app_store_server.rb

require "sinatra"
require "sinatra/json"

require_relative "lib/models/modou/store"

require "rack/attack"

require "active_support"

class AppStoreServer < Sinatra::Application

  attr_accessor :router_system_info

  ALLOWED_ORIGINS = [ /^http:\/\/(www\.)?modouwifi\.net$/, /^http:\/\/\d+\.\d+\.\d+\.\d+(:\d+)?$/ ].freeze

  # rate limiting
  if ENV['RACK_ENV'] == 'production'
    use Rack::Attack

    Rack::Attack.cache.store = ActiveSupport::Cache::MemoryStore.new

    # Rack::Attack.blacklist('block bad guys') do |req|
    #   # Requests are blocked if the return value is truthy
    #   require "yaml"
    #
    #   ips = YAML.load_file(File.expand_path('../data/stable/blacklisted_ips.yml', __FILE__))
    #
    #   ips.include?(req.ip)
    # end

    ### Throttle Spammy Clients ###

    # If any single client IP is making tons of requests, then they're
    # probably malicious or a poorly-configured scraper. Either way, they
    # don't deserve to hog all of the app server's CPU. Cut them off!

    # Throttle all requests by IP
    #
    # Key: "rack::attack:#{Time.now.to_i/:period}:req/ip:#{req.ip}"
    Rack::Attack.throttle('req/ip', :limit => 10, :period => 60) do |req|
      req.ip
    end
  end

  configure do
    require 'newrelic_rpm'

    require "qiniu"

    Qiniu.establish_connection! access_key: ENV['QINIU_ACCESS_KEY'], secret_key: ENV['QINIU_SECRET_KEY']
  end

  before do
    # Router System Info
    @router_system_info = {
      :track => params['track'] || '',
      :version1 => params['version1'] || '',
      :version2 => params['version2'] || ''
    }

    headers 'Access-Control-Allow-Origin' => '*'

    if ENV['CROSS_SITE_PREVENTION'] == "true" && env['HTTP_ORIGIN']
      halt 403 unless ALLOWED_ORIGINS.find { |p| env['HTTP_ORIGIN'] =~ p }
    end
  end

  helpers do
    def send_qiniu_file(filepath)
      primitive_url = "http://#{ENV['QINIU_BUCKET']}.qiniudn.com/#{filepath}"

      redirect Qiniu::Auth.authorize_download_url(primitive_url)
    end

    def app_store
      Modou::Store.find(@router_system_info)
    end
  end

  # GET /apps                               => list all apps info, json format
  # GET /apps?os_version=OS_VERSION         => same above, with app.require_os_version <= OS_VERSION
  # GET /apps?install_location=LOCATION     => same above, with app.install_location == LOCATION
  #
  # params can be combined, e.g. GET /apps?install_location=internal&os_version=0.6.1
  get '/apps' do
    unless %w{ internal external }.include?(params[:install_location])
      params[:install_location] = nil
    end

    json app_store.apps(params).map(&:to_hash)
  end

  # GET /apps/unavailable                   => list all apps info, json format
  get '/apps/unavailable' do
    json app_store.unavailable_apps.map(&:to_hash)
  end

  # GET /apps/upgrades?apps[]=hdns-0.4.1&apps[]=welcome-page-0.1
  get '/apps/upgrades' do
    json app_store.available_upgrades(params[:apps], params).map(&:to_hash)
  end

  # GET /apps/hdns                                  => hdns app info, json format
  # GET /apps/com.modouwifi.hdns                    => hdns app info, json format
  # GET /apps/452a1fea-66d2-4239-b450-3e4e05ac96db  => hdns app info, json format
  # GET /apps/hdns-0.4.4.mpk                        => hdns mpk download
  get '/apps/:app_id' do
    if params[:app_id] =~ /^(.+)-([^-]+)\.mpk$/
      if app_store.app($1) && app_store.app($1).version == $2
        send_qiniu_file "apps/#{params[:app_id]}"
      else
        status 404
      end
    else
      begin
        json app_store.app(params[:app_id]).to_hash
      rescue Exception => e
        status 404
      end
    end
  end

  # GET /apps/hdns/download                 => hdns mpk download
  # GET /apps/com.modouwifi.hdns/download   => hdns mpk download
  get '/apps/:app_id/download' do
    app = app_store.app(params[:app_id])

    if app
      send_qiniu_file "apps/#{app.fullname}"
    else
      status 404
    end
  end

  # GET /apps/hdns/icon                     => hdns icon download
  # GET /apps/com.modouwifi.hdns/icon       => hdns icon download
  get '/apps/:app_id/icon' do
    app = app_store.app(params[:app_id])

    if app
      send_qiniu_file "icons/#{app.icon_name}"
    else
      status 404
    end
  end

  # GET /apps/hdns/versions                 => all version info of hdns, json format
  # GET /apps/com.modouwifi.hdns/versions   => all version info of hdns, json format
  get '/apps/:app_id/versions' do
    raise 'not implemented yet'
  end

  # GET /icons/hdns                                  => hdns icon download
  # GET /icons/com.modouwifi.hdns                    => hdns icon download
  # GET /icons/452a1fea-66d2-4239-b450-3e4e05ac96db  => hdns icon download
  # GET /icons/hdns-0.4.4.png                        => hdns icon download
  get '/icons/:app_id' do
    if params[:app_id] =~ /^(.+)-([^-]+)\.png$/
      if app_store.app($1) && app_store.app($1).version == $2
        icon_name = params[:app_id]
      end
    else
      if app = app_store.app(params[:app_id])
        icon_name = app.icon_name
      end
    end

    if icon_name
      send_qiniu_file "icons/#{icon_name}"
    else
      status 404
    end
  end
end