]> arthur.barton.de Git - netdata.git/blob - src/web_client.c
Merge pull request #479 from ktsaou/master
[netdata.git] / src / web_client.c
1 #ifdef HAVE_CONFIG_H
2 #include <config.h>
3 #endif
4 #include <unistd.h>
5 #include <stdlib.h>
6 #include <sys/types.h>
7 #include <sys/socket.h>
8 #include <netinet/in.h>
9 #include <arpa/inet.h>
10 #include <errno.h>
11 #include <pthread.h>
12 #include <sys/stat.h>
13 #include <fcntl.h>
14 #include <malloc.h>
15 #include <pwd.h>
16 #include <grp.h>
17 #include <ctype.h>
18 #include <poll.h>
19
20 // TCP_CORK
21 #include <netinet/tcp.h>
22
23 #include "common.h"
24 #include "log.h"
25 #include "appconfig.h"
26 #include "url.h"
27 #include "web_buffer.h"
28 #include "web_server.h"
29 #include "global_statistics.h"
30 #include "rrd.h"
31 #include "rrd2json.h"
32 #include "registry.h"
33
34 #include "web_client.h"
35
36 #define INITIAL_WEB_DATA_LENGTH 16384
37 #define WEB_REQUEST_LENGTH 16384
38 #define TOO_BIG_REQUEST 16384
39
40 int web_client_timeout = DEFAULT_DISCONNECT_IDLE_WEB_CLIENTS_AFTER_SECONDS;
41
42 #ifdef NETDATA_WITH_ZLIB
43 int web_enable_gzip = 1, web_gzip_level = 3, web_gzip_strategy = Z_DEFAULT_STRATEGY;
44 #endif /* NETDATA_WITH_ZLIB */
45
46 extern int netdata_exit;
47
48 struct web_client *web_clients = NULL;
49 unsigned long long web_clients_count = 0;
50
51 inline int web_client_crock_socket(struct web_client *w) {
52 #ifdef TCP_CORK
53         if(likely(!w->tcp_cork && w->ofd != -1)) {
54                 w->tcp_cork = 1;
55                 if(unlikely(setsockopt(w->ofd, IPPROTO_TCP, TCP_CORK, (char *) &w->tcp_cork, sizeof(int)) != 0)) {
56                         error("%llu: failed to enable TCP_CORK on socket.", w->id);
57                         w->tcp_cork = 0;
58                         return -1;
59                 }
60         }
61 #endif /* TCP_CORK */
62
63         return 0;
64 }
65
66 inline int web_client_uncrock_socket(struct web_client *w) {
67 #ifdef TCP_CORK
68         if(likely(w->tcp_cork && w->ofd != -1)) {
69                 w->tcp_cork = 0;
70                 if(unlikely(setsockopt(w->ofd, IPPROTO_TCP, TCP_CORK, (char *) &w->tcp_cork, sizeof(int)) != 0)) {
71                         error("%llu: failed to disable TCP_CORK on socket.", w->id);
72                         w->tcp_cork = 1;
73                         return -1;
74                 }
75         }
76 #endif /* TCP_CORK */
77
78         return 0;
79 }
80
81 struct web_client *web_client_create(int listener)
82 {
83         struct web_client *w;
84
85         w = calloc(1, sizeof(struct web_client));
86         if(!w) {
87                 error("Cannot allocate new web_client memory.");
88                 return NULL;
89         }
90
91         w->id = ++web_clients_count;
92         w->mode = WEB_CLIENT_MODE_NORMAL;
93
94         {
95                 struct sockaddr *sadr;
96                 socklen_t addrlen;
97
98                 sadr = (struct sockaddr*) &w->clientaddr;
99                 addrlen = sizeof(w->clientaddr);
100
101                 w->ifd = accept(listener, sadr, &addrlen);
102                 if (w->ifd == -1) {
103                         error("%llu: Cannot accept new incoming connection.", w->id);
104                         free(w);
105                         return NULL;
106                 }
107                 w->ofd = w->ifd;
108
109                 if(getnameinfo(sadr, addrlen, w->client_ip, NI_MAXHOST, w->client_port, NI_MAXSERV, NI_NUMERICHOST | NI_NUMERICSERV) != 0) {
110                         error("Cannot getnameinfo() on received client connection.");
111                         strncpyz(w->client_ip,   "UNKNOWN", NI_MAXHOST);
112                         strncpyz(w->client_port, "UNKNOWN", NI_MAXSERV);
113                 }
114                 w->client_ip[NI_MAXHOST]   = '\0';
115                 w->client_port[NI_MAXSERV] = '\0';
116
117                 switch(sadr->sa_family) {
118                 case AF_INET:
119                         debug(D_WEB_CLIENT_ACCESS, "%llu: New IPv4 web client from %s port %s on socket %d.", w->id, w->client_ip, w->client_port, w->ifd);
120                         break;
121
122                 case AF_INET6:
123                         if(strncmp(w->client_ip, "::ffff:", 7) == 0) {
124                                 strcpy(w->client_ip, &w->client_ip[7]);
125                                 debug(D_WEB_CLIENT_ACCESS, "%llu: New IPv4 web client from %s port %s on socket %d.", w->id, w->client_ip, w->client_port, w->ifd);
126                         }
127                         else
128                                 debug(D_WEB_CLIENT_ACCESS, "%llu: New IPv6 web client from %s port %s on socket %d.", w->id, w->client_ip, w->client_port, w->ifd);
129                         break;
130
131                 default:
132                         debug(D_WEB_CLIENT_ACCESS, "%llu: New UNKNOWN web client from %s port %s on socket %d.", w->id, w->client_ip, w->client_port, w->ifd);
133                         break;
134                 }
135
136                 int flag = 1;
137                 if(setsockopt(w->ofd, IPPROTO_TCP, TCP_NODELAY, (char *) &flag, sizeof(int)) != 0)
138                         error("%llu: failed to enable TCP_NODELAY on socket.", w->id);
139
140                 flag = 1;
141                 if(setsockopt(w->ifd, SOL_SOCKET, SO_KEEPALIVE, (char *) &flag, sizeof(int)) != 0)
142                         error("%llu: Cannot set SO_KEEPALIVE on socket.", w->id);
143
144
145         }
146
147         w->response.data = buffer_create(INITIAL_WEB_DATA_LENGTH);
148         if(unlikely(!w->response.data)) {
149                 // no need for error log - web_buffer_create already logged the error
150                 close(w->ifd);
151                 free(w);
152                 return NULL;
153         }
154
155         w->response.header = buffer_create(HTTP_RESPONSE_HEADER_SIZE);
156         if(unlikely(!w->response.header)) {
157                 // no need for error log - web_buffer_create already logged the error
158                 buffer_free(w->response.data);
159                 close(w->ifd);
160                 free(w);
161                 return NULL;
162         }
163
164         w->response.header_output = buffer_create(HTTP_RESPONSE_HEADER_SIZE);
165         if(unlikely(!w->response.header_output)) {
166                 // no need for error log - web_buffer_create already logged the error
167                 buffer_free(w->response.header);
168                 buffer_free(w->response.data);
169                 close(w->ifd);
170                 free(w);
171                 return NULL;
172         }
173
174         w->origin[0] = '*';
175         w->wait_receive = 1;
176
177         if(web_clients) web_clients->prev = w;
178         w->next = web_clients;
179         web_clients = w;
180
181         global_statistics.connected_clients++;
182
183         return(w);
184 }
185
186 void web_client_reset(struct web_client *w) {
187         web_client_uncrock_socket(w);
188
189         debug(D_WEB_CLIENT, "%llu: Reseting client.", w->id);
190
191         if(likely(w->last_url[0])) {
192                 struct timeval tv;
193                 gettimeofday(&tv, NULL);
194
195                 size_t size = (w->mode == WEB_CLIENT_MODE_FILECOPY)?w->response.rlen:w->response.data->len;
196                 size_t sent = size;
197 #ifdef NETDATA_WITH_ZLIB
198                 if(likely(w->response.zoutput)) sent = (size_t)w->response.zstream.total_out;
199 #endif
200
201                 // --------------------------------------------------------------------
202                 // global statistics
203
204                 if(web_server_mode == WEB_SERVER_MODE_MULTI_THREADED)
205                         global_statistics_lock();
206
207                 global_statistics.web_requests++;
208                 global_statistics.web_usec += usecdiff(&tv, &w->tv_in);
209                 global_statistics.bytes_received += w->stats_received_bytes;
210                 global_statistics.bytes_sent += w->stats_sent_bytes;
211                 global_statistics.content_size += size;
212                 global_statistics.compressed_content_size += sent;
213
214                 if(web_server_mode == WEB_SERVER_MODE_MULTI_THREADED)
215                         global_statistics_unlock();
216
217                 w->stats_received_bytes = 0;
218                 w->stats_sent_bytes = 0;
219
220
221                 // --------------------------------------------------------------------
222                 // access log
223
224                 log_access("%llu: (sent/all = %zu/%zu bytes %0.0f%%, prep/sent/total = %0.2f/%0.2f/%0.2f ms) %s: %d '%s'",
225                                    w->id,
226                                    sent, size, -((size > 0) ? ((float) (size - sent) / (float) size * 100.0) : 0.0),
227                                    (float) usecdiff(&w->tv_ready, &w->tv_in) / 1000.0,
228                                    (float) usecdiff(&tv, &w->tv_ready) / 1000.0,
229                                    (float) usecdiff(&tv, &w->tv_in) / 1000.0,
230                                    (w->mode == WEB_CLIENT_MODE_FILECOPY) ? "filecopy" : ((w->mode == WEB_CLIENT_MODE_OPTIONS)
231                                                                                                                                                  ? "options" : "data"),
232                                    w->response.code,
233                                    w->last_url
234                 );
235         }
236
237         if(unlikely(w->mode == WEB_CLIENT_MODE_FILECOPY)) {
238                 if(w->ifd != w->ofd) {
239                         debug(D_WEB_CLIENT, "%llu: Closing filecopy input file descriptor %d.", w->id, w->ifd);
240                         if(w->ifd != -1) close(w->ifd);
241                         w->ifd = w->ofd;
242                 }
243         }
244
245         w->last_url[0] = '\0';
246         w->cookie1[0] = '\0';
247         w->cookie2[0] = '\0';
248         w->origin[0] = '*';
249         w->origin[1] = '\0';
250
251         w->mode = WEB_CLIENT_MODE_NORMAL;
252
253         w->keepalive = 0;
254         w->decoded_url[0] = '\0';
255
256         buffer_reset(w->response.header_output);
257         buffer_reset(w->response.header);
258         buffer_reset(w->response.data);
259         w->response.rlen = 0;
260         w->response.sent = 0;
261         w->response.code = 0;
262
263         w->wait_receive = 1;
264         w->wait_send = 0;
265
266         w->response.zoutput = 0;
267
268         // if we had enabled compression, release it
269 #ifdef NETDATA_WITH_ZLIB
270         if(w->response.zinitialized) {
271                 debug(D_DEFLATE, "%llu: Freeing compression resources.", w->id);
272                 deflateEnd(&w->response.zstream);
273                 w->response.zsent = 0;
274                 w->response.zhave = 0;
275                 w->response.zstream.avail_in = 0;
276                 w->response.zstream.avail_out = 0;
277                 w->response.zstream.total_in = 0;
278                 w->response.zstream.total_out = 0;
279                 w->response.zinitialized = 0;
280         }
281 #endif // NETDATA_WITH_ZLIB
282 }
283
284 struct web_client *web_client_free(struct web_client *w) {
285         web_client_reset(w);
286
287         struct web_client *n = w->next;
288         if(w == web_clients) web_clients = n;
289
290         debug(D_WEB_CLIENT_ACCESS, "%llu: Closing web client from %s port %s.", w->id, w->client_ip, w->client_port);
291
292         if(w->prev)     w->prev->next = w->next;
293         if(w->next) w->next->prev = w->prev;
294         if(w->response.header_output) buffer_free(w->response.header_output);
295         if(w->response.header) buffer_free(w->response.header);
296         if(w->response.data) buffer_free(w->response.data);
297         if(w->ifd != -1) close(w->ifd);
298         if(w->ofd != -1 && w->ofd != w->ifd) close(w->ofd);
299         free(w);
300
301         global_statistics.connected_clients--;
302
303         return(n);
304 }
305
306 uid_t web_files_uid(void) {
307         static char *web_owner = NULL;
308         static uid_t owner_uid = 0;
309
310         if(unlikely(!web_owner)) {
311                 web_owner = config_get("global", "web files owner", config_get("global", "run as user", ""));
312                 if(!web_owner || !*web_owner)
313                         owner_uid = geteuid();
314                 else {
315                         // getpwnam() is not thread safe,
316                         // but we have called this function once
317                         // while single threaded
318                         struct passwd *pw = getpwnam(web_owner);
319                         if(!pw) {
320                                 error("User '%s' is not present. Ignoring option.", web_owner);
321                                 owner_uid = geteuid();
322                         }
323                         else {
324                                 debug(D_WEB_CLIENT, "Web files owner set to %s.", web_owner);
325                                 owner_uid = pw->pw_uid;
326                         }
327                 }
328         }
329
330         return(owner_uid);
331 }
332
333 gid_t web_files_gid(void) {
334         static char *web_group = NULL;
335         static gid_t owner_gid = 0;
336
337         if(unlikely(!web_group)) {
338                 web_group = config_get("global", "web files group", config_get("global", "web files owner", ""));
339                 if(!web_group || !*web_group)
340                         owner_gid = getegid();
341                 else {
342                         // getgrnam() is not thread safe,
343                         // but we have called this function once
344                         // while single threaded
345                         struct group *gr = getgrnam(web_group);
346                         if(!gr) {
347                                 error("Group '%s' is not present. Ignoring option.", web_group);
348                                 owner_gid = getegid();
349                         }
350                         else {
351                                 debug(D_WEB_CLIENT, "Web files group set to %s.", web_group);
352                                 owner_gid = gr->gr_gid;
353                         }
354                 }
355         }
356
357         return(owner_gid);
358 }
359
360 int mysendfile(struct web_client *w, char *filename)
361 {
362         static char *web_dir = NULL;
363
364         // initialize our static data
365         if(unlikely(!web_dir)) web_dir = config_get("global", "web files directory", WEB_DIR);
366
367         debug(D_WEB_CLIENT, "%llu: Looking for file '%s/%s'", w->id, web_dir, filename);
368
369         // skip leading slashes
370         while (*filename == '/') filename++;
371
372         // if the filename contain known paths, skip them
373         if(strncmp(filename, WEB_PATH_FILE "/", strlen(WEB_PATH_FILE) + 1) == 0) filename = &filename[strlen(WEB_PATH_FILE) + 1];
374
375         char *s;
376         for(s = filename; *s ;s++) {
377                 if( !isalnum(*s) && *s != '/' && *s != '.' && *s != '-' && *s != '_') {
378                         debug(D_WEB_CLIENT_ACCESS, "%llu: File '%s' is not acceptable.", w->id, filename);
379                         buffer_sprintf(w->response.data, "File '%s' cannot be served. Filename contains invalid character '%c'", filename, *s);
380                         return 400;
381                 }
382         }
383
384         // if the filename contains a .. refuse to serve it
385         if(strstr(filename, "..") != 0) {
386                 debug(D_WEB_CLIENT_ACCESS, "%llu: File '%s' is not acceptable.", w->id, filename);
387                 buffer_sprintf(w->response.data, "File '%s' cannot be served. Relative filenames with '..' in them are not supported.", filename);
388                 return 400;
389         }
390
391         // access the file
392         char webfilename[FILENAME_MAX + 1];
393         snprintfz(webfilename, FILENAME_MAX, "%s/%s", web_dir, filename);
394
395         // check if the file exists
396         struct stat stat;
397         if(lstat(webfilename, &stat) != 0) {
398                 debug(D_WEB_CLIENT_ACCESS, "%llu: File '%s' is not found.", w->id, webfilename);
399                 buffer_sprintf(w->response.data, "File '%s' does not exist, or is not accessible.", webfilename);
400                 return 404;
401         }
402
403         // check if the file is owned by expected user
404         if(stat.st_uid != web_files_uid()) {
405                 error("%llu: File '%s' is owned by user %d (expected user %d). Access Denied.", w->id, webfilename, stat.st_uid, web_files_uid());
406                 buffer_sprintf(w->response.data, "Access to file '%s' is not permitted.", webfilename);
407                 return 403;
408         }
409
410         // check if the file is owned by expected group
411         if(stat.st_gid != web_files_gid()) {
412                 error("%llu: File '%s' is owned by group %d (expected group %d). Access Denied.", w->id, webfilename, stat.st_gid, web_files_gid());
413                 buffer_sprintf(w->response.data, "Access to file '%s' is not permitted.", webfilename);
414                 return 403;
415         }
416
417         if((stat.st_mode & S_IFMT) == S_IFDIR) {
418                 snprintfz(webfilename, FILENAME_MAX, "%s/index.html", filename);
419                 return mysendfile(w, webfilename);
420         }
421
422         if((stat.st_mode & S_IFMT) != S_IFREG) {
423                 error("%llu: File '%s' is not a regular file. Access Denied.", w->id, webfilename);
424                 buffer_sprintf(w->response.data, "Access to file '%s' is not permitted.", webfilename);
425                 return 403;
426         }
427
428         // open the file
429         w->ifd = open(webfilename, O_NONBLOCK, O_RDONLY);
430         if(w->ifd == -1) {
431                 w->ifd = w->ofd;
432
433                 if(errno == EBUSY || errno == EAGAIN) {
434                         error("%llu: File '%s' is busy, sending 307 Moved Temporarily to force retry.", w->id, webfilename);
435                         buffer_sprintf(w->response.header, "Location: /" WEB_PATH_FILE "/%s\r\n", filename);
436                         buffer_sprintf(w->response.data, "The file '%s' is currently busy. Please try again later.", webfilename);
437                         return 307;
438                 }
439                 else {
440                         error("%llu: Cannot open file '%s'.", w->id, webfilename);
441                         buffer_sprintf(w->response.data, "Cannot open file '%s'.", webfilename);
442                         return 404;
443                 }
444         }
445
446         // pick a Content-Type for the file
447                  if(strstr(filename, ".html") != NULL)  w->response.data->contenttype = CT_TEXT_HTML;
448         else if(strstr(filename, ".js")   != NULL)      w->response.data->contenttype = CT_APPLICATION_X_JAVASCRIPT;
449         else if(strstr(filename, ".css")  != NULL)      w->response.data->contenttype = CT_TEXT_CSS;
450         else if(strstr(filename, ".xml")  != NULL)      w->response.data->contenttype = CT_TEXT_XML;
451         else if(strstr(filename, ".xsl")  != NULL)      w->response.data->contenttype = CT_TEXT_XSL;
452         else if(strstr(filename, ".txt")  != NULL)  w->response.data->contenttype = CT_TEXT_PLAIN;
453         else if(strstr(filename, ".svg")  != NULL)  w->response.data->contenttype = CT_IMAGE_SVG_XML;
454         else if(strstr(filename, ".ttf")  != NULL)  w->response.data->contenttype = CT_APPLICATION_X_FONT_TRUETYPE;
455         else if(strstr(filename, ".otf")  != NULL)  w->response.data->contenttype = CT_APPLICATION_X_FONT_OPENTYPE;
456         else if(strstr(filename, ".woff2")!= NULL)  w->response.data->contenttype = CT_APPLICATION_FONT_WOFF2;
457         else if(strstr(filename, ".woff") != NULL)  w->response.data->contenttype = CT_APPLICATION_FONT_WOFF;
458         else if(strstr(filename, ".eot")  != NULL)  w->response.data->contenttype = CT_APPLICATION_VND_MS_FONTOBJ;
459         else if(strstr(filename, ".png")  != NULL)  w->response.data->contenttype = CT_IMAGE_PNG;
460         else if(strstr(filename, ".jpg")  != NULL)  w->response.data->contenttype = CT_IMAGE_JPG;
461         else if(strstr(filename, ".jpeg") != NULL)  w->response.data->contenttype = CT_IMAGE_JPG;
462         else if(strstr(filename, ".gif")  != NULL)  w->response.data->contenttype = CT_IMAGE_GIF;
463         else if(strstr(filename, ".bmp")  != NULL)  w->response.data->contenttype = CT_IMAGE_BMP;
464         else if(strstr(filename, ".ico")  != NULL)  w->response.data->contenttype = CT_IMAGE_XICON;
465         else if(strstr(filename, ".icns") != NULL)  w->response.data->contenttype = CT_IMAGE_ICNS;
466         else w->response.data->contenttype = CT_APPLICATION_OCTET_STREAM;
467
468         debug(D_WEB_CLIENT_ACCESS, "%llu: Sending file '%s' (%ld bytes, ifd %d, ofd %d).", w->id, webfilename, stat.st_size, w->ifd, w->ofd);
469
470         w->mode = WEB_CLIENT_MODE_FILECOPY;
471         w->wait_receive = 1;
472         w->wait_send = 0;
473         buffer_flush(w->response.data);
474         w->response.rlen = stat.st_size;
475         w->response.data->date = stat.st_mtim.tv_sec;
476
477         return 200;
478 }
479
480
481 #ifdef NETDATA_WITH_ZLIB
482 void web_client_enable_deflate(struct web_client *w, int gzip) {
483         if(unlikely(w->response.zinitialized)) {
484                 error("%llu: Compression has already be initialized for this client.", w->id);
485                 return;
486         }
487
488         if(unlikely(w->response.sent)) {
489                 error("%llu: Cannot enable compression in the middle of a conversation.", w->id);
490                 return;
491         }
492
493         w->response.zstream.zalloc = Z_NULL;
494         w->response.zstream.zfree = Z_NULL;
495         w->response.zstream.opaque = Z_NULL;
496
497         w->response.zstream.next_in = (Bytef *)w->response.data->buffer;
498         w->response.zstream.avail_in = 0;
499         w->response.zstream.total_in = 0;
500
501         w->response.zstream.next_out = w->response.zbuffer;
502         w->response.zstream.avail_out = 0;
503         w->response.zstream.total_out = 0;
504
505         w->response.zstream.zalloc = Z_NULL;
506         w->response.zstream.zfree = Z_NULL;
507         w->response.zstream.opaque = Z_NULL;
508
509 //      if(deflateInit(&w->response.zstream, Z_DEFAULT_COMPRESSION) != Z_OK) {
510 //              error("%llu: Failed to initialize zlib. Proceeding without compression.", w->id);
511 //              return;
512 //      }
513
514         // Select GZIP compression: windowbits = 15 + 16 = 31
515         if(deflateInit2(&w->response.zstream, web_gzip_level, Z_DEFLATED, 15 + ((gzip)?16:0), 8, web_gzip_strategy) != Z_OK) {
516                 error("%llu: Failed to initialize zlib. Proceeding without compression.", w->id);
517                 return;
518         }
519
520         w->response.zsent = 0;
521         w->response.zoutput = 1;
522         w->response.zinitialized = 1;
523
524         debug(D_DEFLATE, "%llu: Initialized compression.", w->id);
525 }
526 #endif // NETDATA_WITH_ZLIB
527
528 uint32_t web_client_api_request_v1_data_options(char *o)
529 {
530         uint32_t ret = 0x00000000;
531         char *tok;
532
533         while(o && *o && (tok = mystrsep(&o, ", |"))) {
534                 if(!*tok) continue;
535
536                 if(!strcmp(tok, "nonzero"))
537                         ret |= RRDR_OPTION_NONZERO;
538                 else if(!strcmp(tok, "flip") || !strcmp(tok, "reversed") || !strcmp(tok, "reverse"))
539                         ret |= RRDR_OPTION_REVERSED;
540                 else if(!strcmp(tok, "jsonwrap"))
541                         ret |= RRDR_OPTION_JSON_WRAP;
542                 else if(!strcmp(tok, "min2max"))
543                         ret |= RRDR_OPTION_MIN2MAX;
544                 else if(!strcmp(tok, "ms") || !strcmp(tok, "milliseconds"))
545                         ret |= RRDR_OPTION_MILLISECONDS;
546                 else if(!strcmp(tok, "abs") || !strcmp(tok, "absolute") || !strcmp(tok, "absolute_sum") || !strcmp(tok, "absolute-sum"))
547                         ret |= RRDR_OPTION_ABSOLUTE;
548                 else if(!strcmp(tok, "seconds"))
549                         ret |= RRDR_OPTION_SECONDS;
550                 else if(!strcmp(tok, "null2zero"))
551                         ret |= RRDR_OPTION_NULL2ZERO;
552                 else if(!strcmp(tok, "objectrows"))
553                         ret |= RRDR_OPTION_OBJECTSROWS;
554                 else if(!strcmp(tok, "google_json"))
555                         ret |= RRDR_OPTION_GOOGLE_JSON;
556                 else if(!strcmp(tok, "percentage"))
557                         ret |= RRDR_OPTION_PERCENTAGE;
558         }
559
560         return ret;
561 }
562
563 uint32_t web_client_api_request_v1_data_format(char *name)
564 {
565         if(!strcmp(name, DATASOURCE_FORMAT_DATATABLE_JSON)) // datatable
566                 return DATASOURCE_DATATABLE_JSON;
567
568         else if(!strcmp(name, DATASOURCE_FORMAT_DATATABLE_JSONP)) // datasource
569                 return DATASOURCE_DATATABLE_JSONP;
570
571         else if(!strcmp(name, DATASOURCE_FORMAT_JSON)) // json
572                 return DATASOURCE_JSON;
573
574         else if(!strcmp(name, DATASOURCE_FORMAT_JSONP)) // jsonp
575                 return DATASOURCE_JSONP;
576
577         else if(!strcmp(name, DATASOURCE_FORMAT_SSV)) // ssv
578                 return DATASOURCE_SSV;
579
580         else if(!strcmp(name, DATASOURCE_FORMAT_CSV)) // csv
581                 return DATASOURCE_CSV;
582
583         else if(!strcmp(name, DATASOURCE_FORMAT_TSV) || !strcmp(name, "tsv-excel")) // tsv
584                 return DATASOURCE_TSV;
585
586         else if(!strcmp(name, DATASOURCE_FORMAT_HTML)) // html
587                 return DATASOURCE_HTML;
588
589         else if(!strcmp(name, DATASOURCE_FORMAT_JS_ARRAY)) // array
590                 return DATASOURCE_JS_ARRAY;
591
592         else if(!strcmp(name, DATASOURCE_FORMAT_SSV_COMMA)) // ssvcomma
593                 return DATASOURCE_SSV_COMMA;
594
595         else if(!strcmp(name, DATASOURCE_FORMAT_CSV_JSON_ARRAY)) // csvjsonarray
596                 return DATASOURCE_CSV_JSON_ARRAY;
597
598         return DATASOURCE_JSON;
599 }
600
601 uint32_t web_client_api_request_v1_data_google_format(char *name)
602 {
603         if(!strcmp(name, "json"))
604                 return DATASOURCE_DATATABLE_JSONP;
605
606         else if(!strcmp(name, "html"))
607                 return DATASOURCE_HTML;
608
609         else if(!strcmp(name, "csv"))
610                 return DATASOURCE_CSV;
611
612         else if(!strcmp(name, "tsv-excel"))
613                 return DATASOURCE_TSV;
614
615         return DATASOURCE_JSON;
616 }
617
618 int web_client_api_request_v1_data_group(char *name)
619 {
620         if(!strcmp(name, "max"))
621                 return GROUP_MAX;
622
623         else if(!strcmp(name, "average"))
624                 return GROUP_AVERAGE;
625
626         return GROUP_MAX;
627 }
628
629 int web_client_api_request_v1_charts(struct web_client *w, char *url)
630 {
631         if(url) { ; }
632
633         buffer_flush(w->response.data);
634         w->response.data->contenttype = CT_APPLICATION_JSON;
635         rrd_stats_api_v1_charts(w->response.data);
636         return 200;
637 }
638
639 int web_client_api_request_v1_chart(struct web_client *w, char *url)
640 {
641         int ret = 400;
642         char *chart = NULL;
643
644         buffer_flush(w->response.data);
645
646         while(url) {
647                 char *value = mystrsep(&url, "?&[]");
648                 if(!value || !*value) continue;
649
650                 char *name = mystrsep(&value, "=");
651                 if(!name || !*name) continue;
652                 if(!value || !*value) continue;
653
654                 // name and value are now the parameters
655                 // they are not null and not empty
656
657                 if(!strcmp(name, "chart")) chart = value;
658                 //else {
659                 ///     buffer_sprintf(w->response.data, "Unknown parameter '%s' in request.", name);
660                 //      goto cleanup;
661                 //}
662         }
663
664         if(!chart || !*chart) {
665                 buffer_sprintf(w->response.data, "No chart id is given at the request.");
666                 goto cleanup;
667         }
668
669         RRDSET *st = rrdset_find(chart);
670         if(!st) st = rrdset_find_byname(chart);
671         if(!st) {
672                 buffer_sprintf(w->response.data, "Chart '%s' is not found.", chart);
673                 ret = 404;
674                 goto cleanup;
675         }
676
677         w->response.data->contenttype = CT_APPLICATION_JSON;
678         rrd_stats_api_v1_chart(st, w->response.data);
679         return 200;
680
681 cleanup:
682         return ret;
683 }
684
685 // returns the HTTP code
686 int web_client_api_request_v1_data(struct web_client *w, char *url)
687 {
688         debug(D_WEB_CLIENT, "%llu: API v1 data with URL '%s'", w->id, url);
689
690         int ret = 400;
691         BUFFER *dimensions = NULL;
692
693         buffer_flush(w->response.data);
694
695         char    *google_version = "0.6",
696                         *google_reqId = "0",
697                         *google_sig = "0",
698                         *google_out = "json",
699                         *responseHandler = NULL,
700                         *outFileName = NULL;
701
702         time_t last_timestamp_in_data = 0, google_timestamp = 0;
703
704         char *chart = NULL
705                         , *before_str = NULL
706                         , *after_str = NULL
707                         , *points_str = NULL;
708
709         int group = GROUP_MAX;
710         uint32_t format = DATASOURCE_JSON;
711         uint32_t options = 0x00000000;
712
713         while(url) {
714                 char *value = mystrsep(&url, "?&[]");
715                 if(!value || !*value) continue;
716
717                 char *name = mystrsep(&value, "=");
718                 if(!name || !*name) continue;
719                 if(!value || !*value) continue;
720
721                 debug(D_WEB_CLIENT, "%llu: API v1 data query param '%s' with value '%s'", w->id, name, value);
722
723                 // name and value are now the parameters
724                 // they are not null and not empty
725
726                 if(!strcmp(name, "chart")) chart = value;
727                 else if(!strcmp(name, "dimension") || !strcmp(name, "dim") || !strcmp(name, "dimensions") || !strcmp(name, "dims")) {
728                         if(!dimensions) dimensions = buffer_create(strlen(value));
729                         if(dimensions) {
730                                 buffer_strcat(dimensions, "|");
731                                 buffer_strcat(dimensions, value);
732                         }
733                 }
734                 else if(!strcmp(name, "after")) after_str = value;
735                 else if(!strcmp(name, "before")) before_str = value;
736                 else if(!strcmp(name, "points")) points_str = value;
737                 else if(!strcmp(name, "group")) {
738                         group = web_client_api_request_v1_data_group(value);
739                 }
740                 else if(!strcmp(name, "format")) {
741                         format = web_client_api_request_v1_data_format(value);
742                 }
743                 else if(!strcmp(name, "options")) {
744                         options |= web_client_api_request_v1_data_options(value);
745                 }
746                 else if(!strcmp(name, "callback")) {
747                         responseHandler = value;
748                 }
749                 else if(!strcmp(name, "filename")) {
750                         outFileName = value;
751                 }
752                 else if(!strcmp(name, "tqx")) {
753                         // parse Google Visualization API options
754                         // https://developers.google.com/chart/interactive/docs/dev/implementing_data_source
755                         char *tqx_name, *tqx_value;
756
757                         while(value) {
758                                 tqx_value = mystrsep(&value, ";");
759                                 if(!tqx_value || !*tqx_value) continue;
760
761                                 tqx_name = mystrsep(&tqx_value, ":");
762                                 if(!tqx_name || !*tqx_name) continue;
763                                 if(!tqx_value || !*tqx_value) continue;
764
765                                 if(!strcmp(tqx_name, "version"))
766                                         google_version = tqx_value;
767                                 else if(!strcmp(tqx_name, "reqId"))
768                                         google_reqId = tqx_value;
769                                 else if(!strcmp(tqx_name, "sig")) {
770                                         google_sig = tqx_value;
771                                         google_timestamp = strtoul(google_sig, NULL, 0);
772                                 }
773                                 else if(!strcmp(tqx_name, "out")) {
774                                         google_out = tqx_value;
775                                         format = web_client_api_request_v1_data_google_format(google_out);
776                                 }
777                                 else if(!strcmp(tqx_name, "responseHandler"))
778                                         responseHandler = tqx_value;
779                                 else if(!strcmp(tqx_name, "outFileName"))
780                                         outFileName = tqx_value;
781                         }
782                 }
783         }
784
785         if(!chart || !*chart) {
786                 buffer_sprintf(w->response.data, "No chart id is given at the request.");
787                 goto cleanup;
788         }
789
790         RRDSET *st = rrdset_find(chart);
791         if(!st) st = rrdset_find_byname(chart);
792         if(!st) {
793                 buffer_sprintf(w->response.data, "Chart '%s' is not found.", chart);
794                 ret = 404;
795                 goto cleanup;
796         }
797
798         long long before = (before_str && *before_str)?atol(before_str):0;
799         long long after  = (after_str  && *after_str) ?atol(after_str):0;
800         int       points = (points_str && *points_str)?atoi(points_str):0;
801
802         debug(D_WEB_CLIENT, "%llu: API command 'data' for chart '%s', dimensions '%s', after '%lld', before '%lld', points '%d', group '%u', format '%u', options '0x%08x'"
803                         , w->id
804                         , chart
805                         , (dimensions)?buffer_tostring(dimensions):""
806                         , after
807                         , before
808                         , points
809                         , group
810                         , format
811                         , options
812                         );
813
814         if(outFileName && *outFileName) {
815                 buffer_sprintf(w->response.header, "Content-Disposition: attachment; filename=\"%s\"\r\n", outFileName);
816                 debug(D_WEB_CLIENT, "%llu: generating outfilename header: '%s'", w->id, outFileName);
817         }
818
819         if(format == DATASOURCE_DATATABLE_JSONP) {
820                 if(responseHandler == NULL)
821                         responseHandler = "google.visualization.Query.setResponse";
822
823                 debug(D_WEB_CLIENT_ACCESS, "%llu: GOOGLE JSON/JSONP: version = '%s', reqId = '%s', sig = '%s', out = '%s', responseHandler = '%s', outFileName = '%s'",
824                                 w->id, google_version, google_reqId, google_sig, google_out, responseHandler, outFileName
825                         );
826
827                 buffer_sprintf(w->response.data,
828                         "%s({version:'%s',reqId:'%s',status:'ok',sig:'%lu',table:",
829                         responseHandler, google_version, google_reqId, st->last_updated.tv_sec);
830         }
831         else if(format == DATASOURCE_JSONP) {
832                 if(responseHandler == NULL)
833                         responseHandler = "callback";
834
835                 buffer_strcat(w->response.data, responseHandler);
836                 buffer_strcat(w->response.data, "(");
837         }
838
839         ret = rrd2format(st, w->response.data, dimensions, format, points, after, before, group, options, &last_timestamp_in_data);
840
841         if(format == DATASOURCE_DATATABLE_JSONP) {
842                 if(google_timestamp < last_timestamp_in_data)
843                         buffer_strcat(w->response.data, "});");
844
845                 else {
846                         // the client already has the latest data
847                         buffer_flush(w->response.data);
848                         buffer_sprintf(w->response.data,
849                                 "%s({version:'%s',reqId:'%s',status:'error',errors:[{reason:'not_modified',message:'Data not modified'}]});",
850                                 responseHandler, google_version, google_reqId);
851                 }
852         }
853         else if(format == DATASOURCE_JSONP)
854                 buffer_strcat(w->response.data, ");");
855
856 cleanup:
857         if(dimensions) buffer_free(dimensions);
858         return ret;
859 }
860
861 int web_client_api_request_v1_registry(struct web_client *w, char *url)
862 {
863         static uint32_t hash_action = 0, hash_access = 0, hash_hello = 0, hash_delete = 0, hash_search = 0,
864                         hash_switch = 0, hash_machine = 0, hash_url = 0, hash_name = 0, hash_delete_url = 0, hash_for = 0,
865                         hash_to = 0 /*, hash_redirects = 0 */;
866
867         if(unlikely(!hash_action)) {
868                 hash_action = simple_hash("action");
869                 hash_access = simple_hash("access");
870                 hash_hello = simple_hash("hello");
871                 hash_delete = simple_hash("delete");
872                 hash_search = simple_hash("search");
873                 hash_switch = simple_hash("switch");
874                 hash_machine = simple_hash("machine");
875                 hash_url = simple_hash("url");
876                 hash_name = simple_hash("name");
877                 hash_delete_url = simple_hash("delete_url");
878                 hash_for = simple_hash("for");
879                 hash_to = simple_hash("to");
880 /*
881                 hash_redirects = simple_hash("redirects");
882 */
883         }
884
885         char person_guid[36 + 1] = "";
886
887         debug(D_WEB_CLIENT, "%llu: API v1 registry with URL '%s'", w->id, url);
888
889         // FIXME
890         // The browser may send multiple cookies with our id
891         
892         char *cookie = strstr(w->response.data->buffer, NETDATA_REGISTRY_COOKIE_NAME "=");
893         if(cookie)
894                 strncpyz(person_guid, &cookie[sizeof(NETDATA_REGISTRY_COOKIE_NAME)], 36);
895
896         char action = '\0';
897         char *machine_guid = NULL,
898                         *machine_url = NULL,
899                         *url_name = NULL,
900                         *search_machine_guid = NULL,
901                         *delete_url = NULL,
902                         *to_person_guid = NULL;
903 /*
904         int redirects = 0;
905 */
906
907         while(url) {
908                 char *value = mystrsep(&url, "?&[]");
909                 if (!value || !*value) continue;
910
911                 char *name = mystrsep(&value, "=");
912                 if (!name || !*name) continue;
913                 if (!value || !*value) continue;
914
915                 debug(D_WEB_CLIENT, "%llu: API v1 registry query param '%s' with value '%s'", w->id, name, value);
916
917                 uint32_t hash = simple_hash(name);
918
919                 if(hash == hash_action && !strcmp(name, "action")) {
920                         uint32_t vhash = simple_hash(value);
921
922                         if(vhash == hash_access && !strcmp(value, "access")) action = 'A';
923                         else if(vhash == hash_hello && !strcmp(value, "hello")) action = 'H';
924                         else if(vhash == hash_delete && !strcmp(value, "delete")) action = 'D';
925                         else if(vhash == hash_search && !strcmp(value, "search")) action = 'S';
926                         else if(vhash == hash_switch && !strcmp(value, "switch")) action = 'W';
927 #ifdef NETDATA_INTERNAL_CHECKS
928             else error("unknown registry action '%s'", value);
929 #endif /* NETDATA_INTERNAL_CHECKS */
930                 }
931 /*
932                 else if(hash == hash_redirects && !strcmp(name, "redirects"))
933                         redirects = atoi(value);
934 */
935                 else if(hash == hash_machine && !strcmp(name, "machine"))
936                         machine_guid = value;
937
938                 else if(hash == hash_url && !strcmp(name, "url"))
939                         machine_url = value;
940
941                 else if(action == 'A') {
942                         if(hash == hash_name && !strcmp(name, "name"))
943                                 url_name = value;
944                 }
945                 else if(action == 'D') {
946                         if(hash == hash_delete_url && !strcmp(name, "delete_url"))
947                                 delete_url = value;
948                 }
949                 else if(action == 'S') {
950                         if(hash == hash_for && !strcmp(name, "for"))
951                                 search_machine_guid = value;
952                 }
953                 else if(action == 'W') {
954                         if(hash == hash_to && !strcmp(name, "to"))
955                                 to_person_guid = value;
956                 }
957 #ifdef NETDATA_INTERNAL_CHECKS
958                 else error("unused registry URL parameter '%s' with value '%s'", name, value);
959 #endif /* NETDATA_INTERNAL_CHECKS */
960         }
961
962         if(action == 'A' && (!machine_guid || !machine_url || !url_name)) {
963                 buffer_flush(w->response.data);
964                 buffer_sprintf(w->response.data, "Invalid registry request - access requires these parameters: machine ('%s'), url ('%s'), name ('%s')",
965                                            machine_guid?machine_guid:"UNSET", machine_url?machine_url:"UNSET", url_name?url_name:"UNSET");
966                 return 400;
967         }
968         else if(action == 'D' && (!machine_guid || !machine_url || !delete_url)) {
969                 buffer_flush(w->response.data);
970                 buffer_sprintf(w->response.data, "Invalid registry request - delete requires these parameters: machine ('%s'), url ('%s'), delete_url ('%s')",
971                                            machine_guid?machine_guid:"UNSET", machine_url?machine_url:"UNSET", delete_url?delete_url:"UNSET");
972                 return 400;
973         }
974         else if(action == 'S' && (!machine_guid || !machine_url || !search_machine_guid)) {
975                 buffer_flush(w->response.data);
976                 buffer_sprintf(w->response.data, "Invalid registry request - search requires these parameters: machine ('%s'), url ('%s'), for ('%s')",
977                                            machine_guid?machine_guid:"UNSET", machine_url?machine_url:"UNSET", search_machine_guid?search_machine_guid:"UNSET");
978                 return 400;
979         }
980         else if(action == 'W' && (!machine_guid || !machine_url || !to_person_guid)) {
981                 buffer_flush(w->response.data);
982                 buffer_sprintf(w->response.data, "Invalid registry request - switching identity requires these parameters: machine ('%s'), url ('%s'), to ('%s')",
983                                            machine_guid?machine_guid:"UNSET", machine_url?machine_url:"UNSET", to_person_guid?to_person_guid:"UNSET");
984                 return 400;
985         }
986
987         switch(action) {
988                 case 'A':
989                         if(registry_verify_cookies_redirects() > 0 && (!cookie || !person_guid[0])) {
990                                 buffer_flush(w->response.data);
991
992                                 registry_set_cookie(w, "give-me-back-this-cookie-please");
993                                 w->response.data->contenttype = CT_APPLICATION_JSON;
994                                 buffer_sprintf(w->response.data, "{ \"status\": \"redirect\", \"registry\": \"%s\" }", registry_to_announce());
995                                 return 200;
996
997 /*
998  * it seems that web browsers are ignoring 307 (Moved Temporarily)
999  * under certain conditions, when using CORS
1000  * so this is commented and we use application level redirects instead
1001  *
1002                                 redirects++;
1003
1004                                 if(redirects > registry_verify_cookies_redirects()) {
1005                                         buffer_flush(w->response.data);
1006                                         buffer_sprintf(w->response.data, "Your browser does not support cookies");
1007                                         return 400;
1008                                 }
1009
1010                                 char *encoded_url = url_encode(machine_url);
1011                                 if(!encoded_url) {
1012                                         error("%llu: Cannot URL encode string '%s'", w->id, machine_url);
1013                                         return 500;
1014                                 }
1015
1016                                 char *encoded_name = url_encode(url_name);
1017                                 if(!encoded_name) {
1018                                         free(encoded_url);
1019                                         error("%llu: Cannot URL encode string '%s'", w->id, url_name);
1020                                         return 500;
1021                                 }
1022
1023                                 char *encoded_guid = url_encode(machine_guid);
1024                                 if(!encoded_guid) {
1025                                         free(encoded_url);
1026                                         free(encoded_name);
1027                                         error("%llu: Cannot URL encode string '%s'", w->id, machine_guid);
1028                                         return 500;
1029                                 }
1030
1031                                 buffer_sprintf(w->response.header, "Location: %s/api/v1/registry?action=access&machine=%s&name=%s&url=%s&redirects=%d\r\n",
1032                                                            registry_to_announce(), encoded_guid, encoded_name, encoded_url, redirects);
1033
1034                                 free(encoded_guid);
1035                                 free(encoded_name);
1036                                 free(encoded_url);
1037                                 return 307
1038 */
1039                         }
1040                         return registry_request_access_json(w, person_guid, machine_guid, machine_url, url_name, time(NULL));
1041
1042                 case 'D':
1043                         return registry_request_delete_json(w, person_guid, machine_guid, machine_url, delete_url, time(NULL));
1044
1045                 case 'S':
1046                         return registry_request_search_json(w, person_guid, machine_guid, machine_url, search_machine_guid, time(NULL));
1047
1048                 case 'W':
1049                         return registry_request_switch_json(w, person_guid, machine_guid, machine_url, to_person_guid, time(NULL));
1050
1051                 case 'H':
1052                         return registry_request_hello_json(w);
1053
1054                 default:
1055                         buffer_flush(w->response.data);
1056                         buffer_sprintf(w->response.data, "Invalid registry request - you need to set an action: hello, access, delete, search");
1057                         return 400;
1058         }
1059
1060         buffer_flush(w->response.data);
1061         buffer_sprintf(w->response.data, "Invalid or no registry action.");
1062         return 400;
1063 }
1064
1065 int web_client_api_request_v1(struct web_client *w, char *url)
1066 {
1067         static uint32_t hash_data = 0, hash_chart = 0, hash_charts = 0, hash_registry = 0;
1068
1069         if(unlikely(hash_data == 0)) {
1070                 hash_data = simple_hash("data");
1071                 hash_chart = simple_hash("chart");
1072                 hash_charts = simple_hash("charts");
1073                 hash_registry = simple_hash("registry");
1074         }
1075
1076         // get the command
1077         char *tok = mystrsep(&url, "/?&");
1078         if(tok && *tok) {
1079                 debug(D_WEB_CLIENT, "%llu: Searching for API v1 command '%s'.", w->id, tok);
1080                 uint32_t hash = simple_hash(tok);
1081
1082                 if(hash == hash_data && !strcmp(tok, "data"))
1083                         return web_client_api_request_v1_data(w, url);
1084
1085                 else if(hash == hash_chart && !strcmp(tok, "chart"))
1086                         return web_client_api_request_v1_chart(w, url);
1087
1088                 else if(hash == hash_charts && !strcmp(tok, "charts"))
1089                         return web_client_api_request_v1_charts(w, url);
1090
1091                 else if(hash == hash_registry && !strcmp(tok, "registry"))
1092                         return web_client_api_request_v1_registry(w, url);
1093
1094                 else {
1095                         buffer_flush(w->response.data);
1096                         buffer_sprintf(w->response.data, "Unsupported v1 API command: %s", tok);
1097                         return 404;
1098                 }
1099         }
1100         else {
1101                 buffer_flush(w->response.data);
1102                 buffer_sprintf(w->response.data, "API v1 command?");
1103                 return 400;
1104         }
1105 }
1106
1107 int web_client_api_request(struct web_client *w, char *url)
1108 {
1109         // get the api version
1110         char *tok = mystrsep(&url, "/?&");
1111         if(tok && *tok) {
1112                 debug(D_WEB_CLIENT, "%llu: Searching for API version '%s'.", w->id, tok);
1113                 if(strcmp(tok, "v1") == 0)
1114                         return web_client_api_request_v1(w, url);
1115                 else {
1116                         buffer_flush(w->response.data);
1117                         buffer_sprintf(w->response.data, "Unsupported API version: %s", tok);
1118                         return 404;
1119                 }
1120         }
1121         else {
1122                 buffer_flush(w->response.data);
1123                 buffer_sprintf(w->response.data, "Which API version?");
1124                 return 400;
1125         }
1126 }
1127
1128 int web_client_api_old_data_request(struct web_client *w, char *url, int datasource_type)
1129 {
1130         RRDSET *st = NULL;
1131
1132         char *args = strchr(url, '?');
1133         if(args) {
1134                 *args='\0';
1135                 args = &args[1];
1136         }
1137
1138         // get the name of the data to show
1139         char *tok = mystrsep(&url, "/");
1140
1141         // do we have such a data set?
1142         if(tok && *tok) {
1143                 debug(D_WEB_CLIENT, "%llu: Searching for RRD data with name '%s'.", w->id, tok);
1144                 st = rrdset_find_byname(tok);
1145                 if(!st) st = rrdset_find(tok);
1146         }
1147
1148         if(!st) {
1149                 // we don't have it
1150                 // try to send a file with that name
1151                 buffer_flush(w->response.data);
1152                 return(mysendfile(w, tok));
1153         }
1154
1155         // we have it
1156         debug(D_WEB_CLIENT, "%llu: Found RRD data with name '%s'.", w->id, tok);
1157
1158         // how many entries does the client want?
1159         long lines = rrd_default_history_entries;
1160         long group_count = 1;
1161         time_t after = 0, before = 0;
1162         int group_method = GROUP_AVERAGE;
1163         int nonzero = 0;
1164
1165         if(url) {
1166                 // parse the lines required
1167                 tok = mystrsep(&url, "/");
1168                 if(tok) lines = atoi(tok);
1169                 if(lines < 1) lines = 1;
1170         }
1171         if(url) {
1172                 // parse the group count required
1173                 tok = mystrsep(&url, "/");
1174                 if(tok && *tok) group_count = atoi(tok);
1175                 if(group_count < 1) group_count = 1;
1176                 //if(group_count > save_history / 20) group_count = save_history / 20;
1177         }
1178         if(url) {
1179                 // parse the grouping method required
1180                 tok = mystrsep(&url, "/");
1181                 if(tok && *tok) {
1182                         if(strcmp(tok, "max") == 0) group_method = GROUP_MAX;
1183                         else if(strcmp(tok, "average") == 0) group_method = GROUP_AVERAGE;
1184                         else if(strcmp(tok, "sum") == 0) group_method = GROUP_SUM;
1185                         else debug(D_WEB_CLIENT, "%llu: Unknown group method '%s'", w->id, tok);
1186                 }
1187         }
1188         if(url) {
1189                 // parse after time
1190                 tok = mystrsep(&url, "/");
1191                 if(tok && *tok) after = strtoul(tok, NULL, 10);
1192                 if(after < 0) after = 0;
1193         }
1194         if(url) {
1195                 // parse before time
1196                 tok = mystrsep(&url, "/");
1197                 if(tok && *tok) before = strtoul(tok, NULL, 10);
1198                 if(before < 0) before = 0;
1199         }
1200         if(url) {
1201                 // parse nonzero
1202                 tok = mystrsep(&url, "/");
1203                 if(tok && *tok && strcmp(tok, "nonzero") == 0) nonzero = 1;
1204         }
1205
1206         w->response.data->contenttype = CT_APPLICATION_JSON;
1207         buffer_flush(w->response.data);
1208
1209         char *google_version = "0.6";
1210         char *google_reqId = "0";
1211         char *google_sig = "0";
1212         char *google_out = "json";
1213         char *google_responseHandler = "google.visualization.Query.setResponse";
1214         char *google_outFileName = NULL;
1215         time_t last_timestamp_in_data = 0;
1216         if(datasource_type == DATASOURCE_DATATABLE_JSON || datasource_type == DATASOURCE_DATATABLE_JSONP) {
1217
1218                 w->response.data->contenttype = CT_APPLICATION_X_JAVASCRIPT;
1219
1220                 while(args) {
1221                         tok = mystrsep(&args, "&");
1222                         if(tok && *tok) {
1223                                 char *name = mystrsep(&tok, "=");
1224                                 if(name && *name && strcmp(name, "tqx") == 0) {
1225                                         char *key = mystrsep(&tok, ":");
1226                                         char *value = mystrsep(&tok, ";");
1227                                         if(key && value && *key && *value) {
1228                                                 if(strcmp(key, "version") == 0)
1229                                                         google_version = value;
1230
1231                                                 else if(strcmp(key, "reqId") == 0)
1232                                                         google_reqId = value;
1233
1234                                                 else if(strcmp(key, "sig") == 0)
1235                                                         google_sig = value;
1236
1237                                                 else if(strcmp(key, "out") == 0)
1238                                                         google_out = value;
1239
1240                                                 else if(strcmp(key, "responseHandler") == 0)
1241                                                         google_responseHandler = value;
1242
1243                                                 else if(strcmp(key, "outFileName") == 0)
1244                                                         google_outFileName = value;
1245                                         }
1246                                 }
1247                         }
1248                 }
1249
1250                 debug(D_WEB_CLIENT_ACCESS, "%llu: GOOGLE JSONP: version = '%s', reqId = '%s', sig = '%s', out = '%s', responseHandler = '%s', outFileName = '%s'",
1251                         w->id, google_version, google_reqId, google_sig, google_out, google_responseHandler, google_outFileName
1252                         );
1253
1254                 if(datasource_type == DATASOURCE_DATATABLE_JSONP) {
1255                         last_timestamp_in_data = strtoul(google_sig, NULL, 0);
1256
1257                         // check the client wants json
1258                         if(strcmp(google_out, "json") != 0) {
1259                                 buffer_sprintf(w->response.data,
1260                                         "%s({version:'%s',reqId:'%s',status:'error',errors:[{reason:'invalid_query',message:'output format is not supported',detailed_message:'the format %s requested is not supported by netdata.'}]});",
1261                                         google_responseHandler, google_version, google_reqId, google_out);
1262                                         return 200;
1263                         }
1264                 }
1265         }
1266
1267         if(datasource_type == DATASOURCE_DATATABLE_JSONP) {
1268                 buffer_sprintf(w->response.data,
1269                         "%s({version:'%s',reqId:'%s',status:'ok',sig:'%lu',table:",
1270                         google_responseHandler, google_version, google_reqId, st->last_updated.tv_sec);
1271         }
1272
1273         debug(D_WEB_CLIENT_ACCESS, "%llu: Sending RRD data '%s' (id %s, %d lines, %d group, %d group_method, %lu after, %lu before).", w->id, st->name, st->id, lines, group_count, group_method, after, before);
1274         time_t timestamp_in_data = rrd_stats_json(datasource_type, st, w->response.data, lines, group_count, group_method, after, before, nonzero);
1275
1276         if(datasource_type == DATASOURCE_DATATABLE_JSONP) {
1277                 if(timestamp_in_data > last_timestamp_in_data)
1278                         buffer_strcat(w->response.data, "});");
1279
1280                 else {
1281                         // the client already has the latest data
1282                         buffer_flush(w->response.data);
1283                         buffer_sprintf(w->response.data,
1284                                 "%s({version:'%s',reqId:'%s',status:'error',errors:[{reason:'not_modified',message:'Data not modified'}]});",
1285                                 google_responseHandler, google_version, google_reqId);
1286                 }
1287         }
1288
1289         return 200;
1290 }
1291
1292 const char *web_content_type_to_string(uint8_t contenttype) {
1293         switch(contenttype) {
1294                 case CT_TEXT_HTML:
1295                         return "text/html; charset=utf-8";
1296
1297                 case CT_APPLICATION_XML:
1298                         return "application/xml; charset=utf-8";
1299
1300                 case CT_APPLICATION_JSON:
1301                         return "application/json; charset=utf-8";
1302
1303                 case CT_APPLICATION_X_JAVASCRIPT:
1304                         return "application/x-javascript; charset=utf-8";
1305
1306                 case CT_TEXT_CSS:
1307                         return "text/css; charset=utf-8";
1308
1309                 case CT_TEXT_XML:
1310                         return "text/xml; charset=utf-8";
1311
1312                 case CT_TEXT_XSL:
1313                         return "text/xsl; charset=utf-8";
1314
1315                 case CT_APPLICATION_OCTET_STREAM:
1316                         return "application/octet-stream";
1317
1318                 case CT_IMAGE_SVG_XML:
1319                         return "image/svg+xml";
1320
1321                 case CT_APPLICATION_X_FONT_TRUETYPE:
1322                         return "application/x-font-truetype";
1323
1324                 case CT_APPLICATION_X_FONT_OPENTYPE:
1325                         return "application/x-font-opentype";
1326
1327                 case CT_APPLICATION_FONT_WOFF:
1328                         return "application/font-woff";
1329
1330                 case CT_APPLICATION_FONT_WOFF2:
1331                         return "application/font-woff2";
1332
1333                 case CT_APPLICATION_VND_MS_FONTOBJ:
1334                         return "application/vnd.ms-fontobject";
1335
1336                 case CT_IMAGE_PNG:
1337                         return "image/png";
1338
1339                 case CT_IMAGE_JPG:
1340                         return "image/jpeg";
1341
1342                 case CT_IMAGE_GIF:
1343                         return "image/gif";
1344
1345                 case CT_IMAGE_XICON:
1346                         return "image/x-icon";
1347
1348                 case CT_IMAGE_BMP:
1349                         return "image/bmp";
1350
1351                 case CT_IMAGE_ICNS:
1352                         return "image/icns";
1353
1354                 default:
1355                 case CT_TEXT_PLAIN:
1356                         return "text/plain; charset=utf-8";
1357         }
1358 }
1359
1360
1361 const char *web_response_code_to_string(int code) {
1362         switch(code) {
1363                 case 200:
1364                         return "OK";
1365
1366                 case 307:
1367                         return "Temporary Redirect";
1368
1369                 case 400:
1370                         return "Bad Request";
1371
1372                 case 403:
1373                         return "Forbidden";
1374
1375                 case 404:
1376                         return "Not Found";
1377
1378                 case 412:
1379                         return "Preconditions Failed";
1380
1381                 default:
1382                         if(code >= 100 && code < 200)
1383                                 return "Informational";
1384
1385                         if(code >= 200 && code < 300)
1386                                 return "Successful";
1387
1388                         if(code >= 300 && code < 400)
1389                                 return "Redirection";
1390
1391                         if(code >= 400 && code < 500)
1392                                 return "Bad Request";
1393
1394                         if(code >= 500 && code < 600)
1395                                 return "Server Error";
1396
1397                         return "Undefined Error";
1398         }
1399 }
1400
1401 static inline char *http_header_parse(struct web_client *w, char *s) {
1402         static uint32_t hash_origin = 0, hash_connection = 0, hash_accept_encoding = 0;
1403
1404         if(unlikely(!hash_origin)) {
1405                 hash_origin = simple_uhash("Origin");
1406                 hash_connection = simple_uhash("Connection");
1407                 hash_accept_encoding = simple_uhash("Accept-Encoding");
1408         }
1409
1410         char *e = s;
1411
1412         // find the :
1413         while(*e && *e != ':') e++;
1414         if(!*e || e[1] != ' ') return e;
1415
1416         // get the name
1417         *e = '\0';
1418
1419         // find the value
1420         char *v, *ve;
1421         v = ve = e + 2;
1422
1423         // find the \r
1424         while(*ve && *ve != '\r') ve++;
1425         if(!*ve || ve[1] != '\n') {
1426                 *e = ':';
1427                 return ve;
1428         }
1429
1430         // terminate the value
1431         *ve = '\0';
1432
1433         // fprintf(stderr, "HEADER: '%s' = '%s'\n", s, v);
1434         uint32_t hash = simple_uhash(s);
1435
1436         if(hash == hash_origin && !strcasecmp(s, "Origin"))
1437                 strncpyz(w->origin, v, ORIGIN_MAX);
1438
1439         else if(hash == hash_connection && !strcasecmp(s, "Connection")) {
1440                 if(strcasestr(v, "keep-alive"))
1441                         w->keepalive = 1;
1442         }
1443 #ifdef NETDATA_WITH_ZLIB
1444         else if(hash == hash_accept_encoding && !strcasecmp(s, "Accept-Encoding")) {
1445                 if(web_enable_gzip) {
1446                         if(strcasestr(v, "gzip"))
1447                                 web_client_enable_deflate(w, 1);
1448                         //
1449                         // does not seem to work
1450                         // else if(strcasestr(v, "deflate"))
1451                         //      web_client_enable_deflate(w, 0);
1452                 }
1453         }
1454 #endif /* NETDATA_WITH_ZLIB */
1455
1456         *e = ':';
1457         *ve = '\r';
1458         return ve;
1459 }
1460
1461 // http_request_validate()
1462 // returns:
1463 // = 0 : all good, process the request
1464 // > 0 : request is not supported
1465 // < 0 : request is incomplete - wait for more data
1466
1467 static inline int http_request_validate(struct web_client *w) {
1468         char *s = w->response.data->buffer, *encoded_url = NULL;
1469
1470         // is is a valid request?
1471         if(!strncmp(s, "GET ", 4)) {
1472                 encoded_url = s = &s[4];
1473                 w->mode = WEB_CLIENT_MODE_NORMAL;
1474         }
1475         else if(!strncmp(s, "OPTIONS ", 8)) {
1476                 encoded_url = s = &s[8];
1477                 w->mode = WEB_CLIENT_MODE_OPTIONS;
1478         }
1479         else {
1480                 w->wait_receive = 0;
1481                 return 1;
1482         }
1483
1484         // find the SPACE + "HTTP/"
1485         while(*s) {
1486                 // find the next space
1487                 while (*s && *s != ' ') s++;
1488
1489                 // is it SPACE + "HTTP/" ?
1490                 if(*s && !strncmp(s, " HTTP/", 6)) break;
1491                 else s++;
1492         }
1493
1494         // incomplete requests
1495         if(unlikely(!*s)) {
1496                 w->wait_receive = 1;
1497                 return -2;
1498         }
1499
1500         // we have the end of encoded_url - remember it
1501         char *ue = s;
1502
1503         // make sure we have complete request
1504         // complete requests contain: \r\n\r\n
1505         while(*s) {
1506                 // find a line feed
1507                 while(*s && *s++ != '\r');
1508
1509                 // did we reach the end?
1510                 if(unlikely(!*s)) break;
1511
1512                 // is it \r\n ?
1513                 if(likely(*s++ == '\n')) {
1514
1515                         // is it again \r\n ? (header end)
1516                         if(unlikely(*s == '\r' && s[1] == '\n')) {
1517                                 // a valid complete HTTP request found
1518
1519                                 *ue = '\0';
1520                                 url_decode_r(w->decoded_url, encoded_url, URL_MAX + 1);
1521                                 *ue = ' ';
1522                                 
1523                                 // copy the URL - we are going to overwrite parts of it
1524                                 // FIXME -- we should avoid it
1525                                 strncpyz(w->last_url, w->decoded_url, URL_MAX);
1526
1527                                 w->wait_receive = 0;
1528                                 return 0;
1529                         }
1530
1531                         // another header line
1532                         s = http_header_parse(w, s);
1533                 }
1534         }
1535
1536         // incomplete request
1537         w->wait_receive = 1;
1538         return -3;
1539 }
1540
1541 void web_client_process(struct web_client *w) {
1542         static uint32_t hash_api = 0, hash_netdata_conf = 0, hash_data = 0, hash_datasource = 0, hash_graph = 0,
1543                         hash_list = 0, hash_all_json = 0, hash_exit = 0, hash_debug = 0, hash_mirror = 0;
1544
1545         if(unlikely(!hash_api)) {
1546                 hash_api = simple_hash("api");
1547                 hash_netdata_conf = simple_hash("netdata.conf");
1548                 hash_data = simple_hash(WEB_PATH_DATA);
1549                 hash_datasource = simple_hash(WEB_PATH_DATASOURCE);
1550                 hash_graph = simple_hash(WEB_PATH_GRAPH);
1551                 hash_list = simple_hash("list");
1552                 hash_all_json = simple_hash("all.json");
1553                 hash_exit = simple_hash("exit");
1554                 hash_debug = simple_hash("debug");
1555                 hash_mirror = simple_hash("mirror");
1556         }
1557
1558         int code = 500;
1559         ssize_t bytes;
1560
1561         int what_to_do = http_request_validate(w);
1562
1563         // wait for more data
1564         if(what_to_do < 0) {
1565                 if(w->response.data->len > TOO_BIG_REQUEST) {
1566                         strcpy(w->last_url, "too big request");
1567
1568                         debug(D_WEB_CLIENT_ACCESS, "%llu: Received request is too big (%zd bytes).", w->id, w->response.data->len);
1569
1570                         code = 400;
1571                         buffer_flush(w->response.data);
1572                         buffer_sprintf(w->response.data, "Received request is too big  (%zd bytes).\r\n", w->response.data->len);
1573                 }
1574                 else {
1575                         // wait for more data
1576                         return;
1577                 }
1578         }
1579         else if(what_to_do > 0) {
1580                 strcpy(w->last_url, "not a valid request");
1581
1582                 debug(D_WEB_CLIENT_ACCESS, "%llu: Cannot understand '%s'.", w->id, w->response.data->buffer);
1583
1584                 code = 500;
1585                 buffer_flush(w->response.data);
1586                 buffer_strcat(w->response.data, "I don't understand you...\r\n");
1587         }
1588         else { // what_to_do == 0
1589                 gettimeofday(&w->tv_in, NULL);
1590
1591                 if(w->mode == WEB_CLIENT_MODE_OPTIONS) {
1592                         code = 200;
1593                         w->response.data->contenttype = CT_TEXT_PLAIN;
1594                         buffer_flush(w->response.data);
1595                         buffer_strcat(w->response.data, "OK");
1596                 }
1597                 else {
1598                         char *url = w->decoded_url;
1599                         char *tok = mystrsep(&url, "/?");
1600                         if(tok && *tok) {
1601                                 uint32_t hash = simple_hash(tok);
1602                                 debug(D_WEB_CLIENT, "%llu: Processing command '%s'.", w->id, tok);
1603
1604                                 if(hash == hash_api && strcmp(tok, "api") == 0) {
1605                                         // the client is requesting api access
1606                                         code = web_client_api_request(w, url);
1607                                 }
1608                                 else if(hash == hash_netdata_conf && strcmp(tok, "netdata.conf") == 0) {
1609                                         code = 200;
1610                                         debug(D_WEB_CLIENT_ACCESS, "%llu: Sending netdata.conf ...", w->id);
1611
1612                                         w->response.data->contenttype = CT_TEXT_PLAIN;
1613                                         buffer_flush(w->response.data);
1614                                         generate_config(w->response.data, 0);
1615                                 }
1616                                 else if(hash == hash_data && strcmp(tok, WEB_PATH_DATA) == 0) { // "data"
1617                                         // the client is requesting rrd data -- OLD API
1618                                         code = web_client_api_old_data_request(w, url, DATASOURCE_JSON);
1619                                 }
1620                                 else if(hash == hash_datasource && strcmp(tok, WEB_PATH_DATASOURCE) == 0) { // "datasource"
1621                                         // the client is requesting google datasource -- OLD API
1622                                         code = web_client_api_old_data_request(w, url, DATASOURCE_DATATABLE_JSONP);
1623                                 }
1624                                 else if(hash == hash_graph && strcmp(tok, WEB_PATH_GRAPH) == 0) { // "graph"
1625                                         // the client is requesting an rrd graph -- OLD API
1626
1627                                         // get the name of the data to show
1628                                         tok = mystrsep(&url, "/?&");
1629                                         if(tok && *tok) {
1630                                                 debug(D_WEB_CLIENT, "%llu: Searching for RRD data with name '%s'.", w->id, tok);
1631
1632                                                 // do we have such a data set?
1633                                                 RRDSET *st = rrdset_find_byname(tok);
1634                                                 if(!st) st = rrdset_find(tok);
1635                                                 if(!st) {
1636                                                         // we don't have it
1637                                                         // try to send a file with that name
1638                                                         buffer_flush(w->response.data);
1639                                                         code = mysendfile(w, tok);
1640                                                 }
1641                                                 else {
1642                                                         code = 200;
1643                                                         debug(D_WEB_CLIENT_ACCESS, "%llu: Sending %s.json of RRD_STATS...", w->id, st->name);
1644                                                         w->response.data->contenttype = CT_APPLICATION_JSON;
1645                                                         buffer_flush(w->response.data);
1646                                                         rrd_stats_graph_json(st, url, w->response.data);
1647                                                 }
1648                                         }
1649                                         else {
1650                                                 code = 400;
1651                                                 buffer_flush(w->response.data);
1652                                                 buffer_strcat(w->response.data, "Graph name?\r\n");
1653                                         }
1654                                 }
1655                                 else if(hash == hash_list && strcmp(tok, "list") == 0) {
1656                                         // OLD API
1657                                         code = 200;
1658
1659                                         debug(D_WEB_CLIENT_ACCESS, "%llu: Sending list of RRD_STATS...", w->id);
1660
1661                                         buffer_flush(w->response.data);
1662                                         RRDSET *st = rrdset_root;
1663
1664                                         for ( ; st ; st = st->next )
1665                                                 buffer_sprintf(w->response.data, "%s\n", st->name);
1666                                 }
1667                                 else if(hash == hash_all_json && strcmp(tok, "all.json") == 0) {
1668                                         // OLD API
1669                                         code = 200;
1670                                         debug(D_WEB_CLIENT_ACCESS, "%llu: Sending JSON list of all monitors of RRD_STATS...", w->id);
1671
1672                                         w->response.data->contenttype = CT_APPLICATION_JSON;
1673                                         buffer_flush(w->response.data);
1674                                         rrd_stats_all_json(w->response.data);
1675                                 }
1676 #ifdef NETDATA_INTERNAL_CHECKS
1677                                 else if(hash == hash_exit && strcmp(tok, "exit") == 0) {
1678                                         code = 200;
1679                                         w->response.data->contenttype = CT_TEXT_PLAIN;
1680                                         buffer_flush(w->response.data);
1681
1682                                         if(!netdata_exit)
1683                                                 buffer_strcat(w->response.data, "ok, will do...");
1684                                         else
1685                                                 buffer_strcat(w->response.data, "I am doing it already");
1686
1687                                         netdata_exit = 1;
1688                                 }
1689                                 else if(hash == hash_debug && strcmp(tok, "debug") == 0) {
1690                                         buffer_flush(w->response.data);
1691
1692                                         // get the name of the data to show
1693                                         tok = mystrsep(&url, "/?&");
1694                                         if(tok && *tok) {
1695                                                 debug(D_WEB_CLIENT, "%llu: Searching for RRD data with name '%s'.", w->id, tok);
1696
1697                                                 // do we have such a data set?
1698                                                 RRDSET *st = rrdset_find_byname(tok);
1699                                                 if(!st) st = rrdset_find(tok);
1700                                                 if(!st) {
1701                                                         code = 404;
1702                                                         buffer_sprintf(w->response.data, "Chart %s is not found.\r\n", tok);
1703                                                         debug(D_WEB_CLIENT_ACCESS, "%llu: %s is not found.", w->id, tok);
1704                                                 }
1705                                                 else {
1706                                                         code = 200;
1707                                                         debug_flags |= D_RRD_STATS;
1708                                                         st->debug = !st->debug;
1709                                                         buffer_sprintf(w->response.data, "Chart %s has now debug %s.\r\n", tok, st->debug?"enabled":"disabled");
1710                                                         debug(D_WEB_CLIENT_ACCESS, "%llu: debug for %s is %s.", w->id, tok, st->debug?"enabled":"disabled");
1711                                                 }
1712                                         }
1713                                         else {
1714                                                 code = 500;
1715                                                 buffer_flush(w->response.data);
1716                                                 buffer_strcat(w->response.data, "debug which chart?\r\n");
1717                                         }
1718                                 }
1719                                 else if(hash == hash_mirror && strcmp(tok, "mirror") == 0) {
1720                                         code = 200;
1721
1722                                         debug(D_WEB_CLIENT_ACCESS, "%llu: Mirroring...", w->id);
1723
1724                                         // replace the zero bytes with spaces
1725                                         buffer_char_replace(w->response.data, '\0', ' ');
1726
1727                                         // just leave the buffer as is
1728                                         // it will be copied back to the client
1729                                 }
1730 #endif  /* NETDATA_INTERNAL_CHECKS */
1731                                 else {
1732                                         char filename[FILENAME_MAX+1];
1733                                         url = filename;
1734                                         strncpyz(filename, w->last_url, FILENAME_MAX);
1735                                         tok = mystrsep(&url, "?");
1736                                         buffer_flush(w->response.data);
1737                                         code = mysendfile(w, (tok && *tok)?tok:"/");
1738                                 }
1739                         }
1740                         else {
1741                                 char filename[FILENAME_MAX+1];
1742                                 url = filename;
1743                                 strncpyz(filename, w->last_url, FILENAME_MAX);
1744                                 tok = mystrsep(&url, "?");
1745                                 buffer_flush(w->response.data);
1746                                 code = mysendfile(w, (tok && *tok)?tok:"/");
1747                         }
1748                 }
1749         }
1750
1751         gettimeofday(&w->tv_ready, NULL);
1752         w->response.data->date = time(NULL);
1753         w->response.sent = 0;
1754         w->response.code = code;
1755
1756         // prepare the HTTP response header
1757         debug(D_WEB_CLIENT, "%llu: Generating HTTP header with response %d.", w->id, code);
1758
1759         const char *content_type_string = web_content_type_to_string(w->response.data->contenttype);
1760         const char *code_msg = web_response_code_to_string(code);
1761
1762         char date[100];
1763         struct tm tmbuf, *tm = gmtime_r(&w->response.data->date, &tmbuf);
1764         strftime(date, sizeof(date), "%a, %d %b %Y %H:%M:%S %Z", tm);
1765
1766         buffer_sprintf(w->response.header_output,
1767                 "HTTP/1.1 %d %s\r\n"
1768                 "Connection: %s\r\n"
1769                 "Server: NetData Embedded HTTP Server\r\n"
1770                 "Access-Control-Allow-Origin: %s\r\n"
1771                 "Access-Control-Allow-Credentials: true\r\n"
1772                 "Content-Type: %s\r\n"
1773                 "Date: %s\r\n"
1774                 , code, code_msg
1775                 , w->keepalive?"keep-alive":"close"
1776                 , w->origin
1777                 , content_type_string
1778                 , date
1779                 );
1780
1781         if(w->cookie1[0]) {
1782                 buffer_sprintf(w->response.header_output,
1783                    "Set-Cookie: %s\r\n",
1784                    w->cookie1);
1785         }
1786
1787         if(w->cookie2[0]) {
1788                 buffer_sprintf(w->response.header_output,
1789                    "Set-Cookie: %s\r\n",
1790                    w->cookie2);
1791         }
1792
1793         if(w->mode == WEB_CLIENT_MODE_OPTIONS) {
1794                 buffer_strcat(w->response.header_output,
1795                         "Access-Control-Allow-Methods: GET, OPTIONS\r\n"
1796                         "Access-Control-Allow-Headers: accept, x-requested-with, origin, content-type, cookie\r\n"
1797                         "Access-Control-Max-Age: 1209600\r\n" // 86400 * 14
1798                         );
1799         }
1800
1801         if(buffer_strlen(w->response.header))
1802                 buffer_strcat(w->response.header_output, buffer_tostring(w->response.header));
1803
1804         if(w->mode == WEB_CLIENT_MODE_NORMAL && (w->response.data->options & WB_CONTENT_NO_CACHEABLE)) {
1805                 buffer_sprintf(w->response.header_output,
1806                         "Expires: %s\r\n"
1807                         "Cache-Control: no-cache\r\n"
1808                         , date);
1809         }
1810         else if(w->mode != WEB_CLIENT_MODE_OPTIONS) {
1811                 char edate[100];
1812                 time_t et = w->response.data->date + (86400 * 14);
1813                 struct tm etmbuf, *etm = gmtime_r(&et, &etmbuf);
1814                 strftime(edate, sizeof(edate), "%a, %d %b %Y %H:%M:%S %Z", etm);
1815
1816                 buffer_sprintf(w->response.header_output,
1817                         "Expires: %s\r\n"
1818                         "Cache-Control: public\r\n"
1819                         , edate);
1820         }
1821
1822         // if we know the content length, put it
1823         if(!w->response.zoutput && (w->response.data->len || w->response.rlen))
1824                 buffer_sprintf(w->response.header_output,
1825                         "Content-Length: %ld\r\n"
1826                         , w->response.data->len? w->response.data->len: w->response.rlen
1827                         );
1828         else if(!w->response.zoutput)
1829                 w->keepalive = 0;       // content-length is required for keep-alive
1830
1831         if(w->response.zoutput) {
1832                 buffer_strcat(w->response.header_output,
1833                         "Content-Encoding: gzip\r\n"
1834                         "Transfer-Encoding: chunked\r\n"
1835                         );
1836         }
1837
1838         buffer_strcat(w->response.header_output, "\r\n");
1839
1840         // sent the HTTP header
1841         debug(D_WEB_DATA, "%llu: Sending response HTTP header of size %d: '%s'"
1842                         , w->id
1843                         , buffer_strlen(w->response.header_output)
1844                         , buffer_tostring(w->response.header_output)
1845                         );
1846
1847         web_client_crock_socket(w);
1848
1849         bytes = send(w->ofd, buffer_tostring(w->response.header_output), buffer_strlen(w->response.header_output), 0);
1850         if(bytes != (ssize_t) buffer_strlen(w->response.header_output)) {
1851                 if(bytes > 0)
1852                         w->stats_sent_bytes += bytes;
1853
1854                 debug(D_WEB_CLIENT, "%llu: HTTP Header failed to be sent (I sent %d bytes but the system sent %d bytes). Closing web client.", w->id,
1855                           buffer_strlen(w->response.header_output), bytes);
1856
1857                 WEB_CLIENT_IS_DEAD(w);
1858                 return;
1859         }
1860         else 
1861                 w->stats_sent_bytes += bytes;
1862
1863         // enable sending immediately if we have data
1864         if(w->response.data->len) w->wait_send = 1;
1865         else w->wait_send = 0;
1866
1867         // pretty logging
1868         switch(w->mode) {
1869                 case WEB_CLIENT_MODE_OPTIONS:
1870                         debug(D_WEB_CLIENT, "%llu: Done preparing the OPTIONS response. Sending data (%d bytes) to client.", w->id, w->response.data->len);
1871                         break;
1872
1873                 case WEB_CLIENT_MODE_NORMAL:
1874                         debug(D_WEB_CLIENT, "%llu: Done preparing the response. Sending data (%d bytes) to client.", w->id, w->response.data->len);
1875                         break;
1876
1877                 case WEB_CLIENT_MODE_FILECOPY:
1878                         if(w->response.rlen) {
1879                                 debug(D_WEB_CLIENT, "%llu: Done preparing the response. Will be sending data file of %d bytes to client.", w->id, w->response.rlen);
1880                                 w->wait_receive = 1;
1881
1882                                 /*
1883                                 // utilize the kernel sendfile() for copying the file to the socket.
1884                                 // this block of code can be commented, without anything missing.
1885                                 // when it is commented, the program will copy the data using async I/O.
1886                                 {
1887                                         long len = sendfile(w->ofd, w->ifd, NULL, w->response.data->rbytes);
1888                                         if(len != w->response.data->rbytes)
1889                                                 error("%llu: sendfile() should copy %ld bytes, but copied %ld. Falling back to manual copy.", w->id, w->response.data->rbytes, len);
1890                                         else
1891                                                 web_client_reset(w);
1892                                 }
1893                                 */
1894                         }
1895                         else
1896                                 debug(D_WEB_CLIENT, "%llu: Done preparing the response. Will be sending an unknown amount of bytes to client.", w->id);
1897                         break;
1898
1899                 default:
1900                         fatal("%llu: Unknown client mode %d.", w->id, w->mode);
1901                         break;
1902         }
1903 }
1904
1905 ssize_t web_client_send_chunk_header(struct web_client *w, size_t len)
1906 {
1907         debug(D_DEFLATE, "%llu: OPEN CHUNK of %d bytes (hex: %x).", w->id, len, len);
1908         char buf[1024];
1909         sprintf(buf, "%zX\r\n", len);
1910         
1911         ssize_t bytes = send(w->ofd, buf, strlen(buf), 0);
1912         if(bytes > 0) {
1913                 debug(D_DEFLATE, "%llu: Sent chunk header %d bytes.", w->id, bytes);
1914                 w->stats_sent_bytes += bytes;
1915         }
1916
1917         else if(bytes == 0) {
1918                 debug(D_WEB_CLIENT, "%llu: Did not send chunk header to the client.", w->id);
1919                 WEB_CLIENT_IS_DEAD(w);
1920         }
1921         else {
1922                 debug(D_WEB_CLIENT, "%llu: Failed to send chunk header to client.", w->id);
1923                 WEB_CLIENT_IS_DEAD(w);
1924         }
1925
1926         return bytes;
1927 }
1928
1929 ssize_t web_client_send_chunk_close(struct web_client *w)
1930 {
1931         //debug(D_DEFLATE, "%llu: CLOSE CHUNK.", w->id);
1932
1933         ssize_t bytes = send(w->ofd, "\r\n", 2, 0);
1934         if(bytes > 0) {
1935                 debug(D_DEFLATE, "%llu: Sent chunk suffix %d bytes.", w->id, bytes);
1936                 w->stats_sent_bytes += bytes;
1937         }
1938
1939         else if(bytes == 0) {
1940                 debug(D_WEB_CLIENT, "%llu: Did not send chunk suffix to the client.", w->id);
1941                 WEB_CLIENT_IS_DEAD(w);
1942         }
1943         else {
1944                 debug(D_WEB_CLIENT, "%llu: Failed to send chunk suffix to client.", w->id);
1945                 WEB_CLIENT_IS_DEAD(w);
1946         }
1947
1948         return bytes;
1949 }
1950
1951 ssize_t web_client_send_chunk_finalize(struct web_client *w)
1952 {
1953         //debug(D_DEFLATE, "%llu: FINALIZE CHUNK.", w->id);
1954
1955         ssize_t bytes = send(w->ofd, "\r\n0\r\n\r\n", 7, 0);
1956         if(bytes > 0) {
1957                 debug(D_DEFLATE, "%llu: Sent chunk suffix %d bytes.", w->id, bytes);
1958                 w->stats_sent_bytes += bytes;
1959         }
1960
1961         else if(bytes == 0) {
1962                 debug(D_WEB_CLIENT, "%llu: Did not send chunk finalize suffix to the client.", w->id);
1963                 WEB_CLIENT_IS_DEAD(w);
1964         }
1965         else {
1966                 debug(D_WEB_CLIENT, "%llu: Failed to send chunk finalize suffix to client.", w->id);
1967                 WEB_CLIENT_IS_DEAD(w);
1968         }
1969
1970         return bytes;
1971 }
1972
1973 #ifdef NETDATA_WITH_ZLIB
1974 ssize_t web_client_send_deflate(struct web_client *w)
1975 {
1976         ssize_t len = 0, t = 0;
1977
1978         // when using compression,
1979         // w->response.sent is the amount of bytes passed through compression
1980
1981         debug(D_DEFLATE, "%llu: web_client_send_deflate(): w->response.data->len = %d, w->response.sent = %d, w->response.zhave = %d, w->response.zsent = %d, w->response.zstream.avail_in = %d, w->response.zstream.avail_out = %d, w->response.zstream.total_in = %d, w->response.zstream.total_out = %d.", w->id, w->response.data->len, w->response.sent, w->response.zhave, w->response.zsent, w->response.zstream.avail_in, w->response.zstream.avail_out, w->response.zstream.total_in, w->response.zstream.total_out);
1982
1983         if(w->response.data->len - w->response.sent == 0 && w->response.zstream.avail_in == 0 && w->response.zhave == w->response.zsent && w->response.zstream.avail_out != 0) {
1984                 // there is nothing to send
1985
1986                 debug(D_WEB_CLIENT, "%llu: Out of output data.", w->id);
1987
1988                 // finalize the chunk
1989                 if(w->response.sent != 0) {
1990                         t = web_client_send_chunk_finalize(w);
1991                         if(t < 0) return t;
1992                 }
1993
1994                 if(w->mode == WEB_CLIENT_MODE_FILECOPY && w->wait_receive && w->response.rlen && w->response.rlen > w->response.data->len) {
1995                         // we have to wait, more data will come
1996                         debug(D_WEB_CLIENT, "%llu: Waiting for more data to become available.", w->id);
1997                         w->wait_send = 0;
1998                         return t;
1999                 }
2000
2001                 if(unlikely(!w->keepalive)) {
2002                         debug(D_WEB_CLIENT, "%llu: Closing (keep-alive is not enabled). %ld bytes sent.", w->id, w->response.sent);
2003                         WEB_CLIENT_IS_DEAD(w);
2004                         return t;
2005                 }
2006
2007                 // reset the client
2008                 web_client_reset(w);
2009                 debug(D_WEB_CLIENT, "%llu: Done sending all data on socket.", w->id);
2010                 return t;
2011         }
2012
2013         if(w->response.zhave == w->response.zsent) {
2014                 // compress more input data
2015
2016                 // close the previous open chunk
2017                 if(w->response.sent != 0) {
2018                         t = web_client_send_chunk_close(w);
2019                         if(t < 0) return t;
2020                 }
2021
2022                 debug(D_DEFLATE, "%llu: Compressing %d new bytes starting from %d (and %d left behind).", w->id, (w->response.data->len - w->response.sent), w->response.sent, w->response.zstream.avail_in);
2023
2024                 // give the compressor all the data not passed through the compressor yet
2025                 if(w->response.data->len > w->response.sent) {
2026                         w->response.zstream.next_in = (Bytef *)&w->response.data->buffer[w->response.sent - w->response.zstream.avail_in];
2027                         w->response.zstream.avail_in += (uInt) (w->response.data->len - w->response.sent);
2028                 }
2029
2030                 // reset the compressor output buffer
2031                 w->response.zstream.next_out = w->response.zbuffer;
2032                 w->response.zstream.avail_out = ZLIB_CHUNK;
2033
2034                 // ask for FINISH if we have all the input
2035                 int flush = Z_SYNC_FLUSH;
2036                 if(w->mode == WEB_CLIENT_MODE_NORMAL
2037                         || (w->mode == WEB_CLIENT_MODE_FILECOPY && !w->wait_receive && w->response.data->len == w->response.rlen)) {
2038                         flush = Z_FINISH;
2039                         debug(D_DEFLATE, "%llu: Requesting Z_FINISH, if possible.", w->id);
2040                 }
2041                 else {
2042                         debug(D_DEFLATE, "%llu: Requesting Z_SYNC_FLUSH.", w->id);
2043                 }
2044
2045                 // compress
2046                 if(deflate(&w->response.zstream, flush) == Z_STREAM_ERROR) {
2047                         error("%llu: Compression failed. Closing down client.", w->id);
2048                         web_client_reset(w);
2049                         return(-1);
2050                 }
2051
2052                 w->response.zhave = ZLIB_CHUNK - w->response.zstream.avail_out;
2053                 w->response.zsent = 0;
2054
2055                 // keep track of the bytes passed through the compressor
2056                 w->response.sent = w->response.data->len;
2057
2058                 debug(D_DEFLATE, "%llu: Compression produced %d bytes.", w->id, w->response.zhave);
2059
2060                 // open a new chunk
2061                 ssize_t t2 = web_client_send_chunk_header(w, w->response.zhave);
2062                 if(t2 < 0) return t2;
2063                 t += t2;
2064         }
2065         
2066         debug(D_WEB_CLIENT, "%llu: Sending %d bytes of data (+%d of chunk header).", w->id, w->response.zhave - w->response.zsent, t);
2067
2068         len = send(w->ofd, &w->response.zbuffer[w->response.zsent], (size_t) (w->response.zhave - w->response.zsent), MSG_DONTWAIT);
2069         if(len > 0) {
2070                 w->stats_sent_bytes += len;
2071                 w->response.zsent += len;
2072                 len += t;
2073                 debug(D_WEB_CLIENT, "%llu: Sent %d bytes.", w->id, len);
2074         }
2075         else if(len == 0) {
2076                 debug(D_WEB_CLIENT, "%llu: Did not send any bytes to the client (zhave = %ld, zsent = %ld, need to send = %ld).", w->id, w->response.zhave, w->response.zsent, w->response.zhave - w->response.zsent);
2077                 WEB_CLIENT_IS_DEAD(w);
2078         }
2079         else {
2080                 debug(D_WEB_CLIENT, "%llu: Failed to send data to client.", w->id);
2081                 WEB_CLIENT_IS_DEAD(w);
2082         }
2083
2084         return(len);
2085 }
2086 #endif // NETDATA_WITH_ZLIB
2087
2088 ssize_t web_client_send(struct web_client *w) {
2089 #ifdef NETDATA_WITH_ZLIB
2090         if(likely(w->response.zoutput)) return web_client_send_deflate(w);
2091 #endif // NETDATA_WITH_ZLIB
2092
2093         ssize_t bytes;
2094
2095         if(unlikely(w->response.data->len - w->response.sent == 0)) {
2096                 // there is nothing to send
2097
2098                 debug(D_WEB_CLIENT, "%llu: Out of output data.", w->id);
2099
2100                 // there can be two cases for this
2101                 // A. we have done everything
2102                 // B. we temporarily have nothing to send, waiting for the buffer to be filled by ifd
2103
2104                 if(w->mode == WEB_CLIENT_MODE_FILECOPY && w->wait_receive && w->response.rlen && w->response.rlen > w->response.data->len) {
2105                         // we have to wait, more data will come
2106                         debug(D_WEB_CLIENT, "%llu: Waiting for more data to become available.", w->id);
2107                         w->wait_send = 0;
2108                         return 0;
2109                 }
2110
2111                 if(unlikely(!w->keepalive)) {
2112                         debug(D_WEB_CLIENT, "%llu: Closing (keep-alive is not enabled). %ld bytes sent.", w->id, w->response.sent);
2113                         WEB_CLIENT_IS_DEAD(w);
2114                         return 0;
2115                 }
2116
2117                 web_client_reset(w);
2118                 debug(D_WEB_CLIENT, "%llu: Done sending all data on socket. Waiting for next request on the same socket.", w->id);
2119                 return 0;
2120         }
2121
2122         bytes = send(w->ofd, &w->response.data->buffer[w->response.sent], w->response.data->len - w->response.sent, MSG_DONTWAIT);
2123         if(likely(bytes > 0)) {
2124                 w->stats_sent_bytes += bytes;
2125                 w->response.sent += bytes;
2126                 debug(D_WEB_CLIENT, "%llu: Sent %d bytes.", w->id, bytes);
2127         }
2128         else if(likely(bytes == 0)) {
2129                 debug(D_WEB_CLIENT, "%llu: Did not send any bytes to the client.", w->id);
2130                 WEB_CLIENT_IS_DEAD(w);
2131         }
2132         else {
2133                 debug(D_WEB_CLIENT, "%llu: Failed to send data to client.", w->id);
2134                 WEB_CLIENT_IS_DEAD(w);
2135         }
2136
2137         return(bytes);
2138 }
2139
2140 ssize_t web_client_receive(struct web_client *w)
2141 {
2142         // do we have any space for more data?
2143         buffer_need_bytes(w->response.data, WEB_REQUEST_LENGTH);
2144
2145         ssize_t left = w->response.data->size - w->response.data->len;
2146         ssize_t bytes;
2147
2148         if(unlikely(w->mode == WEB_CLIENT_MODE_FILECOPY))
2149                 bytes = read(w->ifd, &w->response.data->buffer[w->response.data->len], (size_t) (left - 1));
2150         else
2151                 bytes = recv(w->ifd, &w->response.data->buffer[w->response.data->len], (size_t) (left - 1), MSG_DONTWAIT);
2152
2153         if(likely(bytes > 0)) {
2154                 if(w->mode != WEB_CLIENT_MODE_FILECOPY)
2155                         w->stats_received_bytes += bytes;
2156
2157                 size_t old = w->response.data->len;
2158                 w->response.data->len += bytes;
2159                 w->response.data->buffer[w->response.data->len] = '\0';
2160
2161                 debug(D_WEB_CLIENT, "%llu: Received %d bytes.", w->id, bytes);
2162                 debug(D_WEB_DATA, "%llu: Received data: '%s'.", w->id, &w->response.data->buffer[old]);
2163
2164                 if(w->mode == WEB_CLIENT_MODE_FILECOPY) {
2165                         w->wait_send = 1;
2166
2167                         if(w->response.rlen && w->response.data->len >= w->response.rlen)
2168                                 w->wait_receive = 0;
2169                 }
2170         }
2171         else if(likely(bytes == 0)) {
2172                 debug(D_WEB_CLIENT, "%llu: Out of input data.", w->id);
2173
2174                 // if we cannot read, it means we have an error on input.
2175                 // if however, we are copying a file from ifd to ofd, we should not return an error.
2176                 // in this case, the error should be generated when the file has been sent to the client.
2177
2178                 if(w->mode == WEB_CLIENT_MODE_FILECOPY) {
2179                         // we are copying data from ifd to ofd
2180                         // let it finish copying...
2181                         w->wait_receive = 0;
2182
2183                         debug(D_WEB_CLIENT, "%llu: Read the whole file.", w->id);
2184                         if(w->ifd != w->ofd) close(w->ifd);
2185                         w->ifd = w->ofd;
2186                 }
2187                 else {
2188                         debug(D_WEB_CLIENT, "%llu: failed to receive data.", w->id);
2189                         WEB_CLIENT_IS_DEAD(w);
2190                 }
2191         }
2192         else {
2193                 debug(D_WEB_CLIENT, "%llu: receive data failed.", w->id);
2194                 WEB_CLIENT_IS_DEAD(w);
2195         }
2196
2197         return(bytes);
2198 }
2199
2200
2201 // --------------------------------------------------------------------------------------
2202 // the thread of a single client
2203
2204 // 1. waits for input and output, using async I/O
2205 // 2. it processes HTTP requests
2206 // 3. it generates HTTP responses
2207 // 4. it copies data from input to output if mode is FILECOPY
2208
2209 void *web_client_main(void *ptr)
2210 {
2211         if(pthread_setcanceltype(PTHREAD_CANCEL_DEFERRED, NULL) != 0)
2212                 error("Cannot set pthread cancel type to DEFERRED.");
2213
2214         if(pthread_setcancelstate(PTHREAD_CANCEL_ENABLE, NULL) != 0)
2215                 error("Cannot set pthread cancel state to ENABLE.");
2216
2217         struct web_client *w = ptr;
2218         struct pollfd fds[2], *ifd, *ofd;
2219         int retval, fdmax = 0, timeout;
2220
2221         log_access("%llu: %s port %s connected on thread task id %d", w->id, w->client_ip, w->client_port, gettid());
2222
2223         for(;;) {
2224                 if(unlikely(w->dead)) {
2225                         debug(D_WEB_CLIENT, "%llu: client is dead.", w->id);
2226                         break;
2227                 }
2228                 else if(unlikely(!w->wait_receive && !w->wait_send)) {
2229                         debug(D_WEB_CLIENT, "%llu: client is not set for neither receiving nor sending data.");
2230                         break;
2231                 }
2232
2233                 if(unlikely(w->ifd < 0 || w->ofd < 0)) {
2234                         error("%llu: invalid file descriptor, ifd = %d, ofd = %d (required 0 <= fd", w->id, w->ifd, w->ofd);
2235                         break;
2236                 }
2237
2238                 if(w->ifd == w->ofd) {
2239                         fds[0].fd = w->ifd;
2240                         fds[0].events = 0;
2241                         fds[0].revents = 0;
2242
2243                         if(w->wait_receive) fds[0].events |= POLLIN;
2244                         if(w->wait_send)    fds[0].events |= POLLOUT;
2245
2246                         fds[1].fd = -1;
2247                         fds[1].events = 0;
2248                         fds[1].revents = 0;
2249
2250                         ifd = ofd = &fds[0];
2251
2252                         fdmax = 1;
2253                 }
2254                 else {
2255                         fds[0].fd = w->ifd;
2256                         fds[0].events = 0;
2257                         fds[0].revents = 0;
2258                         if(w->wait_receive) fds[0].events |= POLLIN;
2259                         ifd = &fds[0];
2260
2261                         fds[1].fd = w->ofd;
2262                         fds[1].events = 0;
2263                         fds[1].revents = 0;
2264                         if(w->wait_send)    fds[1].events |= POLLOUT;
2265                         ofd = &fds[1];
2266
2267                         fdmax = 2;
2268                 }
2269
2270                 debug(D_WEB_CLIENT, "%llu: Waiting socket async I/O for %s %s", w->id, w->wait_receive?"INPUT":"", w->wait_send?"OUTPUT":"");
2271                 errno = 0;
2272                 timeout = web_client_timeout * 1000;
2273                 retval = poll(fds, fdmax, timeout);
2274
2275                 if(unlikely(retval == -1)) {
2276                         if(errno == EAGAIN || errno == EINTR) {
2277                                 debug(D_WEB_CLIENT, "%llu: EAGAIN received.", w->id);
2278                                 continue;
2279                         }
2280
2281                         debug(D_WEB_CLIENT, "%llu: LISTENER: poll() failed (input fd = %d, output fd = %d). Closing client.", w->id, w->ifd, w->ofd);
2282                         break;
2283                 }
2284                 else if(unlikely(!retval)) {
2285                         debug(D_WEB_CLIENT, "%llu: Timeout while waiting socket async I/O for %s %s", w->id, w->wait_receive?"INPUT":"", w->wait_send?"OUTPUT":"");
2286                         break;
2287                 }
2288
2289                 int used = 0;
2290                 if(w->wait_send && ofd->revents & POLLOUT) {
2291                         used++;
2292                         if(web_client_send(w) < 0) {
2293                                 debug(D_WEB_CLIENT, "%llu: Cannot send data to client. Closing client.", w->id);
2294                                 break;
2295                         }
2296                 }
2297
2298                 if(w->wait_receive && (ifd->revents & POLLIN || ifd->revents & POLLPRI)) {
2299                         used++;
2300                         if(web_client_receive(w) < 0) {
2301                                 debug(D_WEB_CLIENT, "%llu: Cannot receive data from client. Closing client.", w->id);
2302                                 break;
2303                         }
2304
2305                         if(w->mode == WEB_CLIENT_MODE_NORMAL) {
2306                                 debug(D_WEB_CLIENT, "%llu: Attempting to process received data.", w->id);
2307                                 web_client_process(w);
2308                         }
2309                 }
2310
2311                 if(unlikely(!used)) {
2312                         debug(D_WEB_CLIENT_ACCESS, "%llu: Received error on socket.", w->id);
2313                         break;
2314                 }
2315         }
2316
2317         web_client_reset(w);
2318
2319         log_access("%llu: %s port %s disconnected from thread task id %d", w->id, w->client_ip, w->client_port, gettid());
2320         debug(D_WEB_CLIENT, "%llu: done...", w->id);
2321
2322         // close the sockets/files now
2323         // to free file descriptors
2324         if(w->ifd == w->ofd) {
2325                 if(w->ifd != -1) close(w->ifd);
2326         }
2327         else {
2328                 if(w->ifd != -1) close(w->ifd);
2329                 if(w->ofd != -1) close(w->ofd);
2330         }
2331         w->ifd = -1;
2332         w->ofd = -1;
2333
2334         w->obsolete = 1;
2335
2336         pthread_exit(NULL);
2337         return NULL;
2338 }