Vaultwarden/src/api/web.rs

use std::io;
use std::path::{Path, PathBuf};

use rocket::Route;
use rocket::response::NamedFile;
use rocket_contrib::{Json, Value};

use auth::Headers;

use CONFIG;

pub fn routes() -> Vec<Route> {
    routes![index, files, attachments, alive]
}

// TODO: Might want to use in memory cache: https://github.com/hgzimmerman/rocket-file-cache
#[get("/")]
fn index() -> io::Result<NamedFile> {
    NamedFile::open(Path::new(&CONFIG.web_vault_folder).join("index.html"))
}

#[get("/<p..>")] // Only match this if the other routes don't match
fn files(p: PathBuf) -> io::Result<NamedFile> {
    NamedFile::open(Path::new(&CONFIG.web_vault_folder).join(p))
}

#[get("/attachments/<uuid>/<file..>")]
fn attachments(uuid: String, file: PathBuf, headers: Headers) -> io::Result<NamedFile> {
    if uuid != headers.user.uuid {
        return Err(io::Error::new(io::ErrorKind::PermissionDenied, "Permission denied"));
    }

    NamedFile::open(Path::new(&CONFIG.attachments_folder).join(file))
}


#[get("/alive")]
fn alive() -> Json<String> {
    use util::format_date;
    use chrono::{NaiveDateTime, Utc};

    Json(format_date(&Utc::now().naive_utc()))
}