View Javadoc
1   /**
2    * This file Copyright (c) 2010-2018 Magnolia International
3    * Ltd.  (http://www.magnolia-cms.com). All rights reserved.
4    *
5    *
6    * This file is dual-licensed under both the Magnolia
7    * Network Agreement and the GNU General Public License.
8    * You may elect to use one or the other of these licenses.
9    *
10   * This file is distributed in the hope that it will be
11   * useful, but AS-IS and WITHOUT ANY WARRANTY; without even the
12   * implied warranty of MERCHANTABILITY or FITNESS FOR A
13   * PARTICULAR PURPOSE, TITLE, or NONINFRINGEMENT.
14   * Redistribution, except as permitted by whichever of the GPL
15   * or MNA you select, is prohibited.
16   *
17   * 1. For the GPL license (GPL), you can redistribute and/or
18   * modify this file under the terms of the GNU General
19   * Public License, Version 3, as published by the Free Software
20   * Foundation.  You should have received a copy of the GNU
21   * General Public License, Version 3 along with this program;
22   * if not, write to the Free Software Foundation, Inc., 51
23   * Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
24   *
25   * 2. For the Magnolia Network Agreement (MNA), this file
26   * and the accompanying materials are made available under the
27   * terms of the MNA which accompanies this distribution, and
28   * is available at http://www.magnolia-cms.com/mna.html
29   *
30   * Any modifications to this file must keep this entire header
31   * intact.
32   *
33   */
34  package info.magnolia.cms.filters;
35  
36  import info.magnolia.cms.util.ServletUtil;
37  import info.magnolia.cms.util.SimpleUrlPattern;
38  import info.magnolia.context.MgnlContext;
39  import info.magnolia.context.WebContext;
40  
41  import java.util.ArrayList;
42  import java.util.Collection;
43  import java.util.Iterator;
44  import java.util.regex.Matcher;
45  import java.util.regex.Pattern;
46  
47  import javax.servlet.http.HttpServletRequest;
48  
49  import org.apache.commons.lang3.StringUtils;
50  import org.slf4j.Logger;
51  import org.slf4j.LoggerFactory;
52  
53  
54  /**
55   * A URI mapping as configured for filters and servlets.
56   */
57  public class Mapping {
58      private static final Logger log = LoggerFactory.getLogger(Mapping.class);
59  
60      private static final String METACHARACTERS = "([\\^\\(\\)\\{\\}\\[\\]*$+.])";
61  
62      protected static String escapeMetaCharacters(String str) {
63          return str.replaceAll(METACHARACTERS, "\\\\$1");
64      }
65  
66      private Collection<Pattern> mappings = new ArrayList<Pattern>();
67  
68      public MatchingResult match(HttpServletRequest request) {
69          Matcher matcher = findMatcher(request);
70          boolean matches = matcher != null;
71          int matchingEndPosition = determineMatchingEnd(matcher);
72          return new MatchingResult(matcher, matches, matchingEndPosition);
73      }
74  
75      /**
76       * Determines the index of the first pathInfo character. If the uri does not match any mapping
77       * this method returns -1.
78       */
79      private int determineMatchingEnd(Matcher matcher) {
80          if (matcher == null) {
81              return -1;
82          }
83          if (matcher.groupCount() > 0) {
84              return matcher.end(1);
85          }
86          return matcher.end();
87      }
88  
89      private Matcher findMatcher(HttpServletRequest request) {
90          String uri = null;
91          WebContext ctx = MgnlContext.getWebContextOrNull();
92          if (ctx != null) {
93              uri = ctx.getAggregationState().getCurrentURI();
94          }
95          if (uri == null) {
96              // the web context is not available during installation
97              uri = ServletUtil.stripPathParameters(request.getRequestURI());
98              String contextPath = request.getContextPath();
99              // The requestUri should always start with the context path
100             if (uri.startsWith(contextPath + "/")) {
101                 uri = uri.substring(contextPath.length());
102             }
103         }
104         return findMatcher(uri);
105     }
106 
107     private Matcher findMatcher(String uri) {
108         for (Iterator<Pattern> iter = getMappings().iterator(); iter.hasNext(); ) {
109             final Matcher matcher = iter.next().matcher(uri);
110 
111             if (matcher.find()) {
112                 return matcher;
113             }
114         }
115 
116         return null;
117     }
118 
119     public Collection<Pattern> getMappings() {
120         return mappings;
121     }
122 
123     public void setMappings(Collection<String> mappings) {
124         this.mappings.clear();
125         if (mappings != null) {
126             for (String mapping : mappings) {
127                 this.addMapping(mapping);
128             }
129         }
130     }
131 
132     /**
133      * See SRV.11.2 Specification of Mappings in the Servlet Specification for the syntax of
134      * mappings. Additionally, you can also use plain regular expressions to map your servlets, by
135      * prefix the mapping by "regex:". (in which case anything in the request url following the
136      * expression's match will be the pathInfo - if your pattern ends with a $, extra pathInfo won't
137      * match)
138      */
139     public void addMapping(final String mapping) {
140         log.debug("Adding new mapping for {}", mapping);
141         final Pattern pattern = servletMappingToRegex(mapping);
142         mappings.add(pattern);
143     }
144 
145     protected Pattern servletMappingToRegex(String mapping) {
146         final String pattern;
147 
148         // we're building a Pattern with 3 groups: (1) servletPath (2) ignored (3) pathInfo
149 
150         if (isDefaultMapping(mapping)) {
151             // the mapping is exactly '/*', the servlet path should be
152             // an empty string and everything else should be the path info
153             pattern = "^()(/)(" + SimpleUrlPattern.MULTIPLE_CHAR_PATTERN + ")";
154         } else if (isPathMapping(mapping)) {
155             // the pattern ends with /*, escape out metacharacters for
156             // use in a regex, and replace the ending * with MULTIPLE_CHAR_PATTERN
157             final String mappingWithoutSuffix = StringUtils.removeEnd(mapping, "/*");
158             pattern = "^(" + escapeMetaCharacters(mappingWithoutSuffix) + ")(/)(" + SimpleUrlPattern.MULTIPLE_CHAR_PATTERN + ")";
159         } else if (isExtensionMapping(mapping)) {
160             // something like '*.jsp', everything should be the servlet path
161             // and the path info should be null
162             final String regexedMapping = StringUtils.replace(mapping, "*.", SimpleUrlPattern.MULTIPLE_CHAR_PATTERN + "\\.");
163             pattern = "^(" + regexedMapping + ")$";
164         } else if (isRegexpMapping(mapping)) {
165             final String mappingWithoutPrefix = StringUtils.removeStart(mapping, "regex:");
166             pattern = "^(" + mappingWithoutPrefix + ")($|/)(" + SimpleUrlPattern.MULTIPLE_CHAR_PATTERN + ")";
167         } else {
168             // just literal text, ensure metacharacters are escaped, and that only
169             // the exact string is matched.
170             pattern = "^(" + escapeMetaCharacters(mapping) + ")$";
171         }
172         return Pattern.compile(pattern);
173     }
174 
175     /**
176      * This is order specific, this method should not be called until after the isDefaultMapping()
177      * method else it will return true for a default mapping.
178      */
179     private boolean isPathMapping(String mapping) {
180         return mapping.startsWith("/") && mapping.endsWith("/*");
181     }
182 
183     private boolean isExtensionMapping(String mapping) {
184         return mapping.startsWith("*.");
185     }
186 
187     private boolean isDefaultMapping(String mapping) {
188         // TODO : default mapping per spec is "/" - do we really want to support this? is there a
189         // point ?
190         return mapping.equals("/");
191     }
192 
193     private boolean isRegexpMapping(String mapping) {
194         return mapping.startsWith("regex:");
195     }
196 
197     /**
198      * Result of {@link Mapping#match(HttpServletRequest)} method.
199      */
200     public static class MatchingResult {
201         private final Matcher matcher;
202         private final boolean matches;
203         private final int matchingEndPosition;
204 
205         public MatchingResult(Matcher matcher, boolean matches, int matchingEndPosition) {
206             this.matcher = matcher;
207             this.matches = matches;
208             this.matchingEndPosition = matchingEndPosition;
209         }
210 
211         public Matcher getMatcher() {
212             return matcher;
213         }
214 
215         public boolean isMatching() {
216             return matches;
217         }
218 
219         public int getMatchingEndPosition() {
220             return matchingEndPosition;
221         }
222     }
223 
224 }