package proxy import ( "bytes" "context" "encoding/base64" "fmt" "io" "net/http" "strings" "time" "github.com/PuerkitoBio/goquery" log "github.com/go-pkgz/lgr" "github.com/go-pkgz/repeater" "github.com/umputun/remark42/backend/app/rest" "github.com/umputun/remark42/backend/app/store/image" ) // Image extracts image src from comment's html and provides proxy for them // this is needed to keep remark42 running behind of HTTPS serve all images via https type Image struct { RemarkURL string RoutePath string HTTP2HTTPS bool CacheExternal bool Timeout time.Duration ImageService *image.Service } // Convert img src links to proxied links depends on enabled options func (p Image) Convert(commentHTML string) string { if p.CacheExternal { imgs, err := p.extract(commentHTML, func(img string) bool { return !strings.HasPrefix(img, p.RemarkURL) }) if err != nil { return commentHTML } commentHTML = p.replace(commentHTML, imgs) } if p.HTTP2HTTPS && !strings.HasPrefix(p.RemarkURL, "http://") { imgs, err := p.extract(commentHTML, func(img string) bool { return strings.HasPrefix(img, "http://") }) if err != nil { return commentHTML } commentHTML = p.replace(commentHTML, imgs) } return commentHTML } // extract gets all images matching predicate and return list of src func (p Image) extract(commentHTML string, imgSrcPred func(string) bool) ([]string, error) { doc, err := goquery.NewDocumentFromReader(strings.NewReader(commentHTML)) if err != nil { return nil, fmt.Errorf("can't create document: %w", err) } result := []string{} doc.Find("img").Each(func(i int, s *goquery.Selection) { if im, ok := s.Attr("src"); ok { if imgSrcPred(im) { result = append(result, im) } } }) return result, nil } // replace img links in commentHTML with route to proxy, base64 encoded original link func (p Image) replace(commentHTML string, imgs []string) string { for _, img := range imgs { encodedImgURL := base64.URLEncoding.EncodeToString([]byte(img)) resImgURL := p.RemarkURL + p.RoutePath + "?src=" + encodedImgURL commentHTML = strings.Replace(commentHTML, img, resImgURL, -1) } return commentHTML } // Handler returns http handler respond to proxied request func (p Image) Handler(w http.ResponseWriter, r *http.Request) { src, err := base64.URLEncoding.DecodeString(r.URL.Query().Get("src")) if err != nil { rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't decode image url", rest.ErrDecode) return } imgURL := string(src) var img []byte imgID, err := image.CachedImgID(imgURL) if err != nil { rest.SendErrorJSON(w, r, http.StatusBadRequest, err, "can't parse image url "+imgURL, rest.ErrAssetNotFound) return } // try to load from cache for case it was saved when CacheExternal was enabled img, _ = p.ImageService.Load(imgID) if img == nil { img, err = p.downloadImage(context.Background(), imgURL) if err != nil { rest.SendErrorJSON(w, r, http.StatusNotFound, err, "can't get image "+imgURL, rest.ErrAssetNotFound) return } if p.CacheExternal { p.cacheImage(bytes.NewReader(img), imgID) } } // enforce client-side caching etag := `"` + r.URL.Query().Get("src") + `"` w.Header().Set("Etag", etag) w.Header().Set("Cache-Control", "max-age=2592000") // 30 days if match := r.Header.Get("If-None-Match"); match != "" { if strings.Contains(match, etag) { w.WriteHeader(http.StatusNotModified) return } } w.Header().Add("Content-Type", p.ImageService.ImgContentType(img)) _, err = io.Copy(w, bytes.NewReader(img)) if err != nil { log.Printf("[WARN] can't copy image stream, %s", err) } } // cache image from provided Reader using given ID func (p Image) cacheImage(r io.Reader, imgID string) { err := p.ImageService.SaveWithID(imgID, r) if err != nil { log.Printf("[WARN] unable to save image to the storage: %+v", err) } } // download an image. func (p Image) downloadImage(ctx context.Context, imgURL string) ([]byte, error) { log.Printf("[DEBUG] downloading image %s", imgURL) timeout := 60 * time.Second // default if p.Timeout > 0 { timeout = p.Timeout } ctx, cancel := context.WithTimeout(ctx, timeout) defer cancel() client := http.Client{Timeout: 30 * time.Second} defer client.CloseIdleConnections() var resp *http.Response err := repeater.NewDefault(5, time.Second).Do(ctx, func() error { var e error req, e := http.NewRequest("GET", imgURL, http.NoBody) if e != nil { return fmt.Errorf("failed to make request for %s: %w", imgURL, e) } resp, e = client.Do(req.WithContext(ctx)) //nolint:bodyclose // need a refactor to fix that return e }) if err != nil { return nil, fmt.Errorf("can't download image %s: %w", imgURL, err) } defer resp.Body.Close() if resp.StatusCode != http.StatusOK { return nil, fmt.Errorf("got unsuccessful response status %d while fetching %s", resp.StatusCode, imgURL) } imgData, err := io.ReadAll(resp.Body) if err != nil { return nil, fmt.Errorf("unable to read image body") } return imgData, nil }