Josh Hunt
454380431d
* FS: Get CDN prefix from configuration * undo logger change * fix tests * add unused property * tests * fix tests * remove dead comment
115 lines
2.9 KiB
Go
115 lines
2.9 KiB
Go
package frontend
|
|
|
|
import (
|
|
"embed"
|
|
"errors"
|
|
"fmt"
|
|
"html/template"
|
|
"net/http"
|
|
"syscall"
|
|
|
|
"github.com/grafana/grafana-app-sdk/logging"
|
|
"github.com/grafana/grafana/pkg/api/dtos"
|
|
"github.com/grafana/grafana/pkg/middleware"
|
|
"github.com/grafana/grafana/pkg/setting"
|
|
)
|
|
|
|
type IndexProvider struct {
|
|
log logging.Logger
|
|
index *template.Template
|
|
data IndexViewData
|
|
}
|
|
|
|
type IndexViewData struct {
|
|
CSPContent string
|
|
CSPReportOnlyContent string
|
|
CSPEnabled bool
|
|
IsDevelopmentEnv bool
|
|
|
|
Config *setting.Cfg
|
|
|
|
AppSubUrl string
|
|
BuildVersion string
|
|
BuildCommit string
|
|
AppTitle string
|
|
|
|
Assets dtos.EntryPointAssets // Includes CDN info
|
|
|
|
// Nonce is a cryptographic identifier for use with Content Security Policy.
|
|
Nonce string
|
|
}
|
|
|
|
// Templates setup.
|
|
var (
|
|
//go:embed *.html
|
|
templatesFS embed.FS
|
|
|
|
// templates
|
|
htmlTemplates = template.Must(template.New("html").Delims("[[", "]]").ParseFS(templatesFS, `*.html`))
|
|
)
|
|
|
|
func NewIndexProvider(cfg *setting.Cfg, assetsManifest dtos.EntryPointAssets) (*IndexProvider, error) {
|
|
t := htmlTemplates.Lookup("index.html")
|
|
if t == nil {
|
|
return nil, fmt.Errorf("missing index template")
|
|
}
|
|
|
|
return &IndexProvider{
|
|
log: logging.DefaultLogger.With("logger", "index-provider"),
|
|
index: t,
|
|
data: IndexViewData{
|
|
AppTitle: "Grafana",
|
|
AppSubUrl: cfg.AppSubURL, // Based on the request?
|
|
BuildVersion: cfg.BuildVersion,
|
|
BuildCommit: cfg.BuildCommit,
|
|
Config: cfg,
|
|
|
|
CSPEnabled: cfg.CSPEnabled,
|
|
CSPContent: cfg.CSPTemplate,
|
|
CSPReportOnlyContent: cfg.CSPReportOnlyTemplate,
|
|
|
|
IsDevelopmentEnv: cfg.Env == setting.Dev,
|
|
|
|
Assets: assetsManifest,
|
|
},
|
|
}, nil
|
|
}
|
|
|
|
func (p *IndexProvider) HandleRequest(writer http.ResponseWriter, request *http.Request) {
|
|
_, span := tracer.Start(request.Context(), "frontend.index.HandleRequest")
|
|
defer span.End()
|
|
|
|
if request.Method != "GET" {
|
|
writer.WriteHeader(http.StatusMethodNotAllowed)
|
|
return
|
|
}
|
|
|
|
nonce, err := middleware.GenerateNonce()
|
|
if err != nil {
|
|
p.log.Error("error creating nonce", "err", err)
|
|
writer.WriteHeader(500)
|
|
return
|
|
}
|
|
|
|
// TODO -- restructure so the static stuff is under one variable and the rest is dynamic
|
|
data := p.data // copy everything
|
|
data.Nonce = nonce
|
|
|
|
if data.CSPEnabled {
|
|
data.CSPContent = middleware.ReplacePolicyVariables(p.data.CSPContent, p.data.AppSubUrl, data.Nonce)
|
|
writer.Header().Set("Content-Security-Policy", data.CSPContent)
|
|
|
|
policy := middleware.ReplacePolicyVariables(p.data.CSPReportOnlyContent, p.data.AppSubUrl, data.Nonce)
|
|
writer.Header().Set("Content-Security-Policy-Report-Only", policy)
|
|
}
|
|
|
|
writer.Header().Set("Content-Type", "text/html; charset=UTF-8")
|
|
writer.WriteHeader(200)
|
|
if err := p.index.Execute(writer, &data); err != nil {
|
|
if errors.Is(err, syscall.EPIPE) { // Client has stopped listening.
|
|
return
|
|
}
|
|
panic(fmt.Sprintf("Error rendering index\n %s", err.Error()))
|
|
}
|
|
}
|