csrf.cpp

/*
 * SPDX-FileCopyrightText: (C) 2017-2022 Matthias Fehring <mf@huessenbergnetz.de>
 * SPDX-License-Identifier: BSD-3-Clause
 */
#include "csrf.h"

#include <Cutelyst/Context>
#include <Cutelyst/ParamsMultiMap>
#include <Cutelyst/Request>
#include <Cutelyst/Response>
#include <cutelee/exception.h>
#include <cutelee/parser.h>

#ifdef PLUGIN_CSRFPROTECTION_ENABLED
#    include <Cutelyst/Plugins/CSRFProtection/CSRFProtection>
#endif

Cutelee::Node *CSRFTag::getNode(const QString &tagContent, Cutelee::Parser *p) const
{
    Q_UNUSED(tagContent);
    return new CSRF(p);
}

CSRF::CSRF(Cutelee::Parser *parser)
    : Cutelee::Node(parser)
{
}

void CSRF::render(Cutelee::OutputStream *stream, Cutelee::Context *gc) const
{
#ifdef PLUGIN_CSRFPROTECTION_ENABLED
    // In case cutelyst context is not set as "c"
    auto c = gc->lookup(m_cutelystContext).value<Cutelyst::Context *>();
    if (!c) {
        const QVariantHash hash = gc->stackHash(0);
        for (const auto &[key, value] : hash.asKeyValueRange()) {
            if (value.userType() == qMetaTypeId<Cutelyst::Context *>()) {
                c = value.value<Cutelyst::Context *>();
                if (c) {
                    m_cutelystContext = key;
                    break;
                }
            }
        }

        if (!c) {
            return;
        }
    }

    *stream << Cutelyst::CSRFProtection::getTokenFormField(c);
#else
    Q_UNUSED(stream)
    Q_UNUSED(gc)
    qWarning("%s", "The CSRF protection plugin has not been built.");
#endif
}

Cutelee::Node *CSRFTokenTag::getNode(const QString &tagContent, Cutelee::Parser *p) const
{
    Q_UNUSED(tagContent);
    return new CSRFToken(p);
}

CSRFToken::CSRFToken(Cutelee::Parser *parser)
    : Cutelee::Node(parser)
{
}

void CSRFToken::render(Cutelee::OutputStream *stream, Cutelee::Context *gc) const
{
#ifdef PLUGIN_CSRFPROTECTION_ENABLED
    // In case cutelyst context is not set as "c"
    auto c = gc->lookup(m_cutelystContext).value<Cutelyst::Context *>();
    if (!c) {
        const QVariantHash hash = gc->stackHash(0);
        for (const auto &[key, value] : hash.asKeyValueRange()) {
            if (value.userType() == qMetaTypeId<Cutelyst::Context *>()) {
                c = value.value<Cutelyst::Context *>();
                if (c) {
                    m_cutelystContext = key;
                    break;
                }
            }
        }

        if (!c) {
            return;
        }
    }

    *stream << QString::fromLatin1(Cutelyst::CSRFProtection::getToken(c));
#else
    Q_UNUSED(stream)
    Q_UNUSED(gc)
    qWarning("%s", "The CSRF protection plugin has not been built.");
#endif
}

#include "moc_csrf.cpp"