#!/bin/env python

 # -*- coding: utf-8 -*-

 # ------------------------------------------------------------

 # opensecurity_client_restful_server

 # 

 # the OpenSecurity client RESTful server

 #

 # Autor: Oliver Maurhart, <oliver.maurhart@ait.ac.at>

 #

 # Copyright (C) 2013 AIT Austrian Institute of Technology

 # AIT Austrian Institute of Technology GmbH

 # Donau-City-Strasse 1 | 1220 Vienna | Austria

 # http://www.ait.ac.at

 #

 # This program is free software; you can redistribute it and/or

 # modify it under the terms of the GNU General Public License

 # as published by the Free Software Foundation version 2.

 # 

 # This program is distributed in the hope that it will be useful,

 # but WITHOUT ANY WARRANTY; without even the implied warranty of

 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 # GNU General Public License for more details.

 # 

 # You should have received a copy of the GNU General Public License

 # along with this program; if not, write to the Free Software

 # Foundation, Inc., 51 Franklin Street, Fifth Floor, 

 # Boston, MA  02110-1301, USA.

 # ------------------------------------------------------------

 # ------------------------------------------------------------

 # imports

 import os

 import os.path

 import subprocess

 import sys

 import web

 # local

 from environment import Environment

 import opensecurity_server

 # ------------------------------------------------------------

 # const

 __version__ = "0.1"

 """All the URLs we know mapping to class handler"""

 opensecurity_urls = (

     '/application',             'os_application',

     '/credentials',             'os_credentials',

     '/password',                'os_password',

     '/',                        'os_root'

 )

 # ------------------------------------------------------------

 # code

 class os_application:

     """OpenSecurity '/application' handler.

     This is called on GET /application?vm=VM-ID&app=APP-ID

     This tries to access the vm identified with the label VM-ID

     and launched the application identified APP-ID

     """

     def GET(self):

         # pick the arguments

         args = web.input()

         # we _need_ a vm

         if not "vm" in args:

             raise web.badrequest()

         # we _need_ a app

         if not "app" in args:

             raise web.badrequest()

         apps = opensecurity_server.query_apps()

         vms = opensecurity_server.query_vms()

         # check if we do have valid vm

         v = [v for v in vms if v['name'] == args.vm]

         if len(v) == 0:

             raise web.notfound('vm not found')

         v = v[0]

         # check if we do have a valid app

         a = [a for a in apps if a['name'] == args.app]

         if len(a) == 0:

             raise web.notfound('app not found')

         a = a[0]

         # invoke launch with 

         res = "starting: launch " + v['user'] + " " + v['ip'] + " " + a['command']

         launch_image = os.path.join(sys.path[0], 'launch.py')

         process_command = [sys.executable, launch_image, v['user'], v['ip'], a['command']]

         process = subprocess.Popen(process_command, shell = False, stdout = subprocess.PIPE)

         result = process.communicate()[0]

         if process.returncode != 0:

             return 'Launch of application aborted.'

         return result

 class os_credentials:

     """OpenSecurity '/credentials' handler.

     This is called on GET /credentials?text=TEXT.

     Ideally this should pop up a user dialog to insert his

     credentials based the given TEXT.

     """

     def GET(self):

         # pick the arguments

         args = web.input()

         # we _need_ a device id

         if not "text" in args:

             raise web.badrequest()

         # invoke the user dialog as a subprocess

         dlg_credentials_image = os.path.join(sys.path[0], 'opensecurity_dialog.py')

         process_command = [sys.executable, dlg_credentials_image, 'credentials', args.text]

         process = subprocess.Popen(process_command, shell = False, stdout = subprocess.PIPE)

         result = process.communicate()[0]

         if process.returncode != 0:

             return 'Credentials request has been aborted.'

         return result

 class os_password:

     """OpenSecurity '/password' handler.

     This is called on GET /password?text=TEXT.

     Ideally this should pop up a user dialog to insert his

     password based device name.

     """

     def GET(self):

         # pick the arguments

         args = web.input()

         # we _need_ a device id

         if not "text" in args:

             raise web.badrequest()

         # invoke the user dialog as a subprocess

         dlg_credentials_image = os.path.join(sys.path[0], 'opensecurity_dialog.py')

         process_command = [sys.executable, dlg_credentials_image, 'password', args.text]

         process = subprocess.Popen(process_command, shell = False, stdout = subprocess.PIPE)

         result = process.communicate()[0]

         if process.returncode != 0:

             return 'password request has been aborted.'

         return result

 class os_root:

     """OpenSecurity '/' handler"""

     def GET(self):

         res = "OpenSecurity-Client RESTFul Server { \"version\": \"%s\" }" % __version__

         # add some sample links

         res = res + """

 USAGE EXAMPLES:

 Request a password: 

     (copy paste this into your browser's address field after the host:port)

     /password?text=Give+me+a+password+for+device+%22My+USB+Drive%22+(ID%3A+32090-AAA-X0)

     (eg.: http://127.0.0.1:8090/password?text=Give+me+a+password+for+device+%22My+USB+Drive%22+(ID%3A+32090-AAA-X0))

     NOTE: check yout taskbar, the dialog window may not pop up in front of your browser window.

 Request a combination of user and password:

     (copy paste this into your browser's address field after the host:port)

     /credentials?text=Tell+the+NSA+which+credentials+to+use+in+order+to+avoid+hacking+noise+on+wire.

     (eg.: http://127.0.0.1:8090/credentials?text=Tell+the+NSA+which+credentials+to+use+in+order+to+avoid+hacking+noise+on+wire.)

     NOTE: check yout taskbar, the dialog window may not pop up in front of your browser window.

 Start a Browser:

     (copy paste this into your browser's address field after the host:port)

     /application?vm=Debian+7&app=Browser

     (e.g. http://127.0.0.1:8090/application?vm=Debian+7&app=Browser)

         """

         return res

 # start

 if __name__ == "__main__":

     server = web.application(opensecurity_urls, globals())

     server.run()