client is requesting api access
1799                                         code = web_client_api_request(w, url);
1800                                 }
1801                                 else if(hash == hash_netdata_conf && strcmp(tok, "netdata.conf") == 0) {
1802                                         code = 200;
1803                                         debug(D_WEB_CLIENT_ACCESS, "%llu: Sending netdata.conf ...", w->id);
1804
1805                                         w->response.data->contenttype = CT_TEXT_PLAIN;
1806                                         buffer_flush(w->response.data);
1807                                         generate_config(w->response.data, 0);
1808                                 }
1809                                 else if(hash == hash_data && strcmp(tok, WEB_PATH_DATA) == 0) { // "data"
1810                                         // the client is requesting rrd data -- OLD API
1811                                         code = web_client_api_old_data_request(w, url, DATASOURCE_JSON);
1812                                 }
1813                                 else if(hash == hash_datasource && strcmp(tok, WEB_PATH_DATASOURCE) == 0) { // "datasource"
1814                                         // the client is requesting google datasource -- OLD API
1815                                         code = web_client_api_old_data_request(w, url, DATASOURCE_DATATABLE_JSONP);
1816                                 }
1817                                 else if(hash == hash_graph && strcmp(tok, WEB_PATH_GRAPH) == 0) { // "graph"
1818                                         // the client is requesting an rrd graph -- OLD API
1819
1820                                         // get the name of the data to show
1821                                         tok = mystrsep(&url, "/?&");
1822                                         if(tok && *tok) {
1823                                                 debug(D_WEB_CLIENT, "%llu: Searching for RRD data with name '%s'.", w->id, tok);
1824
1825                                                 // do we have such a data set?
1826                                                 RRDSET *st = rrdset_find_byname(tok);
1827                                                 if(!st) st = rrdset_find(tok);
1828                                                 if(!st) {
1829                                                         // we don't have it
1830                                                         // try to send a file with that name
1831                                                         buffer_flush(w->response.data);
1832                                                         code = mysendfile(w, tok);
1833                                                 }
1834                                                 else {
1835                                                         code = 200;
1836                                                         debug(D_WEB_CLIENT_ACCESS, "%llu: Sending %s.json of RRD_STATS...", w->id, st->name);
1837                                                         w->response.data->contenttype = CT_APPLICATION_JSON;
1838                                                         buffer_flush(w->response.data);
1839                                                         rrd_stats_graph_json(st, url, w->response.data);
1840                                                 }
1841                                         }
1842                                         else {
1843                                                 code = 400;
1844                                                 buffer_flush(w->response.data);
1845                                                 buffer_strcat(w->response.data, "Graph name?\r\n");
1846                                         }
1847                                 }
1848                                 else if(hash == hash_list && strcmp(tok, "list") == 0) {
1849                                         // OLD API
1850                                         code = 200;
1851
1852                                         debug(D_WEB_CLIENT_ACCESS, "%llu: Sending list of RRD_STATS...", w->id);
1853
1854                                         buffer_flush(w->response.data);
1855                                         RRDSET *st = rrdset_root;
1856
1857                                         for ( ; st ; st = st->next )
1858                                                 buffer_sprintf(w->response.data, "%s\n", st->name);
1859                                 }
1860                                 else if(hash == hash_all_json && strcmp(tok, "all.json") == 0) {
1861                                         // OLD API
1862                                         code = 200;
1863                                         debug(D_WEB_CLIENT_ACCESS, "%llu: Sending JSON list of all monitors of RRD_STATS...", w->id);
1864
1865                                         w->response.data->contenttype = CT_APPLICATION_JSON;
1866                                         buffer_flush(w->response.data);
1867                                         rrd_stats_all_json(w->response.data);
1868                                 }
1869 #ifdef NETDATA_INTERNAL_CHECKS
1870                                 else if(hash == hash_exit && strcmp(tok, "exit") == 0) {
1871                                         code = 200;
1872                                         w->response.data->contenttype = CT_TEXT_PLAIN;
1873                                         buffer_flush(w->response.data);
1874
1875                                         if(!netdata_exit)
1876                                                 buffer_strcat(w->response.data, "ok, will do...");
1877                                         else
1878                                                 buffer_strcat(w->response.data, "I am doing it already");
1879
1880                                         netdata_exit = 1;
1881                                 }
1882                                 else if(hash == hash_debug && strcmp(tok, "debug") == 0) {
1883                                         buffer_flush(w->response.data);
1884
1885                                         // get the name of the data to show
1886                                         tok = mystrsep(&url, "/?&");
1887                                         if(tok && *tok) {
1888                                                 debug(D_WEB_CLIENT, "%llu: Searching for RRD data with name '%s'.", w->id, tok);
1889
1890                                                 // do we have such a data set?
1891                                                 RRDSET *st = rrdset_find_byname(tok);
1892                                                 if(!st) st = rrdset_find(tok);
1893                                                 if(!st) {
1894                                                         code = 404;
1895                                                         buffer_sprintf(w->response.data, "Chart %s is not found.\r\n", tok);
1896                                                         debug(D_WEB_CLIENT_ACCESS, "%llu: %s is not found.", w->id, tok);
1897                                                 }
1898                                                 else {
1899                                                         code = 200;
1900                                                         debug_flags |= D_RRD_STATS;
1901                                                         st->debug = !st->debug;
1902                                                         buffer_sprintf(w->response.data, "Chart %s has now debug %s.\r\n", tok, st->debug?"enabled":"disabled");
1903                                                         debug(D_WEB_CLIENT_ACCESS, "%llu: debug for %s is %s.", w->id, tok, st->debug?"enabled":"disabled");
1904                                                 }
1905                                         }
1906                                         else {
1907                                                 code = 500;
1908                                                 buffer_flush(w->response.data);
1909                                                 buffer_strcat(w->response.data, "debug which chart?\r\n");
1910                                         }
1911                                 }
1912                                 else if(hash == hash_mirror && strcmp(tok, "mirror") == 0) {
1913                                         code = 200;
1914
1915                                         debug(D_WEB_CLIENT_ACCESS, "%llu: Mirroring...", w->id);
1916
1917                                         // replace the zero bytes with spaces
1918                                         buffer_char_replace(w->response.data, '\0', ' ');
1919
1920                                         // just leave the buffer as is
1921                                         // it will be copied back to the client
1922                                 }
1923 #endif  /* NETDATA_INTERNAL_CHECKS */
1924                                 else {
1925                                         char filename[FILENAME_MAX+1];
1926                                         url = filename;
1927                                         strncpyz(filename, w->last_url, FILENAME_MAX);
1928                                         tok = mystrsep(&url, "?");
1929                                         buffer_flush(w->response.data);
1930                                         code = mysendfile(w, (tok && *tok)?tok:"/");
1931                                 }
1932                         }
1933                         else {
1934                                 char filename[FILENAME_MAX+1];
1935                                 url = filename;
1936                                 strncpyz(filename, w->last_url, FILENAME_MAX);
1937                                 tok = mystrsep(&url, "?");
1938                                 buffer_flush(w->response.data);
1939                                 code = mysendfile(w, (tok && *tok)?tok:"/");
1940                         }
1941                 }
1942         }
1943
1944         gettimeofday(&w->tv_ready, NULL);
1945         w->response.data->date = time(NULL);
1946         w->response.sent = 0;
1947         w->response.code = code;
1948
1949         // prepare the HTTP response header
1950         debug(D_WEB_CLIENT, "%llu: Generating HTTP header with response %d.", w->id, code);
1951
1952         const char *content_type_string = web_content_type_to_string(w->response.data->contenttype);
1953         const char *code_msg = web_response_code_to_string(code);
1954
1955         char date[100];
1956         struct tm tmbuf, *tm = gmtime_r(&w->response.data->date, &tmbuf);
1957         strftime(date, sizeof(date), "%a, %d %b %Y %H:%M:%S %Z", tm);
1958
1959         buffer_sprintf(w->response.header_output,
1960                 "HTTP/1.1 %d %s\r\n"
1961                 "Connection: %s\r\n"
1962                 "Server: NetData Embedded HTTP Server\r\n"
1963                 "Access-Control-Allow-Origin: %s\r\n"
1964                 "Access-Control-Allow-Credentials: true\r\n"
1965                 "Content-Type: %s\r\n"
1966                 "Date: %s\r\n"
1967                 , code, code_msg
1968                 , w->keepalive?"keep-alive":"close"
1969                 , w->origin
1970                 , content_type_string
1971                 , date
1972                 );
1973
1974         if(w->cookie1[0] || w->cookie2[0]) {
1975                 if(w->cookie1[0]) {
1976                         buffer_sprintf(w->response.header_output,
1977                            "Set-Cookie: %s\r\n",
1978                            w->cookie1);
1979                 }
1980
1981                 if(w->cookie2[0]) {
1982                         buffer_sprintf(w->response.header_output,
1983                            "Set-Cookie: %s\r\n",
1984                            w->cookie2);
1985                 }
1986
1987                 if(web_donotrack_comply)
1988                         buffer_sprintf(w->response.header_output,
1989                            "Tk: T;cookies\r\n");
1990         }
1991         else {
1992                 if(web_donotrack_comply) {
1993                         if(w->tracking_required)
1994                                 buffer_sprintf(w->response.header_output,
1995                                    "Tk: T;cookies\r\n");
1996                         else
1997                                 buffer_sprintf(w->response.header_output,
1998                                    "Tk: N\r\n");
1999                 }
2000         }
2001
2002         if(w->mode == WEB_CLIENT_MODE_OPTIONS) {
2003                 buffer_strcat(w->response.header_output,
2004                         "Access-Control-Allow-Methods: GET, OPTIONS\r\n"
2005                         "Access-Control-Allow-Headers: accept, x-requested-with, origin, content-type, cookie\r\n"
2006                         "Access-Control-Max-Age: 1209600\r\n" // 86400 * 14
2007                         );
2008         }
2009
2010         if(buffer_strlen(w->response.header))
2011                 buffer_strcat(w->response.header_output, buffer_tostring(w->response.header));
2012
2013         if(w->mode == WEB_CLIENT_MODE_NORMAL && (w->response.data->options & WB_CONTENT_NO_CACHEABLE)) {
2014                 buffer_sprintf(w->response.header_output,
2015                         "Expires: %s\r\n"
2016                         "Cache-Control: no-cache\r\n"
2017                         , date);
2018         }
2019         else if(w->mode != WEB_CLIENT_MODE_OPTIONS) {
2020                 char edate[100];
2021                 time_t et = w->response.data->date + (86400 * 14);
2022                 struct tm etmbuf, *etm = gmtime_r(&et, &etmbuf);
2023                 strftime(edate, sizeof(edate), "%a, %d %b %Y %H:%M:%S %Z", etm);
2024
2025                 buffer_sprintf(w->response.header_output,
2026                         "Expires: %s\r\n"
2027                         "Cache-Control: public\r\n"
2028                         , edate);
2029         }
2030
2031         // if we know the content length, put it
2032         if(!w->response.zoutput && (w->response.data->len || w->response.rlen))
2033                 buffer_sprintf(w->response.header_output,
2034                         "Content-Length: %ld\r\n"
2035                         , w->response.data->len? w->response.data->len: w->response.rlen
2036                         );
2037         else if(!w->response.zoutput)
2038                 w->keepalive = 0;       // content-length is required for keep-alive
2039
2040         if(w->response.zoutput) {
2041                 buffer_strcat(w->response.header_output,
2042                         "Content-Encoding: gzip\r\n"
2043                         "Transfer-Encoding: chunked\r\n"
2044                         );
2045         }
2046
2047         buffer_strcat(w->response.header_output, "\r\n");
2048
2049         // sent the HTTP header
2050         debug(D_WEB_DATA, "%llu: Sending response HTTP header of size %d: '%s'"
2051                         , w->id
2052                         , buffer_strlen(w->response.header_output)
2053                         , buffer_tostring(w->response.header_output)
2054                         );
2055
2056         web_client_crock_socket(w);
2057
2058         bytes = send(w->ofd, buffer_tostring(w->response.header_output), buffer_strlen(w->response.header_output), 0);
2059         if(bytes != (ssize_t) buffer_strlen(w->response.header_output)) {
2060                 if(bytes > 0)
2061                         w->stats_sent_bytes += bytes;
2062
2063                 debug(D_WEB_CLIENT, "%llu: HTTP Header failed to be sent (I sent %d bytes but the system sent %d bytes). Closing web client.", w->id,
2064                           buffer_strlen(w->response.header_output), bytes);
2065
2066                 WEB_CLIENT_IS_DEAD(w);
2067                 return;
2068         }
2069         else
2070                 w->stats_sent_bytes += bytes;
2071
2072         // enable sending immediately if we have data
2073         if(w->response.data->len) w->wait_send = 1;
2074         else w->wait_send = 0;
2075
2076         // pretty logging
2077         switch(w->mode) {
2078                 case WEB_CLIENT_MODE_OPTIONS:
2079                         debug(D_WEB_CLIENT, "%llu: Done preparing the OPTIONS response. Sending data (%d bytes) to client.", w->id, w->response.data->len);
2080                         break;
2081
2082                 case WEB_CLIENT_MODE_NORMAL:
2083                         debug(D_WEB_CLIENT, "%llu: Done preparing the response. Sending data (%d bytes) to client.", w->id, w->response.data->len);
2084                         break;
2085
2086                 case WEB_CLIENT_MODE_FILECOPY:
2087                         if(w->response.rlen) {
2088                                 debug(D_WEB_CLIENT, "%llu: Done preparing the response. Will be sending data file of %d bytes to client.", w->id, w->response.rlen);
2089                                 w->wait_receive = 1;
2090
2091                                 /*
2092                                 // utilize the kernel sendfile() for copying the file to the socket.
2093                                 // this block of code can be commented, without anything missing.
2094                                 // when it is commented, the program will copy the data using async I/O.
2095                                 {
2096                                         long len = sendfile(w->ofd, w->ifd, NULL, w->response.data->rbytes);
2097                                         if(len != w->response.data->rbytes)
2098                                                 error("%llu: sendfile() should copy %ld bytes, but copied %ld. Falling back to manual copy.", w->id, w->response.data->rbytes, len);
2099                                         else
2100                                                 web_client_reset(w);
2101                                 }
2102                                 */
2103                         }
2104                         else
2105                                 debug(D_WEB_CLIENT, "%llu: Done preparing the response. Will be sending an unknown amount of bytes to client.", w->id);
2106                         break;
2107
2108                 default:
2109                         fatal("%llu: Unknown client mode %d.", w->id, w->mode);
2110                         break;
2111         }
2112 }
2113
2114 ssize_t web_client_send_chunk_header(struct web_client *w, size_t len)
2115 {
2116         debug(D_DEFLATE, "%llu: OPEN CHUNK of %d bytes (hex: %x).", w->id, len, len);
2117         char buf[1024];
2118         sprintf(buf, "%zX\r\n", len);
2119
2120         ssize_t bytes = send(w->ofd, buf, strlen(buf), 0);
2121         if(bytes > 0) {
2122                 debug(D_DEFLATE, "%llu: Sent chunk header %d bytes.", w->id, bytes);
2123                 w->stats_sent_bytes += bytes;
2124         }
2125
2126         else if(bytes == 0) {
2127                 debug(D_WEB_CLIENT, "%llu: Did not send chunk header to the client.", w->id);
2128                 WEB_CLIENT_IS_DEAD(w);
2129         }
2130         else {
2131                 debug(D_WEB_CLIENT, "%llu: Failed to send chunk header to client.", w->id);
2132                 WEB_CLIENT_IS_DEAD(w);
2133         }
2134
2135         return bytes;
2136 }
2137
2138 ssize_t web_client_send_chunk_close(struct web_client *w)
2139 {
2140         //debug(D_DEFLATE, "%llu: CLOSE CHUNK.", w->id);
2141
2142         ssize_t bytes = send(w->ofd, "\r\n", 2, 0);
2143         if(bytes > 0) {
2144                 debug(D_DEFLATE, "%llu: Sent chunk suffix %d bytes.", w->id, bytes);
2145                 w->stats_sent_bytes += bytes;
2146         }
2147
2148         else if(bytes == 0) {
2149                 debug(D_WEB_CLIENT, "%llu: Did not send chunk suffix to the client.", w->id);
2150                 WEB_CLIENT_IS_DEAD(w);
2151         }
2152         else {
2153                 debug(D_WEB_CLIENT, "%llu: Failed to send chunk suffix to client.", w->id);
2154                 WEB_CLIENT_IS_DEAD(w);
2155         }
2156
2157         return bytes;
2158 }
2159
2160 ssize_t web_client_send_chunk_finalize(struct web_client *w)
2161 {
2162         //debug(D_DEFLATE, "%llu: FINALIZE CHUNK.", w->id);
2163
2164         ssize_t bytes = send(w->ofd, "\r\n0\r\n\r\n", 7, 0);
2165         if(bytes > 0) {
2166                 debug(D_DEFLATE, "%llu: Sent chunk suffix %d bytes.", w->id, bytes);
2167                 w->stats_sent_bytes += bytes;
2168         }
2169
2170         else if(bytes == 0) {
2171                 debug(D_WEB_CLIENT, "%llu: Did not send chunk finalize suffix to the client.", w->id);
2172                 WEB_CLIENT_IS_DEAD(w);
2173         }
2174         else {
2175                 debug(D_WEB_CLIENT, "%llu: Failed to send chunk finalize suffix to client.", w->id);
2176                 WEB_CLIENT_IS_DEAD(w);
2177         }
2178
2179         return bytes;
2180 }
2181
2182 #ifdef NETDATA_WITH_ZLIB
2183 ssize_t web_client_send_deflate(struct web_client *w)
2184 {
2185         ssize_t len = 0, t = 0;
2186
2187         // when using compression,
2188         // w->response.sent is the amount of bytes passed through compression
2189
2190         debug(D_DEFLATE, "%llu: web_client_send_deflate(): w->response.data->len = %d, w->response.sent = %d, w->response.zhave = %d, w->response.zsent = %d, w->response.zstream.avail_in = %d, w->response.zstream.avail_out = %d, w->response.zstream.total_in = %d, w->response.zstream.total_out = %d.", w->id, w->response.data->len, w->response.sent, w->response.zhave, w->response.zsent, w->response.zstream.avail_in, w->response.zstream.avail_out, w->response.zstream.total_in, w->response.zstream.total_out);
2191
2192         if(w->response.data->len - w->response.sent == 0 && w->response.zstream.avail_in == 0 && w->response.zhave == w->response.zsent && w->response.zstream.avail_out != 0) {
2193                 // there is nothing to send
2194
2195                 debug(D_WEB_CLIENT, "%llu: Out of output data.", w->id);
2196
2197                 // finalize the chunk
2198                 if(w->response.sent != 0) {
2199                         t = web_client_send_chunk_finalize(w);
2200                         if(t < 0) return t;
2201                 }
2202
2203                 if(w->mode == WEB_CLIENT_MODE_FILECOPY && w->wait_receive && w->response.rlen && w->response.rlen > w->response.data->len) {
2204                         // we have to wait, more data will come
2205                         debug(D_WEB_CLIENT, "%llu: Waiting for more data to become available.", w->id);
2206                         w->wait_send = 0;
2207                         return t;
2208                 }
2209
2210                 if(unlikely(!w->keepalive)) {
2211                         debug(D_WEB_CLIENT, "%llu: Closing (keep-alive is not enabled). %ld bytes sent.", w->id, w->response.sent);
2212                         WEB_CLIENT_IS_DEAD(w);
2213                         return t;
2214                 }
2215
2216                 // reset the client
2217                 web_client_reset(w);
2218                 debug(D_WEB_CLIENT, "%llu: Done sending all data on socket.", w->id);
2219                 return t;
2220         }
2221
2222         if(w->response.zhave == w->response.zsent) {
2223                 // compress more input data
2224
2225                 // close the previous open chunk
2226                 if(w->response.sent != 0) {
2227                         t = web_client_send_chunk_close(w);
2228                         if(t < 0) return t;
2229                 }
2230
2231                 debug(D_DEFLATE, "%llu: Compressing %d new bytes starting from %d (and %d left behind).", w->id, (w->response.data->len - w->response.sent), w->response.sent, w->response.zstream.avail_in);
2232
2233                 // give the compressor all the data not passed through the compressor yet
2234                 if(w->response.data->len > w->response.sent) {
2235                         w->response.zstream.next_in = (Bytef *)&w->response.data->buffer[w->response.sent - w->response.zstream.avail_in];
2236                         w->response.zstream.avail_in += (uInt) (w->response.data->len - w->response.sent);
2237                 }
2238
2239                 // reset the compressor output buffer
2240                 w->response.zstream.next_out = w->response.zbuffer;
2241                 w->response.zstream.avail_out = ZLIB_CHUNK;
2242
2243                 // ask for FINISH if we have all the input
2244                 int flush = Z_SYNC_FLUSH;
2245                 if(w->mode == WEB_CLIENT_MODE_NORMAL
2246                         || (w->mode == WEB_CLIENT_MODE_FILECOPY && !w->wait_receive && w->response.data->len == w->response.rlen)) {
2247                         flush = Z_FINISH;
2248                         debug(D_DEFLATE, "%llu: Requesting Z_FINISH, if possible.", w->id);
2249                 }
2250                 else {
2251                         debug(D_DEFLATE, "%llu: Requesting Z_SYNC_FLUSH.", w->id);
2252                 }
2253
2254                 // compress
2255                 if(deflate(&w->response.zstream, flush) == Z_STREAM_ERROR) {
2256                         error("%llu: Compression failed. Closing down client.", w->id);
2257                         web_client_reset(w);
2258                         return(-1);
2259                 }
2260
2261                 w->response.zhave = ZLIB_CHUNK - w->response.zstream.avail_out;
2262                 w->response.zsent = 0;
2263
2264                 // keep track of the bytes passed through the compressor
2265                 w->response.sent = w->response.data->len;
2266
2267                 debug(D_DEFLATE, "%llu: Compression produced %d bytes.", w->id, w->response.zhave);
2268
2269                 // open a new chunk
2270                 ssize_t t2 = web_client_send_chunk_header(w, w->response.zhave);
2271                 if(t2 < 0) return t2;
2272                 t += t2;
2273         }
2274
2275         debug(D_WEB_CLIENT, "%llu: Sending %d bytes of data (+%d of chunk header).", w->id, w->response.zhave - w->response.zsent, t);
2276
2277         len = send(w->ofd, &w->response.zbuffer[w->response.zsent], (size_t) (w->response.zhave - w->response.zsent), MSG_DONTWAIT);
2278         if(len > 0) {
2279                 w->stats_sent_bytes += len;
2280                 w->response.zsent += len;
2281                 len += t;
2282                 debug(D_WEB_CLIENT, "%llu: Sent %d bytes.", w->id, len);
2283         }
2284         else if(len == 0) {
2285                 debug(D_WEB_CLIENT, "%llu: Did not send any bytes to the client (zhave = %ld, zsent = %ld, need to send = %ld).", w->id, w->response.zhave, w->response.zsent, w->response.zhave - w->response.zsent);
2286                 WEB_CLIENT_IS_DEAD(w);
2287         }
2288         else {
2289                 debug(D_WEB_CLIENT, "%llu: Failed to send data to client.", w->id);
2290                 WEB_CLIENT_IS_DEAD(w);
2291         }
2292
2293         return(len);
2294 }
2295 #endif // NETDATA_WITH_ZLIB
2296
2297 ssize_t web_client_send(struct web_client *w) {
2298 #ifdef NETDATA_WITH_ZLIB
2299         if(likely(w->response.zoutput)) return web_client_send_deflate(w);
2300 #endif // NETDATA_WITH_ZLIB
2301
2302         ssize_t bytes;
2303
2304         if(unlikely(w->response.data->len - w->response.sent == 0)) {
2305                 // there is nothing to send
2306
2307                 debug(D_WEB_CLIENT, "%llu: Out of output data.", w->id);
2308
2309                 // there can be two cases for this
2310                 // A. we have done everything
2311                 // B. we temporarily have nothing to send, waiting for the buffer to be filled by ifd
2312
2313                 if(w->mode == WEB_CLIENT_MODE_FILECOPY && w->wait_receive && w->response.rlen && w->response.rlen > w->response.data->len) {
2314                         // we have to wait, more data will come
2315                         debug(D_WEB_CLIENT, "%llu: Waiting for more data to become available.", w->id);
2316                         w->wait_send = 0;
2317                         return 0;
2318                 }
2319
2320                 if(unlikely(!w->keepalive)) {
2321                         debug(D_WEB_CLIENT, "%llu: Closing (keep-alive is not enabled). %ld bytes sent.", w->id, w->response.sent);
2322                         WEB_CLIENT_IS_DEAD(w);
2323                         return 0;
2324                 }
2325
2326                 web_client_reset(w);
2327                 debug(D_WEB_CLIENT, "%llu: Done sending all data on socket. Waiting for next request on the same socket.", w->id);
2328                 return 0;
2329         }
2330
2331         bytes = send(w->ofd, &w->response.data->buffer[w->response.sent], w->response.data->len - w->response.sent, MSG_DONTWAIT);
2332         if(likely(bytes > 0)) {
2333                 w->stats_sent_bytes += bytes;
2334                 w->response.sent += bytes;
2335                 debug(D_WEB_CLIENT, "%llu: Sent %d bytes.", w->id, bytes);
2336         }
2337         else if(likely(bytes == 0)) {
2338                 debug(D_WEB_CLIENT, "%llu: Did not send any bytes to the client.", w->id);
2339                 WEB_CLIENT_IS_DEAD(w);
2340         }
2341         else {
2342                 debug(D_WEB_CLIENT, "%llu: Failed to send data to client.", w->id);
2343                 WEB_CLIENT_IS_DEAD(w);
2344         }
2345
2346         return(bytes);
2347 }
2348
2349 ssize_t web_client_receive(struct web_client *w)
2350 {
2351         // do we have any space for more data?
2352         buffer_need_bytes(w->response.data, WEB_REQUEST_LENGTH);
2353
2354         ssize_t left = w->response.data->size - w->response.data->len;
2355         ssize_t bytes;
2356
2357         if(unlikely(w->mode == WEB_CLIENT_MODE_FILECOPY))
2358                 bytes = read(w->ifd, &w->response.data->buffer[w->response.data->len], (size_t) (left - 1));
2359         else
2360                 bytes = recv(w->ifd, &w->response.data->buffer[w->response.data->len], (size_t) (left - 1), MSG_DONTWAIT);
2361
2362         if(likely(bytes > 0)) {
2363                 if(w->mode != WEB_CLIENT_MODE_FILECOPY)
2364                         w->stats_received_bytes += bytes;
2365
2366                 size_t old = w->response.data->len;
2367                 w->response.data->len += bytes;
2368                 w->response.data->buffer[w->response.data->len] = '\0';
2369
2370                 debug(D_WEB_CLIENT, "%llu: Received %d bytes.", w->id, bytes);
2371                 debug(D_WEB_DATA, "%llu: Received data: '%s'.", w->id, &w->response.data->buffer[old]);
2372
2373                 if(w->mode == WEB_CLIENT_MODE_FILECOPY) {
2374                         w->wait_send = 1;
2375
2376                         if(w->response.rlen && w->response.data->len >= w->response.rlen)
2377                                 w->wait_receive = 0;
2378                 }
2379         }
2380         else if(likely(bytes == 0)) {
2381                 debug(D_WEB_CLIENT, "%llu: Out of input data.", w->id);
2382
2383                 // if we cannot read, it means we have an error on input.
2384                 // if however, we are copying a file from ifd to ofd, we should not return an error.
2385                 // in this case, the error should be generated when the file has been sent to the client.
2386
2387                 if(w->mode == WEB_CLIENT_MODE_FILECOPY) {
2388                         // we are copying data from ifd to ofd
2389                         // let it finish copying...
2390                         w->wait_receive = 0;
2391
2392                         debug(D_WEB_CLIENT, "%llu: Read the whole file.", w->id);
2393                         if(w->ifd != w->ofd) close(w->ifd);
2394                         w->ifd = w->ofd;
2395                 }
2396                 else {
2397                         debug(D_WEB_CLIENT, "%llu: failed to receive data.", w->id);
2398                         WEB_CLIENT_IS_DEAD(w);
2399                 }
2400         }
2401         else {
2402                 debug(D_WEB_CLIENT, "%llu: receive data failed.", w->id);
2403                 WEB_CLIENT_IS_DEAD(w);
2404         }
2405
2406         return(bytes);
2407 }
2408
2409
2410 // --------------------------------------------------------------------------------------
2411 // the thread of a single client
2412
2413 // 1. waits for input and output, using async I/O
2414 // 2. it processes HTTP requests
2415 // 3. it generates HTTP responses
2416 // 4. it copies data from input to output if mode is FILECOPY
2417
2418 void *web_client_main(void *ptr)
2419 {
2420         if(pthread_setcanceltype(PTHREAD_CANCEL_DEFERRED, NULL) != 0)
2421                 error("Cannot set pthread cancel type to DEFERRED.");
2422
2423         if(pthread_setcancelstate(PTHREAD_CANCEL_ENABLE, NULL) != 0)
2424                 error("Cannot set pthread cancel state to ENABLE.");
2425
2426         struct web_client *w = ptr;
2427         struct pollfd fds[2], *ifd, *ofd;
2428         int retval, fdmax = 0, timeout;
2429
2430         log_access("%llu: %s port %s connected on thread task id %d", w->id, w->client_ip, w->client_port, gettid());
2431
2432         for(;;) {
2433                 if(unlikely(w->dead)) {
2434                         debug(D_WEB_CLIENT, "%llu: client is dead.", w->id);
2435                         break;
2436                 }
2437                 else if(unlikely(!w->wait_receive && !w->wait_send)) {
2438                         debug(D_WEB_CLIENT, "%llu: client is not set for neither receiving nor sending data.");
2439                         break;
2440                 }
2441
2442                 if(unlikely(w->ifd < 0 || w->ofd < 0)) {
2443                         error("%llu: invalid file descriptor, ifd = %d, ofd = %d (required 0 <= fd", w->id, w->ifd, w->ofd);
2444                         break;
2445                 }
2446
2447                 if(w->ifd == w->ofd) {
2448                         fds[0].fd = w->ifd;
2449                         fds[0].events = 0;
2450                         fds[0].revents = 0;
2451
2452                         if(w->wait_receive) fds[0].events |= POLLIN;
2453                         if(w->wait_send)    fds[0].events |= POLLOUT;
2454
2455                         fds[1].fd = -1;
2456                         fds[1].events = 0;
2457                         fds[1].revents = 0;
2458
2459                         ifd = ofd = &fds[0];
2460
2461                         fdmax = 1;
2462                 }
2463                 else {
2464                         fds[0].fd = w->ifd;
2465                         fds[0].events = 0;
2466                         fds[0].revents = 0;
2467                         if(w->wait_receive) fds[0].events |= POLLIN;
2468                         ifd = &fds[0];
2469
2470                         fds[1].fd = w->ofd;
2471                         fds[1].events = 0;
2472                         fds[1].revents = 0;
2473                         if(w->wait_send)    fds[1].events |= POLLOUT;
2474                         ofd = &fds[1];
2475
2476                         fdmax = 2;
2477                 }
2478
2479                 debug(D_WEB_CLIENT, "%llu: Waiting socket async I/O for %s %s", w->id, w->wait_receive?"INPUT":"", w->wait_send?"OUTPUT":"");
2480                 errno = 0;
2481                 timeout = web_client_timeout * 1000;
2482                 retval = poll(fds, fdmax, timeout);
2483
2484                 if(unlikely(retval == -1)) {
2485                         if(errno == EAGAIN || errno == EINTR) {
2486                                 debug(D_WEB_CLIENT, "%llu: EAGAIN received.", w->id);
2487                                 continue;
2488                         }
2489
2490                         debug(D_WEB_CLIENT, "%llu: LISTENER: poll() failed (input fd = %d, output fd = %d). Closing client.", w->id, w->ifd, w->ofd);
2491                         break;
2492                 }
2493                 else if(unlikely(!retval)) {
2494                         debug(D_WEB_CLIENT, "%llu: Timeout while waiting socket async I/O for %s %s", w->id, w->wait_receive?"INPUT":"", w->wait_send?"OUTPUT":"");
2495                         break;
2496                 }
2497
2498                 int used = 0;
2499                 if(w->wait_send && ofd->revents & POLLOUT) {
2500                         used++;
2501                         if(web_client_send(w) < 0) {
2502                                 debug(D_WEB_CLIENT, "%llu: Cannot send data to client. Closing client.", w->id);
2503                                 break;
2504                         }
2505                 }
2506
2507                 if(w->wait_receive && (ifd->revents & POLLIN || ifd->revents & POLLPRI)) {
2508                         used++;
2509                         if(web_client_receive(w) < 0) {
2510                                 debug(D_WEB_CLIENT, "%llu: Cannot receive data from client. Closing client.", w->id);
2511                                 break;
2512                         }
2513
2514                         if(w->mode == WEB_CLIENT_MODE_NORMAL) {
2515                                 debug(D_WEB_CLIENT, "%llu: Attempting to process received data.", w->id);
2516                                 web_client_process(w);
2517                         }
2518                 }
2519
2520                 if(unlikely(!used)) {
2521                         debug(D_WEB_CLIENT_ACCESS, "%llu: Received error on socket.", w->id);
2522                         break;
2523                 }
2524         }
2525
2526         web_client_reset(w);
2527
2528         log_access("%llu: %s port %s disconnected from thread task id %d", w->id, w->client_ip, w->client_port, gettid());
2529         debug(D_WEB_CLIENT, "%llu: done...", w->id);
2530
2531         // close the sockets/files now
2532         // to free file descriptors
2533         if(w->ifd == w->ofd) {
2534                 if(w->ifd != -1) close(w->ifd);
2535         }
2536         else {
2537                 if(w->ifd != -1) close(w->ifd);
2538                 if(w->ofd != -1) close(w->ofd);
2539         }
2540         w->ifd = -1;
2541         w->ofd = -1;
2542
2543         w->obsolete = 1;
2544
2545         pthread_exit(NULL);
2546         return NULL;
2547 }