/*
  This file is part of GNU libmicrohttpd
  Copyright (C) 2024 Evgeny Grin (Karlson2k)

  GNU libmicrohttpd is free software; you can redistribute it and/or
  modify it under the terms of the GNU Lesser General Public
  License as published by the Free Software Foundation; either
  version 2.1 of the License, or (at your option) any later version.

  GNU libmicrohttpd is distributed in the hope that it will be useful,
  but WITHOUT ANY WARRANTY; without even the implied warranty of
  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  Lesser General Public License for more details.

  You should have received a copy of the GNU Lesser General Public
  License along with this library; if not, write to the Free Software
  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
*/
/**
 * @file minimal_auth_basic.c
 * @brief  Minimal example for Basic Authentication
 * @author Karlson2k (Evgeny Grin)
 */

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <microhttpd2.h>

static MHD_FN_PAR_NONNULL_ (2) MHD_FN_PAR_NONNULL_ (3)
const struct MHD_Action *
req_cb (void *cls,
        struct MHD_Request *MHD_RESTRICT request,
        const struct MHD_String *MHD_RESTRICT path,
        enum MHD_HTTP_Method method,
        uint_fast64_t upload_size)
{
  static const char secret_page[] = "Welcome to the cave of treasures!\n";
  static const char auth_required_page[] =
    "You need to know the secret to get in.\n";
  static const char msg_forbidden_page[] =
    "You are not allowed to enter. Go away!\n";
  static const char msg_bad_header_page[] =
    "The Authorization header data is invalid\n";
  static const char allowed_username[] = "alibaba";
  static const char allowed_password[] = "open sesam";
  static const size_t allowed_username_len =
    (sizeof(allowed_username) / sizeof(char) - 1);
  static const size_t allowed_password_len =
    (sizeof(allowed_password) / sizeof(char) - 1);
  union MHD_RequestInfoDynamicData req_data;
  const struct MHD_AuthBasicCreds *creds; /* a shortcut */
  enum MHD_StatusCode res;

  (void) cls;
  (void) path;
  (void) method;
  (void) upload_size; /* Unused */

  res = MHD_request_get_info_dynamic (request,
                                      MHD_REQUEST_INFO_DYNAMIC_AUTH_BASIC_CREDS,
                                      &req_data);
  if (MHD_SC_AUTH_ABSENT == res)
    return MHD_action_basic_auth_challenge_a (
      request,
      "The secret cave",
      MHD_YES,
      MHD_response_from_buffer_static (
        MHD_HTTP_STATUS_UNAUTHORIZED,
        sizeof(auth_required_page) / sizeof(char) - 1,
        auth_required_page));

  if (MHD_SC_REQ_AUTH_DATA_BROKEN == res)
    return MHD_action_from_response (
      request,
      MHD_response_from_buffer_static (
        MHD_HTTP_STATUS_BAD_REQUEST,
        sizeof(msg_bad_header_page) / sizeof(char) - 1,
        msg_bad_header_page));

  if (MHD_SC_OK != res)
    return MHD_action_abort_request (request);

  /* Assign result to short-named variable for convenience */
  creds = req_data.v_auth_basic_creds;
  if ((creds->username.len == allowed_username_len) &&
      (memcmp (allowed_username,
               creds->username.cstr,
               creds->username.len) == 0) &&
      (creds->password.len == allowed_password_len) &&
      (memcmp (allowed_password,
               creds->password.cstr,
               creds->password.len) == 0))
  {
    /* The client gave the correct username and password */
    return MHD_action_from_response (
      request,
      MHD_response_from_buffer_static (
        MHD_HTTP_STATUS_OK,
        sizeof(secret_page) / sizeof(char) - 1,
        secret_page));
  }
  /* Wrong username or/and password */

  return MHD_action_from_response (
    request,
    MHD_response_from_buffer_static (
      MHD_HTTP_STATUS_FORBIDDEN,
      sizeof(msg_forbidden_page) / sizeof(char) - 1,
      msg_forbidden_page));
}


int
main (int argc,
      char *const *argv)
{
  struct MHD_Daemon *d;
  int port;

  if (argc != 2)
  {
    fprintf (stderr,
             "Usage:\n%s PORT\n",
             argv[0]);
    return 1;
  }
  port = atoi (argv[1]);
  if ((1 > port) || (65535 < port))
  {
    fprintf (stderr,
             "The PORT must be a numeric value between 1 and 65535.\n");
    return 2;
  }
  d = MHD_daemon_create (&req_cb,
                         NULL);
  if (NULL == d)
  {
    fprintf (stderr,
             "Failed to create MHD daemon.\n");
    return 3;
  }
  if (MHD_SC_OK !=
      MHD_DAEMON_SET_OPTIONS (
        d,
        MHD_D_OPTION_WM_WORKER_THREADS (1),
        MHD_D_OPTION_BIND_PORT (MHD_AF_AUTO,
                                (uint_least16_t) port)))
  {
    fprintf (stderr,
             "Failed to set MHD daemon run parameters.\n");
  }
  else
  {
    if (MHD_SC_OK !=
        MHD_daemon_start (d))
    {
      fprintf (stderr,
               "Failed to start MHD daemon.\n");
    }
    else
    {
      printf ("The MHD daemon is listening on port %d\n"
              "Press ENTER to stop.\n", port);
      (void) fgetc (stdin);
    }
  }
  printf ("Stopping... ");
  fflush (stdout);
  MHD_daemon_destroy (d);
  printf ("OK\n");
  return 0;
}