428 lines
13 KiB
C#
428 lines
13 KiB
C#
|
using System;
|
||
|
|
using System.Diagnostics;
|
||
|
|
using System.Threading.Tasks;
|
||
|
|
using System.Text.RegularExpressions;
|
||
|
|
using System.Linq;
|
||
|
|
using System.IO;
|
||
|
|
using System.Collections.Generic;
|
||
|
|
using System.Threading;
|
||
|
|
using System.Runtime.InteropServices;
|
||
|
|
|
||
|
|
namespace CGIProxyHandler
|
||
|
|
{
|
||
|
|
class MainClass
|
||
|
|
{
|
||
|
|
private class LogHandler
|
||
|
|
{
|
||
|
|
private object m_lock = new object();
|
||
|
|
private StreamWriter m_stream;
|
||
|
|
private bool m_debug;
|
||
|
|
|
||
|
|
public LogHandler(StreamWriter writer, bool debug)
|
||
|
|
{
|
||
|
|
m_stream = writer;
|
||
|
|
m_debug = debug;
|
||
|
|
}
|
||
|
|
|
||
|
|
public void WriteMessage(string msg)
|
||
|
|
{
|
||
|
|
if (m_stream != null)
|
||
|
|
lock(m_lock)
|
||
|
|
m_stream.WriteLine(msg);
|
||
|
|
}
|
||
|
|
|
||
|
|
public void WriteDebugMessage(string msg)
|
||
|
|
{
|
||
|
|
if (m_stream != null && m_debug)
|
||
|
|
lock(m_lock)
|
||
|
|
m_stream.WriteLine(msg);
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
/// <summary>
|
||
|
|
/// Runs an external command
|
||
|
|
/// </summary>
|
||
|
|
/// <returns>The stdout data.</returns>
|
||
|
|
/// <param name="command">The executable</param>
|
||
|
|
/// <param name="args">The executable and the arguments.</param>
|
||
|
|
/// <param name="shell">If set to <c>true</c> use the shell context for execution.</param>
|
||
|
|
/// <param name="exitcode">Set the value to check for a particular exitcode.</param>
|
||
|
|
private static async Task<string> ShellExec(string command, string args = null, bool shell = false, int exitcode = -1, Dictionary<string, string> env = null)
|
||
|
|
{
|
||
|
|
var psi = new ProcessStartInfo() {
|
||
|
|
FileName = command,
|
||
|
|
Arguments = shell ? null : args,
|
||
|
|
UseShellExecute = false,
|
||
|
|
RedirectStandardInput = shell,
|
||
|
|
RedirectStandardOutput = true
|
||
|
|
};
|
||
|
|
|
||
|
|
if (env != null)
|
||
|
|
foreach (var pk in env)
|
||
|
|
psi.EnvironmentVariables[pk.Key] = pk.Value;
|
||
|
|
|
||
|
|
using (var p = Process.Start(psi))
|
||
|
|
{
|
||
|
|
if (shell && args != null)
|
||
|
|
await p.StandardInput.WriteLineAsync(args);
|
||
|
|
|
||
|
|
var res = await p.StandardOutput.ReadToEndAsync();
|
||
|
|
|
||
|
|
p.WaitForExit((int)TimeSpan.FromSeconds(5).TotalMilliseconds);
|
||
|
|
|
||
|
|
if (p.ExitCode != exitcode && exitcode != -1)
|
||
|
|
throw new Exception(string.Format("Exit code was: {0}, stdout: {1}", p.ExitCode, res));
|
||
|
|
return res;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
private static string GetEnvArg(string key, string @default = null)
|
||
|
|
{
|
||
|
|
var res = Environment.GetEnvironmentVariable(key);
|
||
|
|
return string.IsNullOrWhiteSpace(res) ? @default : res.Trim();
|
||
|
|
}
|
||
|
|
|
||
|
|
private const string CRLF = "\r\n";
|
||
|
|
private static readonly byte[] ERROR_MESSAGE = System.Text.Encoding.ASCII.GetBytes("Status: 500 Server error" + CRLF + CRLF);
|
||
|
|
|
||
|
|
public static void Main(string[] args)
|
||
|
|
{
|
||
|
|
var debug = GetEnvArg("PROXY_DEBUG", "0") == "1";
|
||
|
|
var logfile = GetEnvArg("PROXY_LOGFILE", "/var/log/duplicat-proxy.log");
|
||
|
|
|
||
|
|
using (var logout = new StreamWriter(File.Open(logfile, System.IO.FileMode.Append, FileAccess.Write, FileShare.ReadWrite)))
|
||
|
|
using(var stdout = Console.OpenStandardOutput())
|
||
|
|
{
|
||
|
|
if (logout != null)
|
||
|
|
logout.AutoFlush = true;
|
||
|
|
|
||
|
|
|
||
|
|
var logger = new LogHandler(logout, debug);
|
||
|
|
|
||
|
|
try
|
||
|
|
{
|
||
|
|
//stdout.WriteTimeout = (int)ACTIVITY_TIMEOUT.TotalMilliseconds;
|
||
|
|
logger.WriteDebugMessage("Started!");
|
||
|
|
logger.WriteDebugMessage(string.Format("Processing request for target url: {0}", GetEnvArg("HTTP_X_PROXY_PATH")));
|
||
|
|
|
||
|
|
logger.WriteDebugMessage(string.Format("Redirects: {0},{1},{2}", Console.IsInputRedirected, Console.IsOutputRedirected, Console.IsErrorRedirected));
|
||
|
|
|
||
|
|
if (args == null)
|
||
|
|
args = new string[0];
|
||
|
|
|
||
|
|
foreach(var a in args)
|
||
|
|
logger.WriteDebugMessage(string.Format("arg: {0}", a));
|
||
|
|
|
||
|
|
Run(args, logger, stdout).Wait();
|
||
|
|
}
|
||
|
|
catch (Exception ex)
|
||
|
|
{
|
||
|
|
var rex = ex;
|
||
|
|
if (rex is AggregateException && (rex as AggregateException).Flatten().InnerExceptions.Count == 1)
|
||
|
|
rex = (rex as AggregateException).Flatten().InnerExceptions.First();
|
||
|
|
|
||
|
|
if (debug)
|
||
|
|
logger.WriteMessage(string.Format("Failed: {0}", rex));
|
||
|
|
else
|
||
|
|
logger.WriteMessage(string.Format("Failed: {0}", rex.Message));
|
||
|
|
|
||
|
|
try
|
||
|
|
{
|
||
|
|
stdout.Write(ERROR_MESSAGE, 0, ERROR_MESSAGE.Length);
|
||
|
|
}
|
||
|
|
catch (Exception ex2)
|
||
|
|
{
|
||
|
|
logger.WriteDebugMessage(string.Format("Failed to set error status: {0}", ex2));
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
private static async Task Run(string[] args, LogHandler logger, Stream stdout)
|
||
|
|
{
|
||
|
|
var login_cgi = GetEnvArg("SYNO_LOGIN_CGI", "/usr/syno/synoman/webman/login.cgi");
|
||
|
|
var auth_cgi = GetEnvArg("SYNO_AUTHENTICATE_CGI", "/usr/syno/synoman/webman/modules/authenticate.cgi");
|
||
|
|
var admin_only = !(GetEnvArg("SYNO_ALL_USERS", "0") == "1");
|
||
|
|
var auto_xsrf = GetEnvArg("SYNO_AUTO_XSRF", "1") == "1";
|
||
|
|
var skip_auth = GetEnvArg("SYNO_SKIP_AUTH", "0") == "1";
|
||
|
|
var query_string = GetEnvArg("QUERY_STRING", "");
|
||
|
|
var proxy_host = GetEnvArg("PROXY_HOST", "localhost");
|
||
|
|
var proxy_port = GetEnvArg("PROXY_PORT", "8200");
|
||
|
|
|
||
|
|
var xsrftoken = GetEnvArg("HTTP_X_SYNO_TOKEN");
|
||
|
|
if (string.IsNullOrWhiteSpace(xsrftoken) && !string.IsNullOrWhiteSpace(query_string))
|
||
|
|
{
|
||
|
|
// Avoid loading a library just for parsing the token
|
||
|
|
var tkre = new Regex(@"SynoToken=(<?token>[^&+])");
|
||
|
|
var m = tkre.Match(query_string);
|
||
|
|
if (m.Success)
|
||
|
|
xsrftoken = m.Groups["token"].Value;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (!skip_auth)
|
||
|
|
{
|
||
|
|
if (string.IsNullOrWhiteSpace(xsrftoken) && auto_xsrf)
|
||
|
|
{
|
||
|
|
var authre = new Regex(@"""SynoToken""\s?\:\s?""(?<token>[^""]+)""");
|
||
|
|
var resp = await ShellExec(login_cgi);
|
||
|
|
|
||
|
|
logger.WriteDebugMessage(string.Format("xsrf response is: {0}", resp));
|
||
|
|
|
||
|
|
var m = authre.Match(resp);
|
||
|
|
if (m.Success)
|
||
|
|
xsrftoken = m.Groups["token"].Value;
|
||
|
|
else
|
||
|
|
throw new Exception("Unable to get XSRF token");
|
||
|
|
}
|
||
|
|
|
||
|
|
var tmpenv = new Dictionary<string, string>();
|
||
|
|
tmpenv["QUERY_STRING"] = "SynoToken=" + xsrftoken;
|
||
|
|
|
||
|
|
var username = GetEnvArg("SYNO_USERNAME");
|
||
|
|
|
||
|
|
if (string.IsNullOrWhiteSpace(username))
|
||
|
|
{
|
||
|
|
username = await ShellExec(auth_cgi, shell: false, exitcode: 0, env: tmpenv);
|
||
|
|
logger.WriteDebugMessage(string.Format("Username: {0}", username));
|
||
|
|
}
|
||
|
|
|
||
|
|
if (string.IsNullOrWhiteSpace(username))
|
||
|
|
throw new Exception("Not logged in");
|
||
|
|
|
||
|
|
username = username.Trim();
|
||
|
|
|
||
|
|
if (admin_only)
|
||
|
|
{
|
||
|
|
var groups = GetEnvArg("SYNO_GROUP_IDS");
|
||
|
|
|
||
|
|
if (string.IsNullOrWhiteSpace(groups))
|
||
|
|
groups = await ShellExec("id", "-G '" + username.Trim().Replace("'", "\\'") + "'", exitcode: 0) ?? "";
|
||
|
|
if (!groups.Split(new char[] { ' ' }).Contains("101"))
|
||
|
|
throw new Exception(string.Format("User {0} is not an admin", username));
|
||
|
|
|
||
|
|
logger.WriteDebugMessage("User is admin");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
var path = GetEnvArg("HTTP_X_PROXY_PATH");
|
||
|
|
if (string.IsNullOrWhiteSpace(path))
|
||
|
|
{
|
||
|
|
var xpre = new Regex(@"x-proxy-path=(<?url>[^&+])");
|
||
|
|
var m = xpre.Match(query_string);
|
||
|
|
if (m.Success)
|
||
|
|
path = Uri.UnescapeDataString(m.Groups["url"].Value);
|
||
|
|
}
|
||
|
|
|
||
|
|
logger.WriteDebugMessage(string.Format("Path is {0} and query string is {1}", path, query_string));
|
||
|
|
|
||
|
|
if (string.IsNullOrWhiteSpace(path) || !path.StartsWith("/"))
|
||
|
|
throw new Exception("Invalid path requested");
|
||
|
|
|
||
|
|
if (!string.IsNullOrWhiteSpace(query_string))
|
||
|
|
path += (query_string.StartsWith("?") ? "" : "?") + Uri.EscapeUriString(query_string);
|
||
|
|
|
||
|
|
int port;
|
||
|
|
if (!int.TryParse(proxy_port, out port))
|
||
|
|
port = 8200;
|
||
|
|
|
||
|
|
logger.WriteDebugMessage(string.Format("About to connect to {0}:{1}", proxy_host, port));
|
||
|
|
|
||
|
|
using (var client = new System.Net.Sockets.TcpClient())
|
||
|
|
{
|
||
|
|
logger.WriteDebugMessage(string.Format("Connecting to {0}:{1}", proxy_host, port));
|
||
|
|
client.Connect(proxy_host, port);
|
||
|
|
logger.WriteDebugMessage("Connected");
|
||
|
|
|
||
|
|
using (var ns = client.GetStream())
|
||
|
|
{
|
||
|
|
logger.WriteDebugMessage("Opened TCP stream");
|
||
|
|
|
||
|
|
using (var sw = new StreamWriter(ns))
|
||
|
|
{
|
||
|
|
logger.WriteDebugMessage("Created StreamWriter");
|
||
|
|
|
||
|
|
//await ForwardRequest(sw, path, logout);
|
||
|
|
//await ForwardResponse(ns, stdout, logout);
|
||
|
|
|
||
|
|
await Task.WhenAll(
|
||
|
|
ForwardRequest(sw, path, logger),
|
||
|
|
ForwardResponse(ns, stdout, logger)
|
||
|
|
);
|
||
|
|
|
||
|
|
logger.WriteDebugMessage("Done processing");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
private static readonly byte[] STATUS_PREFIX = System.Text.Encoding.ASCII.GetBytes("Status: ");
|
||
|
|
private static readonly int HTTP_HEAD_LEN = "HTTP/1.1 ".Length;
|
||
|
|
|
||
|
|
|
||
|
|
private static async Task ForwardResponse(Stream source, Stream target, LogHandler logger)
|
||
|
|
{
|
||
|
|
var buf = new byte[8 * 1024];
|
||
|
|
int r = 0;
|
||
|
|
int offset = 0;
|
||
|
|
var lastmatch = 0;
|
||
|
|
var status = false;
|
||
|
|
long contentlength = -1;
|
||
|
|
var canceltoken = new CancellationTokenSource();
|
||
|
|
|
||
|
|
logger.WriteDebugMessage("Forward response");
|
||
|
|
|
||
|
|
while ((r = await source.ReadAsync(buf, offset, buf.Length - offset, canceltoken.Token)) != 0)
|
||
|
|
{
|
||
|
|
logger.WriteDebugMessage(string.Format("Read {0} bytes", r));
|
||
|
|
|
||
|
|
offset += r;
|
||
|
|
var ix = Array.IndexOf(buf, (byte)13, 0, offset);
|
||
|
|
|
||
|
|
while (ix >= 0 && ix < offset - 1)
|
||
|
|
{
|
||
|
|
if (buf[ix + 1] == 10)
|
||
|
|
{
|
||
|
|
if (!status)
|
||
|
|
{
|
||
|
|
status = true;
|
||
|
|
logger.WriteDebugMessage("Writing: Status: " + System.Text.Encoding.ASCII.GetString(buf, lastmatch + HTTP_HEAD_LEN, ix - lastmatch - HTTP_HEAD_LEN));
|
||
|
|
|
||
|
|
await target.WriteAsync(STATUS_PREFIX, 0, STATUS_PREFIX.Length, canceltoken.Token);
|
||
|
|
await target.WriteAsync(buf, lastmatch + HTTP_HEAD_LEN, (ix - lastmatch - HTTP_HEAD_LEN) + 2, canceltoken.Token);
|
||
|
|
|
||
|
|
logger.WriteDebugMessage("Wrote status line");
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
// Blank line and we are done
|
||
|
|
if (ix - lastmatch == 0)
|
||
|
|
{
|
||
|
|
logger.WriteDebugMessage(string.Format("Completed header, writing remaining {0} bytes", offset - lastmatch));
|
||
|
|
|
||
|
|
await target.WriteAsync(buf, lastmatch, offset - lastmatch, canceltoken.Token);
|
||
|
|
|
||
|
|
// Adjust remaining data length
|
||
|
|
if (contentlength > 0)
|
||
|
|
contentlength -= offset - lastmatch - 2;
|
||
|
|
|
||
|
|
|
||
|
|
logger.WriteDebugMessage(string.Format("Body has remaining {0} bytes", contentlength));
|
||
|
|
|
||
|
|
while(contentlength > 0)
|
||
|
|
{
|
||
|
|
r = await source.ReadAsync(buf, 0, (int)Math.Min(buf.Length, contentlength), canceltoken.Token);
|
||
|
|
if (r == 0)
|
||
|
|
break;
|
||
|
|
|
||
|
|
contentlength -= r;
|
||
|
|
|
||
|
|
|
||
|
|
await target.WriteAsync(buf, 0, r, canceltoken.Token);
|
||
|
|
|
||
|
|
logger.WriteDebugMessage(string.Format("Body has remaining {0} bytes", contentlength));
|
||
|
|
}
|
||
|
|
|
||
|
|
await target.FlushAsync(canceltoken.Token);
|
||
|
|
|
||
|
|
//await logout.WriteDebugMessageAsync(string.Format("Last body chunck: {0}", System.Text.Encoding.ASCII.GetString(buf, 0, r)));
|
||
|
|
logger.WriteDebugMessage(string.Format("Completed response forward"));
|
||
|
|
|
||
|
|
target.Close();
|
||
|
|
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
|
||
|
|
var header = System.Text.Encoding.ASCII.GetString(buf, lastmatch, ix - lastmatch) ?? string.Empty;
|
||
|
|
if (header.StartsWith("Content-Length: ", StringComparison.OrdinalIgnoreCase))
|
||
|
|
if (!long.TryParse(header.Substring("Content-Length: ".Length), out contentlength))
|
||
|
|
contentlength = -1;
|
||
|
|
|
||
|
|
logger.WriteDebugMessage("Writing: " + header);
|
||
|
|
|
||
|
|
await target.WriteAsync(buf, lastmatch, (ix - lastmatch) + 2, canceltoken.Token);
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
lastmatch = ix + 2;
|
||
|
|
}
|
||
|
|
|
||
|
|
//await logger.WriteDebugMessageAsync(string.Format("Buf stats: {0},{1},{2},{3}", buf.Length, ix, offset, lastmatch));
|
||
|
|
|
||
|
|
ix = Array.IndexOf(buf, (byte)13, ix + 1, offset - ix - 1);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
private static async Task ForwardRequest(StreamWriter sw, string path, LogHandler logger)
|
||
|
|
{
|
||
|
|
var canceltoken = new CancellationTokenSource();
|
||
|
|
var env = Environment.GetEnvironmentVariables();
|
||
|
|
|
||
|
|
/*foreach (var k in env.Keys)
|
||
|
|
logger.WriteDebugMessage(string.Format("{0}: {1}", k, env[k]));*/
|
||
|
|
|
||
|
|
await sw.WriteAsync(string.Format("{0} {1} HTTP/1.1{2}", GetEnvArg("REQUEST_METHOD", "").Trim(), path, CRLF));
|
||
|
|
|
||
|
|
logger.WriteDebugMessage("Wrote request header line");
|
||
|
|
|
||
|
|
foreach (var key in env.Keys.Cast<string>().Where<string>(x => x.StartsWith("HTTP_")))
|
||
|
|
await sw.WriteAsync(string.Format("{0}: {1}{2}", key.Substring("HTTP_".Length).Replace("_", "-"), env[key], CRLF));
|
||
|
|
|
||
|
|
if (!string.IsNullOrWhiteSpace(GetEnvArg("CONTENT_TYPE")))
|
||
|
|
await sw.WriteAsync(string.Format("{0}: {1}{2}", "Content-Type", GetEnvArg("CONTENT_TYPE"), CRLF));
|
||
|
|
if (!string.IsNullOrWhiteSpace(GetEnvArg("CONTENT_LENGTH")))
|
||
|
|
await sw.WriteAsync(string.Format("{0}: {1}{2}", "Content-Length", GetEnvArg("CONTENT_LENGTH"), CRLF));
|
||
|
|
|
||
|
|
await sw.WriteAsync(string.Format("{0}: {1}{2}", "Connection", "close", CRLF));
|
||
|
|
|
||
|
|
await sw.WriteAsync(CRLF);
|
||
|
|
await sw.FlushAsync();
|
||
|
|
|
||
|
|
logger.WriteDebugMessage("Wrote all header lines");
|
||
|
|
|
||
|
|
if (new string[] { "POST", "PUT", "PATCH" }.Contains(GetEnvArg("REQUEST_METHOD", "").Trim().ToUpper()))
|
||
|
|
{
|
||
|
|
logger.WriteDebugMessage(string.Format("Copying StdIn"));
|
||
|
|
|
||
|
|
using(var stdin = Console.OpenStandardInput())
|
||
|
|
{
|
||
|
|
logger.WriteDebugMessage("Opened StdIn");
|
||
|
|
|
||
|
|
long reqsize;
|
||
|
|
if (!long.TryParse(GetEnvArg("CONTENT_LENGTH"), out reqsize))
|
||
|
|
reqsize = long.MaxValue;
|
||
|
|
|
||
|
|
var buf = new byte[4 * 1024 * 1024];
|
||
|
|
var r = 0;
|
||
|
|
while(reqsize > 0)
|
||
|
|
{
|
||
|
|
logger.WriteDebugMessage(string.Format("Remaining {0} bytes from stdin", reqsize));
|
||
|
|
|
||
|
|
r = await stdin.ReadAsync(buf, 0, buf.Length, canceltoken.Token);
|
||
|
|
logger.WriteDebugMessage(string.Format("Got {0} bytes from stdin", r));
|
||
|
|
|
||
|
|
if (r == 0)
|
||
|
|
break;
|
||
|
|
|
||
|
|
reqsize -= r;
|
||
|
|
await sw.BaseStream.WriteAsync(buf, 0, r, canceltoken.Token);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
logger.WriteDebugMessage("Copy stdin done");
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
logger.WriteDebugMessage("Completed writing request");
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
}
|