package web import ( "fmt" "html/template" "io" "net/http" "net/mail" "strconv" "time" "github.com/jhillyerd/inbucket/log" "github.com/jhillyerd/inbucket/smtpd" ) // JSONMessageHeader contains the basic header data for a message type JSONMessageHeader struct { Mailbox string ID string `json:"Id"` From string Subject string Date time.Time Size int64 } // JSONMessage contains the same data as the header plus a JSONMessageBody type JSONMessage struct { Mailbox string ID string `json:"Id"` From string Subject string Date time.Time Size int64 Body *JSONMessageBody Header mail.Header } // JSONMessageBody contains the Text and HTML versions of the message body type JSONMessageBody struct { Text string HTML string `json:"Html"` } // MailboxIndex renders the index page for a particular mailbox func MailboxIndex(w http.ResponseWriter, req *http.Request, ctx *Context) (err error) { // Form values must be validated manually name := req.FormValue("name") selected := req.FormValue("id") if len(name) == 0 { ctx.Session.AddFlash("Account name is required", "errors") http.Redirect(w, req, reverse("RootIndex"), http.StatusSeeOther) return nil } name, err = smtpd.ParseMailboxName(name) if err != nil { ctx.Session.AddFlash(err.Error(), "errors") http.Redirect(w, req, reverse("RootIndex"), http.StatusSeeOther) return nil } // Remember this mailbox was visited RememberMailbox(ctx, name) return RenderTemplate("mailbox/index.html", w, map[string]interface{}{ "ctx": ctx, "name": name, "selected": selected, }) } // MailboxLink handles pretty links to a particular message func MailboxLink(w http.ResponseWriter, req *http.Request, ctx *Context) (err error) { // Don't have to validate these aren't empty, Gorilla returns 404 id := ctx.Vars["id"] name, err := smtpd.ParseMailboxName(ctx.Vars["name"]) if err != nil { ctx.Session.AddFlash(err.Error(), "errors") http.Redirect(w, req, reverse("RootIndex"), http.StatusSeeOther) return nil } uri := fmt.Sprintf("%s?name=%s&id=%s", reverse("MailboxIndex"), name, id) http.Redirect(w, req, uri, http.StatusSeeOther) return nil } // MailboxList renders a list of messages in a mailbox func MailboxList(w http.ResponseWriter, req *http.Request, ctx *Context) (err error) { // Don't have to validate these aren't empty, Gorilla returns 404 name, err := smtpd.ParseMailboxName(ctx.Vars["name"]) if err != nil { return err } mb, err := ctx.DataStore.MailboxFor(name) if err != nil { return fmt.Errorf("Failed to get mailbox for %v: %v", name, err) } messages, err := mb.GetMessages() if err != nil { return fmt.Errorf("Failed to get messages for %v: %v", name, err) } log.Tracef("Got %v messsages", len(messages)) if ctx.IsJSON { jmessages := make([]*JSONMessageHeader, len(messages)) for i, msg := range messages { jmessages[i] = &JSONMessageHeader{ Mailbox: name, ID: msg.ID(), From: msg.From(), Subject: msg.Subject(), Date: msg.Date(), Size: msg.Size(), } } return RenderJSON(w, jmessages) } return RenderPartial("mailbox/_list.html", w, map[string]interface{}{ "ctx": ctx, "name": name, "messages": messages, }) } // MailboxShow renders a particular message from a mailbox func MailboxShow(w http.ResponseWriter, req *http.Request, ctx *Context) (err error) { // Don't have to validate these aren't empty, Gorilla returns 404 id := ctx.Vars["id"] name, err := smtpd.ParseMailboxName(ctx.Vars["name"]) if err != nil { return err } mb, err := ctx.DataStore.MailboxFor(name) if err != nil { return fmt.Errorf("MailboxFor('%v'): %v", name, err) } msg, err := mb.GetMessage(id) if err == smtpd.ErrNotExist { http.NotFound(w, req) return nil } if err != nil { return fmt.Errorf("GetMessage() failed: %v", err) } header, err := msg.ReadHeader() if err != nil { return fmt.Errorf("ReadHeader() failed: %v", err) } mime, err := msg.ReadBody() if err != nil { return fmt.Errorf("ReadBody() failed: %v", err) } if ctx.IsJSON { return RenderJSON(w, &JSONMessage{ Mailbox: name, ID: msg.ID(), From: msg.From(), Subject: msg.Subject(), Date: msg.Date(), Size: msg.Size(), Header: header.Header, Body: &JSONMessageBody{ Text: mime.Text, HTML: mime.Html, }, }) } body := template.HTML(textToHTML(mime.Text)) htmlAvailable := mime.Html != "" return RenderPartial("mailbox/_show.html", w, map[string]interface{}{ "ctx": ctx, "name": name, "message": msg, "body": body, "htmlAvailable": htmlAvailable, "attachments": mime.Attachments, }) } // MailboxPurge deletes all messages from a mailbox func MailboxPurge(w http.ResponseWriter, req *http.Request, ctx *Context) (err error) { // Don't have to validate these aren't empty, Gorilla returns 404 name, err := smtpd.ParseMailboxName(ctx.Vars["name"]) if err != nil { return err } mb, err := ctx.DataStore.MailboxFor(name) if err != nil { return fmt.Errorf("MailboxFor('%v'): %v", name, err) } if err := mb.Purge(); err != nil { return fmt.Errorf("Mailbox(%q) Purge: %v", name, err) } log.Tracef("Purged mailbox for %q", name) if ctx.IsJSON { return RenderJSON(w, "OK") } w.Header().Set("Content-Type", "text/plain") if _, err := io.WriteString(w, "OK"); err != nil { return err } return nil } // MailboxHTML displays the HTML content of a message func MailboxHTML(w http.ResponseWriter, req *http.Request, ctx *Context) (err error) { // Don't have to validate these aren't empty, Gorilla returns 404 id := ctx.Vars["id"] name, err := smtpd.ParseMailboxName(ctx.Vars["name"]) if err != nil { return err } mb, err := ctx.DataStore.MailboxFor(name) if err != nil { return err } message, err := mb.GetMessage(id) if err != nil { return err } mime, err := message.ReadBody() if err != nil { return err } w.Header().Set("Content-Type", "text/html; charset=UTF-8") return RenderPartial("mailbox/_html.html", w, map[string]interface{}{ "ctx": ctx, "name": name, "message": message, // TODO: It is not really safe to render, need to sanitize. "body": template.HTML(mime.Html), }) } // MailboxSource displays the raw source of a message, including headers func MailboxSource(w http.ResponseWriter, req *http.Request, ctx *Context) (err error) { // Don't have to validate these aren't empty, Gorilla returns 404 id := ctx.Vars["id"] name, err := smtpd.ParseMailboxName(ctx.Vars["name"]) if err != nil { return err } mb, err := ctx.DataStore.MailboxFor(name) if err != nil { return err } message, err := mb.GetMessage(id) if err != nil { return err } raw, err := message.ReadRaw() if err != nil { return err } w.Header().Set("Content-Type", "text/plain") if _, err := io.WriteString(w, *raw); err != nil { return err } return nil } // MailboxDownloadAttach sends the attachment to the client; disposition: // attachment, type: application/octet-stream func MailboxDownloadAttach(w http.ResponseWriter, req *http.Request, ctx *Context) (err error) { // Don't have to validate these aren't empty, Gorilla returns 404 id := ctx.Vars["id"] name, err := smtpd.ParseMailboxName(ctx.Vars["name"]) if err != nil { ctx.Session.AddFlash(err.Error(), "errors") http.Redirect(w, req, reverse("RootIndex"), http.StatusSeeOther) return nil } numStr := ctx.Vars["num"] num, err := strconv.ParseUint(numStr, 10, 32) if err != nil { ctx.Session.AddFlash("Attachment number must be unsigned numeric", "errors") http.Redirect(w, req, reverse("RootIndex"), http.StatusSeeOther) return nil } mb, err := ctx.DataStore.MailboxFor(name) if err != nil { return err } message, err := mb.GetMessage(id) if err != nil { return err } body, err := message.ReadBody() if err != nil { return err } if int(num) >= len(body.Attachments) { ctx.Session.AddFlash("Attachment number too high", "errors") http.Redirect(w, req, reverse("RootIndex"), http.StatusSeeOther) return nil } part := body.Attachments[num] w.Header().Set("Content-Type", "application/octet-stream") w.Header().Set("Content-Disposition", "attachment") if _, err := w.Write(part.Content()); err != nil { return err } return nil } // MailboxViewAttach sends the attachment to the client for online viewing func MailboxViewAttach(w http.ResponseWriter, req *http.Request, ctx *Context) (err error) { // Don't have to validate these aren't empty, Gorilla returns 404 name, err := smtpd.ParseMailboxName(ctx.Vars["name"]) if err != nil { ctx.Session.AddFlash(err.Error(), "errors") http.Redirect(w, req, reverse("RootIndex"), http.StatusSeeOther) return nil } id := ctx.Vars["id"] numStr := ctx.Vars["num"] num, err := strconv.ParseUint(numStr, 10, 32) if err != nil { ctx.Session.AddFlash("Attachment number must be unsigned numeric", "errors") http.Redirect(w, req, reverse("RootIndex"), http.StatusSeeOther) return nil } mb, err := ctx.DataStore.MailboxFor(name) if err != nil { return err } message, err := mb.GetMessage(id) if err != nil { return err } body, err := message.ReadBody() if err != nil { return err } if int(num) >= len(body.Attachments) { ctx.Session.AddFlash("Attachment number too high", "errors") http.Redirect(w, req, reverse("RootIndex"), http.StatusSeeOther) return nil } part := body.Attachments[num] w.Header().Set("Content-Type", part.ContentType()) if _, err := w.Write(part.Content()); err != nil { return err } return nil } // MailboxDelete removes a particular message from a mailbox func MailboxDelete(w http.ResponseWriter, req *http.Request, ctx *Context) (err error) { // Don't have to validate these aren't empty, Gorilla returns 404 id := ctx.Vars["id"] name, err := smtpd.ParseMailboxName(ctx.Vars["name"]) if err != nil { return err } mb, err := ctx.DataStore.MailboxFor(name) if err != nil { return err } message, err := mb.GetMessage(id) if err != nil { return err } err = message.Delete() if err != nil { return err } if ctx.IsJSON { return RenderJSON(w, "OK") } w.Header().Set("Content-Type", "text/plain") if _, err := io.WriteString(w, "OK"); err != nil { return err } return nil }