package main import ( "encoding/json" "flag" "fmt" "io/ioutil" "log" "net/http" "net/url" "os" "os/exec" "path/filepath" "strings" "time" "github.com/adnanh/webhook/hook" "github.com/codegangsta/negroni" "github.com/gorilla/mux" "github.com/satori/go.uuid" fsnotify "gopkg.in/fsnotify.v1" ) const ( version = "2.6.10" ) var ( ip = flag.String("ip", "0.0.0.0", "ip the webhook should serve hooks on") port = flag.Int("port", 9000, "port the webhook should serve hooks on") verbose = flag.Bool("verbose", false, "show verbose output") noPanic = flag.Bool("nopanic", false, "do not panic if hooks cannot be loaded when webhook is not running in verbose mode") hotReload = flag.Bool("hotreload", false, "watch hooks file for changes and reload them automatically") hooksURLPrefix = flag.String("urlprefix", "hooks", "url prefix to use for served hooks (protocol://yourserver:port/PREFIX/:hook-id)") secure = flag.Bool("secure", false, "use HTTPS instead of HTTP") asTemplate = flag.Bool("template", false, "parse hooks file as a Go template") cert = flag.String("cert", "cert.pem", "path to the HTTPS certificate pem file") key = flag.String("key", "key.pem", "path to the HTTPS certificate private key pem file") justDisplayVersion = flag.Bool("version", false, "display webhook version and quit") responseHeaders hook.ResponseHeaders hooksFiles hook.HooksFiles loadedHooksFromFiles = make(map[string]hook.Hooks) watcher *fsnotify.Watcher signals chan os.Signal ) func matchLoadedHook(id string) *hook.Hook { for _, hooks := range loadedHooksFromFiles { if hook := hooks.Match(id); hook != nil { return hook } } return nil } func lenLoadedHooks() int { sum := 0 for _, hooks := range loadedHooksFromFiles { sum += len(hooks) } return sum } func main() { flag.Var(&hooksFiles, "hooks", "path to the json file containing defined hooks the webhook should serve, use multiple times to load from different files") flag.Var(&responseHeaders, "header", "response header to return, specified in format name=value, use multiple times to set multiple headers") flag.Parse() if *justDisplayVersion { fmt.Println("webhook version " + version) os.Exit(0) } if len(hooksFiles) == 0 { hooksFiles = append(hooksFiles, "hooks.json") } log.SetPrefix("[webhook] ") log.SetFlags(log.Ldate | log.Ltime) if !*verbose { log.SetOutput(ioutil.Discard) } log.Println("version " + version + " starting") // set os signal watcher setupSignals() // load and parse hooks for _, hooksFilePath := range hooksFiles { log.Printf("attempting to load hooks from %s\n", hooksFilePath) newHooks := hook.Hooks{} err := newHooks.LoadFromFile(hooksFilePath, *asTemplate) if err != nil { log.Printf("couldn't load hooks from file! %+v\n", err) } else { log.Printf("found %d hook(s) in file\n", len(newHooks)) for _, hook := range newHooks { if matchLoadedHook(hook.ID) != nil { log.Fatalf("error: hook with the id %s has already been loaded!\nplease check your hooks file for duplicate hooks ids!\n", hook.ID) } log.Printf("\tloaded: %s\n", hook.ID) } loadedHooksFromFiles[hooksFilePath] = newHooks } } newHooksFiles := hooksFiles[:0] for _, filePath := range hooksFiles { if _, ok := loadedHooksFromFiles[filePath]; ok { newHooksFiles = append(newHooksFiles, filePath) } } hooksFiles = newHooksFiles if !*verbose && !*noPanic && lenLoadedHooks() == 0 { log.SetOutput(os.Stdout) log.Fatalln("couldn't load any hooks from file!\naborting webhook execution since the -verbose flag is set to false.\nIf, for some reason, you want webhook to start without the hooks, either use -verbose flag, or -nopanic") } if *hotReload { var err error watcher, err = fsnotify.NewWatcher() if err != nil { log.Fatal("error creating file watcher instance\n", err) } defer watcher.Close() for _, hooksFilePath := range hooksFiles { // set up file watcher log.Printf("setting up file watcher for %s\n", hooksFilePath) err = watcher.Add(hooksFilePath) if err != nil { log.Fatal("error adding hooks file to the watcher\n", err) } } go watchForFileChange() } l := negroni.NewLogger() l.SetFormat("{{.Status}} | {{.Duration}} | {{.Hostname}} | {{.Method}} {{.Path}} \n") standardLogger := log.New(os.Stdout, "[webhook] ", log.Ldate|log.Ltime) if !*verbose { standardLogger.SetOutput(ioutil.Discard) } l.ALogger = standardLogger negroniRecovery := &negroni.Recovery{ Logger: l.ALogger, PrintStack: true, StackAll: false, StackSize: 1024 * 8, } n := negroni.New(negroniRecovery, l) router := mux.NewRouter() var hooksURL string if *hooksURLPrefix == "" { hooksURL = "/{id}" } else { hooksURL = "/" + *hooksURLPrefix + "/{id}" } router.HandleFunc("/", func(w http.ResponseWriter, req *http.Request) { fmt.Fprint(w, "OK") }) router.HandleFunc(hooksURL, hookHandler) n.UseHandler(router) if *secure { log.Printf("serving hooks on https://%s:%d%s", *ip, *port, hooksURL) log.Fatal(http.ListenAndServeTLS(fmt.Sprintf("%s:%d", *ip, *port), *cert, *key, n)) } else { log.Printf("serving hooks on http://%s:%d%s", *ip, *port, hooksURL) log.Fatal(http.ListenAndServe(fmt.Sprintf("%s:%d", *ip, *port), n)) } } func hookHandler(w http.ResponseWriter, r *http.Request) { // generate a request id for logging rid := uuid.NewV4().String()[:6] log.Printf("[%s] incoming HTTP request from %s\n", rid, r.RemoteAddr) for _, responseHeader := range responseHeaders { w.Header().Set(responseHeader.Name, responseHeader.Value) } id := mux.Vars(r)["id"] if matchedHook := matchLoadedHook(id); matchedHook != nil { log.Printf("[%s] %s got matched\n", rid, id) body, err := ioutil.ReadAll(r.Body) if err != nil { log.Printf("[%s] error reading the request body. %+v\n", rid, err) } // parse headers headers := valuesToMap(r.Header) // parse query variables query := valuesToMap(r.URL.Query()) // parse body var payload map[string]interface{} // set contentType to IncomingPayloadContentType or header value contentType := r.Header.Get("Content-Type") if len(matchedHook.IncomingPayloadContentType) != 0 { contentType = matchedHook.IncomingPayloadContentType } switch { case strings.Contains(contentType, "json"): decoder := json.NewDecoder(strings.NewReader(string(body))) decoder.UseNumber() err := decoder.Decode(&payload) if err != nil { log.Printf("[%s] error parsing JSON payload %+v\n", rid, err) } case strings.Contains(contentType, "x-www-form-urlencoded"): fd, err := url.ParseQuery(string(body)) if err != nil { log.Printf("[%s] error parsing form payload %+v\n", rid, err) } else { payload = valuesToMap(fd) } default: log.Printf("[%s] error parsing body payload due to unsupported content type header: %s\n", rid, contentType) } // handle hook errors := matchedHook.ParseJSONParameters(&headers, &query, &payload) for _, err := range errors { log.Printf("[%s] error parsing JSON parameters: %s\n", rid, err) } var ok bool if matchedHook.TriggerRule == nil { ok = true } else { ok, err = matchedHook.TriggerRule.Evaluate(&headers, &query, &payload, &body, r.RemoteAddr) if err != nil { msg := fmt.Sprintf("[%s] error evaluating hook: %s", rid, err) log.Println(msg) w.WriteHeader(http.StatusInternalServerError) fmt.Fprint(w, "Error occurred while evaluating hook rules.") return } } if ok { log.Printf("[%s] %s hook triggered successfully\n", rid, matchedHook.ID) for _, responseHeader := range matchedHook.ResponseHeaders { w.Header().Set(responseHeader.Name, responseHeader.Value) } if matchedHook.CaptureCommandOutput { response, err := handleHook(matchedHook, rid, &headers, &query, &payload, &body) if err != nil { w.WriteHeader(http.StatusInternalServerError) if matchedHook.CaptureCommandOutputOnError { fmt.Fprint(w, response) } else { w.Header().Set("Content-Type", "text/plain; charset=utf-8") fmt.Fprint(w, "Error occurred while executing the hook's command. Please check your logs for more details.") } } else { // Check if a success return code is configured for the hook if matchedHook.SuccessHttpResponseCode != 0 { writeHttpResponseCode(w, rid, matchedHook.ID, matchedHook.SuccessHttpResponseCode) } fmt.Fprint(w, response) } } else { go handleHook(matchedHook, rid, &headers, &query, &payload, &body) // Check if a success return code is configured for the hook if matchedHook.SuccessHttpResponseCode != 0 { writeHttpResponseCode(w, rid, matchedHook.ID, matchedHook.SuccessHttpResponseCode) } fmt.Fprint(w, matchedHook.ResponseMessage) } return } // Check if a return code is configured for the hook if matchedHook.TriggerRuleMismatchHttpResponseCode != 0 { writeHttpResponseCode(w, rid, matchedHook.ID, matchedHook.TriggerRuleMismatchHttpResponseCode) } // if none of the hooks got triggered log.Printf("[%s] %s got matched, but didn't get triggered because the trigger rules were not satisfied\n", rid, matchedHook.ID) fmt.Fprint(w, "Hook rules were not satisfied.") } else { w.WriteHeader(http.StatusNotFound) fmt.Fprint(w, "Hook not found.") } } func handleHook(h *hook.Hook, rid string, headers, query, payload *map[string]interface{}, body *[]byte) (string, error) { var errors []error // check the command exists cmdPath, err := exec.LookPath(h.ExecuteCommand) if err != nil { // give a last chance, maybe is a relative path relativeToCwd := filepath.Join(h.CommandWorkingDirectory, h.ExecuteCommand) // check the command exists cmdPath, err = exec.LookPath(relativeToCwd) } if err != nil { log.Printf("unable to locate command: '%s'", h.ExecuteCommand) // check if parameters specified in execute-command by mistake if strings.IndexByte(h.ExecuteCommand, ' ') != -1 { s := strings.Fields(h.ExecuteCommand)[0] log.Printf("use 'pass-arguments-to-command' to specify args for '%s'", s) } return "", err } cmd := exec.Command(cmdPath) cmd.Dir = h.CommandWorkingDirectory cmd.Args, errors = h.ExtractCommandArguments(headers, query, payload) for _, err := range errors { log.Printf("[%s] error extracting command arguments: %s\n", rid, err) } var envs []string envs, errors = h.ExtractCommandArgumentsForEnv(headers, query, payload) for _, err := range errors { log.Printf("[%s] error extracting command arguments for environment: %s\n", rid, err) } files, errors := h.ExtractCommandArgumentsForFile(headers, query, payload) for _, err := range errors { log.Printf("[%s] error extracting command arguments for file: %s\n", rid, err) } for i := range files { tmpfile, err := ioutil.TempFile(h.CommandWorkingDirectory, files[i].EnvName) if err != nil { log.Printf("[%s] error creating temp file [%s]", rid, err) continue } log.Printf("[%s] writing env %s file %s", rid, files[i].EnvName, tmpfile.Name()) if _, err := tmpfile.Write(files[i].Data); err != nil { log.Printf("[%s] error writing file %s [%s]", rid, tmpfile.Name(), err) continue } if err := tmpfile.Close(); err != nil { log.Printf("[%s] error closing file %s [%s]", rid, tmpfile.Name(), err) continue } files[i].File = tmpfile envs = append(envs, files[i].EnvName+"="+tmpfile.Name()) } cmd.Env = append(os.Environ(), envs...) log.Printf("[%s] executing %s (%s) with arguments %q and environment %s using %s as cwd\n", rid, h.ExecuteCommand, cmd.Path, cmd.Args, envs, cmd.Dir) out, err := cmd.CombinedOutput() log.Printf("[%s] command output: %s\n", rid, out) if err != nil { log.Printf("[%s] error occurred: %+v\n", rid, err) } for i := range files { if files[i].File != nil { log.Printf("[%s] removing file %s\n", rid, files[i].File.Name()) err := os.Remove(files[i].File.Name()) if err != nil { log.Printf("[%s] error removing file %s [%s]", rid, files[i].File.Name(), err) } } } log.Printf("[%s] finished handling %s\n", rid, h.ID) return string(out), err } func writeHttpResponseCode(w http.ResponseWriter, rid string, hookId string, responseCode int) { // Check if the given return code is supported by the http package // by testing if there is a StatusText for this code. if len(http.StatusText(responseCode)) > 0 { w.WriteHeader(responseCode) } else { log.Printf("[%s] %s got matched, but the configured return code %d is unknown - defaulting to 200\n", rid, hookId, responseCode) } } func reloadHooks(hooksFilePath string) { hooksInFile := hook.Hooks{} // parse and swap log.Printf("attempting to reload hooks from %s\n", hooksFilePath) err := hooksInFile.LoadFromFile(hooksFilePath, *asTemplate) if err != nil { log.Printf("couldn't load hooks from file! %+v\n", err) } else { seenHooksIds := make(map[string]bool) log.Printf("found %d hook(s) in file\n", len(hooksInFile)) for _, hook := range hooksInFile { wasHookIDAlreadyLoaded := false for _, loadedHook := range loadedHooksFromFiles[hooksFilePath] { if loadedHook.ID == hook.ID { wasHookIDAlreadyLoaded = true break } } if (matchLoadedHook(hook.ID) != nil && !wasHookIDAlreadyLoaded) || seenHooksIds[hook.ID] { log.Printf("error: hook with the id %s has already been loaded!\nplease check your hooks file for duplicate hooks ids!", hook.ID) log.Println("reverting hooks back to the previous configuration") return } seenHooksIds[hook.ID] = true log.Printf("\tloaded: %s\n", hook.ID) } loadedHooksFromFiles[hooksFilePath] = hooksInFile } } func reloadAllHooks() { for _, hooksFilePath := range hooksFiles { reloadHooks(hooksFilePath) } } func removeHooks(hooksFilePath string) { for _, hook := range loadedHooksFromFiles[hooksFilePath] { log.Printf("\tremoving: %s\n", hook.ID) } newHooksFiles := hooksFiles[:0] for _, filePath := range hooksFiles { if filePath != hooksFilePath { newHooksFiles = append(newHooksFiles, filePath) } } hooksFiles = newHooksFiles removedHooksCount := len(loadedHooksFromFiles[hooksFilePath]) delete(loadedHooksFromFiles, hooksFilePath) log.Printf("removed %d hook(s) that were loaded from file %s\n", removedHooksCount, hooksFilePath) if !*verbose && !*noPanic && lenLoadedHooks() == 0 { log.SetOutput(os.Stdout) log.Fatalln("couldn't load any hooks from file!\naborting webhook execution since the -verbose flag is set to false.\nIf, for some reason, you want webhook to run without the hooks, either use -verbose flag, or -nopanic") } } func watchForFileChange() { for { select { case event := <-(*watcher).Events: if event.Op&fsnotify.Write == fsnotify.Write { log.Printf("hooks file %s modified\n", event.Name) reloadHooks(event.Name) } else if event.Op&fsnotify.Remove == fsnotify.Remove { if _, err := os.Stat(event.Name); os.IsNotExist(err) { log.Printf("hooks file %s removed, no longer watching this file for changes, removing hooks that were loaded from it\n", event.Name) (*watcher).Remove(event.Name) removeHooks(event.Name) } } else if event.Op&fsnotify.Rename == fsnotify.Rename { time.Sleep(100 * time.Millisecond) if _, err := os.Stat(event.Name); os.IsNotExist(err) { // file was removed log.Printf("hooks file %s removed, no longer watching this file for changes, and removing hooks that were loaded from it\n", event.Name) (*watcher).Remove(event.Name) removeHooks(event.Name) } else { // file was overwritten log.Printf("hooks file %s overwritten\n", event.Name) reloadHooks(event.Name) (*watcher).Remove(event.Name) (*watcher).Add(event.Name) } } case err := <-(*watcher).Errors: log.Println("watcher error:", err) } } } // valuesToMap converts map[string][]string to a map[string]string object func valuesToMap(values map[string][]string) map[string]interface{} { ret := make(map[string]interface{}) for key, value := range values { if len(value) > 0 { ret[key] = value[0] } } return ret }