put.c

/*
 * Copyright (c) Kristaps Dzonsons <kristaps@bsd.lv>
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */
#include "config.h"

#include <assert.h>
#include <limits.h>
#include <stdarg.h>
#include <stdint.h>
#include <stdlib.h>
#include <string.h>

#include <kcgi.h>
#include <kcgixml.h>

#include "libkcaldav.h"
#include "db.h"
#include "server.h"

static struct ical *
req2ical(struct kreq *r)
{
	struct state	*st = r->arg;

	if ( r->fieldmap[VALID_BODY] == NULL) {
		kutil_warnx(r, st->prncpl->name,
			"failed iCalendar parse");
		http_error(r, KHTTP_400);
		return NULL;
	} 
	
	if (r->fieldmap[VALID_BODY]->ctypepos != KMIME_TEXT_CALENDAR) {
		kutil_warnx(r, st->prncpl->name,
			"bad iCalendar MIME type");
		http_error(r, KHTTP_415);
		return NULL;
	}

	/* This shouldn't fail now. */

	return ical_parse(NULL, r->fieldmap[VALID_BODY]->val, 
		r->fieldmap[VALID_BODY]->valsz, NULL, NULL);
}

/*
 * Satisfy RFC 4791, 5.3.2, PUT.
 */
void
method_put(struct kreq *r)
{
	struct ical	*p;
	struct state	*st = r->arg;
	size_t		 sz;
	int		 rc;
	char		*buf = NULL;
	const char	*digest = NULL;

	if (st->cfg == NULL) {
		kutil_warnx(r, st->prncpl->name,
			"PUT into non-calendar collection");
		http_error(r, KHTTP_403);
		return;
	} else if ((p = req2ical(r)) == NULL)
		return;

	/* 
	 * Check if PUT is conditional upon existing etag.
	 * Parse the etag contents, if specified in the "If" header,
	 * according to RFC 2616.
	 */

	if (r->reqmap[KREQU_IF] != NULL) {
		buf = kstrdup(r->reqmap[KREQU_IF]->val);
		assert(buf != NULL);
		sz = strlen(buf);
		if (sz < 5 ||
		    buf[0] != '(' || buf[1] != '[' ||
		    buf[sz - 2] != ']' || buf[sz - 1] != ')' ) {
			kutil_warnx(r, st->prncpl->name,
				"malformed \"If\" statement");
			http_error(r, KHTTP_400);
			ical_free(p);
			free(buf);
			return;
		}
		buf[sz - 2] = '\0';
		buf[sz - 1] = '\0';
		digest = &buf[2];
	} else if (r->reqmap[KREQU_IF_MATCH] != NULL) {
		digest = http_etag_if_match
			(r->reqmap[KREQU_IF_MATCH]->val, &buf);

		/*
		 * If the etag is not quoted and set to "*", this means
		 * (according to RFC 7232 section 3.1) that the
		 * condition is FALSE if the "listed representation"
		 * (i.e., the resource name) is not matched.
		 * In the "put", this means that we don't duplicate the name,
		 * which we don't do anyway, so it's effectively the same as
		 * not specifying an etag.
		 */

		if (digest != NULL &&
		    buf == NULL && strcmp(digest, "*") == 0)
			digest = NULL;
	}

	if (digest == NULL) 
		rc = db_resource_new
			(r->fieldmap[VALID_BODY]->val, 
			 st->resource, st->cfg->id);
	else
		rc = db_resource_update
			(r->fieldmap[VALID_BODY]->val, 
			 st->resource, digest, st->cfg->id);

	if (rc < 0) {
		kutil_errx_noexit(r, st->prncpl->name,
			"cannot %s resource: %s", 
			digest == NULL ? "create" : "update",
			r->fullpath);
		http_error(r, KHTTP_505);
	} else if (rc == 0) {
		kutil_warnx(r, st->prncpl->name,
			"duplicate resource: %s", r->fullpath);
		http_error(r, KHTTP_403);
	} else {
		kutil_dbg(r, st->prncpl->name,
			"resource %s: %s",
			digest == NULL ? "created" : "updated",
			r->fullpath);
		http_error(r, KHTTP_201);
	}

	ical_free(p);
	free(buf);
}