package main

import (
	"flag"
	"fmt"
	"log"
	"net/http"
	"net/url"
	"os"
	"path/filepath"
	"time"

	"github.com/abbot/go-http-auth"
	"golang.org/x/net/webdav"
)

var (
	flPort     = flag.Int("port", 9999, "server port")
	flCert     = flag.String("cert", "", "server SSL cert (both -cert and -key must be present to use SSL). See `go run $(go env GOROOT)/src/crypto/tls/generate_cert.go -h` to generate development cert/key")
	flKey      = flag.String("key", "", "server SSL key")
	flHtpasswd = flag.String("htpasswd", "", "htpasswd file for auth (must be present to use auth) See htpasswd(1) to create this file.")
)

func main() {
	flag.Parse()

	if flag.NArg() == 0 {
		log.Fatal("One argument required. Please provide path to serve (you can use a special keyword of 'mem' to serve an in-memory filesystem)")
	}

	var fs webdav.FileSystem
	if flag.Args()[0] == "mem" {
		fs = webdav.NewMemFS()
	} else {
		fs = NewPassThroughFS(flag.Args()[0])
	}
	log.SetFlags(0)
	h := &webdav.Handler{
		FileSystem: fs,
		LockSystem: webdav.NewMemLS(),
		Logger: func(r *http.Request, err error) {
			t := time.Now()
			tStamp := fmt.Sprintf("%d.%9.9d", t.Unix(), t.Nanosecond())
			switch r.Method {
			case "COPY", "MOVE":
				dst := ""
				if u, err := url.Parse(r.Header.Get("Destination")); err == nil {
					dst = u.Path
				}
				o := r.Header.Get("Overwrite")
				log.Printf("%-21s%-25s%-10s%-30s%-30so=%-2s%v", tStamp, r.RemoteAddr, r.Method, r.URL.Path, dst, o, err)
			default:
				log.Printf("%-21s%-25s%-10s%-30s%v", tStamp, r.RemoteAddr, r.Method, r.URL.Path, err)
			}
		},
	}
	if *flHtpasswd != "" {
		secret := auth.HtpasswdFileProvider(*flHtpasswd)
		authenticator := auth.NewBasicAuthenticator("", secret)
		authHandlerFunc := func(w http.ResponseWriter, r *auth.AuthenticatedRequest) {
			h.ServeHTTP(w, &r.Request)
		}
		http.HandleFunc("/", authenticator.Wrap(authHandlerFunc))

	} else {
		log.Println("WARNING: connections are not authenticated. STRONGLY consider using -htpasswd.")
		http.Handle("/", h)
	}
	addr := fmt.Sprintf(":%d", *flPort)
	if *flCert != "" && *flKey != "" {
		log.Printf("Serving HTTPS:// %v", addr)
		log.Fatal(http.ListenAndServeTLS(addr, *flCert, *flKey, nil))
	} else {
		log.Println("WARNING: connections are not encrypted. STRONGLY consider using -cert/-key.")
		log.Printf("Serving HTTP:// %v", addr)
		log.Fatal(http.ListenAndServe(addr, nil))
	}
}

func NewPassThroughFS(path string) webdav.FileSystem {
	return &passThroughFS{root: path}
}

type passThroughFS struct {
	root string
}

func (ptfs *passThroughFS) Mkdir(name string, perm os.FileMode) error {
	// TODO(vbatts) check for escaping the root directory
	return os.Mkdir(filepath.Join(ptfs.root, name), perm)
}
func (ptfs *passThroughFS) OpenFile(name string, flag int, perm os.FileMode) (webdav.File, error) {
	// TODO(vbatts) check for escaping the root directory
	return os.OpenFile(filepath.Join(ptfs.root, name), flag, perm)
}
func (ptfs *passThroughFS) RemoveAll(name string) error {
	// TODO(vbatts) check for escaping the root directory
	return os.RemoveAll(filepath.Join(ptfs.root, name))
}
func (ptfs *passThroughFS) Rename(oldName, newName string) error {
	// TODO(vbatts) check for escaping the root directory
	return os.Rename(filepath.Join(ptfs.root, oldName), filepath.Join(ptfs.root, newName))
}
func (ptfs *passThroughFS) Stat(name string) (os.FileInfo, error) {
	// TODO(vbatts) check for escaping the root directory
	return os.Stat(filepath.Join(ptfs.root, name))
}